enat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:11:25 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:11:25 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:11:25 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x411201, 0x0)

19:11:25 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x700)

19:11:25 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:11:25 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0)

19:11:25 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x300)

19:11:25 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:11:25 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x411f87, 0x0)

19:11:25 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x804)

19:11:25 executing program 6:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[  852.869787] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:11:26 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:11:26 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x321)

[  852.923566] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:11:26 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x41871f, 0x0)

19:11:26 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xc00)

[  852.972697] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  852.997148] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
19:11:26 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x41fd01, 0x0)

19:11:26 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x408)

19:11:40 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:11:40 executing program 6:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:11:40 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0)

19:11:40 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x2)

19:11:40 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xd00)

19:11:40 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r0 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)

19:11:40 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x480)

19:11:40 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:11:40 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xe82)

19:11:40 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r0 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)

[  867.789263] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  867.832646] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
19:11:54 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r0 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)

19:11:54 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x3)

19:11:54 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x8001}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0))

19:11:54 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:11:54 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:11:54 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1200)

19:11:54 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0)

19:11:54 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x500)

19:11:54 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:11:54 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1201)

19:11:54 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x4)

19:11:54 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:11:54 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x600)

19:11:54 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[  881.880343] audit: type=1326 audit(1722971514.991:189): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6813 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc95867db19 code=0x0
[  881.947495] audit: type=1326 audit(1722971515.058:190): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6813 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc95867db19 code=0x0
[  881.959540] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  881.972532] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:12:08 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:12:08 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1400)

19:12:08 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:12:08 executing program 6:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x500)

19:12:08 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x5)

19:12:08 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:12:08 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0)

19:12:08 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x700)

[  895.339978] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:12:08 executing program 6:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1201)

19:12:08 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x804)

19:12:08 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x6)

19:12:08 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0)

19:12:08 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:12:08 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1800)

[  895.410679] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:12:08 executing program 6:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:12:08 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xc00)

19:12:08 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xd00)

19:12:21 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0)

19:12:21 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:12:21 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xf82)

19:12:22 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:12:22 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x7)

19:12:22 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x2000)

19:12:22 executing program 6:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xc00)

19:12:22 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[  908.944463] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  908.974413] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:12:22 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:12:22 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1200)

19:12:22 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e1f, @multicast1}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x10, 0x0, 0x1000002)
r3 = dup3(r1, r2, 0x80000)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000002c0)={{0x2, 0x0, @rand_addr=0x64010100}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x20, {0x2, 0x4e22, @remote}, 'vxcan1\x00'})
connect$inet(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='cpuset\x00')
fallocate(r3, 0x0, 0x5, 0x3)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f0000000200)=""/176, 0xb0}], 0x2)
perf_event_open(&(0x7f0000001340)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x47c0, 0x90}, 0x800, 0x1, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r3, 0x0)
r4 = openat(r2, &(0x7f0000000180)='./file0\x00', 0x121000, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000340)=""/4096, &(0x7f00000001c0)=0x1000)
shutdown(r1, 0x1)
unshare(0x48020200)

19:12:22 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0)

19:12:22 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8)

[  909.076886] perf: interrupt took too long (3957 > 3938), lowering kernel.perf_event_max_sample_rate to 50000
19:12:22 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x2103)

[  909.231081] perf: interrupt took too long (4959 > 4946), lowering kernel.perf_event_max_sample_rate to 40000
19:12:22 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1201)

19:12:22 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
dup3(r1, r0, 0x0)

19:12:22 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xc)

[  909.250216] perf: interrupt took too long (6547 > 6198), lowering kernel.perf_event_max_sample_rate to 30000
19:12:22 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x2400)

19:12:22 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:12:22 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:12:22 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:12:22 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xd)

19:12:22 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
dup3(r1, r0, 0x0)

19:12:22 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:12:22 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x3f00)

19:12:22 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0)

[  909.559236] perf: interrupt took too long (8468 > 8183), lowering kernel.perf_event_max_sample_rate to 23000
[  909.561576] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  909.596540] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:12:37 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x10)

19:12:37 executing program 6:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:12:37 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:12:37 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0)

19:12:37 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8004)

19:12:37 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:12:37 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
dup3(r1, r0, 0x0)

19:12:37 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1400)

[  924.476512] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  924.501835] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
[  924.512831] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  924.545669] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:12:51 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x12)

19:12:51 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:12:51 executing program 6:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:12:51 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)

19:12:51 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8102)

19:12:51 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1800)

19:12:51 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0)

19:12:51 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:12:51 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x820e)

19:12:51 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x14)

19:12:51 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0)

[  938.210970] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  938.230342] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:12:51 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x2000)

[  938.253545] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
[  938.262048] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:13:04 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xf000)

19:13:04 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:13:04 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:13:04 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x0, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:13:04 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x2103)

19:13:04 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x18)

19:13:04 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)

19:13:04 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0)

19:13:05 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x24)

19:13:05 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x2400)

[  951.917822] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:13:05 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xff00)

19:13:05 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x0, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[  951.958027] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:13:05 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)

19:13:05 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0)

19:13:05 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x0, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:13:05 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xf0)

19:13:05 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x3f00)

19:13:05 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x0, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:13:05 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xff01)

19:13:05 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x102)

19:13:05 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8004)

19:13:05 executing program 6:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:13:05 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:13:05 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:13:05 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0)

[  952.258362] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  952.272857] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
[  952.279674] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  952.295896] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:13:19 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:13:19 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x80000)

19:13:19 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(0xffffffffffffffff, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r1, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:13:19 executing program 6:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:13:19 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x112)

19:13:19 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:13:19 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0)

19:13:19 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8102)

[  966.237956] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:13:19 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x201)

[  966.260050] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
19:13:19 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x820f)

19:13:19 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x200000)

[  966.263778] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[  966.303783] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
19:13:19 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0)

19:13:19 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:13:19 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(0xffffffffffffffff, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r1, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[  966.460486] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:13:19 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:13:19 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xf000)

19:13:19 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x281)

19:13:19 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x0, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[  966.488973] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:13:19 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0)

19:13:34 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0)

19:13:34 executing program 6:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:13:34 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x800000)

19:13:34 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:13:34 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x300)

19:13:34 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(0xffffffffffffffff, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r1, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:13:34 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x0, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:13:34 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xff00)

19:13:34 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xf0ffff)

19:13:34 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xff01)

[  981.477593] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  981.486783] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
19:13:34 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x321)

[  981.513015] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[  981.576417] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
19:13:48 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)

19:13:48 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:13:48 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:13:48 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:13:48 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x0, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:13:48 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1000000)

19:13:48 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x80000)

19:13:48 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x408)

19:13:48 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x480)

[  995.100174] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:13:48 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)

19:13:48 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:13:48 executing program 6:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:13:48 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x200000)

[  995.150345] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[  995.184378] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  995.199359] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
19:14:01 executing program 6:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:14:01 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x2000000)

19:14:01 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:14:01 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)

19:14:01 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x500)

19:14:01 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:14:01 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:14:01 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x800000)

19:14:01 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x2010000)

[ 1008.903436] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1008.910924] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[ 1008.938680] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[ 1008.947510] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
19:14:02 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xf0ffff)

19:14:02 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x600)

19:14:02 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:14:02 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:14:15 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1000000)

19:14:15 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:14:15 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x3000000)

19:14:15 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:14:15 executing program 4:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:14:15 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:14:15 executing program 6:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:14:15 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x700)

19:14:15 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x4000000)

19:14:15 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x804)

19:14:15 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:14:15 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x2000000)

[ 1022.902759] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
19:14:16 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1022.920756] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 1022.935204] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
19:14:16 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x5000000)

[ 1022.947472] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
19:14:16 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xc00)

[ 1022.969473] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:14:16 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1023.002688] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:14:29 executing program 4:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:14:29 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r0, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r1, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:14:29 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x2010000)

19:14:29 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:14:29 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:14:29 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xd00)

19:14:29 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:14:29 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x6000000)

[ 1036.827916] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:14:29 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x3000000)

19:14:29 executing program 6:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x3000000)

19:14:29 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:14:30 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1200)

[ 1036.898105] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
19:14:30 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x7000000)

[ 1036.918341] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[ 1036.921421] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
19:14:30 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:14:30 executing program 4:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xd00)

19:14:30 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:14:30 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x4000000)

19:14:30 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8040000)

19:14:44 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1201)

19:14:44 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x5000000)

19:14:44 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 1)

19:14:44 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:14:44 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r0, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r1, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[ 1051.572271] FAULT_INJECTION: forcing a failure.
[ 1051.572271] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1051.573527] CPU: 0 PID: 7452 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1051.574098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1051.574832] Call Trace:
[ 1051.575062]  dump_stack+0x107/0x167
[ 1051.575371]  should_fail.cold+0x5/0xa
[ 1051.575745]  _copy_from_user+0x2e/0x1b0
[ 1051.576086]  __copy_msghdr_from_user+0x91/0x4b0
[ 1051.576555]  ? __ia32_sys_shutdown+0x80/0x80
[ 1051.576934]  ? __lock_acquire+0xbb1/0x5b00
[ 1051.577294]  sendmsg_copy_msghdr+0xa1/0x160
[ 1051.577705]  ? do_recvmmsg+0x6d0/0x6d0
[ 1051.578036]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1051.578529]  ? mark_lock+0xf5/0x2df0
[ 1051.578846]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1051.579283]  ? __lock_acquire+0x1657/0x5b00
[ 1051.579695]  ___sys_sendmsg+0xc6/0x170
[ 1051.580026]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1051.580423]  ? __fget_files+0x2cf/0x520
[ 1051.580876]  ? lock_downgrade+0x6d0/0x6d0
[ 1051.581233]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1051.581721]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1051.582173]  ? trace_hardirqs_on+0x5b/0x180
[ 1051.582589]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1051.583049]  ? sockfd_lookup_light+0x73/0x180
[ 1051.583427]  ? kcov_remote_stop+0x310/0x310
[ 1051.583841]  __sys_sendmmsg+0x195/0x470
[ 1051.584179]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1051.584622]  ? lock_downgrade+0x6d0/0x6d0
[ 1051.584977]  ? ksys_write+0x12d/0x260
[ 1051.585304]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1051.585761]  ? wait_for_completion_io+0x270/0x270
[ 1051.586170]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1051.586611]  ? vfs_write+0x354/0xb10
[ 1051.586927]  ? fput_many+0x2f/0x1a0
[ 1051.587234]  ? ksys_write+0x1a9/0x260
[ 1051.587603]  ? __ia32_sys_read+0xb0/0xb0
[ 1051.587950]  __x64_sys_sendmmsg+0x99/0x100
[ 1051.588307]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1051.588820]  do_syscall_64+0x33/0x40
[ 1051.589134]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1051.589611] RIP: 0033:0x7f09c4bc0b19
[ 1051.589931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1051.591544] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1051.592183] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1051.592855] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1051.593494] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1051.594142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1051.597501] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:14:44 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:14:44 executing program 6:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x7)

19:14:44 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xc000000)

19:14:44 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1400)

19:14:44 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x6000000)

[ 1051.687532] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:14:44 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:14:44 executing program 6:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000001400)=""/53, 0x35)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001440)={{r0}, 0x0, 0x2, @unused=[0x1, 0x7ff, 0x9, 0x4], @name="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"})
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000940)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@cache_loose}]}})
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x145003, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pidfd_getfd(r2, r1, 0x0)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000240)='nomand\x00', 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r2)
fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000080)='silent\x00', 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0)
io_uring_enter(r3, 0x58af, 0x0, 0x2, 0x0, 0x0)
fgetxattr(r3, &(0x7f0000000000)=@random={'btrfs.', '\',{[[(\x00'}, &(0x7f0000000380)=""/234, 0xea)

19:14:44 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:14:44 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xd000000)

19:14:44 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 2)

[ 1051.771882] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[ 1051.823421] 9pnet: Insufficient options for proto=fd
[ 1051.828810] FAULT_INJECTION: forcing a failure.
[ 1051.828810] name failslab, interval 1, probability 0, space 0, times 0
[ 1051.829881] CPU: 0 PID: 7485 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1051.830546] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1051.831233] Call Trace:
[ 1051.831626]  dump_stack+0x107/0x167
[ 1051.831941]  should_fail.cold+0x5/0xa
[ 1051.832265]  ? __alloc_skb+0x6d/0x5b0
[ 1051.832649]  should_failslab+0x5/0x20
[ 1051.832974]  kmem_cache_alloc_node+0x55/0x330
[ 1051.833360]  __alloc_skb+0x6d/0x5b0
[ 1051.833724]  alloc_skb_with_frags+0x92/0x570
[ 1051.834099]  ? mark_lock+0xf5/0x2df0
[ 1051.834414]  ? lock_acquire+0x197/0x470
[ 1051.834821]  ? find_held_lock+0x2c/0x110
[ 1051.835165]  sock_alloc_send_pskb+0x7af/0x930
[ 1051.835601]  ? sk_alloc+0x350/0x350
[ 1051.835913]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1051.836354]  ? lock_chain_count+0x20/0x20
[ 1051.836771]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1051.837202]  ? ip6_mtu+0x1bb/0x3d0
[ 1051.837551]  ? lock_downgrade+0x6d0/0x6d0
[ 1051.837903]  ? ip_frag_init+0x350/0x350
[ 1051.838244]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1051.838708]  ? ip6_mtu+0x1e9/0x3d0
[ 1051.839011]  ? ip6_setup_cork+0xfb7/0x1740
[ 1051.839372]  ip6_make_skb+0x2de/0x4e0
[ 1051.839739]  ? ip_frag_init+0x350/0x350
[ 1051.840076]  ? ip_frag_init+0x350/0x350
[ 1051.840420]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1051.840872]  ? ip6_dst_hoplimit+0x199/0x440
[ 1051.841237]  ? lock_downgrade+0x6d0/0x6d0
[ 1051.841645]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1051.841991]  ? ip_frag_init+0x350/0x350
[ 1051.842333]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1051.842841]  ? _down_write_nest_lock+0x160/0x160
[ 1051.843241]  ? vmacache_update+0xce/0x140
[ 1051.843645]  ? do_user_addr_fault+0x5b0/0xc60
[ 1051.844026]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1051.844531]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1051.844974]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1051.845428]  ? sock_has_perm+0x1ea/0x280
[ 1051.845829]  ? selinux_socket_recvmsg+0x40/0x40
[ 1051.846223]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1051.846732]  inet6_sendmsg+0x105/0x140
[ 1051.847062]  ? inet6_compat_ioctl+0x320/0x320
[ 1051.847477]  __sock_sendmsg+0xf2/0x190
[ 1051.847818]  ____sys_sendmsg+0x334/0x870
[ 1051.848161]  ? sock_write_iter+0x3d0/0x3d0
[ 1051.848576]  ? do_recvmmsg+0x6d0/0x6d0
[ 1051.848903]  ? lock_chain_count+0x20/0x20
[ 1051.849253]  ? lock_downgrade+0x6d0/0x6d0
[ 1051.849650]  ? trace_hardirqs_on+0x5b/0x180
[ 1051.850019]  ___sys_sendmsg+0xf3/0x170
[ 1051.850349]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1051.850807]  ? __fget_files+0x2cf/0x520
[ 1051.851145]  ? lock_downgrade+0x6d0/0x6d0
[ 1051.851547]  ? lock_is_held_type+0x54/0x110
[ 1051.851914]  ? __fget_files+0x2f8/0x520
[ 1051.852254]  ? __fget_light+0xea/0x290
[ 1051.852650]  __sys_sendmmsg+0x195/0x470
[ 1051.852991]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1051.853369]  ? setup_APIC_eilvt+0x2f0/0x2f0
[ 1051.853781]  ? clockevents_program_event+0x131/0x360
[ 1051.854209]  ? tick_program_event+0xa8/0x140
[ 1051.854655]  ? hrtimer_interrupt+0x771/0x9b0
[ 1051.855036]  __x64_sys_sendmmsg+0x99/0x100
[ 1051.855397]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1051.855875]  do_syscall_64+0x33/0x40
[ 1051.856189]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1051.856678] RIP: 0033:0x7f09c4bc0b19
[ 1051.856995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1051.858632] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1051.859268] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1051.859909] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1051.860564] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1051.861160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1051.861802] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:14:59 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x7000000)

19:14:59 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 3)

19:14:59 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:14:59 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:14:59 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xe820000)

19:14:59 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1800)

19:14:59 executing program 6:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xc000000)

19:14:59 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r0, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r1, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[ 1066.382435] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1066.389134] FAULT_INJECTION: forcing a failure.
[ 1066.389134] name failslab, interval 1, probability 0, space 0, times 0
[ 1066.390765] CPU: 0 PID: 7507 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1066.391469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1066.392300] Call Trace:
[ 1066.392550]  dump_stack+0x107/0x167
[ 1066.392991]  should_fail.cold+0x5/0xa
[ 1066.393404]  ? create_object.isra.0+0x3a/0xa20
[ 1066.393871]  should_failslab+0x5/0x20
[ 1066.394281]  kmem_cache_alloc+0x5b/0x310
[ 1066.394701]  create_object.isra.0+0x3a/0xa20
[ 1066.395113]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1066.395705]  kmem_cache_alloc_node+0x169/0x330
[ 1066.396132]  __alloc_skb+0x6d/0x5b0
[ 1066.396526]  alloc_skb_with_frags+0x92/0x570
[ 1066.397026]  ? mark_lock+0xf5/0x2df0
[ 1066.397432]  ? lock_acquire+0x197/0x470
[ 1066.397839]  ? find_held_lock+0x2c/0x110
[ 1066.398258]  sock_alloc_send_pskb+0x7af/0x930
[ 1066.398743]  ? sk_alloc+0x350/0x350
[ 1066.399080]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1066.399683]  ? lock_chain_count+0x20/0x20
[ 1066.400079]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1066.400614]  ? ip6_mtu+0x1bb/0x3d0
[ 1066.400999]  ? lock_downgrade+0x6d0/0x6d0
[ 1066.401424]  ? ip_frag_init+0x350/0x350
[ 1066.401889]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1066.402360]  ? ip6_mtu+0x1e9/0x3d0
[ 1066.402759]  ? ip6_setup_cork+0xfb7/0x1740
[ 1066.403142]  ip6_make_skb+0x2de/0x4e0
[ 1066.403564]  ? ip_frag_init+0x350/0x350
[ 1066.403990]  ? ip_frag_init+0x350/0x350
[ 1066.404403]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1066.404913]  ? ip6_dst_hoplimit+0x199/0x440
[ 1066.405357]  ? lock_downgrade+0x6d0/0x6d0
[ 1066.405835]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1066.406256]  ? ip_frag_init+0x350/0x350
[ 1066.406626]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1066.407162]  ? _down_write_nest_lock+0x160/0x160
[ 1066.407683]  ? vmacache_update+0xce/0x140
[ 1066.408090]  ? do_user_addr_fault+0x5b0/0xc60
19:14:59 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1f87)

[ 1066.408587]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1066.409143]  ? asm_exc_page_fault+0x1e/0x30
[ 1066.409581]  ? sock_has_perm+0x1ea/0x280
[ 1066.410221]  ? __import_iovec+0x458/0x590
[ 1066.410608]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1066.411146]  inet6_sendmsg+0x105/0x140
[ 1066.411553]  ? inet6_compat_ioctl+0x320/0x320
[ 1066.412013]  __sock_sendmsg+0xf2/0x190
[ 1066.412492]  ____sys_sendmsg+0x334/0x870
[ 1066.412956]  ? sock_write_iter+0x3d0/0x3d0
[ 1066.413416]  ? do_recvmmsg+0x6d0/0x6d0
[ 1066.413856]  ? mark_lock+0xf5/0x2df0
[ 1066.414253]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1066.414782]  ? __lock_acquire+0x1657/0x5b00
[ 1066.415220]  ___sys_sendmsg+0xf3/0x170
[ 1066.415603]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1066.416067]  ? __fget_files+0x2cf/0x520
19:14:59 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1066.416523]  ? lock_downgrade+0x6d0/0x6d0
[ 1066.416968]  ? lock_downgrade+0x6d0/0x6d0
[ 1066.417413]  ? __fget_files+0x2f8/0x520
[ 1066.417829]  ? __fget_light+0xea/0x290
[ 1066.418231]  __sys_sendmmsg+0x195/0x470
[ 1066.418770]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1066.419158]  ? lock_downgrade+0x6d0/0x6d0
[ 1066.419621]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1066.420106]  ? wait_for_completion_io+0x270/0x270
[ 1066.420616]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1066.421096]  ? vfs_write+0x354/0xb10
[ 1066.421507]  ? fput_many+0x2f/0x1a0
[ 1066.421902]  ? ksys_write+0x1a9/0x260
[ 1066.422297]  ? __ia32_sys_read+0xb0/0xb0
[ 1066.422759]  __x64_sys_sendmmsg+0x99/0x100
[ 1066.423150]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1066.423705]  do_syscall_64+0x33/0x40
[ 1066.424125]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1066.424640] RIP: 0033:0x7f09c4bc0b19
[ 1066.425058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1066.426952] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1066.427732] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1066.428428] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1066.429141] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1066.429870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1066.430567] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
[ 1066.452700] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:14:59 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:14:59 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8040000)

19:14:59 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x10000000)

19:14:59 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x1)

19:14:59 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x2000)

19:14:59 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:14:59 executing program 7:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[ 1066.672079] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1066.684595] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:15:13 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x2103)

19:15:13 executing program 7:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:15:13 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:15:13 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x12000000)

19:15:13 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="30000000100001000a000000000000000000000008000000de3f00001100fc80487fec864b245e0f3f9be149f8000000"], 0x30}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0xc00, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20010800)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r3, &(0x7f00000007c0)=""/180, 0x200007d8)
getdents64(r3, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000735fe4b55c601a49c458a0feab32ab1cbbd072c2d067fa2fc938c7c687b36d0565a78dd9675aaaa42901ded46daa3d73a07d5813db60ad6e00f5127a281c3e454d676e3f7e7825fa2750c264f53eb31a61960b9cc0885107a1e0fa82225ae4420ddebe1dac592eedc8eaabfc792b77de3f47ae0364abf5c0f897a70b4e9ab50feb3796f56d8c8cddd245b9153d44b0253e1c47aa40e0b6762a1c371b1c137155e53ecd9afcc891992f9c032a93a8d0d91d55f1915f7ac12f2b20d3d60f255259f7c1d631a062646475e06cba5173af9d9d79085e959164c94d"], 0x30}}, 0x1)
syz_genetlink_get_family_id$ipvs(0x0, r3)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00', <r4=>0x0})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @local}, 0x10)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYRESOCT, @ANYRES16=r0, @ANYBLOB="b20e0b7997bee5924125c9f6f7c76d9e42ac8e6be9dc3ed129443433aab9a46332649e00c06724aeb351512ead5f40804d504aeb69e768651dae69a32e0173b41f45695c4f9556d4990983151c5efb5d55e1cc21c8619f75670ea957dde1d730a6c6d86130f2820a610d7104e5134a0f88b091c9ab7afe35a0ed7ad0ee84691e6309a314c7ac23840ace76554f66f406421233d1a993cbcc3b7387d1dc892168cd38746a5477d2295f1356438e3449b282eff0534da77595d3e78837c772b202e639d9f06cb4b2cbc9dcec6a953421d86c57f2ff56c4ada53ed9af5e3eeca647d4192670420fa7d81db82a1992beaa00"/252], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x90)
unshare(0x48020200)

19:15:13 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xc000000)

19:15:13 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 4)

[ 1080.187005] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'.
19:15:13 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1080.208702] FAULT_INJECTION: forcing a failure.
[ 1080.208702] name failslab, interval 1, probability 0, space 0, times 0
[ 1080.210091] CPU: 0 PID: 7563 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1080.210750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1080.211557] Call Trace:
[ 1080.211788]  dump_stack+0x107/0x167
[ 1080.212118]  should_fail.cold+0x5/0xa
[ 1080.212564]  should_failslab+0x5/0x20
[ 1080.212915]  __kmalloc_node_track_caller+0x74/0x3b0
[ 1080.213395]  ? alloc_skb_with_frags+0x92/0x570
[ 1080.213831]  ? __lock_acquire+0x1657/0x5b00
[ 1080.214245]  __alloc_skb+0xb1/0x5b0
[ 1080.214607]  alloc_skb_with_frags+0x92/0x570
[ 1080.214977]  ? __lock_acquire+0xbb1/0x5b00
[ 1080.215399]  sock_alloc_send_pskb+0x7af/0x930
[ 1080.215852]  ? sk_alloc+0x350/0x350
[ 1080.216167]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1080.216724]  ? lock_chain_count+0x20/0x20
[ 1080.217100]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1080.217631]  ? ip6_mtu+0x1bb/0x3d0
[ 1080.217935]  ? lock_downgrade+0x6d0/0x6d0
[ 1080.218329]  ? ip_frag_init+0x350/0x350
[ 1080.218724]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1080.219120]  ? ip6_mtu+0x1e9/0x3d0
[ 1080.219540]  ? ip6_setup_cork+0xfb7/0x1740
[ 1080.219903]  ip6_make_skb+0x2de/0x4e0
[ 1080.220292]  ? ip_frag_init+0x350/0x350
[ 1080.222344]  ? ip_frag_init+0x350/0x350
[ 1080.222783]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1080.223237]  ? ip6_dst_hoplimit+0x199/0x440
[ 1080.223729]  ? lock_downgrade+0x6d0/0x6d0
[ 1080.224090]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1080.224602]  ? ip_frag_init+0x350/0x350
[ 1080.224962]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1080.225497]  ? _down_write_nest_lock+0x160/0x160
[ 1080.225995]  ? vmacache_update+0xce/0x140
[ 1080.226400]  ? do_user_addr_fault+0x5b0/0xc60
[ 1080.228158]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1080.228784]  ? asm_exc_page_fault+0x1e/0x30
[ 1080.229160]  ? sock_has_perm+0x1ea/0x280
[ 1080.229678]  ? __import_iovec+0x458/0x590
[ 1080.230029]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1080.235375]  inet6_sendmsg+0x105/0x140
[ 1080.235817]  ? inet6_compat_ioctl+0x320/0x320
[ 1080.236242]  __sock_sendmsg+0xf2/0x190
[ 1080.236680]  ____sys_sendmsg+0x334/0x870
[ 1080.237034]  ? sock_write_iter+0x3d0/0x3d0
[ 1080.237597]  ? do_recvmmsg+0x6d0/0x6d0
[ 1080.237940]  ? mark_lock+0xf5/0x2df0
[ 1080.238304]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1080.238947]  ? __lock_acquire+0x1657/0x5b00
[ 1080.239373]  ___sys_sendmsg+0xf3/0x170
[ 1080.239993]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1080.240854]  ? __fget_files+0x2cf/0x520
[ 1080.241270]  ? lock_downgrade+0x6d0/0x6d0
[ 1080.241674]  ? lock_downgrade+0x6d0/0x6d0
[ 1080.242030]  ? __fget_files+0x2f8/0x520
[ 1080.242418]  ? __fget_light+0xea/0x290
[ 1080.242822]  __sys_sendmmsg+0x195/0x470
[ 1080.243161]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1080.243627]  ? lock_downgrade+0x6d0/0x6d0
[ 1080.243997]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1080.244489]  ? wait_for_completion_io+0x270/0x270
[ 1080.244925]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1080.245397]  ? vfs_write+0x354/0xb10
[ 1080.245759]  ? fput_many+0x2f/0x1a0
[ 1080.246070]  ? ksys_write+0x1a9/0x260
[ 1080.246500]  ? __ia32_sys_read+0xb0/0xb0
[ 1080.246855]  __x64_sys_sendmmsg+0x99/0x100
[ 1080.247271]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1080.247753]  do_syscall_64+0x33/0x40
[ 1080.248067]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1080.248583] RIP: 0033:0x7f09c4bc0b19
[ 1080.248918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1080.250653] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1080.251368] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1080.252031] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1080.252761] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1080.253530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1080.254155] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:15:13 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x12010000)

19:15:13 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xd000000)

19:15:13 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x2400)

[ 1080.299589] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:15:13 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 5)

[ 1080.339867] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[ 1080.356025] FAULT_INJECTION: forcing a failure.
[ 1080.356025] name failslab, interval 1, probability 0, space 0, times 0
[ 1080.357517] CPU: 1 PID: 7582 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1080.358172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1080.358953] Call Trace:
[ 1080.359198]  dump_stack+0x107/0x167
[ 1080.359535]  should_fail.cold+0x5/0xa
[ 1080.359941]  ? create_object.isra.0+0x3a/0xa20
[ 1080.360374]  should_failslab+0x5/0x20
[ 1080.360782]  kmem_cache_alloc+0x5b/0x310
[ 1080.361178]  create_object.isra.0+0x3a/0xa20
[ 1080.361634]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1080.362187]  __kmalloc_node_track_caller+0x1a6/0x3b0
[ 1080.362754]  ? alloc_skb_with_frags+0x92/0x570
[ 1080.363195]  __alloc_skb+0xb1/0x5b0
[ 1080.363573]  alloc_skb_with_frags+0x92/0x570
[ 1080.364027]  sock_alloc_send_pskb+0x7af/0x930
[ 1080.364454]  ? sk_alloc+0x350/0x350
[ 1080.364855]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1080.365357]  ? lock_chain_count+0x20/0x20
[ 1080.365806]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1080.366308]  ? ip6_mtu+0x1bb/0x3d0
[ 1080.366723]  ? lock_downgrade+0x6d0/0x6d0
[ 1080.367106]  ? ip_frag_init+0x350/0x350
[ 1080.367504]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1080.367961]  ? ip6_mtu+0x1e9/0x3d0
[ 1080.368301]  ? ip6_setup_cork+0xfb7/0x1740
[ 1080.368768]  ip6_make_skb+0x2de/0x4e0
[ 1080.369132]  ? ip_frag_init+0x350/0x350
[ 1080.370198]  ? ip_frag_init+0x350/0x350
[ 1080.370572]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1080.371019]  ? ip6_dst_hoplimit+0x199/0x440
[ 1080.371422]  ? lock_downgrade+0x6d0/0x6d0
[ 1080.371827]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1080.372201]  ? ip_frag_init+0x350/0x350
[ 1080.372581]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1080.373074]  ? _down_write_nest_lock+0x160/0x160
[ 1080.373512]  ? vmacache_update+0xce/0x140
[ 1080.373919]  ? do_user_addr_fault+0x5b0/0xc60
[ 1080.374338]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1080.374821]  ? asm_exc_page_fault+0x1e/0x30
[ 1080.375227]  ? sock_has_perm+0x1ea/0x280
[ 1080.375620]  ? __import_iovec+0x458/0x590
[ 1080.376011]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1080.376485]  inet6_sendmsg+0x105/0x140
[ 1080.376846]  ? inet6_compat_ioctl+0x320/0x320
[ 1080.377267]  __sock_sendmsg+0xf2/0x190
[ 1080.377617]  ____sys_sendmsg+0x334/0x870
[ 1080.377983]  ? sock_write_iter+0x3d0/0x3d0
[ 1080.378379]  ? do_recvmmsg+0x6d0/0x6d0
[ 1080.378743]  ? mark_lock+0xf5/0x2df0
[ 1080.379075]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1080.379558]  ? __lock_acquire+0x1657/0x5b00
[ 1080.380003]  ___sys_sendmsg+0xf3/0x170
[ 1080.380385]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1080.380808]  ? __fget_files+0x2cf/0x520
[ 1080.381165]  ? lock_downgrade+0x6d0/0x6d0
[ 1080.381554]  ? lock_downgrade+0x6d0/0x6d0
[ 1080.381926]  ? __fget_files+0x2f8/0x520
[ 1080.382304]  ? __fget_light+0xea/0x290
[ 1080.382660]  __sys_sendmmsg+0x195/0x470
[ 1080.383016]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1080.383418]  ? lock_downgrade+0x6d0/0x6d0
[ 1080.383802]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1080.384249]  ? wait_for_completion_io+0x270/0x270
[ 1080.384696]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1080.385129]  ? vfs_write+0x354/0xb10
[ 1080.385484]  ? fput_many+0x2f/0x1a0
[ 1080.385815]  ? ksys_write+0x1a9/0x260
[ 1080.386155]  ? __ia32_sys_read+0xb0/0xb0
[ 1080.386468]  __x64_sys_sendmmsg+0x99/0x100
[ 1080.386832]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1080.387283]  do_syscall_64+0x33/0x40
[ 1080.387628]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1080.388075] RIP: 0033:0x7f09c4bc0b19
[ 1080.388411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1080.390066] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1080.390773] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1080.391418] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1080.392072] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1080.392708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1080.393385] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
[ 1080.505667] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1094.887641] FAULT_INJECTION: forcing a failure.
[ 1094.887641] name failslab, interval 1, probability 0, space 0, times 0
[ 1094.890710] CPU: 0 PID: 7606 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1094.892340] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1094.894312] Call Trace:
[ 1094.894947]  dump_stack+0x107/0x167
[ 1094.895802]  should_fail.cold+0x5/0xa
[ 1094.896697]  ? lock_release+0x680/0x680
[ 1094.897648]  ? skb_clone+0x14f/0x3d0
[ 1094.898529]  should_failslab+0x5/0x20
[ 1094.899425]  kmem_cache_alloc+0x5b/0x310
[ 1094.900390]  skb_clone+0x14f/0x3d0
[ 1094.901239]  dev_queue_xmit_nit+0x3a7/0xb00
[ 1094.902266]  dev_hard_start_xmit+0xab/0x6f0
[ 1094.903280]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1094.904509]  __dev_queue_xmit+0x17ec/0x2710
[ 1094.905538]  ? find_held_lock+0x2c/0x110
[ 1094.906488]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1094.907565]  ? lock_downgrade+0x6d0/0x6d0
[ 1094.908544]  ? lock_acquire+0x197/0x470
[ 1094.909498]  ? ip6_finish_output2+0x203/0x1fe0
[ 1094.910576]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1094.911806]  neigh_connected_output+0x382/0x4d0
[ 1094.912914]  ip6_finish_output2+0xaaf/0x1fe0
[ 1094.913963]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1094.915136]  ip6_output+0x3b8/0x7e0
[ 1094.915999]  ip6_local_out+0xb4/0x1a0
[ 1094.916898]  ip6_send_skb+0xb7/0x350
[ 1094.917784]  udp_v6_send_skb+0x7aa/0x15b0
[ 1094.918767]  udpv6_sendmsg+0x2116/0x2ad0
[ 1094.919783]  ? ip_frag_init+0x350/0x350
[ 1094.920726]  ? udp_v6_push_pending_frames+0x360/0x360
19:15:27 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:15:27 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xf820000)

19:15:27 executing program 7:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:15:27 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x14000000)

19:15:27 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:15:27 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x3f00)

19:15:27 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 6)

19:15:27 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1094.921980]  ? _down_write_nest_lock+0x160/0x160
[ 1094.923451]  ? vmacache_update+0xce/0x140
[ 1094.924425]  ? do_user_addr_fault+0x5b0/0xc60
[ 1094.925486]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1094.926723]  ? asm_exc_page_fault+0x1e/0x30
[ 1094.927734]  ? sock_has_perm+0x1ea/0x280
[ 1094.928695]  ? __import_iovec+0x458/0x590
[ 1094.929674]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1094.930882]  inet6_sendmsg+0x105/0x140
[ 1094.931802]  ? inet6_compat_ioctl+0x320/0x320
[ 1094.932849]  __sock_sendmsg+0xf2/0x190
[ 1094.933789]  ____sys_sendmsg+0x334/0x870
[ 1094.934739]  ? sock_write_iter+0x3d0/0x3d0
[ 1094.935723]  ? do_recvmmsg+0x6d0/0x6d0
[ 1094.936645]  ? mark_lock+0xf5/0x2df0
[ 1094.937534]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1094.938763]  ? __lock_acquire+0x1657/0x5b00
[ 1094.939776]  ___sys_sendmsg+0xf3/0x170
[ 1094.940646]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1094.941247]  ? __fget_files+0x2cf/0x520
[ 1094.941588]  ? lock_downgrade+0x6d0/0x6d0
[ 1094.941945]  ? lock_downgrade+0x6d0/0x6d0
[ 1094.942303]  ? __fget_files+0x2f8/0x520
[ 1094.942649]  ? __fget_light+0xea/0x290
[ 1094.942986]  __sys_sendmmsg+0x195/0x470
[ 1094.943330]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1094.943698]  ? lock_downgrade+0x6d0/0x6d0
[ 1094.944066]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1094.944480]  ? wait_for_completion_io+0x270/0x270
[ 1094.944898]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1094.945414]  ? vfs_write+0x354/0xb10
[ 1094.945764]  ? fput_many+0x2f/0x1a0
[ 1094.946111]  ? ksys_write+0x1a9/0x260
[ 1094.946471]  ? __ia32_sys_read+0xb0/0xb0
[ 1094.946860]  __x64_sys_sendmmsg+0x99/0x100
[ 1094.947256]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1094.947740]  do_syscall_64+0x33/0x40
[ 1094.948093]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1094.948570] RIP: 0033:0x7f09c4bc0b19
[ 1094.948909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1094.950491] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1094.951136] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1094.951739] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1094.952341] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1094.952964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1094.953635] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:15:28 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8004)

19:15:28 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x18000000)

[ 1095.004971] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:15:28 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x10000000)

[ 1095.020078] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:15:28 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x20000000)

19:15:28 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8102)

19:15:28 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:15:28 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0)
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:15:28 executing program 6:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
sendto$inet(r0, 0x0, 0x0, 0x40000, 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/net', 0x0, 0x0)
openat(r1, 0x0, 0x622040, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000140)=0x3, 0x4)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000300)=ANY=[])
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x35, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x40400, 0x80)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x2000, 0x0)
openat(r3, &(0x7f0000000040)='./file1\x00', 0x0, 0x10)
copy_file_range(r3, 0x0, r2, 0x0, 0x10001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x5e, 0x400b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x8000, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x2000})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0))
sendfile(r2, r4, 0x0, 0x20d315)

19:15:28 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:15:28 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 7)

[ 1095.136338] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:15:28 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x871f)

19:15:28 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x12000000)

19:15:28 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x21030000)

[ 1095.159401] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:15:28 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0)
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1095.208751] FAULT_INJECTION: forcing a failure.
[ 1095.208751] name failslab, interval 1, probability 0, space 0, times 0
[ 1095.209794] CPU: 1 PID: 7646 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1095.210368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1095.211057] Call Trace:
[ 1095.211290]  dump_stack+0x107/0x167
[ 1095.211602]  should_fail.cold+0x5/0xa
[ 1095.211931]  ? create_object.isra.0+0x3a/0xa20
[ 1095.212324]  should_failslab+0x5/0x20
[ 1095.212652]  kmem_cache_alloc+0x5b/0x310
[ 1095.213049]  ? lock_acquire+0x197/0x470
[ 1095.213392]  create_object.isra.0+0x3a/0xa20
[ 1095.213765]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1095.214197]  kmem_cache_alloc+0x159/0x310
[ 1095.214557]  skb_clone+0x14f/0x3d0
[ 1095.214863]  dev_queue_xmit_nit+0x3a7/0xb00
[ 1095.215237]  dev_hard_start_xmit+0xab/0x6f0
[ 1095.215604]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1095.216052]  __dev_queue_xmit+0x17ec/0x2710
[ 1095.216424]  ? find_held_lock+0x2c/0x110
[ 1095.216770]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1095.217175]  ? lock_downgrade+0x6d0/0x6d0
[ 1095.217528]  ? lock_acquire+0x197/0x470
[ 1095.217869]  ? ip6_finish_output2+0x203/0x1fe0
[ 1095.218261]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1095.218709]  neigh_connected_output+0x382/0x4d0
[ 1095.219115]  ip6_finish_output2+0xaaf/0x1fe0
[ 1095.219502]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1095.219926]  ip6_output+0x3b8/0x7e0
[ 1095.220243]  ip6_local_out+0xb4/0x1a0
[ 1095.220570]  ip6_send_skb+0xb7/0x350
[ 1095.220892]  udp_v6_send_skb+0x7aa/0x15b0
[ 1095.221289]  udpv6_sendmsg+0x2116/0x2ad0
[ 1095.221637]  ? ip_frag_init+0x350/0x350
[ 1095.221985]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1095.222427]  ? _down_write_nest_lock+0x160/0x160
[ 1095.222831]  ? vmacache_update+0xce/0x140
[ 1095.223189]  ? do_user_addr_fault+0x5b0/0xc60
[ 1095.223573]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1095.224023]  ? asm_exc_page_fault+0x1e/0x30
[ 1095.224390]  ? sock_has_perm+0x1ea/0x280
[ 1095.224753]  ? __import_iovec+0x458/0x590
[ 1095.225120]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1095.225560]  inet6_sendmsg+0x105/0x140
[ 1095.225891]  ? inet6_compat_ioctl+0x320/0x320
[ 1095.226276]  __sock_sendmsg+0xf2/0x190
[ 1095.226608]  ____sys_sendmsg+0x334/0x870
[ 1095.226954]  ? sock_write_iter+0x3d0/0x3d0
[ 1095.227312]  ? do_recvmmsg+0x6d0/0x6d0
[ 1095.227646]  ? mark_lock+0xf5/0x2df0
[ 1095.227965]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1095.228407]  ? __lock_acquire+0x1657/0x5b00
[ 1095.228777]  ___sys_sendmsg+0xf3/0x170
[ 1095.229125]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1095.229523]  ? __fget_files+0x2cf/0x520
[ 1095.229861]  ? lock_downgrade+0x6d0/0x6d0
[ 1095.230221]  ? lock_downgrade+0x6d0/0x6d0
[ 1095.230578]  ? __fget_files+0x2f8/0x520
[ 1095.230921]  ? __fget_light+0xea/0x290
[ 1095.231259]  __sys_sendmmsg+0x195/0x470
[ 1095.231601]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1095.231969]  ? lock_downgrade+0x6d0/0x6d0
[ 1095.232335]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1095.232748]  ? wait_for_completion_io+0x270/0x270
[ 1095.233216]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1095.233610]  ? vfs_write+0x354/0xb10
[ 1095.233928]  ? fput_many+0x2f/0x1a0
[ 1095.234240]  ? ksys_write+0x1a9/0x260
[ 1095.234565]  ? __ia32_sys_read+0xb0/0xb0
[ 1095.234916]  __x64_sys_sendmmsg+0x99/0x100
[ 1095.235278]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1095.235714]  do_syscall_64+0x33/0x40
[ 1095.236031]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1095.236464] RIP: 0033:0x7f09c4bc0b19
[ 1095.236782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1095.238354] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1095.238996] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1095.239594] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1095.240191] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1095.240786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1095.241399] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
[ 1108.954064] FAULT_INJECTION: forcing a failure.
[ 1108.954064] name failslab, interval 1, probability 0, space 0, times 0
[ 1108.955228] CPU: 0 PID: 7666 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1108.955800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1108.956534] Call Trace:
[ 1108.956768]  dump_stack+0x107/0x167
[ 1108.957079]  should_fail.cold+0x5/0xa
[ 1108.957468]  ? lock_downgrade+0x6d0/0x6d0
[ 1108.957823]  ? skb_clone+0x14f/0x3d0
[ 1108.958146]  should_failslab+0x5/0x20
[ 1108.958514]  kmem_cache_alloc+0x5b/0x310
[ 1108.958862]  skb_clone+0x14f/0x3d0
[ 1108.959225]  packet_rcv+0x558/0x1410
[ 1108.959561]  ? run_filter+0x4d0/0x4d0
[ 1108.959882]  dev_queue_xmit_nit+0x38b/0xb00
[ 1108.960307]  dev_hard_start_xmit+0xab/0x6f0
[ 1108.960673]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1108.961134]  __dev_queue_xmit+0x17ec/0x2710
[ 1108.961552]  ? find_held_lock+0x2c/0x110
[ 1108.961896]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1108.962332]  ? lock_downgrade+0x6d0/0x6d0
[ 1108.962684]  ? lock_acquire+0x197/0x470
[ 1108.963021]  ? ip6_finish_output2+0x203/0x1fe0
[ 1108.963480]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1108.963928]  neigh_connected_output+0x382/0x4d0
[ 1108.964384]  ip6_finish_output2+0xaaf/0x1fe0
[ 1108.964762]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1108.965248]  ip6_output+0x3b8/0x7e0
[ 1108.965561]  ip6_local_out+0xb4/0x1a0
[ 1108.965885]  ip6_send_skb+0xb7/0x350
[ 1108.966254]  udp_v6_send_skb+0x7aa/0x15b0
[ 1108.966616]  udpv6_sendmsg+0x2116/0x2ad0
[ 1108.966960]  ? ip_frag_init+0x350/0x350
[ 1108.967371]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1108.967807]  ? _down_write_nest_lock+0x160/0x160
[ 1108.968260]  ? vmacache_update+0xce/0x140
[ 1108.968620]  ? do_user_addr_fault+0x5b0/0xc60
[ 1108.968999]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1108.969506]  ? asm_exc_page_fault+0x1e/0x30
[ 1108.969872]  ? sock_has_perm+0x1ea/0x280
[ 1108.970280]  ? __import_iovec+0x458/0x590
[ 1108.970630]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1108.971070]  inet6_sendmsg+0x105/0x140
[ 1108.971467]  ? inet6_compat_ioctl+0x320/0x320
[ 1108.971848]  __sock_sendmsg+0xf2/0x190
[ 1108.972226]  ____sys_sendmsg+0x334/0x870
[ 1108.972575]  ? sock_write_iter+0x3d0/0x3d0
[ 1108.972930]  ? do_recvmmsg+0x6d0/0x6d0
[ 1108.973325]  ? mark_lock+0xf5/0x2df0
[ 1108.973643]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1108.974082]  ? __lock_acquire+0x1657/0x5b00
[ 1108.974499]  ___sys_sendmsg+0xf3/0x170
[ 1108.974832]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1108.975291]  ? __fget_files+0x2cf/0x520
[ 1108.975629]  ? lock_downgrade+0x6d0/0x6d0
[ 1108.975981]  ? lock_downgrade+0x6d0/0x6d0
[ 1108.976388]  ? __fget_files+0x2f8/0x520
[ 1108.976732]  ? __fget_light+0xea/0x290
[ 1108.977068]  __sys_sendmmsg+0x195/0x470
[ 1108.977467]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1108.977832]  ? lock_downgrade+0x6d0/0x6d0
[ 1108.978241]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1108.978653]  ? wait_for_completion_io+0x270/0x270
[ 1108.979062]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1108.979522]  ? vfs_write+0x354/0xb10
[ 1108.979838]  ? fput_many+0x2f/0x1a0
[ 1108.980150]  ? ksys_write+0x1a9/0x260
[ 1108.980524]  ? __ia32_sys_read+0xb0/0xb0
[ 1108.980873]  __x64_sys_sendmmsg+0x99/0x100
[ 1108.981292]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1108.981724]  do_syscall_64+0x33/0x40
[ 1108.982040]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1108.982516] RIP: 0033:0x7f09c4bc0b19
[ 1108.982833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1108.984474] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1108.985122] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1108.985762] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1108.986407] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1108.987003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1108.987666] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
[ 1109.027497] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:15:42 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, <r2=>0x0}, &(0x7f0000000400)=0xc)
mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x1080, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=unix,nodevmap,nodevmap,access=', @ANYRESDEC=0xee01, @ANYBLOB="2c76657273696f6e3d3970323030302c616e616d653d252c76657273460a0a0305f8696f6e3d397032303045bb302c6163636573733d636c69656e742c756e616d653de8dab99234bb312ec64c0abcd7322e6b8dfd7ccb47b5653d2c7063723d3030303030303030303030f2d8b5bb30303030362c646f6e745f6d6561737572652c7569643d000000000000000000000000000065d6abd80ede43aa068e74c48dfe5e3926f6", @ANYRESDEC=r2, @ANYBLOB=',pcr=00000000000000000032,fowner<', @ANYRESDEC=0xee00, @ANYBLOB=',permit_directio,appraise,\x00'])
r3 = syz_io_uring_setup(0x636f, &(0x7f00000001c0)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x16}, &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0)
syz_io_uring_submit(0x0, r5, 0x0, 0x80000001)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

19:15:42 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 8)

19:15:42 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:15:42 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xf000)

19:15:42 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0)
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:15:42 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x12010000)

19:15:42 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x24000000)

19:15:42 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:15:42 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xff00)

19:15:42 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x3f000000)

19:15:42 executing program 6:
r0 = syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000004180)=[{&(0x7f0000004000)="12", 0x1}, {&(0x7f00000040c0)="93", 0x1}], 0x0, 0x0)
fchmodat(r0, &(0x7f0000000000)='./file0\x00', 0x10)

19:15:42 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x14000000)

[ 1109.088669] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:15:42 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:15:42 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:15:42 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4206)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
unlink(&(0x7f00000000c0)='./file0\x00')
socket$unix(0x1, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/3579], 0xdfb)

19:15:42 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 9)

19:15:42 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xff01)

19:15:42 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x18000000)

[ 1109.267710] FAULT_INJECTION: forcing a failure.
[ 1109.267710] name failslab, interval 1, probability 0, space 0, times 0
[ 1109.268636] CPU: 1 PID: 7708 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1109.269183] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1109.269810] Call Trace:
[ 1109.270008]  dump_stack+0x107/0x167
[ 1109.270286]  should_fail.cold+0x5/0xa
[ 1109.270589]  ? create_object.isra.0+0x3a/0xa20
[ 1109.270924]  should_failslab+0x5/0x20
[ 1109.271203]  kmem_cache_alloc+0x5b/0x310
[ 1109.271536]  create_object.isra.0+0x3a/0xa20
[ 1109.271855]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1109.272228]  kmem_cache_alloc+0x159/0x310
[ 1109.272566]  skb_clone+0x14f/0x3d0
[ 1109.272829]  packet_rcv+0x558/0x1410
[ 1109.273116]  ? run_filter+0x4d0/0x4d0
[ 1109.273443]  dev_queue_xmit_nit+0x38b/0xb00
[ 1109.273763]  dev_hard_start_xmit+0xab/0x6f0
[ 1109.274079]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1109.274499]  __dev_queue_xmit+0x17ec/0x2710
[ 1109.274814]  ? find_held_lock+0x2c/0x110
[ 1109.275110]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1109.275481]  ? lock_downgrade+0x6d0/0x6d0
[ 1109.275781]  ? lock_acquire+0x197/0x470
[ 1109.276072]  ? ip6_finish_output2+0x203/0x1fe0
[ 1109.276441]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1109.276824]  neigh_connected_output+0x382/0x4d0
[ 1109.277196]  ip6_finish_output2+0xaaf/0x1fe0
[ 1109.277559]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1109.277921]  ip6_output+0x3b8/0x7e0
[ 1109.278191]  ip6_local_out+0xb4/0x1a0
[ 1109.278504]  ip6_send_skb+0xb7/0x350
[ 1109.278779]  udp_v6_send_skb+0x7aa/0x15b0
[ 1109.279086]  udpv6_sendmsg+0x2116/0x2ad0
[ 1109.279419]  ? ip_frag_init+0x350/0x350
[ 1109.279790]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1109.280288]  ? _down_write_nest_lock+0x160/0x160
[ 1109.280754]  ? vmacache_update+0xce/0x140
[ 1109.281157]  ? do_user_addr_fault+0x5b0/0xc60
[ 1109.281549]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1109.281969]  ? asm_exc_page_fault+0x1e/0x30
[ 1109.282326]  ? sock_has_perm+0x1ea/0x280
[ 1109.282678]  ? __import_iovec+0x458/0x590
[ 1109.283002]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1109.283420]  inet6_sendmsg+0x105/0x140
[ 1109.283713]  ? inet6_compat_ioctl+0x320/0x320
[ 1109.284038]  __sock_sendmsg+0xf2/0x190
[ 1109.284340]  ____sys_sendmsg+0x334/0x870
[ 1109.284653]  ? sock_write_iter+0x3d0/0x3d0
[ 1109.284957]  ? do_recvmmsg+0x6d0/0x6d0
[ 1109.285309]  ? mark_lock+0xf5/0x2df0
[ 1109.285684]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1109.286175]  ? __lock_acquire+0x1657/0x5b00
[ 1109.286617]  ___sys_sendmsg+0xf3/0x170
[ 1109.286986]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1109.287454]  ? __fget_files+0x2cf/0x520
[ 1109.287829]  ? lock_downgrade+0x6d0/0x6d0
[ 1109.288226]  ? lock_downgrade+0x6d0/0x6d0
[ 1109.288646]  ? __fget_files+0x2f8/0x520
[ 1109.289024]  ? __fget_light+0xea/0x290
[ 1109.289387]  __sys_sendmmsg+0x195/0x470
[ 1109.289712]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1109.290051]  ? lock_downgrade+0x6d0/0x6d0
[ 1109.290418]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1109.290800]  ? wait_for_completion_io+0x270/0x270
[ 1109.291177]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1109.291550]  ? vfs_write+0x354/0xb10
[ 1109.291821]  ? fput_many+0x2f/0x1a0
[ 1109.292085]  ? ksys_write+0x1a9/0x260
[ 1109.292389]  ? __ia32_sys_read+0xb0/0xb0
[ 1109.292697]  __x64_sys_sendmmsg+0x99/0x100
[ 1109.293005]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1109.293433]  do_syscall_64+0x33/0x40
[ 1109.293704]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1109.294072] RIP: 0033:0x7f09c4bc0b19
[ 1109.294366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1109.295736] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1109.296298] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1109.296831] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1109.297396] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1109.297920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1109.298470] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
[ 1124.657033] FAULT_INJECTION: forcing a failure.
[ 1124.657033] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 1124.660505] CPU: 1 PID: 7722 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1124.662076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1124.663710] Call Trace:
[ 1124.664218]  dump_stack+0x107/0x167
[ 1124.664950]  should_fail.cold+0x5/0xa
[ 1124.665854]  __alloc_pages_nodemask+0x182/0x600
[ 1124.666768]  ? lock_chain_count+0x20/0x20
[ 1124.667532]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 1124.668753]  alloc_pages_vma+0xbb/0x410
[ 1124.669412]  wp_page_copy+0xee7/0x1f00
[ 1124.669799]  ? print_bad_pte+0x5a0/0x5a0
[ 1124.670143]  ? lock_downgrade+0x6d0/0x6d0
[ 1124.670499]  ? vm_normal_page+0x162/0x2e0
[ 1124.670923]  ? count_memcg_event_mm.part.0+0x10f/0x2f0
[ 1124.671375]  do_wp_page+0x27b/0x1390
[ 1124.671752]  handle_mm_fault+0x1cc7/0x3500
[ 1124.672140]  ? __lock_acquire+0x1657/0x5b00
[ 1124.672512]  ? __pmd_alloc+0x5e0/0x5e0
[ 1124.672901]  ? vmacache_find+0x55/0x2a0
[ 1124.673251]  do_user_addr_fault+0x56e/0xc60
[ 1124.673716]  exc_page_fault+0xa2/0x1a0
[ 1124.674049]  asm_exc_page_fault+0x1e/0x30
[ 1124.674406] RIP: 0010:__put_user_nocheck_4+0x3/0x11
[ 1124.674878] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca e9 41 44 1d 02 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca e9 22 44 1d 02 66 90 48 bb f9 ef ff ff ff 7f
[ 1124.676487] RSP: 0018:ffff888020cd7cf0 EFLAGS: 00050293
[ 1124.676982] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020004d38
[ 1124.677663] RDX: 0000000000040000 RSI: ffffffff8310cc82 RDI: ffff88804bba0938
[ 1124.678271] RBP: 0000000000040000 R08: 0000000000000000 R09: 0000000000000000
[ 1124.678925] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000
[ 1124.679526] R13: 0000000020004d00 R14: 000000000000002f R15: 000000000000002e
[ 1124.680225]  ? __sys_sendmmsg+0x1c2/0x470
[ 1124.680590]  __sys_sendmmsg+0x1cf/0x470
[ 1124.680985]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1124.681405]  ? lock_downgrade+0x6d0/0x6d0
[ 1124.681818]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1124.682234]  ? wait_for_completion_io+0x270/0x270
[ 1124.682692]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1124.683096]  ? vfs_write+0x354/0xb10
[ 1124.683416]  ? fput_many+0x2f/0x1a0
[ 1124.683776]  ? ksys_write+0x1a9/0x260
[ 1124.684105]  ? __ia32_sys_read+0xb0/0xb0
[ 1124.684461]  __x64_sys_sendmmsg+0x99/0x100
[ 1124.684900]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1124.685389]  do_syscall_64+0x33/0x40
[ 1124.685755]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1124.686186] RIP: 0033:0x7f09c4bc0b19
[ 1124.686502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1124.688129] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1124.688815] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1124.689455] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1124.690125] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1124.690774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1124.691375] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:15:57 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 10)

19:15:57 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:15:57 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:15:57 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x80000)

19:15:57 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x80040000)

19:15:57 executing program 6:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x3f000000)

19:15:57 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:15:57 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x20000000)

[ 1124.713978] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1124.735710] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:15:57 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 11)

[ 1124.797347] FAULT_INJECTION: forcing a failure.
[ 1124.797347] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1124.798706] CPU: 1 PID: 7746 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1124.799289] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1124.800058] Call Trace:
[ 1124.800293]  dump_stack+0x107/0x167
[ 1124.800600]  should_fail.cold+0x5/0xa
[ 1124.800976]  _copy_from_user+0x2e/0x1b0
[ 1124.801330]  __copy_msghdr_from_user+0x91/0x4b0
[ 1124.801779]  ? __ia32_sys_shutdown+0x80/0x80
[ 1124.802163]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1124.802667]  sendmsg_copy_msghdr+0xa1/0x160
[ 1124.803041]  ? do_recvmmsg+0x6d0/0x6d0
[ 1124.803375]  ? handle_mm_fault+0x9e9/0x3500
[ 1124.803790]  ? __lock_acquire+0x1657/0x5b00
[ 1124.804156]  ? find_held_lock+0x2c/0x110
[ 1124.804507]  ___sys_sendmsg+0xc6/0x170
[ 1124.804918]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1124.805321]  ? vmacache_find+0x55/0x2a0
[ 1124.805712]  ? do_user_addr_fault+0x5b0/0xc60
[ 1124.806093]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1124.806535]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1124.807705]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1124.808233]  ? trace_hardirqs_on+0x5b/0x180
[ 1124.808721]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1124.809245]  __sys_sendmmsg+0x195/0x470
[ 1124.809611]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1124.810084]  ? lock_downgrade+0x6d0/0x6d0
[ 1124.810472]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1124.811716]  ? wait_for_completion_io+0x270/0x270
[ 1124.813427]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1124.813921]  ? vfs_write+0x354/0xb10
[ 1124.814274]  ? fput_many+0x2f/0x1a0
[ 1124.814621]  ? ksys_write+0x1a9/0x260
[ 1124.815055]  ? __ia32_sys_read+0xb0/0xb0
[ 1124.815445]  __x64_sys_sendmmsg+0x99/0x100
[ 1124.815901]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1124.816379]  do_syscall_64+0x33/0x40
[ 1124.816780]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1124.817259] RIP: 0033:0x7f09c4bc0b19
[ 1124.817583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1124.819197] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1124.819911] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1124.820508] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1124.821151] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1124.821863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1124.822542] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:16:11 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x21030000)

19:16:11 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:16:11 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 12)

19:16:11 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:16:11 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x81020000)

19:16:11 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:16:11 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:16:11 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x200000)

[ 1138.532184] FAULT_INJECTION: forcing a failure.
[ 1138.532184] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1138.533361] CPU: 1 PID: 7758 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1138.533949] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1138.534655] Call Trace:
[ 1138.534895]  dump_stack+0x107/0x167
[ 1138.535210]  should_fail.cold+0x5/0xa
[ 1138.535542]  _copy_from_user+0x2e/0x1b0
[ 1138.535896]  __copy_msghdr_from_user+0x91/0x4b0
[ 1138.536298]  ? __ia32_sys_shutdown+0x80/0x80
[ 1138.536680]  ? count_memcg_event_mm.part.0+0x10f/0x2f0
[ 1138.537140]  sendmsg_copy_msghdr+0xa1/0x160
[ 1138.553570]  ? do_recvmmsg+0x6d0/0x6d0
[ 1138.553909]  ? handle_mm_fault+0x9e9/0x3500
[ 1138.554281]  ? __lock_acquire+0x1657/0x5b00
[ 1138.554645]  ? find_held_lock+0x2c/0x110
[ 1138.554994]  ___sys_sendmsg+0xc6/0x170
[ 1138.555326]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1138.555711]  ? vmacache_find+0x55/0x2a0
[ 1138.556055]  ? do_user_addr_fault+0x5b0/0xc60
[ 1138.556437]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1138.556880]  ? exc_page_fault+0xca/0x1a0
[ 1138.557224]  ? trace_hardirqs_on+0x5b/0x180
[ 1138.557604]  ? exc_page_fault+0xca/0x1a0
[ 1138.557952]  ? asm_exc_page_fault+0x1e/0x30
[ 1138.558329]  __sys_sendmmsg+0x195/0x470
[ 1138.558669]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1138.559034]  ? lock_downgrade+0x6d0/0x6d0
[ 1138.559398]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1138.559810]  ? wait_for_completion_io+0x270/0x270
[ 1138.560226]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1138.560619]  ? vfs_write+0x354/0xb10
[ 1138.560935]  ? fput_many+0x2f/0x1a0
[ 1138.561250]  ? ksys_write+0x1a9/0x260
[ 1138.561589]  ? __ia32_sys_read+0xb0/0xb0
[ 1138.561936]  __x64_sys_sendmmsg+0x99/0x100
[ 1138.562298]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1138.562734]  do_syscall_64+0x33/0x40
[ 1138.563049]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1138.563485] RIP: 0033:0x7f09c4bc0b19
[ 1138.563802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1138.565359] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1138.566051] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1138.566684] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1138.567340] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1138.567987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1138.568636] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:16:11 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x24000000)

19:16:11 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8bffffff)

19:16:11 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x800000)

[ 1138.662090] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:16:11 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x28, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31343338373338393700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000441356bbe0d347458781d90fbb6137b4010040000c00000000000000d5f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000006100000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000000140)="02000000030000000400000016000f000392da00040000000000000000000f00c5d7", 0x22, 0x1000}, {&(0x7f0000000640)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d5f4655fd5f4655fd5f4655f00"/8224, 0x2020, 0x1fff}, {&(0x7f0000012600)="ed41000000100000d5f4655fd6f4655fd6f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x4100}, {&(0x7f0000012700)="200000003c66c62a3c66c62a00000000d5f4655f00"/32, 0x20, 0x4180}, {&(0x7f0000012800)="8081000000180000d5f4655fd5f4655fd5f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030000000", 0x40, 0x41fe}, {&(0x7f0000012900)="20000000000000000000000000000000d5f4655f00"/32, 0x20, 0x4280}, {&(0x7f0000000180)="8081000000180000d5f4655fd5f4655fd5f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040000000", 0x40, 0x4300}, {&(0x7f0000012b00)="20000000000000000000000000000000d5f4655f00"/32, 0x20, 0x4380}, {&(0x7f0000012c00)="c041000000400000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800000000000af301000400000000000000000000000400000020000000", 0x40, 0x4a00}, {&(0x7f0000012d00)="20000000000000000000000000000000d5f4655f00"/32, 0x20, 0x4a80}, {&(0x7f0000012e00)="ed41000000100000d6f4655fd6f4655fd6f4655f00000000000002008000000000000800030000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000429f33c7000000000000000000000000000000000000000000000000200000003c66c62a3c66c62a3c66c62ad6f4655f3c66c62a0000000000000000", 0xa0, 0x4b00}, {&(0x7f0000012f00)="ed8100001a040000d6f4655fd6f4655fd6f4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000060000000000000000000000000000000000000000000000000000000000000000000000000000000652a4c1d000000000000000000000000000000000000000000000000200000003c66c62a3c66c62a3c66c62ad6f4655f3c66c62a0000000000000000", 0xa0, 0x4c00}, {&(0x7f0000013000)="ffa1000026000000d6f4655fd6f4655fd6f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3134333837333839372f66696c65302f66696c653000000000000000000000000000000000000000000000d6db46a3000000000000000000000000000000000000000000000000200000003c66c62a3c66c62a3c66c62ad6f4655f3c66c62a0000000000000000", 0xa0, 0x4d00}, {&(0x7f0000013100)="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", 0x1a0, 0x4e00}, {&(0x7f0000013300)="ed81000064000000d6f4655fd6f4655fd6f4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000090000000000000000000000000000000000000000000000000000000000000000000000000000000256c47f5000000000000000000000000000000000000000000000000200000003c66c62a3c66c62a3c66c62ad6f4655f3c66c62a0000000000000000", 0xa0, 0x5000}, {&(0x7f0000013400)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000013500)="0b0000000c0001022e00000002000000f40f02022e2e00"/32, 0x20, 0x20000}, {&(0x7f0000013600)="00000000001000"/32, 0x20, 0x21000}, {&(0x7f0000013700)="00000000001000"/32, 0xfffffffffffffd81, 0x22000}, {&(0x7f0000013800)="00000000001000"/32, 0x20, 0x23000}, {&(0x7f0000000080)="111fc0d901000000803a0900803a09000000000006000000000000000500000067cad8f3cce432f7d7475643ed903ce2be72d131419892da3192d85fb45d856a8e9d6beec0b2baf1deee6705bcf6e8b17dcbd597afa09cdc", 0x58, 0x30000}, {&(0x7f0000013a00)="0200"/32, 0x20, 0x30400}, {&(0x7f0000013b00)="0300"/32, 0x20, 0x30800}, {&(0x7f0000013c00)="0400"/32, 0x20, 0x30c00}, {&(0x7f0000013d00)="0500"/32, 0x20, 0x31000}, {&(0x7f0000013e00)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000700"/96, 0x60, 0x31400}, {&(0x7f0000013f00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x40000}, {&(0x7f0000014000)="0200"/32, 0x20, 0x40400}, {&(0x7f0000014100)="0300"/32, 0x20, 0x40800}, {&(0x7f0000014200)="0400"/32, 0x20, 0x40c00}, {&(0x7f0000014300)="0500"/32, 0x20, 0x41000}, {&(0x7f0000014400)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000700000000000000000000000000000000000800"/96, 0x60, 0x41400}, {&(0x7f0000014500)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d80f050766696c653100"/64, 0x40, 0x50000}, {&(0x7f0000014600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkalletsyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x60000}, {&(0x7f0000014b00)='syzkallers\x00'/32, 0x20, 0x4}, {&(0x7f0000014c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x90000}], 0x12, &(0x7f0000014d00))
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes256, 0x1, @desc3})

19:16:11 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x3f000000)

[ 1138.688013] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:16:11 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8cffffff)

19:16:11 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:16:11 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xf0ffff)

19:16:11 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:16:11 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[ 1138.916881] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1138.925843] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[ 1138.929062] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 1139.013705] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
19:16:26 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x80040000)

19:16:26 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:16:26 executing program 6:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xf0ffff)

19:16:26 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:16:26 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:16:26 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 13)

19:16:26 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1000000)

19:16:26 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xa1ffffff)

[ 1153.732071] FAULT_INJECTION: forcing a failure.
[ 1153.732071] name failslab, interval 1, probability 0, space 0, times 0
[ 1153.734168] CPU: 1 PID: 7827 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1153.734818] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1153.735510] Call Trace:
[ 1153.735797]  dump_stack+0x107/0x167
[ 1153.736108]  should_fail.cold+0x5/0xa
[ 1153.736438]  ? create_object.isra.0+0x3a/0xa20
[ 1153.736872]  should_failslab+0x5/0x20
[ 1153.737197]  kmem_cache_alloc+0x5b/0x310
[ 1153.737548]  create_object.isra.0+0x3a/0xa20
[ 1153.738504]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1153.739429]  kmem_cache_alloc_node+0x169/0x330
[ 1153.740360]  __alloc_skb+0x6d/0x5b0
[ 1153.741281]  alloc_skb_with_frags+0x92/0x570
[ 1153.741925]  ? find_held_lock+0x2c/0x110
[ 1153.742276]  sock_alloc_send_pskb+0x7af/0x930
[ 1153.742713]  ? sk_alloc+0x350/0x350
[ 1153.743027]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1153.743466]  ? find_held_lock+0x2c/0x110
[ 1153.743872]  ? lock_chain_count+0x20/0x20
[ 1153.744232]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1153.744708]  ? ip6_mtu+0x1bb/0x3d0
[ 1153.745009]  ? lock_downgrade+0x6d0/0x6d0
[ 1153.745385]  ? ip_frag_init+0x350/0x350
[ 1153.745869]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1153.746266]  ? ip6_mtu+0x1e9/0x3d0
[ 1153.746565]  ? ip6_setup_cork+0xfb7/0x1740
[ 1153.746992]  ip6_make_skb+0x2de/0x4e0
[ 1153.747316]  ? ip_frag_init+0x350/0x350
[ 1153.747709]  ? ip_frag_init+0x350/0x350
[ 1153.748050]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1153.748457]  ? ip6_dst_hoplimit+0x199/0x440
[ 1153.748870]  ? lock_downgrade+0x6d0/0x6d0
[ 1153.749234]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1153.749577]  ? ip_frag_init+0x350/0x350
[ 1153.750016]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1153.750454]  ? trace_hardirqs_on+0x5b/0x180
[ 1153.750870]  ? lock_acquire+0x197/0x470
[ 1153.751208]  ? find_held_lock+0x2c/0x110
[ 1153.751553]  ? lock_acquire+0x197/0x470
[ 1153.751944]  ? find_held_lock+0x2c/0x110
[ 1153.752299]  ? sock_has_perm+0x1ea/0x280
[ 1153.752703]  ? __import_iovec+0x458/0x590
[ 1153.753051]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1153.753487]  inet6_sendmsg+0x105/0x140
[ 1153.753916]  ? inet6_compat_ioctl+0x320/0x320
[ 1153.754296]  __sock_sendmsg+0xf2/0x190
[ 1153.754662]  ____sys_sendmsg+0x334/0x870
[ 1153.755016]  ? sock_write_iter+0x3d0/0x3d0
[ 1153.755372]  ? do_recvmmsg+0x6d0/0x6d0
[ 1153.755786]  ? handle_mm_fault+0x9e9/0x3500
[ 1153.756151]  ? __lock_acquire+0x1657/0x5b00
[ 1153.756517]  ? find_held_lock+0x2c/0x110
[ 1153.756911]  ___sys_sendmsg+0xf3/0x170
[ 1153.757244]  ? sendmsg_copy_msghdr+0x160/0x160
19:16:26 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xf6ffffff)

[ 1153.757719]  ? vmacache_find+0x55/0x2a0
[ 1153.758071]  ? do_user_addr_fault+0x5b0/0xc60
[ 1153.758452]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1153.758941]  ? exc_page_fault+0xca/0x1a0
[ 1153.759283]  ? trace_hardirqs_on+0x5b/0x180
[ 1153.759703]  ? exc_page_fault+0xca/0x1a0
[ 1153.760140]  ? asm_exc_page_fault+0x1e/0x30
[ 1153.760521]  __sys_sendmmsg+0x195/0x470
[ 1153.760906]  ? __ia32_sys_sendmsg+0xb0/0xb0
19:16:26 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x81020000)

[ 1153.761275]  ? lock_downgrade+0x6d0/0x6d0
[ 1153.761995]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1153.762420]  ? wait_for_completion_io+0x270/0x270
[ 1153.762885]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1153.763282]  ? vfs_write+0x354/0xb10
[ 1153.763789]  ? fput_many+0x2f/0x1a0
[ 1153.764106]  ? ksys_write+0x1a9/0x260
[ 1153.764438]  ? __ia32_sys_read+0xb0/0xb0
[ 1153.764848]  __x64_sys_sendmmsg+0x99/0x100
[ 1153.765216]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1153.765760]  do_syscall_64+0x33/0x40
[ 1153.766084]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1153.766524] RIP: 0033:0x7f09c4bc0b19
[ 1153.766888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1153.768490] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1153.769177] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1153.769876] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1153.770476] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1153.771124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1153.771784] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:16:26 executing program 6:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1}, 0x1c)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x9, 0x1c, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4)
recvmmsg(r0, &(0x7f0000003ec0)=[{{&(0x7f00000001c0)=@nfc, 0x80, 0x0}}], 0x1, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x0)
creat(0x0, 0x0)

19:16:26 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x2000000)

19:16:26 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1153.870815] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:16:26 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1153.911014] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:16:27 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8bffffff)

19:16:27 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x2010000)

19:16:27 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 14)

19:16:27 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfbffffff)

[ 1154.007447] FAULT_INJECTION: forcing a failure.
[ 1154.007447] name failslab, interval 1, probability 0, space 0, times 0
[ 1154.008772] CPU: 1 PID: 7861 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1154.009349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1154.010058] Call Trace:
[ 1154.010295]  dump_stack+0x107/0x167
[ 1154.010608]  should_fail.cold+0x5/0xa
[ 1154.010939]  should_failslab+0x5/0x20
[ 1154.011275]  __kmalloc_node_track_caller+0x74/0x3b0
[ 1154.011698]  ? alloc_skb_with_frags+0x92/0x570
[ 1154.012091]  __alloc_skb+0xb1/0x5b0
[ 1154.012408]  alloc_skb_with_frags+0x92/0x570
[ 1154.012786]  ? mark_lock+0xf5/0x2df0
[ 1154.013104]  sock_alloc_send_pskb+0x7af/0x930
[ 1154.013495]  ? sk_alloc+0x350/0x350
[ 1154.013828]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1154.014299]  ? __ip6_append_data.isra.0+0x18c0/0x3a70
[ 1154.014744]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1154.015175]  ? ip6_mtu+0x1bb/0x3d0
[ 1154.015479]  ? lock_downgrade+0x6d0/0x6d0
[ 1154.015837]  ? ip_frag_init+0x350/0x350
[ 1154.016185]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1154.016582]  ? ip6_mtu+0x1e9/0x3d0
[ 1154.016888]  ? ip6_setup_cork+0xfb7/0x1740
[ 1154.017251]  ip6_make_skb+0x2de/0x4e0
[ 1154.017573]  ? ip_frag_init+0x350/0x350
[ 1154.017927]  ? ip_frag_init+0x350/0x350
[ 1154.018269]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1154.018680]  ? ip6_dst_hoplimit+0x199/0x440
[ 1154.019049]  ? lock_downgrade+0x6d0/0x6d0
[ 1154.019413]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1154.019763]  ? ip_frag_init+0x350/0x350
[ 1154.020107]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1154.020555]  ? lock_acquire+0xaf/0x470
[ 1154.020892]  ? lock_acquire+0x197/0x470
[ 1154.021231]  ? find_held_lock+0x2c/0x110
19:16:27 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1154.021585]  ? sock_has_perm+0x1ea/0x280
[ 1154.021957]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1154.022423]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1154.022861]  inet6_sendmsg+0x105/0x140
[ 1154.023197]  ? inet6_compat_ioctl+0x320/0x320
[ 1154.023578]  __sock_sendmsg+0xf2/0x190
[ 1154.023909]  ____sys_sendmsg+0x334/0x870
[ 1154.024262]  ? sock_write_iter+0x3d0/0x3d0
[ 1154.024622]  ? do_recvmmsg+0x6d0/0x6d0
[ 1154.025262]  ? handle_mm_fault+0x9e9/0x3500
[ 1154.025638]  ? find_held_lock+0x2c/0x110
[ 1154.026002]  ___sys_sendmsg+0xf3/0x170
[ 1154.026338]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1154.026723]  ? vmacache_find+0x55/0x2a0
[ 1154.027068]  ? do_user_addr_fault+0x5b0/0xc60
[ 1154.027455]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1154.027899]  ? exc_page_fault+0xca/0x1a0
[ 1154.028247]  ? trace_hardirqs_on+0x5b/0x180
[ 1154.028615]  ? exc_page_fault+0xca/0x1a0
[ 1154.028960]  ? asm_exc_page_fault+0x1e/0x30
[ 1154.029340]  __sys_sendmmsg+0x195/0x470
[ 1154.029694]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1154.030066]  ? lock_downgrade+0x6d0/0x6d0
[ 1154.030431]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1154.030844]  ? wait_for_completion_io+0x270/0x270
[ 1154.031258]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1154.031652]  ? vfs_write+0x354/0xb10
[ 1154.031970]  ? fput_many+0x2f/0x1a0
[ 1154.032282]  ? ksys_write+0x1a9/0x260
[ 1154.032605]  ? __ia32_sys_read+0xb0/0xb0
[ 1154.032958]  __x64_sys_sendmmsg+0x99/0x100
[ 1154.033320]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1154.033769]  do_syscall_64+0x33/0x40
[ 1154.034087]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1154.034523] RIP: 0033:0x7f09c4bc0b19
[ 1154.034840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1154.036386] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1154.037030] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1154.037640] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1154.038248] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1154.038853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1154.039456] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:16:27 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:16:27 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8cffffff)

19:16:27 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x3000000)

19:16:27 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:16:27 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfeffffff)

19:16:27 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 15)

19:16:27 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1154.216354] FAULT_INJECTION: forcing a failure.
[ 1154.216354] name failslab, interval 1, probability 0, space 0, times 0
[ 1154.217660] CPU: 0 PID: 7887 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1154.218243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1154.218941] Call Trace:
[ 1154.219173]  dump_stack+0x107/0x167
[ 1154.219486]  should_fail.cold+0x5/0xa
[ 1154.219814]  ? create_object.isra.0+0x3a/0xa20
[ 1154.220208]  should_failslab+0x5/0x20
[ 1154.220533]  kmem_cache_alloc+0x5b/0x310
[ 1154.220880]  create_object.isra.0+0x3a/0xa20
[ 1154.221256]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1154.221698]  __kmalloc_node_track_caller+0x1a6/0x3b0
[ 1154.222132]  ? alloc_skb_with_frags+0x92/0x570
[ 1154.222525]  __alloc_skb+0xb1/0x5b0
[ 1154.222839]  alloc_skb_with_frags+0x92/0x570
[ 1154.223216]  ? mark_lock+0xf5/0x2df0
[ 1154.223539]  sock_alloc_send_pskb+0x7af/0x930
[ 1154.223928]  ? sk_alloc+0x350/0x350
[ 1154.224241]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1154.224711]  ? __ip6_append_data.isra.0+0x2d6e/0x3a70
[ 1154.225152]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1154.225586]  ? ip6_mtu+0x1bb/0x3d0
[ 1154.225903]  ? lock_downgrade+0x6d0/0x6d0
[ 1154.226258]  ? ip_frag_init+0x350/0x350
[ 1154.226608]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1154.227005]  ? ip6_mtu+0x1e9/0x3d0
[ 1154.227312]  ? ip6_setup_cork+0xfb7/0x1740
[ 1154.227673]  ip6_make_skb+0x2de/0x4e0
[ 1154.227997]  ? ip_frag_init+0x350/0x350
[ 1154.228340]  ? ip_frag_init+0x350/0x350
[ 1154.228679]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1154.229087]  ? ip6_dst_hoplimit+0x199/0x440
[ 1154.229459]  ? lock_downgrade+0x6d0/0x6d0
[ 1154.229827]  ? ip6_sk_dst_lookup_flow+0x56d/0x740
[ 1154.230240]  ? ip6_sk_dst_lookup_flow+0x57b/0x740
[ 1154.230651]  ? __sanitizer_cov_trace_pc+0x4/0x60
[ 1154.231060]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1154.231409]  ? ip_frag_init+0x350/0x350
[ 1154.231753]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1154.232198]  ? lock_acquire+0x197/0x470
[ 1154.232536]  ? find_held_lock+0x2c/0x110
[ 1154.232886]  ? lock_acquire+0x197/0x470
[ 1154.233228]  ? find_held_lock+0x2c/0x110
[ 1154.233580]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1154.234056]  ? trace_hardirqs_on+0x5b/0x180
[ 1154.234423]  ? sock_has_perm+0x1ea/0x280
[ 1154.234787]  ? __import_iovec+0x458/0x590
[ 1154.235145]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1154.235594]  inet6_sendmsg+0x105/0x140
[ 1154.235932]  ? inet6_compat_ioctl+0x320/0x320
[ 1154.236324]  __sock_sendmsg+0xf2/0x190
[ 1154.236664]  ____sys_sendmsg+0x334/0x870
[ 1154.237019]  ? sock_write_iter+0x3d0/0x3d0
[ 1154.237388]  ? do_recvmmsg+0x6d0/0x6d0
[ 1154.237738]  ? __up_read+0x250/0x7a0
[ 1154.238064]  ? check_memory_region+0x3/0x1f0
[ 1154.238453]  ___sys_sendmsg+0xf3/0x170
[ 1154.238795]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1154.239191]  ? vmacache_find+0x55/0x2a0
[ 1154.239541]  ? do_user_addr_fault+0x5b0/0xc60
[ 1154.239929]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1154.240377]  ? exc_page_fault+0xca/0x1a0
[ 1154.240720]  ? trace_hardirqs_on+0x5b/0x180
[ 1154.241091]  ? exc_page_fault+0xca/0x1a0
[ 1154.241442]  ? asm_exc_page_fault+0x1e/0x30
[ 1154.241839]  __sys_sendmmsg+0x195/0x470
[ 1154.242184]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1154.242552]  ? lock_downgrade+0x6d0/0x6d0
[ 1154.242915]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1154.243330]  ? wait_for_completion_io+0x270/0x270
[ 1154.243752]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1154.244146]  ? vfs_write+0x354/0xb10
[ 1154.244467]  ? fput_many+0x2f/0x1a0
[ 1154.244777]  ? ksys_write+0x1a9/0x260
[ 1154.245103]  ? __ia32_sys_read+0xb0/0xb0
[ 1154.245459]  __x64_sys_sendmmsg+0x99/0x100
[ 1154.246007]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1154.248550]  do_syscall_64+0x33/0x40
[ 1154.249350]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1154.250471] RIP: 0033:0x7f09c4bc0b19
[ 1154.251395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1154.255396] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1154.256687] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1154.257976] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1154.259203] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1154.260425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1154.261682] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:16:41 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xff000000)

19:16:41 executing program 6:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000180))
r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00')
read(r2, &(0x7f00000002c0)=""/225, 0xe1)
r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$SG_IO(r4, 0x1274, 0x0)
r5 = dup2(r1, r1)
r6 = io_uring_setup(0x1b33, &(0x7f00000003c0)={0x0, 0xc7e7, 0x20, 0x3, 0x175, 0x0, r2})
r7 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r7, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = pidfd_getfd(r4, r2, 0x0)
r9 = syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x8c800)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r8, {r9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="0184c55636c8d3000000b3c374ff9de4a7", @ANYRES32=r6, @ANYBLOB="01000000000000002e2f66696c653000"])
write$binfmt_elf64(r5, &(0x7f00000007c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x2, 0x6, 0x0, 0xea5, 0x2, 0x3e, 0x1800, 0x0, 0x40, 0x31e, 0x6, 0x201, 0x38, 0x1, 0x1f32, 0x1, 0x100}, [{0x0, 0x3, 0x5, 0xff, 0xa0, 0xdd7, 0x1000000003, 0xffff}], "5563cd9a58df47eb7fe1862c4d6716e03dda73ad79bdf1e9a003bcf3986c50d4e8aa28c957fb3d2f3a377ec19cccee4be2003b4f8551fca880d37a4b11600af6227109e9493fb7702e12a94b4c79f4", ['\x00', '\x00']}, 0x2c7)
syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00')
clone3(&(0x7f0000000200)={0x451a6100, &(0x7f00000000c0), 0x0, &(0x7f0000000100), {0x16}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58)

19:16:41 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xa1ffffff)

19:16:41 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x4000000)

19:16:41 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:16:41 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 16)

19:16:41 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:16:41 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[ 1168.433766] FAULT_INJECTION: forcing a failure.
[ 1168.433766] name failslab, interval 1, probability 0, space 0, times 0
[ 1168.434889] CPU: 1 PID: 7916 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1168.435499] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1168.436205] Call Trace:
[ 1168.436479]  dump_stack+0x107/0x167
[ 1168.436813]  should_fail.cold+0x5/0xa
[ 1168.437137]  ? lock_release+0x680/0x680
[ 1168.437545]  ? skb_clone+0x14f/0x3d0
[ 1168.437895]  should_failslab+0x5/0x20
[ 1168.438233]  kmem_cache_alloc+0x5b/0x310
[ 1168.438633]  skb_clone+0x14f/0x3d0
[ 1168.438962]  dev_queue_xmit_nit+0x3a7/0xb00
[ 1168.439337]  dev_hard_start_xmit+0xab/0x6f0
[ 1168.439802]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1168.440267]  __dev_queue_xmit+0x17ec/0x2710
[ 1168.440680]  ? find_held_lock+0x2c/0x110
[ 1168.441039]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1168.441500]  ? lock_downgrade+0x6d0/0x6d0
[ 1168.441864]  ? lock_acquire+0x197/0x470
[ 1168.442220]  ? ip6_finish_output2+0x203/0x1fe0
[ 1168.442707]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1168.443168]  neigh_connected_output+0x382/0x4d0
[ 1168.443649]  ip6_finish_output2+0xaaf/0x1fe0
[ 1168.444029]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1168.444548]  ip6_output+0x3b8/0x7e0
[ 1168.444864]  ip6_local_out+0xb4/0x1a0
[ 1168.445204]  ip6_send_skb+0xb7/0x350
[ 1168.445570]  udp_v6_send_skb+0x7aa/0x15b0
[ 1168.445946]  udpv6_sendmsg+0x2116/0x2ad0
[ 1168.446309]  ? ip_frag_init+0x350/0x350
[ 1168.446697]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1168.447135]  ? lock_acquire+0x1b9/0x470
[ 1168.447558]  ? find_held_lock+0x2c/0x110
[ 1168.447909]  ? lock_acquire+0x197/0x470
[ 1168.448261]  ? find_held_lock+0x2c/0x110
[ 1168.448675]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1168.449115]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1168.449627]  ? sock_has_perm+0x1ea/0x280
[ 1168.450003]  ? __import_iovec+0x458/0x590
[ 1168.450355]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1168.450851]  inet6_sendmsg+0x105/0x140
[ 1168.451183]  ? inet6_compat_ioctl+0x320/0x320
[ 1168.451648]  __sock_sendmsg+0xf2/0x190
[ 1168.452004]  ____sys_sendmsg+0x334/0x870
[ 1168.452429]  ? sock_write_iter+0x3d0/0x3d0
[ 1168.452810]  ? do_recvmmsg+0x6d0/0x6d0
[ 1168.453138]  ? handle_mm_fault+0x9e9/0x3500
[ 1168.453583]  ? find_held_lock+0x2c/0x110
[ 1168.453963]  ___sys_sendmsg+0xf3/0x170
[ 1168.454296]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1168.454739]  ? vmacache_find+0x55/0x2a0
[ 1168.455084]  ? do_user_addr_fault+0x5b0/0xc60
[ 1168.455521]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1168.455978]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1168.456497]  ? trace_hardirqs_on+0x5b/0x180
[ 1168.456877]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1168.457350]  __sys_sendmmsg+0x195/0x470
[ 1168.457736]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1168.458128]  ? lock_downgrade+0x6d0/0x6d0
[ 1168.458540]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1168.458963]  ? wait_for_completion_io+0x270/0x270
[ 1168.459378]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1168.459817]  ? vfs_write+0x354/0xb10
[ 1168.460149]  ? fput_many+0x2f/0x1a0
[ 1168.460504]  ? ksys_write+0x1a9/0x260
[ 1168.460829]  ? __ia32_sys_read+0xb0/0xb0
[ 1168.461190]  __x64_sys_sendmmsg+0x99/0x100
[ 1168.461620]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1168.462086]  do_syscall_64+0x33/0x40
[ 1168.462463]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1168.462896] RIP: 0033:0x7f09c4bc0b19
[ 1168.463227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1168.464851] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1168.465549] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1168.466162] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1168.466835] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1168.467522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1168.468116] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
[ 1168.499788] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1168.517144] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:16:55 executing program 6:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xa)
write$binfmt_aout(r0, &(0x7f0000000100)={{0x16d, 0x4, 0x1, 0x2bd, 0x31f, 0x8, 0x29f}, "5e6c6cc6c7a5051a5e99e9a95486978d60843de28c1270cb166c93ed2e9f834407d312e40ae98071afe09c4b1d81e6e4e70bd58f4503e55f04a4b0da7479d7bd47d3f1e03663ac66de0b2f585439d8022396fa8c851014dd5b744401fe53b1f068ad99dd9375"}, 0x86)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000006600010e0000000000", @ANYRES32], 0x2c}}, 0x0)
io_setup(0x0, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)

19:16:55 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:16:55 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:16:55 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x5000000)

19:16:55 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xf6ffffff)

19:16:55 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:16:55 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 17)

[ 1182.059124] FAULT_INJECTION: forcing a failure.
[ 1182.059124] name failslab, interval 1, probability 0, space 0, times 0
[ 1182.060304] CPU: 1 PID: 7937 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1182.060930] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1182.061696] Call Trace:
[ 1182.061936]  dump_stack+0x107/0x167
[ 1182.062286]  should_fail.cold+0x5/0xa
[ 1182.062688]  ? create_object.isra.0+0x3a/0xa20
[ 1182.063088]  should_failslab+0x5/0x20
[ 1182.063515]  kmem_cache_alloc+0x5b/0x310
[ 1182.063872]  ? lock_acquire+0x197/0x470
[ 1182.064219]  create_object.isra.0+0x3a/0xa20
[ 1182.064669]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1182.065106]  kmem_cache_alloc+0x159/0x310
[ 1182.065517]  skb_clone+0x14f/0x3d0
[ 1182.065837]  dev_queue_xmit_nit+0x3a7/0xb00
[ 1182.066245]  dev_hard_start_xmit+0xab/0x6f0
[ 1182.066674]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1182.067121]  __dev_queue_xmit+0x17ec/0x2710
[ 1182.067570]  ? find_held_lock+0x2c/0x110
[ 1182.067932]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1182.068324]  ? lock_downgrade+0x6d0/0x6d0
[ 1182.068741]  ? lock_acquire+0x197/0x470
[ 1182.069083]  ? ip6_finish_output2+0x203/0x1fe0
[ 1182.069523]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1182.069999]  neigh_connected_output+0x382/0x4d0
[ 1182.070461]  ip6_finish_output2+0xaaf/0x1fe0
[ 1182.070863]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1182.071302]  ip6_output+0x3b8/0x7e0
[ 1182.071693]  ip6_local_out+0xb4/0x1a0
[ 1182.072033]  ip6_send_skb+0xb7/0x350
[ 1182.072358]  udp_v6_send_skb+0x7aa/0x15b0
[ 1182.072773]  udpv6_sendmsg+0x2116/0x2ad0
[ 1182.073141]  ? ip_frag_init+0x350/0x350
[ 1182.073535]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1182.073982]  ? __lockdep_reset_lock+0x180/0x180
[ 1182.074454]  ? __lockdep_reset_lock+0x180/0x180
[ 1182.074862]  ? lock_acquire+0x197/0x470
[ 1182.075213]  ? find_held_lock+0x2c/0x110
[ 1182.075646]  ? sock_has_perm+0x1ea/0x280
[ 1182.076011]  ? __import_iovec+0x458/0x590
[ 1182.076378]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1182.076870]  inet6_sendmsg+0x105/0x140
[ 1182.077224]  ? inet6_compat_ioctl+0x320/0x320
[ 1182.077648]  __sock_sendmsg+0xf2/0x190
[ 1182.077987]  ____sys_sendmsg+0x334/0x870
[ 1182.078384]  ? sock_write_iter+0x3d0/0x3d0
[ 1182.078793]  ? do_recvmmsg+0x6d0/0x6d0
[ 1182.079120]  ? handle_mm_fault+0x9e9/0x3500
[ 1182.079573]  ? __lock_acquire+0x1657/0x5b00
[ 1182.079944]  ? find_held_lock+0x2c/0x110
[ 1182.080296]  ___sys_sendmsg+0xf3/0x170
[ 1182.080694]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1182.081078]  ? vmacache_find+0x55/0x2a0
[ 1182.081478]  ? do_user_addr_fault+0x5b0/0xc60
[ 1182.081860]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1182.082326]  ? exc_page_fault+0xca/0x1a0
[ 1182.082723]  ? trace_hardirqs_on+0x5b/0x180
[ 1182.083090]  ? exc_page_fault+0xca/0x1a0
[ 1182.083516]  ? asm_exc_page_fault+0x1e/0x30
[ 1182.083911]  __sys_sendmmsg+0x195/0x470
[ 1182.084257]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1182.084677]  ? lock_downgrade+0x6d0/0x6d0
[ 1182.085041]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1182.085533]  ? wait_for_completion_io+0x270/0x270
[ 1182.085958]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1182.086385]  ? vfs_write+0x354/0xb10
[ 1182.086757]  ? fput_many+0x2f/0x1a0
[ 1182.087069]  ? ksys_write+0x1a9/0x260
[ 1182.087463]  ? __ia32_sys_read+0xb0/0xb0
[ 1182.087836]  __x64_sys_sendmmsg+0x99/0x100
[ 1182.088196]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1182.088675]  do_syscall_64+0x33/0x40
[ 1182.089006]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1182.089493] RIP: 0033:0x7f09c4bc0b19
[ 1182.089811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1182.091501] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1182.092159] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1182.092802] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1182.093465] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1182.094086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1182.094744] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:16:55 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xff010000)

19:16:55 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x6000000)

19:16:55 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfbffffff)

[ 1182.125667] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1182.128582] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1182.162393] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1182.164384] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:16:55 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r0 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)

19:16:55 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfffff000)

19:16:55 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:16:55 executing program 6:
r0 = socket$unix(0x1, 0x5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r1)
fcntl$setstatus(r3, 0x4, 0x2c00)
write(r1, 0x0, 0x0)
r4 = dup3(r0, r2, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x2)
fchmod(r0, 0x62)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000001c0)={0x7fffffff, 0x5, 0x9, 0x0, 0x7, 0x100})
r6 = io_uring_setup(0x2ac3, &(0x7f0000000080)={0x0, 0xfb3a, 0x10, 0x0, 0x2d2, 0x0, r3})
openat2(r4, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x10000, 0x94}, 0x18)
r7 = fork()
ptrace(0x10, r7)
ptrace$setregset(0x4205, r7, 0x201, &(0x7f0000000040)={0x0})
dup(r6)
connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e)

19:16:55 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfeffffff)

19:17:08 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xffffff7f)

19:17:08 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000200)='./file0\x00', 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f00000001c0)='>')
mq_open(&(0x7f0000000140)='\x01*+\x0e\xaa\xdc\x84\x97\xa72\xb9v\x93\b5\x84\x83\x86\xce\x9c\x00\x00\x00\x00\x00\x00g_\xd1', 0x80, 0x24, &(0x7f0000000340)={0x2, 0x0, 0x40, 0x10000})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, 0x0)
ioctl$TIOCMIWAIT(r1, 0x545c, 0x0)
faccessat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x11, 0x1000)
rename(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000380)="0a2d2da2ef9ee479574e35e3ba64f870fe3898f364eddd8079caf5ae0616dffb698891ce445201982337c5a5bfa42703a314a7f82c9295b30351c6a696d1a7e173ab9cc9af1c5006e0044025e8868a8d1a199d7ed9857476d24dd0f9aa64d4fd35d60e125a3fe8970087fa53f87140bc6771deee3d032144161692536e78de9d5e7ea9018b4c8a352844ade27c0b847b013a69fb35e31382d99427d343e6b914ae7bca84796baedf2aa518fd74886f04d6f48ec7fdc5a1dcb9f193b46a2095f9b8c382aad5ae8afebdc22c157d85110db667e0c10dc6eabec0331261c3337731c637")
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r2, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0xfe, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0})
fallocate(r2, 0x22, 0xffff, 0x80000000)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=<r3=>0x0)
syz_open_procfs(r3, &(0x7f0000000080)='attr\x00')
fallocate(0xffffffffffffffff, 0x1, 0xc561, 0x5)

19:17:08 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x7000000)

19:17:08 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:17:08 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r0 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)

19:17:08 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xff000000)

19:17:08 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:17:08 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 18)

[ 1195.780024] FAULT_INJECTION: forcing a failure.
[ 1195.780024] name failslab, interval 1, probability 0, space 0, times 0
[ 1195.781107] CPU: 1 PID: 7998 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1195.781682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1195.782400] Call Trace:
[ 1195.782631]  dump_stack+0x107/0x167
[ 1195.782948]  should_fail.cold+0x5/0xa
[ 1195.783277]  ? lock_downgrade+0x6d0/0x6d0
[ 1195.783632]  ? skb_clone+0x14f/0x3d0
[ 1195.783955]  should_failslab+0x5/0x20
[ 1195.784286]  kmem_cache_alloc+0x5b/0x310
[ 1195.784637]  skb_clone+0x14f/0x3d0
[ 1195.784946]  packet_rcv+0x558/0x1410
[ 1195.785274]  ? run_filter+0x4d0/0x4d0
[ 1195.785597]  dev_queue_xmit_nit+0x38b/0xb00
[ 1195.785971]  dev_hard_start_xmit+0xab/0x6f0
[ 1195.786358]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1195.786807]  __dev_queue_xmit+0x17ec/0x2710
[ 1195.787182]  ? find_held_lock+0x2c/0x110
[ 1195.787529]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1195.787971]  ? lock_downgrade+0x6d0/0x6d0
[ 1195.788330]  ? lock_acquire+0x197/0x470
[ 1195.788671]  ? ip6_finish_output2+0x203/0x1fe0
[ 1195.789063]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1195.789515]  neigh_connected_output+0x382/0x4d0
[ 1195.789921]  ip6_finish_output2+0xaaf/0x1fe0
[ 1195.790319]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1195.790745]  ip6_output+0x3b8/0x7e0
[ 1195.791062]  ip6_local_out+0xb4/0x1a0
[ 1195.791390]  ip6_send_skb+0xb7/0x350
[ 1195.791714]  udp_v6_send_skb+0x7aa/0x15b0
[ 1195.792075]  udpv6_sendmsg+0x2116/0x2ad0
[ 1195.792428]  ? ip_frag_init+0x350/0x350
[ 1195.792798]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1195.793237]  ? trace_hardirqs_on+0x5b/0x180
[ 1195.793610]  ? lock_acquire+0x197/0x470
[ 1195.793953]  ? find_held_lock+0x2c/0x110
[ 1195.794352]  ? lock_acquire+0x197/0x470
[ 1195.794709]  ? find_held_lock+0x2c/0x110
[ 1195.795067]  ? sock_has_perm+0x1ea/0x280
[ 1195.795432]  ? __import_iovec+0x458/0x590
[ 1195.795787]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1195.796229]  inet6_sendmsg+0x105/0x140
[ 1195.796559]  ? inet6_compat_ioctl+0x320/0x320
[ 1195.796945]  __sock_sendmsg+0xf2/0x190
[ 1195.797280]  ____sys_sendmsg+0x334/0x870
[ 1195.797626]  ? sock_write_iter+0x3d0/0x3d0
[ 1195.797987]  ? do_recvmmsg+0x6d0/0x6d0
[ 1195.798333]  ? handle_mm_fault+0x9e9/0x3500
[ 1195.798701]  ? __lock_acquire+0x1657/0x5b00
[ 1195.799070]  ? find_held_lock+0x2c/0x110
[ 1195.799427]  ___sys_sendmsg+0xf3/0x170
[ 1195.799761]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1195.800147]  ? vmacache_find+0x55/0x2a0
[ 1195.800497]  ? do_user_addr_fault+0x5b0/0xc60
[ 1195.800881]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1195.801330]  ? exc_page_fault+0xca/0x1a0
[ 1195.801673]  ? trace_hardirqs_on+0x5b/0x180
[ 1195.802040]  ? exc_page_fault+0xca/0x1a0
[ 1195.802404]  ? asm_exc_page_fault+0x1e/0x30
[ 1195.802783]  __sys_sendmmsg+0x195/0x470
[ 1195.803127]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1195.803513]  ? setup_APIC_eilvt+0x2f0/0x2f0
[ 1195.803880]  ? clockevents_program_event+0x131/0x360
[ 1195.804315]  ? tick_program_event+0xa8/0x140
[ 1195.804691]  ? hrtimer_interrupt+0x771/0x9b0
[ 1195.805078]  __x64_sys_sendmmsg+0x99/0x100
[ 1195.805444]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1195.805880]  do_syscall_64+0x33/0x40
[ 1195.806213]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1195.806651] RIP: 0033:0x7f09c4bc0b19
[ 1195.806969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1195.808515] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1195.809190] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1195.809793] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1195.810416] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1195.811016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1195.811618] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:17:08 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xffffff8b)

19:17:08 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xff010000)

19:17:08 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xffffff8c)

[ 1195.869161] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:17:08 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r0 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)

19:17:09 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8040000)

19:17:09 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1195.921309] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:17:09 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x17)
inotify_add_watch(r2, 0x0, 0x4000040)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='3', 0x1}, {&(0x7f0000000100)}], 0x2)
r3 = dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="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", 0xfd, 0x7)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r3, {0xee01, 0xee00}}, './file0\x00'})
getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000280)=""/25, &(0x7f0000000340)=0x19)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, 0xffffffffffffffff, 0x8000000)

19:17:09 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xc000000)

19:17:23 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = dup(r0)
r2 = dup(r1)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES64=r1, @ANYRES16, @ANYRESOCT=r1, @ANYRESDEC=r1], 0x50}}, 0x0)

19:17:23 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfffff000)

19:17:23 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:17:23 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xd000000)

19:17:23 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:17:23 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:17:23 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 19)

19:17:23 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xffffffa1)

[ 1210.070517] FAULT_INJECTION: forcing a failure.
[ 1210.070517] name failslab, interval 1, probability 0, space 0, times 0
[ 1210.071737] CPU: 1 PID: 8050 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1210.072369] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1210.073108] Call Trace:
[ 1210.073388]  dump_stack+0x107/0x167
[ 1210.073746]  should_fail.cold+0x5/0xa
[ 1210.074076]  ? create_object.isra.0+0x3a/0xa20
[ 1210.074554]  should_failslab+0x5/0x20
[ 1210.074958]  kmem_cache_alloc+0x5b/0x310
[ 1210.075380]  create_object.isra.0+0x3a/0xa20
[ 1210.075800]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1210.076276]  kmem_cache_alloc+0x159/0x310
[ 1210.076685]  skb_clone+0x14f/0x3d0
[ 1210.076994]  packet_rcv+0x558/0x1410
[ 1210.077365]  ? run_filter+0x4d0/0x4d0
[ 1210.077736]  dev_queue_xmit_nit+0x38b/0xb00
[ 1210.078109]  dev_hard_start_xmit+0xab/0x6f0
[ 1210.078552]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1210.079050]  __dev_queue_xmit+0x17ec/0x2710
[ 1210.079486]  ? find_held_lock+0x2c/0x110
[ 1210.079903]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1210.080339]  ? lock_downgrade+0x6d0/0x6d0
[ 1210.080741]  ? lock_acquire+0x197/0x470
[ 1210.081114]  ? ip6_finish_output2+0x203/0x1fe0
[ 1210.081582]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1210.082204]  neigh_connected_output+0x382/0x4d0
[ 1210.082716]  ip6_finish_output2+0xaaf/0x1fe0
[ 1210.083209]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1210.083724]  ip6_output+0x3b8/0x7e0
[ 1210.084038]  ip6_local_out+0xb4/0x1a0
[ 1210.084408]  ip6_send_skb+0xb7/0x350
[ 1210.084802]  udp_v6_send_skb+0x7aa/0x15b0
[ 1210.085212]  udpv6_sendmsg+0x2116/0x2ad0
[ 1210.085558]  ? ip_frag_init+0x350/0x350
[ 1210.085950]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1210.086465]  ? trace_hardirqs_on+0x5b/0x180
[ 1210.086886]  ? lock_acquire+0x197/0x470
[ 1210.087290]  ? find_held_lock+0x2c/0x110
[ 1210.087685]  ? lock_acquire+0x197/0x470
[ 1210.088020]  ? find_held_lock+0x2c/0x110
[ 1210.088418]  ? sock_has_perm+0x1ea/0x280
[ 1210.088827]  ? __import_iovec+0x458/0x590
[ 1210.089226]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1210.089734]  inet6_sendmsg+0x105/0x140
[ 1210.090064]  ? inet6_compat_ioctl+0x320/0x320
[ 1210.090535]  __sock_sendmsg+0xf2/0x190
[ 1210.090919]  ____sys_sendmsg+0x334/0x870
[ 1210.091334]  ? sock_write_iter+0x3d0/0x3d0
[ 1210.091739]  ? do_recvmmsg+0x6d0/0x6d0
[ 1210.092109]  ? handle_mm_fault+0x9e9/0x3500
[ 1210.092556]  ? __lock_acquire+0x1657/0x5b00
[ 1210.093007]  ? find_held_lock+0x2c/0x110
[ 1210.093455]  ___sys_sendmsg+0xf3/0x170
[ 1210.093886]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1210.094337]  ? vmacache_find+0x55/0x2a0
[ 1210.094745]  ? do_user_addr_fault+0x5b0/0xc60
[ 1210.095184]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1210.095686]  ? exc_page_fault+0xca/0x1a0
[ 1210.096029]  ? trace_hardirqs_on+0x5b/0x180
[ 1210.096438]  ? exc_page_fault+0xca/0x1a0
[ 1210.096831]  ? asm_exc_page_fault+0x1e/0x30
[ 1210.097257]  __sys_sendmmsg+0x195/0x470
[ 1210.097660]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1210.098037]  ? lock_downgrade+0x6d0/0x6d0
[ 1210.098471]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1210.098934]  ? wait_for_completion_io+0x270/0x270
[ 1210.099410]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1210.099855]  ? vfs_write+0x354/0xb10
[ 1210.100218]  ? fput_many+0x2f/0x1a0
[ 1210.100529]  ? ksys_write+0x1a9/0x260
[ 1210.100898]  ? __ia32_sys_read+0xb0/0xb0
[ 1210.101296]  __x64_sys_sendmmsg+0x99/0x100
[ 1210.101724]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1210.102211]  do_syscall_64+0x33/0x40
[ 1210.102561]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1210.103039] RIP: 0033:0x7f09c4bc0b19
[ 1210.103402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1210.107693] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1210.108400] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1210.109041] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1210.109726] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1210.111800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1210.112398] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:17:23 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x10000000)

19:17:23 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:17:23 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x13, r0, 0x10000000)
ftruncate(r0, 0x1)
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x105142, 0x3fd)
fallocate(r1, 0x3, 0x0, 0x8000)

[ 1210.149263] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:17:23 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1210.194309] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:17:37 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xffffff7f)

19:17:37 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:17:37 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:17:37 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 20)

19:17:37 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x12000000)

19:17:37 executing program 6:
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xf8, 0x0, 0x1, 0x5, 0x6, @random="456990021c98"}, 0x14)
r0 = socket$netlink(0x10, 0x3, 0x14)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fcntl$dupfd(r0, 0x406, r0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0x4)
ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000080))
sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000006000000001de453ecabf20e5b4cbc43d79554c69ef710ee955d876aaf0b1dc92a5e725c8f97fb1e3a225470bf3dad8c22f26dbe5d2071be067343b17101bdf942e28dcd6e5ec9a9ee0e0e58cdf585a3d59772408d3a0b008c07000000200000009de0a332bc73b74b5990"], 0x1c}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x6, 0x4)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
readv(r0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/43, 0x2b}], 0x1)

19:17:37 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:17:37 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfffffff6)

[ 1223.941959] FAULT_INJECTION: forcing a failure.
[ 1223.941959] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1223.944816] CPU: 0 PID: 8087 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1223.946415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1223.948486] Call Trace:
[ 1223.949219]  dump_stack+0x107/0x167
[ 1223.950028]  should_fail.cold+0x5/0xa
[ 1223.950919]  _copy_from_user+0x2e/0x1b0
[ 1223.951845]  __copy_msghdr_from_user+0x91/0x4b0
[ 1223.952908]  ? __ia32_sys_shutdown+0x80/0x80
[ 1223.953929]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1223.955270]  ? inet6_sendmsg+0xbd/0x140
[ 1223.956256]  ? inet6_compat_ioctl+0x320/0x320
[ 1223.957348]  ? __sock_sendmsg+0x55/0x190
[ 1223.958363]  sendmsg_copy_msghdr+0xa1/0x160
[ 1223.959485]  ? do_recvmmsg+0x6d0/0x6d0
[ 1223.960489]  ? __lock_acquire+0x1657/0x5b00
[ 1223.961553]  ___sys_sendmsg+0xc6/0x170
[ 1223.962521]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1223.963716]  ? vmacache_find+0x55/0x2a0
[ 1223.964641]  ? lock_acquire+0x197/0x470
[ 1223.965648]  ? find_held_lock+0x2c/0x110
[ 1223.966610]  ? __might_fault+0xd3/0x180
[ 1223.967520]  ? lock_downgrade+0x6d0/0x6d0
[ 1223.968467]  ? asm_exc_page_fault+0x1e/0x30
[ 1223.969485]  __sys_sendmmsg+0x195/0x470
[ 1223.970481]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1223.971483]  ? lock_downgrade+0x6d0/0x6d0
[ 1223.972440]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1223.973572]  ? wait_for_completion_io+0x270/0x270
[ 1223.974668]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1223.975725]  ? vfs_write+0x354/0xb10
[ 1223.976575]  ? fput_many+0x2f/0x1a0
[ 1223.977435]  ? ksys_write+0x1a9/0x260
[ 1223.978305]  ? __ia32_sys_read+0xb0/0xb0
[ 1223.979242]  __x64_sys_sendmmsg+0x99/0x100
[ 1223.980194]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1223.981459]  do_syscall_64+0x33/0x40
[ 1223.982309]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1223.983471] RIP: 0033:0x7f09c4bc0b19
[ 1223.984323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1223.989087] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1223.990837] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1223.992504] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1223.994099] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1223.995751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1223.997396] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:17:37 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x12010000)

19:17:37 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfffffffb)

19:17:37 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1224.057754] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:17:37 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xffffff8b)

[ 1224.136531] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:17:37 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:17:37 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x14000000)

19:17:37 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 21)

19:17:37 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:17:37 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1224.211081] FAULT_INJECTION: forcing a failure.
[ 1224.211081] name failslab, interval 1, probability 0, space 0, times 0
[ 1224.212256] CPU: 0 PID: 8127 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1224.212839] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1224.213542] Call Trace:
[ 1224.213832]  dump_stack+0x107/0x167
[ 1224.214215]  should_fail.cold+0x5/0xa
19:17:37 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000001400))
write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef)
lseek(r0, 0x0, 0x3)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000)
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x2c, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
r4 = syz_io_uring_setup(0x21, &(0x7f0000000340)={0x0, 0x4000000, 0x2, 0x3, 0x1c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
r7 = dup2(r3, 0xffffffffffffffff)
r8 = pidfd_getfd(r7, r2, 0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r8, &(0x7f0000000580)={0x30201, 0x20, 0x2}, &(0x7f00000005c0)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r9}}, 0xff)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r9}}, 0xfffff000)

[ 1224.214566]  ? __alloc_skb+0x6d/0x5b0
[ 1224.214901]  should_failslab+0x5/0x20
[ 1224.215231]  kmem_cache_alloc_node+0x55/0x330
[ 1224.215619]  __alloc_skb+0x6d/0x5b0
[ 1224.215936]  alloc_skb_with_frags+0x92/0x570
[ 1224.216442]  ? find_held_lock+0x2c/0x110
[ 1224.216799]  sock_alloc_send_pskb+0x7af/0x930
[ 1224.217191]  ? sk_alloc+0x350/0x350
[ 1224.217515]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1224.217961]  ? find_held_lock+0x2c/0x110
[ 1224.218311]  ? lock_chain_count+0x20/0x20
[ 1224.218695]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1224.219130]  ? ip6_mtu+0x1bb/0x3d0
[ 1224.219435]  ? lock_downgrade+0x6d0/0x6d0
[ 1224.219791]  ? ip_frag_init+0x350/0x350
[ 1224.220142]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1224.220545]  ? ip6_mtu+0x1e9/0x3d0
[ 1224.220852]  ? ip6_setup_cork+0xfb7/0x1740
[ 1224.221214]  ip6_make_skb+0x2de/0x4e0
[ 1224.221538]  ? ip_frag_init+0x350/0x350
[ 1224.221883]  ? ip_frag_init+0x350/0x350
[ 1224.222226]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1224.222649]  ? ip6_dst_hoplimit+0x199/0x440
[ 1224.223018]  ? lock_downgrade+0x6d0/0x6d0
[ 1224.223391]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1224.223742]  ? ip_frag_init+0x350/0x350
[ 1224.224089]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1224.224531]  ? trace_hardirqs_on+0x5b/0x180
[ 1224.224909]  ? lock_acquire+0x197/0x470
[ 1224.225248]  ? find_held_lock+0x2c/0x110
[ 1224.225604]  ? lock_acquire+0x197/0x470
[ 1224.225941]  ? find_held_lock+0x2c/0x110
[ 1224.226296]  ? sock_has_perm+0x1ea/0x280
[ 1224.226680]  ? __import_iovec+0x458/0x590
[ 1224.227036]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1224.227480]  inet6_sendmsg+0x105/0x140
[ 1224.227815]  ? inet6_compat_ioctl+0x320/0x320
[ 1224.228199]  __sock_sendmsg+0xf2/0x190
[ 1224.228533]  ____sys_sendmsg+0x334/0x870
[ 1224.228882]  ? sock_write_iter+0x3d0/0x3d0
[ 1224.229243]  ? do_recvmmsg+0x6d0/0x6d0
[ 1224.229578]  ? __lock_acquire+0x1657/0x5b00
[ 1224.229952]  ___sys_sendmsg+0xf3/0x170
[ 1224.230288]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1224.230692]  ? vmacache_find+0x55/0x2a0
[ 1224.231039]  ? lock_acquire+0x197/0x470
[ 1224.231378]  ? find_held_lock+0x2c/0x110
[ 1224.231728]  ? __might_fault+0xd3/0x180
[ 1224.232067]  ? lock_downgrade+0x6d0/0x6d0
[ 1224.232423]  ? asm_exc_page_fault+0x1e/0x30
[ 1224.232802]  __sys_sendmmsg+0x195/0x470
[ 1224.233146]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1224.233515]  ? lock_downgrade+0x6d0/0x6d0
[ 1224.233881]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1224.234296]  ? wait_for_completion_io+0x270/0x270
[ 1224.234728]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1224.235124]  ? vfs_write+0x354/0xb10
[ 1224.235446]  ? fput_many+0x2f/0x1a0
[ 1224.235757]  ? ksys_write+0x1a9/0x260
[ 1224.236082]  ? __ia32_sys_read+0xb0/0xb0
[ 1224.236434]  __x64_sys_sendmmsg+0x99/0x100
[ 1224.236794]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1224.237231]  do_syscall_64+0x33/0x40
[ 1224.237548]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1224.237982] RIP: 0033:0x7f09c4bc0b19
[ 1224.238302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1224.239872] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1224.240520] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1224.241561] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1224.242827] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1224.243425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1224.244102] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:17:37 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xffffff8c)

19:17:37 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfffffffe)

19:17:37 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:17:37 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:17:37 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[ 1224.375253] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1224.380761] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[ 1224.418595] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1224.479133] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
19:17:51 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:17:51 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x18000000)

19:17:51 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000001400))
write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef)
lseek(r0, 0x0, 0x3)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000)
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x2c, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
r4 = syz_io_uring_setup(0x21, &(0x7f0000000340)={0x0, 0x4000000, 0x2, 0x3, 0x1c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
r7 = dup2(r3, 0xffffffffffffffff)
r8 = pidfd_getfd(r7, r2, 0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r8, &(0x7f0000000580)={0x30201, 0x20, 0x2}, &(0x7f00000005c0)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r9}}, 0xff)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r9}}, 0xfffff000)

19:17:51 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 22)

19:17:51 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xffffffa1)

19:17:51 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x80000000000)

19:17:51 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:17:51 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1238.487957] FAULT_INJECTION: forcing a failure.
[ 1238.487957] name failslab, interval 1, probability 0, space 0, times 0
[ 1238.489013] CPU: 0 PID: 8174 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1238.489595] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1238.490298] Call Trace:
[ 1238.490534]  dump_stack+0x107/0x167
[ 1238.490904]  should_fail.cold+0x5/0xa
[ 1238.491235]  ? create_object.isra.0+0x3a/0xa20
[ 1238.491631]  should_failslab+0x5/0x20
[ 1238.491957]  kmem_cache_alloc+0x5b/0x310
[ 1238.492311]  create_object.isra.0+0x3a/0xa20
[ 1238.492688]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1238.493121]  kmem_cache_alloc_node+0x169/0x330
[ 1238.493517]  __alloc_skb+0x6d/0x5b0
[ 1238.493834]  alloc_skb_with_frags+0x92/0x570
[ 1238.494212]  ? find_held_lock+0x2c/0x110
[ 1238.494566]  sock_alloc_send_pskb+0x7af/0x930
[ 1238.494972]  ? sk_alloc+0x350/0x350
[ 1238.495290]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1238.495737]  ? find_held_lock+0x2c/0x110
[ 1238.496083]  ? lock_chain_count+0x20/0x20
[ 1238.496448]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1238.496880]  ? ip6_mtu+0x1bb/0x3d0
[ 1238.497187]  ? lock_downgrade+0x6d0/0x6d0
[ 1238.497540]  ? ip_frag_init+0x350/0x350
[ 1238.497889]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1238.498288]  ? ip6_mtu+0x1e9/0x3d0
[ 1238.498595]  ? ip6_setup_cork+0xfb7/0x1740
[ 1238.498977]  ip6_make_skb+0x2de/0x4e0
[ 1238.499303]  ? ip_frag_init+0x350/0x350
[ 1238.499648]  ? ip_frag_init+0x350/0x350
[ 1238.499987]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1238.500403]  ? ip6_dst_hoplimit+0x199/0x440
[ 1238.500770]  ? lock_downgrade+0x6d0/0x6d0
[ 1238.501133]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1238.501485]  ? ip_frag_init+0x350/0x350
[ 1238.501831]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1238.502272]  ? trace_hardirqs_on+0x5b/0x180
[ 1238.502650]  ? lock_acquire+0x197/0x470
[ 1238.502999]  ? find_held_lock+0x2c/0x110
[ 1238.503353]  ? lock_acquire+0x197/0x470
[ 1238.503693]  ? find_held_lock+0x2c/0x110
[ 1238.504048]  ? sock_has_perm+0x1ea/0x280
[ 1238.504412]  ? __import_iovec+0x458/0x590
[ 1238.504766]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1238.505206]  inet6_sendmsg+0x105/0x140
[ 1238.505541]  ? inet6_compat_ioctl+0x320/0x320
[ 1238.505924]  __sock_sendmsg+0xf2/0x190
[ 1238.506258]  ____sys_sendmsg+0x334/0x870
[ 1238.506606]  ? sock_write_iter+0x3d0/0x3d0
[ 1238.506981]  ? do_recvmmsg+0x6d0/0x6d0
[ 1238.507321]  ? __lock_acquire+0x1657/0x5b00
[ 1238.507696]  ___sys_sendmsg+0xf3/0x170
[ 1238.508031]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1238.508420]  ? vmacache_find+0x55/0x2a0
[ 1238.508767]  ? lock_acquire+0x197/0x470
[ 1238.509106]  ? find_held_lock+0x2c/0x110
[ 1238.509458]  ? __might_fault+0xd3/0x180
[ 1238.509797]  ? lock_downgrade+0x6d0/0x6d0
[ 1238.510152]  ? asm_exc_page_fault+0x1e/0x30
[ 1238.510536]  __sys_sendmmsg+0x195/0x470
[ 1238.510899]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1238.511271]  ? lock_downgrade+0x6d0/0x6d0
[ 1238.511637]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1238.512073]  ? wait_for_completion_io+0x270/0x270
[ 1238.512520]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1238.512915]  ? vfs_write+0x354/0xb10
[ 1238.513232]  ? fput_many+0x2f/0x1a0
[ 1238.513573]  ? ksys_write+0x1a9/0x260
[ 1238.513898]  ? __ia32_sys_read+0xb0/0xb0
[ 1238.514261]  __x64_sys_sendmmsg+0x99/0x100
[ 1238.514622]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1238.515079]  do_syscall_64+0x33/0x40
[ 1238.515401]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1238.515834] RIP: 0033:0x7f09c4bc0b19
[ 1238.516152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1238.517704] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1238.518353] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1238.518972] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1238.519577] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1238.520173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1238.520776] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
[ 1238.539558] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:17:51 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1000000000000)

19:17:51 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfffffff6)

[ 1238.575387] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[ 1238.626106] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
19:18:05 executing program 6:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r2, 0x6)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'})
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r4, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000080)=0xfffff801)
fcntl$dupfd(r1, 0x406, 0xffffffffffffffff)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8)
unshare(0x48020200)

19:18:05 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:18:05 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8000000000000)

19:18:05 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1f870000)

19:18:05 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:18:05 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfffffffb)

19:18:05 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 23)

19:18:05 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1252.189998] FAULT_INJECTION: forcing a failure.
[ 1252.189998] name failslab, interval 1, probability 0, space 0, times 0
[ 1252.191272] CPU: 1 PID: 8215 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1252.191864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1252.192579] Call Trace:
[ 1252.192819]  dump_stack+0x107/0x167
[ 1252.193143]  should_fail.cold+0x5/0xa
[ 1252.193509]  should_failslab+0x5/0x20
[ 1252.193850]  __kmalloc_node_track_caller+0x74/0x3b0
[ 1252.194310]  ? alloc_skb_with_frags+0x92/0x570
[ 1252.194727]  __alloc_skb+0xb1/0x5b0
[ 1252.195079]  alloc_skb_with_frags+0x92/0x570
[ 1252.195474]  ? find_held_lock+0x2c/0x110
[ 1252.195839]  sock_alloc_send_pskb+0x7af/0x930
[ 1252.196244]  ? sk_alloc+0x350/0x350
[ 1252.196572]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1252.197024]  ? find_held_lock+0x2c/0x110
[ 1252.197387]  ? lock_chain_count+0x20/0x20
[ 1252.197764]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1252.198214]  ? ip6_mtu+0x1bb/0x3d0
[ 1252.198529]  ? lock_downgrade+0x6d0/0x6d0
[ 1252.198912]  ? ip_frag_init+0x350/0x350
[ 1252.199286]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1252.199713]  ? ip6_mtu+0x1e9/0x3d0
[ 1252.200028]  ? ip6_setup_cork+0xfb7/0x1740
[ 1252.200403]  ip6_make_skb+0x2de/0x4e0
[ 1252.200739]  ? ip_frag_init+0x350/0x350
[ 1252.201092]  ? ip_frag_init+0x350/0x350
[ 1252.201445]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1252.201869]  ? ip6_dst_hoplimit+0x199/0x440
[ 1252.202251]  ? lock_downgrade+0x6d0/0x6d0
[ 1252.202629]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1252.203014]  ? ip_frag_init+0x350/0x350
[ 1252.203372]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1252.203822]  ? trace_hardirqs_on+0x5b/0x180
[ 1252.204206]  ? lock_acquire+0x197/0x470
[ 1252.204555]  ? find_held_lock+0x2c/0x110
[ 1252.204919]  ? lock_acquire+0x197/0x470
[ 1252.205268]  ? find_held_lock+0x2c/0x110
[ 1252.205636]  ? sock_has_perm+0x1ea/0x280
[ 1252.206011]  ? __import_iovec+0x458/0x590
[ 1252.206378]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1252.206841]  inet6_sendmsg+0x105/0x140
[ 1252.207192]  ? inet6_compat_ioctl+0x320/0x320
[ 1252.207586]  __sock_sendmsg+0xf2/0x190
[ 1252.207932]  ____sys_sendmsg+0x334/0x870
[ 1252.208296]  ? sock_write_iter+0x3d0/0x3d0
[ 1252.208667]  ? do_recvmmsg+0x6d0/0x6d0
[ 1252.209014]  ? __lock_acquire+0x1657/0x5b00
[ 1252.209406]  ___sys_sendmsg+0xf3/0x170
[ 1252.209756]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1252.210156]  ? vmacache_find+0x55/0x2a0
[ 1252.210519]  ? lock_acquire+0x197/0x470
[ 1252.210888]  ? find_held_lock+0x2c/0x110
[ 1252.211258]  ? __might_fault+0xd3/0x180
[ 1252.211609]  ? lock_downgrade+0x6d0/0x6d0
[ 1252.211974]  ? asm_exc_page_fault+0x1e/0x30
[ 1252.212372]  __sys_sendmmsg+0x195/0x470
[ 1252.212727]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1252.213108]  ? lock_downgrade+0x6d0/0x6d0
[ 1252.213494]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1252.213918]  ? wait_for_completion_io+0x270/0x270
[ 1252.214349]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1252.214757]  ? vfs_write+0x354/0xb10
[ 1252.215110]  ? fput_many+0x2f/0x1a0
[ 1252.215435]  ? ksys_write+0x1a9/0x260
[ 1252.215773]  ? __ia32_sys_read+0xb0/0xb0
[ 1252.216135]  __x64_sys_sendmmsg+0x99/0x100
[ 1252.216511]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1252.216965]  do_syscall_64+0x33/0x40
[ 1252.217297]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1252.217744] RIP: 0033:0x7f09c4bc0b19
[ 1252.218073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1252.219672] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1252.220346] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1252.220960] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1252.221581] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1252.222199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1252.222835] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
[ 1252.241908] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:18:05 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x20000000000000)

19:18:05 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x20000000)

19:18:05 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfffffffe)

[ 1252.271791] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:18:05 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x80000000000)

19:18:05 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x21030000)

19:18:05 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 24)

19:18:05 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x0, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:18:05 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1252.406145] FAULT_INJECTION: forcing a failure.
[ 1252.406145] name failslab, interval 1, probability 0, space 0, times 0
[ 1252.407762] CPU: 1 PID: 8241 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1252.408365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1252.409084] Call Trace:
[ 1252.409332]  dump_stack+0x107/0x167
[ 1252.409658]  should_fail.cold+0x5/0xa
[ 1252.410002]  ? create_object.isra.0+0x3a/0xa20
[ 1252.410415]  should_failslab+0x5/0x20
[ 1252.410756]  kmem_cache_alloc+0x5b/0x310
[ 1252.411142]  create_object.isra.0+0x3a/0xa20
[ 1252.411533]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1252.411985]  __kmalloc_node_track_caller+0x1a6/0x3b0
[ 1252.412434]  ? alloc_skb_with_frags+0x92/0x570
[ 1252.412841]  __alloc_skb+0xb1/0x5b0
[ 1252.413170]  alloc_skb_with_frags+0x92/0x570
[ 1252.413560]  ? find_held_lock+0x2c/0x110
[ 1252.413924]  sock_alloc_send_pskb+0x7af/0x930
[ 1252.414331]  ? sk_alloc+0x350/0x350
[ 1252.414663]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1252.415141]  ? find_held_lock+0x2c/0x110
[ 1252.415502]  ? lock_chain_count+0x20/0x20
[ 1252.415877]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1252.416326]  ? ip6_mtu+0x1bb/0x3d0
[ 1252.416642]  ? lock_downgrade+0x6d0/0x6d0
[ 1252.417012]  ? ip_frag_init+0x350/0x350
[ 1252.417378]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1252.417786]  ? ip6_mtu+0x1e9/0x3d0
[ 1252.418105]  ? ip6_setup_cork+0xfb7/0x1740
[ 1252.418485]  ip6_make_skb+0x2de/0x4e0
[ 1252.418835]  ? ip_frag_init+0x350/0x350
[ 1252.419205]  ? ip_frag_init+0x350/0x350
[ 1252.419560]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1252.419981]  ? ip6_dst_hoplimit+0x199/0x440
[ 1252.420367]  ? lock_downgrade+0x6d0/0x6d0
[ 1252.420746]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1252.421107]  ? ip_frag_init+0x350/0x350
[ 1252.421471]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1252.421932]  ? find_held_lock+0x2c/0x110
[ 1252.422299]  ? lock_acquire+0x197/0x470
[ 1252.422649]  ? find_held_lock+0x2c/0x110
[ 1252.423038]  ? sock_has_perm+0x1ea/0x280
[ 1252.423417]  ? __import_iovec+0x458/0x590
[ 1252.423784]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1252.424239]  inet6_sendmsg+0x105/0x140
[ 1252.424586]  ? inet6_compat_ioctl+0x320/0x320
[ 1252.424984]  __sock_sendmsg+0xf2/0x190
[ 1252.425333]  ____sys_sendmsg+0x334/0x870
[ 1252.425693]  ? sock_write_iter+0x3d0/0x3d0
[ 1252.426067]  ? do_recvmmsg+0x6d0/0x6d0
[ 1252.426420]  ? __lock_acquire+0x1657/0x5b00
[ 1252.426817]  ___sys_sendmsg+0xf3/0x170
[ 1252.427179]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1252.427581]  ? vmacache_find+0x55/0x2a0
[ 1252.427941]  ? lock_acquire+0x197/0x470
[ 1252.428296]  ? find_held_lock+0x2c/0x110
[ 1252.428658]  ? __might_fault+0xd3/0x180
[ 1252.429010]  ? lock_downgrade+0x6d0/0x6d0
[ 1252.429381]  ? asm_exc_page_fault+0x1e/0x30
[ 1252.429776]  __sys_sendmmsg+0x195/0x470
[ 1252.430132]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1252.430518]  ? lock_downgrade+0x6d0/0x6d0
[ 1252.430917]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1252.431351]  ? wait_for_completion_io+0x270/0x270
[ 1252.431777]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1252.432187]  ? vfs_write+0x354/0xb10
[ 1252.432521]  ? fput_many+0x2f/0x1a0
[ 1252.432846]  ? ksys_write+0x1a9/0x260
[ 1252.433187]  ? __ia32_sys_read+0xb0/0xb0
[ 1252.433554]  __x64_sys_sendmmsg+0x99/0x100
[ 1252.433927]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1252.434378]  do_syscall_64+0x33/0x40
[ 1252.434710]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1252.435177] RIP: 0033:0x7f09c4bc0b19
[ 1252.435508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1252.437093] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1252.437763] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1252.438382] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1252.439025] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1252.439647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1252.440266] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:18:19 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x24000000)

19:18:19 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 25)

[ 1266.281768] FAULT_INJECTION: forcing a failure.
[ 1266.281768] name failslab, interval 1, probability 0, space 0, times 0
[ 1266.282857] CPU: 0 PID: 8256 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1266.283438] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1266.285896] Call Trace:
[ 1266.286128]  dump_stack+0x107/0x167
[ 1266.286435]  should_fail.cold+0x5/0xa
[ 1266.286840]  ? create_object.isra.0+0x3a/0xa20
[ 1266.287241]  should_failslab+0x5/0x20
[ 1266.287563]  kmem_cache_alloc+0x5b/0x310
[ 1266.287962]  create_object.isra.0+0x3a/0xa20
[ 1266.288333]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1266.288818]  __kmalloc_node_track_caller+0x1a6/0x3b0
[ 1266.289245]  ? alloc_skb_with_frags+0x92/0x570
[ 1266.289676]  __alloc_skb+0xb1/0x5b0
[ 1266.289994]  alloc_skb_with_frags+0x92/0x570
[ 1266.290363]  ? find_held_lock+0x2c/0x110
[ 1266.290788]  sock_alloc_send_pskb+0x7af/0x930
[ 1266.291188]  ? sk_alloc+0x350/0x350
[ 1266.291501]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1266.291987]  ? find_held_lock+0x2c/0x110
[ 1266.292332]  ? lock_chain_count+0x20/0x20
[ 1266.292689]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1266.293117]  ? ip6_mtu+0x1bb/0x3d0
[ 1266.293415]  ? lock_downgrade+0x6d0/0x6d0
[ 1266.293761]  ? ip_frag_init+0x350/0x350
[ 1266.294108]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1266.294497]  ? ip6_mtu+0x1e9/0x3d0
[ 1266.294801]  ? ip6_setup_cork+0xfb7/0x1740
[ 1266.295173]  ip6_make_skb+0x2de/0x4e0
[ 1266.295493]  ? ip_frag_init+0x350/0x350
[ 1266.295831]  ? ip_frag_init+0x350/0x350
[ 1266.296167]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1266.296571]  ? ip6_dst_hoplimit+0x199/0x440
[ 1266.296933]  ? lock_downgrade+0x6d0/0x6d0
[ 1266.297295]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1266.297640]  ? ip_frag_init+0x350/0x350
[ 1266.297986]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1266.298422]  ? trace_hardirqs_on+0x5b/0x180
[ 1266.298788]  ? lock_acquire+0x197/0x470
[ 1266.299131]  ? find_held_lock+0x2c/0x110
[ 1266.299483]  ? lock_acquire+0x197/0x470
[ 1266.299816]  ? find_held_lock+0x2c/0x110
[ 1266.300168]  ? sock_has_perm+0x1ea/0x280
[ 1266.300526]  ? __import_iovec+0x458/0x590
[ 1266.300876]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1266.301311]  inet6_sendmsg+0x105/0x140
[ 1266.301643]  ? inet6_compat_ioctl+0x320/0x320
[ 1266.302018]  __sock_sendmsg+0xf2/0x190
[ 1266.302346]  ____sys_sendmsg+0x334/0x870
[ 1266.302692]  ? sock_write_iter+0x3d0/0x3d0
[ 1266.303056]  ? do_recvmmsg+0x6d0/0x6d0
[ 1266.303385]  ? __lock_acquire+0x1657/0x5b00
[ 1266.303762]  ___sys_sendmsg+0xf3/0x170
[ 1266.304094]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1266.304477]  ? vmacache_find+0x55/0x2a0
[ 1266.304822]  ? lock_acquire+0x197/0x470
[ 1266.305156]  ? find_held_lock+0x2c/0x110
[ 1266.305501]  ? __might_fault+0xd3/0x180
[ 1266.305847]  ? lock_downgrade+0x6d0/0x6d0
[ 1266.306197]  ? asm_exc_page_fault+0x1e/0x30
[ 1266.306570]  __sys_sendmmsg+0x195/0x470
[ 1266.306913]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1266.311311]  ? lock_downgrade+0x6d0/0x6d0
[ 1266.311672]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1266.312080]  ? wait_for_completion_io+0x270/0x270
[ 1266.312491]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1266.312886]  ? vfs_write+0x354/0xb10
[ 1266.313203]  ? fput_many+0x2f/0x1a0
[ 1266.313509]  ? ksys_write+0x1a9/0x260
[ 1266.313828]  ? __ia32_sys_read+0xb0/0xb0
[ 1266.314173]  __x64_sys_sendmmsg+0x99/0x100
[ 1266.314529]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1266.314955]  do_syscall_64+0x33/0x40
[ 1266.315285]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1266.315710] RIP: 0033:0x7f09c4bc0b19
[ 1266.316024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1266.317557] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1266.318193] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1266.318786] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1266.319383] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1266.319980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1266.320578] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:18:19 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:18:19 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1000000000000)

19:18:19 executing program 6:
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000001, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x3)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_setup(0x405e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfb}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0xa, &(0x7f00000005c0)={0x77359400}, 0x1, 0x0, 0x1}, 0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r5, &(0x7f0000000440)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x7, 0x3, &(0x7f0000000400)="25e06e12e01ec66287a178eb2a7bcb3f658da7486b0254377a54820d959f94a0c2ac21815fd8a6ffbacac7ce214c93385538365a89ba371c9e2e7a36", 0x8, 0x0, 0x0, {0x0, r6}}, 0xffff2735)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
dup3(r3, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x200001, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x98fc52aca65e1ccb}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES64=r4], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4001)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x7ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0xb3}, 0x1c)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000, 0x1}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r8, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

19:18:19 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x80000000000000)

19:18:19 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:18:19 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x0, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:18:19 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xf0ffffffffffff)

19:18:19 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x3f000000)

[ 1266.370369] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1266.377672] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:18:19 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8000000000000)

19:18:19 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:18:19 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x80040000)

19:18:19 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x20000000000000)

19:18:19 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x0, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:18:19 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x100000000000000)

19:18:19 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1266.542830] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1266.576826] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[ 1280.205943] FAULT_INJECTION: forcing a failure.
[ 1280.205943] name failslab, interval 1, probability 0, space 0, times 0
[ 1280.209266] CPU: 0 PID: 8323 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1280.210913] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1280.212838] Call Trace:
[ 1280.213587]  dump_stack+0x107/0x167
[ 1280.214421]  should_fail.cold+0x5/0xa
[ 1280.215297]  ? create_object.isra.0+0x3a/0xa20
[ 1280.216345]  should_failslab+0x5/0x20
[ 1280.217215]  kmem_cache_alloc+0x5b/0x310
[ 1280.218190]  ? lock_acquire+0x197/0x470
[ 1280.219091]  create_object.isra.0+0x3a/0xa20
[ 1280.220096]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1280.221261]  kmem_cache_alloc+0x159/0x310
[ 1280.222219]  skb_clone+0x14f/0x3d0
[ 1280.223024]  dev_queue_xmit_nit+0x3a7/0xb00
[ 1280.224008]  dev_hard_start_xmit+0xab/0x6f0
[ 1280.224977]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1280.226176]  __dev_queue_xmit+0x17ec/0x2710
[ 1280.227176]  ? find_held_lock+0x2c/0x110
[ 1280.228104]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1280.229153]  ? lock_downgrade+0x6d0/0x6d0
[ 1280.230102]  ? lock_acquire+0x197/0x470
[ 1280.231007]  ? ip6_finish_output2+0x203/0x1fe0
[ 1280.232068]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1280.233279]  neigh_connected_output+0x382/0x4d0
[ 1280.234343]  ip6_finish_output2+0xaaf/0x1fe0
[ 1280.235365]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1280.236504]  ip6_output+0x3b8/0x7e0
[ 1280.237337]  ip6_local_out+0xb4/0x1a0
[ 1280.238186]  ip6_send_skb+0xb7/0x350
[ 1280.239029]  udp_v6_send_skb+0x7aa/0x15b0
[ 1280.239981]  udpv6_sendmsg+0x2116/0x2ad0
[ 1280.240894]  ? ip_frag_init+0x350/0x350
[ 1280.241784]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1280.242953]  ? trace_hardirqs_on+0x5b/0x180
[ 1280.243934]  ? lock_acquire+0x197/0x470
[ 1280.244834]  ? find_held_lock+0x2c/0x110
[ 1280.245759]  ? lock_acquire+0x197/0x470
[ 1280.246657]  ? find_held_lock+0x2c/0x110
[ 1280.247595]  ? sock_has_perm+0x1ea/0x280
[ 1280.248517]  ? __import_iovec+0x458/0x590
[ 1280.249444]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1280.250604]  inet6_sendmsg+0x105/0x140
[ 1280.251483]  ? inet6_compat_ioctl+0x320/0x320
[ 1280.252498]  __sock_sendmsg+0xf2/0x190
[ 1280.253377]  ____sys_sendmsg+0x334/0x870
[ 1280.254295]  ? sock_write_iter+0x3d0/0x3d0
[ 1280.255267]  ? do_recvmmsg+0x6d0/0x6d0
[ 1280.256157]  ? __lock_acquire+0x1657/0x5b00
[ 1280.257120]  ___sys_sendmsg+0xf3/0x170
[ 1280.258001]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1280.259036]  ? vmacache_find+0x55/0x2a0
[ 1280.259968]  ? lock_acquire+0x197/0x470
[ 1280.260864]  ? find_held_lock+0x2c/0x110
[ 1280.261770]  ? __might_fault+0xd3/0x180
[ 1280.262670]  ? lock_downgrade+0x6d0/0x6d0
[ 1280.263601]  ? asm_exc_page_fault+0x1e/0x30
[ 1280.264579]  __sys_sendmmsg+0x195/0x470
[ 1280.265475]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1280.266438]  ? lock_downgrade+0x6d0/0x6d0
[ 1280.267401]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1280.268475]  ? wait_for_completion_io+0x270/0x270
[ 1280.269556]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1280.270589]  ? vfs_write+0x354/0xb10
[ 1280.271442]  ? fput_many+0x2f/0x1a0
[ 1280.272279]  ? ksys_write+0x1a9/0x260
[ 1280.273141]  ? __ia32_sys_read+0xb0/0xb0
[ 1280.274058]  __x64_sys_sendmmsg+0x99/0x100
[ 1280.274996]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1280.276168]  do_syscall_64+0x33/0x40
[ 1280.277010]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1280.278163] RIP: 0033:0x7f09c4bc0b19
[ 1280.279004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1280.283225] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1280.284933] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1280.286533] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1280.288146] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1280.289747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1280.291363] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:18:33 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x81020000)

19:18:33 executing program 6:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x100000000000000)

19:18:33 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:18:33 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x80000000000000)

19:18:33 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 26)

19:18:33 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:18:33 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x200000000000000)

19:18:33 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:18:33 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8bffffff)

[ 1280.330362] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:18:33 executing program 6:
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
sigaltstack(&(0x7f0000ff9000/0x3000)=nil, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3)
sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80)
r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x8800000)
mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000)

19:18:33 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 27)

19:18:33 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xf0ffffffffffff)

19:18:33 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x201000000000000)

19:18:33 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8cffffff)

[ 1280.405725] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:18:33 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1280.439940] FAULT_INJECTION: forcing a failure.
[ 1280.439940] name failslab, interval 1, probability 0, space 0, times 0
[ 1280.442799] CPU: 1 PID: 8345 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1280.444480] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1280.446626] Call Trace:
[ 1280.447248]  dump_stack+0x107/0x167
[ 1280.448133]  should_fail.cold+0x5/0xa
[ 1280.449072]  ? lock_downgrade+0x6d0/0x6d0
[ 1280.450104]  ? skb_clone+0x14f/0x3d0
[ 1280.451021]  should_failslab+0x5/0x20
[ 1280.451960]  kmem_cache_alloc+0x5b/0x310
[ 1280.452941]  skb_clone+0x14f/0x3d0
[ 1280.453828]  packet_rcv+0x558/0x1410
[ 1280.454758]  ? run_filter+0x4d0/0x4d0
[ 1280.455692]  dev_queue_xmit_nit+0x38b/0xb00
[ 1280.456745]  dev_hard_start_xmit+0xab/0x6f0
[ 1280.457803]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1280.459090]  __dev_queue_xmit+0x17ec/0x2710
[ 1280.460162]  ? find_held_lock+0x2c/0x110
[ 1280.461152]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1280.462251]  ? lock_downgrade+0x6d0/0x6d0
[ 1280.463272]  ? lock_acquire+0x197/0x470
[ 1280.464256]  ? ip6_finish_output2+0x203/0x1fe0
[ 1280.465397]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1280.466677]  neigh_connected_output+0x382/0x4d0
[ 1280.467824]  ip6_finish_output2+0xaaf/0x1fe0
[ 1280.468929]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1280.470129]  ip6_output+0x3b8/0x7e0
[ 1280.471022]  ip6_local_out+0xb4/0x1a0
[ 1280.471969]  ip6_send_skb+0xb7/0x350
[ 1280.472877]  udp_v6_send_skb+0x7aa/0x15b0
[ 1280.473916]  udpv6_sendmsg+0x2116/0x2ad0
[ 1280.474905]  ? ip_frag_init+0x350/0x350
[ 1280.475885]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1280.477149]  ? mark_held_locks+0x9e/0xe0
[ 1280.478131]  ? find_held_lock+0x2c/0x110
[ 1280.479144]  ? lock_acquire+0x197/0x470
[ 1280.480119]  ? find_held_lock+0x2c/0x110
[ 1280.481115]  ? sock_has_perm+0x1ea/0x280
[ 1280.482118]  ? __import_iovec+0x458/0x590
[ 1280.483140]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1280.484441]  inet6_sendmsg+0x105/0x140
[ 1280.485351]  ? inet6_compat_ioctl+0x320/0x320
[ 1280.486473]  __sock_sendmsg+0xf2/0x190
[ 1280.487430]  ____sys_sendmsg+0x334/0x870
[ 1280.488421]  ? sock_write_iter+0x3d0/0x3d0
[ 1280.489442]  ? do_recvmmsg+0x6d0/0x6d0
[ 1280.490343]  ? __lock_acquire+0x1657/0x5b00
[ 1280.491426]  ___sys_sendmsg+0xf3/0x170
[ 1280.492350]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1280.493553]  ? vmacache_find+0x55/0x2a0
[ 1280.494543]  ? lock_acquire+0x197/0x470
[ 1280.495544]  ? find_held_lock+0x2c/0x110
[ 1280.496576]  ? __might_fault+0xd3/0x180
[ 1280.497557]  ? lock_downgrade+0x6d0/0x6d0
[ 1280.498582]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1280.499934]  __sys_sendmmsg+0x195/0x470
[ 1280.500925]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1280.502026]  ? lock_downgrade+0x6d0/0x6d0
[ 1280.503065]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1280.504282]  ? wait_for_completion_io+0x270/0x270
[ 1280.505520]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1280.506701]  ? vfs_write+0x354/0xb10
[ 1280.507639]  ? fput_many+0x2f/0x1a0
[ 1280.508554]  ? ksys_write+0x1a9/0x260
[ 1280.509509]  ? __ia32_sys_read+0xb0/0xb0
[ 1280.510530]  __x64_sys_sendmmsg+0x99/0x100
[ 1280.511610]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1280.512875]  do_syscall_64+0x33/0x40
[ 1280.513816]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1280.515074] RIP: 0033:0x7f09c4bc0b19
[ 1280.516036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1280.523897] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1280.527920] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1280.529915] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1280.531712] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1280.533520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1280.535272] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:18:33 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:18:47 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:18:47 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:18:47 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:18:47 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x300000000000000)

[ 1294.514633] FAULT_INJECTION: forcing a failure.
19:18:47 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xa1ffffff)

19:18:47 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x0, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:18:47 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 28)

19:18:47 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x100000000000000)

19:18:47 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x400000000000000)

[ 1294.514633] name failslab, interval 1, probability 0, space 0, times 0
[ 1294.519761] CPU: 0 PID: 8381 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1294.520303] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1294.520955] Call Trace:
[ 1294.521174]  dump_stack+0x107/0x167
[ 1294.521468]  should_fail.cold+0x5/0xa
[ 1294.521778]  ? create_object.isra.0+0x3a/0xa20
[ 1294.522144]  should_failslab+0x5/0x20
[ 1294.522451]  kmem_cache_alloc+0x5b/0x310
[ 1294.522779]  create_object.isra.0+0x3a/0xa20
[ 1294.523131]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1294.523553]  kmem_cache_alloc+0x159/0x310
[ 1294.523892]  skb_clone+0x14f/0x3d0
[ 1294.524182]  packet_rcv+0x558/0x1410
[ 1294.524487]  ? run_filter+0x4d0/0x4d0
[ 1294.524792]  dev_queue_xmit_nit+0x38b/0xb00
[ 1294.525143]  dev_hard_start_xmit+0xab/0x6f0
[ 1294.525490]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1294.525911]  __dev_queue_xmit+0x17ec/0x2710
[ 1294.526261]  ? find_held_lock+0x2c/0x110
[ 1294.526586]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1294.526954]  ? lock_downgrade+0x6d0/0x6d0
[ 1294.527284]  ? lock_acquire+0x197/0x470
[ 1294.527618]  ? ip6_finish_output2+0x203/0x1fe0
[ 1294.527987]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1294.528410]  neigh_connected_output+0x382/0x4d0
[ 1294.528792]  ip6_finish_output2+0xaaf/0x1fe0
[ 1294.529153]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1294.529554]  ip6_output+0x3b8/0x7e0
[ 1294.529851]  ip6_local_out+0xb4/0x1a0
[ 1294.530159]  ip6_send_skb+0xb7/0x350
[ 1294.530462]  udp_v6_send_skb+0x7aa/0x15b0
[ 1294.530803]  udpv6_sendmsg+0x2116/0x2ad0
[ 1294.531130]  ? ip_frag_init+0x350/0x350
[ 1294.531467]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1294.531884]  ? lock_acquire+0x197/0x470
[ 1294.532202]  ? find_held_lock+0x2c/0x110
[ 1294.532533]  ? lock_acquire+0x197/0x470
[ 1294.532851]  ? find_held_lock+0x2c/0x110
[ 1294.533186]  ? sock_has_perm+0x1ea/0x280
[ 1294.533531]  ? __import_iovec+0x458/0x590
[ 1294.533863]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1294.534278]  inet6_sendmsg+0x105/0x140
[ 1294.534591]  ? inet6_compat_ioctl+0x320/0x320
[ 1294.534949]  __sock_sendmsg+0xf2/0x190
[ 1294.535261]  ____sys_sendmsg+0x334/0x870
[ 1294.535602]  ? sock_write_iter+0x3d0/0x3d0
[ 1294.535937]  ? do_recvmmsg+0x6d0/0x6d0
[ 1294.536252]  ? __lock_acquire+0x1657/0x5b00
[ 1294.536604]  ___sys_sendmsg+0xf3/0x170
[ 1294.536917]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1294.537279]  ? vmacache_find+0x55/0x2a0
[ 1294.537606]  ? lock_acquire+0x197/0x470
[ 1294.537923]  ? find_held_lock+0x2c/0x110
[ 1294.538252]  ? __might_fault+0xd3/0x180
[ 1294.538570]  ? lock_downgrade+0x6d0/0x6d0
[ 1294.538900]  ? asm_exc_page_fault+0x1e/0x30
[ 1294.539257]  __sys_sendmmsg+0x195/0x470
[ 1294.539593]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1294.539954]  ? setup_APIC_eilvt+0x2f0/0x2f0
[ 1294.540299]  ? clockevents_program_event+0x131/0x360
[ 1294.540706]  ? tick_program_event+0xa8/0x140
[ 1294.541060]  ? hrtimer_interrupt+0x771/0x9b0
[ 1294.541426]  __x64_sys_sendmmsg+0x99/0x100
[ 1294.541765]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1294.542177]  do_syscall_64+0x33/0x40
[ 1294.542476]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1294.542880] RIP: 0033:0x7f09c4bc0b19
[ 1294.543178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1294.548630] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1294.549228] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1294.549786] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1294.550343] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1294.550900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1294.551474] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:18:47 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x200000000000000)

[ 1294.590221] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:18:47 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xf6ffffff)

19:18:47 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x500000000000000)

[ 1294.662525] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:18:47 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x0, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:18:47 executing program 6:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x100000001]}, 0x8)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8)
sendmmsg$inet6(r0, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="e445028352c76607478cfa4c4d4d1b3cc4e2ee72b789360ef32ef43b1f2d619b916320ceb63f9e5f25039d16040643124fec06f7e4c004561db0761653f5cbe14840b878414c36020c43bd9f3fe311ff9639fd60bf5f7d542c26d3529120d891e2901b71601565dd9c1e0362", 0x6c}], 0x1, &(0x7f00000003c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x9bcd}}, @dontfrag={{0x14, 0x29, 0x3e, 0xcf7}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r1}}}, @hoplimit={{0x14, 0x29, 0x34, 0x80000001}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x87, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0x9}, @enc_lim={0x4, 0x1, 0x3f}, @jumbo={0xc2, 0x4, 0x10001}, @jumbo={0xc2, 0x4, 0x7fffffff}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x3ff, [0x2, 0x2e09, 0x1]}}]}}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000500)="17cc150e3d15822665a3af3c35be8219ae982a6e27653297f305f6dd93b27bfd8d6f73660221163dc4d50e9eee0197c5642fb6a17c99cf9257a57133dfe258d98e5525f8005d802af5b1df3f7661d65c0b3b29197b062eb9ae1e76ac9787a626e0d20a6e2f9a66c1d02b06472238c2f7c79ef64388231f67f735e36f02e74ad1e8288d183f939d0a61e6ff986fdec83ef45af09c55acb0d9f8cf030b31115aa489f6c76253d53c9c2a5f4d9694dc8cf3d88a8f7d758d9a7f425aa2db", 0xbc}, {&(0x7f00000005c0)="476ce786bda4161c29c7e4f060b034660a90673b8897c61946cc38883a90af99", 0x20}, {&(0x7f0000000600)="cdbfb8ac5d09b9e6f2097546d9186675ec04d388f286aaae011ca143135abee8a7fa7bdbe3aa49c44913c47e7ea9468d325e39077569edaa1a4b72e50e4ab6b1247b431fa1e1aa494ca06af0ed2d4d69ea950077713882a02ad6df5846a484ffcd37cd078ea38d5da395153699ad33dd4fa9", 0x72}, {&(0x7f0000000680)="5e265f263161121815645ad8a1c193ef9a9ef421f9fe5eeeae6e6dcd57bc7db5a285b21978ffac6fd1ebf6933263b584baf95a55b2254185aaf7ecc6a41c45d6af594eedf67c2fe21e5ba5d006ef4a78912238877b4c7d475db0cdb367a237e73b32635dae55f35ae120fe5de10e96662c61d276143bf431fee38beae8c944", 0x7f}, {&(0x7f0000000700)="9b3ddd79b0078b9f02f8befec524c8d702e8", 0x12}, {&(0x7f0000000740)="a820136ce96841a2994e1575b6669c6c6ddd3b131ba8c2839b999454a65c609b7d8655797ade3317675dd2ba2decee3f93e7d0b205c3e1b2e6b9461c19e45fc7111297df077b2e469c67a35826ccce90258d0f96f9a9c7b3aa2d3a957d664cef9d92d5c1f660abf85d5fd06dbd2e2665f2b07948eb8dbf9183e501d59c5cefe32cc7ae8ec80007f42be2a094d1b4ac7a5c7b1de1d3cf78d3ba7a779351077a9672d301a1980fcb3248dc5f6a8e35947e1b14ff1ce4c6019c6fcc60398d6358538cee5984be4c0d1d0427af98e51e03f3a42830bb3ce30108f8", 0xd9}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="5da209ee40facfd772f89a6328a75aef15de23690462c8d7f69c0eeb541e7a", 0x1f}], 0x8}}], 0x2, 0x1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$binfmt_elf64(r2, &(0x7f0000001e00)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x81, 0x1, 0x6, 0x101, 0x2, 0x3, 0x4, 0x32f, 0x40, 0x105, 0x6, 0xdc39, 0x38, 0x1, 0x401, 0x3, 0xc4}, [{0x2, 0x80, 0x81, 0x8, 0x1, 0x126, 0x3c12, 0x3}], "4da8a5c1d621b4b78059c4f003ceae8e128d53eb40e9d4bd6eeabba889392fe5ffa68d8cd5bc7f7322980f071bc82e33c5165c3db7e3745d1b2ba12b18d94f0c325fa9ca5a68ad100c65417f3b27662e13d19e687b52a672a229f6a0a0b29fa317a671d2421ba433da22422839945204197c961680ffe086a12c365dd795248864dc5101609184d08ce36d70c449d620a13b6a64e11b3ee4a310ce94d175877bb4613dcdfcf929780385e6e1ba2b0231baf9c6b820e2190ea91a0e9a01c531193ecba3f6b97d6567b0c574455f80e404fa310dea288d548ca095b61f01f045", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa57)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x9081}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0)

19:18:47 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x0, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:18:47 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 29)

19:18:47 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfbffffff)

19:18:47 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:18:47 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x201000000000000)

[ 1294.793765] FAULT_INJECTION: forcing a failure.
[ 1294.793765] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1294.795113] CPU: 0 PID: 8410 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1294.799855] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1294.800542] Call Trace:
[ 1294.800771]  dump_stack+0x107/0x167
[ 1294.801079]  should_fail.cold+0x5/0xa
[ 1294.801406]  _copy_from_user+0x2e/0x1b0
[ 1294.801746]  __copy_msghdr_from_user+0x91/0x4b0
[ 1294.802138]  ? __ia32_sys_shutdown+0x80/0x80
[ 1294.802510]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1294.802945]  ? inet6_sendmsg+0xbd/0x140
[ 1294.803283]  ? inet6_compat_ioctl+0x320/0x320
[ 1294.803678]  ? __sock_sendmsg+0x55/0x190
[ 1294.804025]  sendmsg_copy_msghdr+0xa1/0x160
[ 1294.804388]  ? do_recvmmsg+0x6d0/0x6d0
[ 1294.804721]  ? __lock_acquire+0x1657/0x5b00
[ 1294.805091]  ___sys_sendmsg+0xc6/0x170
[ 1294.805421]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1294.805804]  ? vmacache_find+0x55/0x2a0
[ 1294.806146]  ? lock_acquire+0x197/0x470
[ 1294.806480]  ? find_held_lock+0x2c/0x110
[ 1294.806825]  ? __might_fault+0xd3/0x180
[ 1294.807161]  ? lock_downgrade+0x6d0/0x6d0
[ 1294.807524]  ? asm_exc_page_fault+0x1e/0x30
[ 1294.807896]  __sys_sendmmsg+0x195/0x470
[ 1294.808234]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1294.808596]  ? lock_downgrade+0x6d0/0x6d0
[ 1294.808956]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1294.809363]  ? wait_for_completion_io+0x270/0x270
[ 1294.809770]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1294.810162]  ? vfs_write+0x354/0xb10
[ 1294.810476]  ? fput_many+0x2f/0x1a0
[ 1294.810783]  ? ksys_write+0x1a9/0x260
[ 1294.811105]  ? __ia32_sys_read+0xb0/0xb0
[ 1294.811468]  __x64_sys_sendmmsg+0x99/0x100
[ 1294.811824]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1294.812255]  do_syscall_64+0x33/0x40
[ 1294.812569]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1294.812998] RIP: 0033:0x7f09c4bc0b19
[ 1294.813313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1294.814840] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1294.815505] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1294.816101] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1294.816695] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1294.817290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1294.817883] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
[ 1294.899554] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1294.906835] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[ 1300.204862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1300.206736] print_req_error: 74 callbacks suppressed
[ 1300.206752] blk_update_request: I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x100000 phys_seg 6 prio class 0
[ 1300.209073] buffer_io_error: 10574 callbacks suppressed
[ 1300.209083] Buffer I/O error on dev sr0, logical block 0, lost async page write
[ 1300.210445] Buffer I/O error on dev sr0, logical block 1, lost async page write
[ 1300.211240] Buffer I/O error on dev sr0, logical block 2, lost async page write
[ 1300.212038] Buffer I/O error on dev sr0, logical block 3, lost async page write
[ 1300.213223] Buffer I/O error on dev sr0, logical block 4, lost async page write
[ 1300.213956] Buffer I/O error on dev sr0, logical block 5, lost async page write
19:19:01 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x600000000000000)

19:19:01 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:19:01 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 30)

19:19:01 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x0, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:19:01 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x0, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:19:01 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x0, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:19:01 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x300000000000000)

19:19:01 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfeffffff)

[ 1308.812990] FAULT_INJECTION: forcing a failure.
[ 1308.812990] name failslab, interval 1, probability 0, space 0, times 0
[ 1308.814413] CPU: 0 PID: 8428 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1308.814995] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1308.819719] Call Trace:
[ 1308.819958]  dump_stack+0x107/0x167
[ 1308.820269]  should_fail.cold+0x5/0xa
[ 1308.820595]  ? __alloc_skb+0x6d/0x5b0
[ 1308.820922]  should_failslab+0x5/0x20
[ 1308.821246]  kmem_cache_alloc_node+0x55/0x330
[ 1308.821626]  __alloc_skb+0x6d/0x5b0
[ 1308.821938]  alloc_skb_with_frags+0x92/0x570
[ 1308.822312]  ? find_held_lock+0x2c/0x110
[ 1308.822661]  sock_alloc_send_pskb+0x7af/0x930
[ 1308.823051]  ? sk_alloc+0x350/0x350
[ 1308.823363]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1308.823855]  ? find_held_lock+0x2c/0x110
[ 1308.824205]  ? lock_chain_count+0x20/0x20
[ 1308.824566]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1308.824997]  ? ip6_mtu+0x1bb/0x3d0
[ 1308.825300]  ? lock_downgrade+0x6d0/0x6d0
[ 1308.825655]  ? ip_frag_init+0x350/0x350
[ 1308.826005]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1308.826399]  ? ip6_mtu+0x1e9/0x3d0
[ 1308.826704]  ? ip6_setup_cork+0xfb7/0x1740
[ 1308.827064]  ip6_make_skb+0x2de/0x4e0
[ 1308.827386]  ? ip_frag_init+0x350/0x350
[ 1308.827764]  ? ip_frag_init+0x350/0x350
[ 1308.828102]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1308.828508]  ? ip6_dst_hoplimit+0x199/0x440
[ 1308.828878]  ? lock_downgrade+0x6d0/0x6d0
[ 1308.829240]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1308.829588]  ? ip_frag_init+0x350/0x350
[ 1308.829932]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1308.830369]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1308.830814]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1308.831283]  ? lock_acquire+0x197/0x470
[ 1308.831641]  ? find_held_lock+0x2c/0x110
[ 1308.831998]  ? sock_has_perm+0x1ea/0x280
[ 1308.832359]  ? __import_iovec+0x458/0x590
[ 1308.832712]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1308.833151]  inet6_sendmsg+0x105/0x140
[ 1308.833483]  ? inet6_compat_ioctl+0x320/0x320
[ 1308.833863]  __sock_sendmsg+0xf2/0x190
[ 1308.834194]  ____sys_sendmsg+0x334/0x870
[ 1308.834544]  ? sock_write_iter+0x3d0/0x3d0
[ 1308.834906]  ? do_recvmmsg+0x6d0/0x6d0
[ 1308.835238]  ? __lock_acquire+0x1657/0x5b00
[ 1308.835622]  ___sys_sendmsg+0xf3/0x170
[ 1308.835955]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1308.836345]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1308.836785]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1308.837163]  ? trace_hardirqs_on+0x5b/0x180
[ 1308.837532]  ? lock_acquire+0x197/0x470
[ 1308.837868]  ? find_held_lock+0x2c/0x110
[ 1308.838215]  ? __might_fault+0xd3/0x180
[ 1308.838552]  ? lock_downgrade+0x6d0/0x6d0
[ 1308.838907]  ? io_schedule_timeout+0x140/0x140
[ 1308.839303]  __sys_sendmmsg+0x195/0x470
[ 1308.839654]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1308.840020]  ? lock_downgrade+0x6d0/0x6d0
[ 1308.840382]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1308.840794]  ? wait_for_completion_io+0x270/0x270
[ 1308.841207]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1308.841602]  ? vfs_write+0x354/0xb10
[ 1308.841920]  ? fput_many+0x2f/0x1a0
[ 1308.842231]  ? ksys_write+0x1a9/0x260
[ 1308.842555]  ? __ia32_sys_read+0xb0/0xb0
[ 1308.842905]  __x64_sys_sendmmsg+0x99/0x100
[ 1308.843264]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1308.843711]  do_syscall_64+0x33/0x40
[ 1308.844029]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1308.844462] RIP: 0033:0x7f09c4bc0b19
[ 1308.844782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1308.846330] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1308.846974] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1308.847597] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1308.848201] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1308.848796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1308.849391] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:19:01 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x700000000000000)

19:19:01 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xff000000)

[ 1308.896206] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:19:02 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x0, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:19:02 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x400000000000000)

19:19:02 executing program 6:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:19:02 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xff010000)

[ 1308.940217] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:19:02 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 31)

[ 1308.971562] FAULT_INJECTION: forcing a failure.
[ 1308.971562] name failslab, interval 1, probability 0, space 0, times 0
[ 1308.972863] CPU: 0 PID: 8463 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1308.973445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1308.974152] Call Trace:
[ 1308.974386]  dump_stack+0x107/0x167
[ 1308.974700]  should_fail.cold+0x5/0xa
[ 1308.975031]  ? create_object.isra.0+0x3a/0xa20
[ 1308.975425]  should_failslab+0x5/0x20
[ 1308.975771]  kmem_cache_alloc+0x5b/0x310
[ 1308.976121]  create_object.isra.0+0x3a/0xa20
[ 1308.976495]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1308.976928]  kmem_cache_alloc_node+0x169/0x330
[ 1308.977321]  __alloc_skb+0x6d/0x5b0
[ 1308.977638]  alloc_skb_with_frags+0x92/0x570
[ 1308.978012]  ? find_held_lock+0x2c/0x110
[ 1308.978365]  sock_alloc_send_pskb+0x7af/0x930
[ 1308.978752]  ? sk_alloc+0x350/0x350
[ 1308.979068]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1308.979531]  ? find_held_lock+0x2c/0x110
[ 1308.979882]  ? lock_chain_count+0x20/0x20
[ 1308.980245]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1308.980678]  ? ip6_mtu+0x1bb/0x3d0
[ 1308.980982]  ? lock_downgrade+0x6d0/0x6d0
[ 1308.981337]  ? ip_frag_init+0x350/0x350
[ 1308.981685]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1308.982080]  ? ip6_mtu+0x1e9/0x3d0
[ 1308.982385]  ? ip6_setup_cork+0xfb7/0x1740
[ 1308.982747]  ip6_make_skb+0x2de/0x4e0
[ 1308.983070]  ? ip_frag_init+0x350/0x350
[ 1308.983413]  ? ip_frag_init+0x350/0x350
[ 1308.987762]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1308.988168]  ? ip6_dst_hoplimit+0x199/0x440
[ 1308.988533]  ? lock_downgrade+0x6d0/0x6d0
[ 1308.988894]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1308.989241]  ? ip_frag_init+0x350/0x350
[ 1308.989583]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1308.990018]  ? mark_held_locks+0x9e/0xe0
[ 1308.990365]  ? mark_held_locks+0x9e/0xe0
[ 1308.990708]  ? find_held_lock+0x2c/0x110
[ 1308.991056]  ? lock_acquire+0x197/0x470
[ 1308.991391]  ? find_held_lock+0x2c/0x110
[ 1308.991756]  ? sock_has_perm+0x1ea/0x280
[ 1308.992115]  ? __import_iovec+0x458/0x590
[ 1308.992467]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1308.992905]  inet6_sendmsg+0x105/0x140
[ 1308.993243]  ? inet6_compat_ioctl+0x320/0x320
[ 1308.993621]  __sock_sendmsg+0xf2/0x190
[ 1308.993951]  ____sys_sendmsg+0x334/0x870
[ 1308.994297]  ? sock_write_iter+0x3d0/0x3d0
[ 1308.994653]  ? do_recvmmsg+0x6d0/0x6d0
[ 1308.994986]  ? __lock_acquire+0x1657/0x5b00
[ 1308.995358]  ___sys_sendmsg+0xf3/0x170
[ 1308.995707]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1308.996093]  ? vmacache_find+0x55/0x2a0
[ 1308.996440]  ? lock_acquire+0x197/0x470
[ 1308.996777]  ? find_held_lock+0x2c/0x110
[ 1308.997125]  ? __might_fault+0xd3/0x180
[ 1308.997469]  ? lock_downgrade+0x6d0/0x6d0
[ 1308.997822]  ? asm_exc_page_fault+0x1e/0x30
[ 1308.998199]  __sys_sendmmsg+0x195/0x470
[ 1308.998540]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1308.998905]  ? lock_downgrade+0x6d0/0x6d0
[ 1308.999270]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1308.999691]  ? wait_for_completion_io+0x270/0x270
[ 1309.000103]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1309.000495]  ? vfs_write+0x354/0xb10
[ 1309.000812]  ? fput_many+0x2f/0x1a0
[ 1309.001121]  ? ksys_write+0x1a9/0x260
[ 1309.001445]  ? __ia32_sys_read+0xb0/0xb0
[ 1309.001793]  __x64_sys_sendmmsg+0x99/0x100
[ 1309.002152]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1309.002585]  do_syscall_64+0x33/0x40
[ 1309.002901]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1309.003336] RIP: 0033:0x7f09c4bc0b19
[ 1309.003669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1309.005215] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1309.005859] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1309.006464] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1309.007064] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1309.007675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1309.008275] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
[ 1309.059882] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[ 1309.084039] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
19:19:21 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x500000000000000)

[ 1328.936893] FAULT_INJECTION: forcing a failure.
[ 1328.936893] name failslab, interval 1, probability 0, space 0, times 0
[ 1328.937927] CPU: 1 PID: 8494 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1328.938503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1328.939197] Call Trace:
19:19:21 executing program 6:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x2a7b, &(0x7f0000001a40)={0x0, 0x45f7, 0x10, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000018c0), 0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$inet6(r3, &(0x7f00000019c0)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x2, @loopback, 0x77}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000580)="956ea6529e3a0e003625ed3640384f615b748266a30db2e06f29ef69c3fab435277dea35689de7fa19e5975b4099e2f6905076da41dd3beaaedf6a739c0cc5325b7e110674792ee28834bdbd0f9fd3c22bda8505501b962b5d91b341b53851f5c62cab0433bf024c4f7fa6361127f7827a201ce3da88711d993e4ccf40c96860fa598b9c1cabae12cb5fc43f8c39478df8f8f9a9e677e94687e9ecca1086848db7c5e101523a7427d662635db782fabbf4ec21f138d69733be6b3e46f26c0ecb983d6f5c321a1800e0c8dd6f549f464ff0d62a5b52de1018", 0xd8}, {&(0x7f0000000240)="73de7927b66c92df608de4a481931c324c9d0ed945af443aec8e883dbe5e5820ceada531b0490770cdc36655d97a5bae4e21b9b8cac726e112d1f92e75811661118ec070a08ca959b0af29939be2a035e97ebaf539", 0x55}, {&(0x7f0000000340)="74d324934bec32bb181ee6f760960055d6293482e9171b74de5c4574b3176e339c1b23a9152488d78a2e710c67e47b84c33920513aa78bf3e58985227452358fbff476bd", 0x44}, {&(0x7f0000000480)="487dc96e8115fe79a1fc44ce37bcdebc0af15d77af23aee93e126f69edca5e90682cbaf98130dba32af71ee2bebe23b87a51cfbbcfa00f6e86cd60c3b87f254073034cb0f3917c93d2c9970869807eaa06c26d72729406523d4e476572155e3ffb25eb225b00f49b168f25338e2e3affdcb7e19ca95bd359d64bc8cdc18969b57bad540b9a3312fd6c31ee9ab4e09d96b4ffb1dc592f", 0x96}, {&(0x7f00000003c0)="bc30d5169dabf8ddac754a3b564669788f8df5165dbdbc03dc", 0x19}, {&(0x7f0000000680)="c553598e1a68584a17472bb80a15c0372ffe7e93030b722c5de77a9fe50c115b4d768837227d8cbc8bcf64c6b8a4d51e0a21bec0d1d62923df3b11bf17c37ed267dc66e228d1ec00c06396f5b6df3ebb4af13d6bf85ddb71d687", 0x5a}, {&(0x7f0000003600)="16ab6411667554e2d97fb8e59c4830a7fd23aa0aa1c0f0b38c9d4b76ff1b4d77cb8dbbad0b61a87a13b50e1c50d6fa308920b095ccba72b98c630f07fecb76842a43336db29977ad52092603bfca7a478bd6d36dee91ef5af9f5783e75237e875f32b053f9ed45fc070f7a161827c9ec3e652a6021b45b29863cf598ebcd12332f4ec68e1f33efa50885ce734cdbdda76cbfa8f16dc53d4bd648d6f6658968324bbc9a2b2d71c5ca6e9d0d7bec1330e15603b2c75833b91cfe0ddade3479785518ef05e673386a228c48308ab5084959c9e612b91128471b63ca49a760ea4d8a3dc1a555e755fb89d26536e77db3e8725d9fe53103d091ca049ea4f69c234ed8331f5f11351791526487e261997f7371d5787df836b13f1cf1275d09435a116e0e0cfb11bc4b7e165b69d00110278cec71d7c278d45c0bd635b36fffd7a57ce9d7f59f289024e19a64efb5a743bb84b5ac9403cb5c7a672f4905ba9e46483ff3ab5932e75395bb7b89c505c0c9bbd8bf3af982562ca45ec3e7c0d6cedd4f3981e1638bf624e563dfc6ce9dce927899a70e0539cea781bbec3ebb1ad85ed05fe322df4322f2fd86ad72064c1d539d4b1adf54ae44ab1485b1495e353560af5355a6bd8ec64301eafefdcc487ac8cb127eff5f86202f7e82eac0964493b026cc61b22217e4e06a59bc4129ce206a08fa29e36d17866ea486d1a070102fc4292932adb3e64ea9935e87e0615c61f979fe4a32f972b89f5080e99c7bcf0e1aa39533a80476fb8b3abcb1494e0fd8a9286622ca5c828349dfc90ad3e73834c7c9cc610b7cf88039a53335fa14ee81beef68fabb3fd2060ab8f5ce9b25524c9cfa9bc271f786403755d843a0208dfd91cf5feb58bdc0a73b366f3a346f614df071b9fb69449a4247e030fc0f5dbff11b551bc73d8e6eec9f9ef918eee21e74c8c202b958a3d2f441600e1ffc46bae64fe3fba3178f91dc999f4f90d475c617989a2921ed4c424033050d7a2987d358b4e80f8605fab67c0b4008fa7813e46f44b40a77a860803a7b5805bedf588111a6e3561a2741424bd38573df8ab475a9fd1174bad1d5daddc4ba7acfa796d69a97f775e5cdd9e057137402fc945b4e6f91dbcf02fdfa51a672bc4f8dc37ab048866fbc85398f78af66aec605e2d3041721f7b3a4e370b16ad945689c6f0aceb6e8af3b2a01f0adfc51cb7038d49e0a8ba40dc79c1a1b50081e9b0a5a557e86ebcc106c703beeefbcf27671c96bfe2ad058a23e6df753cf7cf3ba4dcba4047072757c5d2bd22cbd6f9f53b765b07e5c9796983ef2bcddb7ff1180395d07a48a61304d78ae4e5b6f2e6ea8905824b7e5012e8fd6a6fc4976e572541bd855d93590d3705a641a6fa36fe492c9f53aff55b1a7ed6af0e990f1da616f20cfc816e177e7dd5c187de22f28bc3745447af931e0e206c778f96b6335485a33e5e6d7d2c947482c530e801a86f1496bc42ddccc3749ea4c1ba25c9f2458fe72ffc8dcd6163ba45acf61831a8025f4a60f23080e606f52d16fa751735919bf6a072fb0f46f1f1c209611fbf7200e5f16090c803993df12e2e9dde73e5790af52519a30000404a357fa958cd4f0589e85a7d5258ca08f62441475b1e97bf6af27bb187ad6d4f9bfc509ca7ad7195bbdc420b2dc39383c41de69a7cbacf614d288b27a9e001b86ff93fa328fe3c1b7074ed4825af1275bcb0fe9a5d49ca68446ec3179b2b477d18e7b2e64bcf1b21be18f4f48b72725018c6cc4a9b5b2ea50148fd853faf07106c2b4a77f587d90795a880eb1e68aaa39ea96b4bb50d67189cb56418b34df81c3dda9de088b47fdd497ea085aacef6a63706a19a051c04e8bffc4944b013481205871511659d8ab6461f8eb12ad4c1acb451b032fe2be96d92ab38567a519b544c56cf9b1ea9c47df8c9ff5bba559f28094d6f26cecd8bbda892ebda0e21ad18a54f7afc3be3f52cb92abe6ade8a092e0d4a555f4e73246aca72b4822866d13104be77da4ee615029bcb4098e1c92f8cbac63a9797be4b15ec459342b819221e8786be05955c8fdc1850a5d508429a5284e9cad158297025cc261a4530946be37c73c4bd795908e1cf610572fa3830c190ffc72823339e56c69ad3353b92a9ca25fb73ff06624523d08794057b091870945b5718436578f10b3b890b33b48baf7b298e5102b7f441a19247bf970360e109a84a6287f71ba52f07040e1903dc2dbbed5848943c0a4e055f4ff93a1b3dc6f8a495be207343a1b8430c101f42534f8275d99e55f0a7bce1e6e2d7f9885fcbb0b3e6664141fe5a2137285cc8d6ea03aade8e5728672ca05454d5b9a6c1a64bcd6709a0b62e298503e9274c383ffdb363aa307d90f68573b53b64f5030e6dd65e1bb8fcf17477a1093c3e3b9838bb114eb4374a4709bf31074cd65b564157233cb6149c898ac59ad13d6a58d51892e4880483239ea73efa0e16a37c9dfa9d6207cdcb2fcc110873d43b128d106777cccdf19c6ed5a4c94a2318960108cf266de81c85f0b9c5c3924c6baf3de58cb18869c3fe70168f70f965f873beba462a486079b3eb9acd1038b064a9d2dade7079d8cc8e86319328d9ce13fb9f808b53e4f48827e393c2d11b9702d48f98313b99f2431c9b36097ad95a393e2a88c9f5f1e8fdc19eabbd09347245ff9625f1a48da64ea47f2ac12f47c8c1bcc32bbf8d211a4c6883632d4fec9c9da985dcfee3abd2d2886f3e40e46f94929a4210f9eca21523ed3e998a54182efd81ef46ae52aa3d2da6c796b5f2707af897f8913750c46ebdeaf617d2c767c3e326e48d0369fc72b7a240707eb78eb58fa838d2ee36a02eed63d196c312097cc2a8cbd37f2b92207fa80a05e113943f24d404563fe43292f889242d10baa59fb66b5e1a2aedade4a6122b4d49a1ebe2f230a7808fdf4662349556a986a54d2f804db4431629a6bc25273d34a3bedf99c5d7a41b0ba011799ff4b1b9cfe9ff64915927222a4589e078772e45e8e6b1933b085f88b0a1cff5496b5ff0befa8604d34461df0469711b674ec446900eaac6ba0586a986d2be35f0b12c6636664e4edcdfd5d6f7ed390e62950cbf7d7b553bec86d3a10ab5dc407880a8d271e2acb2a0b2b99464396f27fec2333f414735ff11c58b77a67a136e1393f819950013a7935560cf7b4afb92ed05035d34731bbc99acdda6234f27637c58687e99f3bb67dccbe078c0a19a5a6f6af4c81c46c734d1b7bbca414589bdd97c998e7d821cd07d607c3d015122e6da42d03ddc51b1f27611b1af614e1a5409329ba612d473295d4b15c02374575ae55833fdec4072d118e9c91fcd0165dc2880a363c2fcebbed07831648744f34e3d17931aac52e80b92d86e1315feca66831a1d080a9251e648883d96766930f4197b331d3278fddc3a391b93f3c971ef71b8608e8891feb8094cc9facf42e99156c8cf0f708cd0652a00bb7ab476e2bf9f1024624a6c50512aecd1b1264638cf80890258106c2f14dca4b82f6d03c6a25d5b4ce5e0cb3b738a56126ce99d6df03875b98bfeb7fb7d1c3410620282beb938ecd8d5646671205c9c55480b6068309d110fb9562f79cc99df11f9ebeb96b96309985e022eecda5572b6be37adf48f2c3475c4c6c10e6a2cfb72a75491034f70ee0d156865f1a38dd5bfd0c1d05ab3053415a5195aaeb5096db0d20659b31a5da19a02c1962e03f6d3a344beb6ff070fe1fd761c8ed05ada7298b10c915ad461d156b7eea0a927ffc57b66ac4a1beb2128a9d37358bc7cd3e66cd3a891b67aa6056e355dea098dab809b40394a630884ced7e0cc3cd514e1a008ff120c878d40365294e724a7ec154b8a4b6f7630a2a98e74b5bb619e7aa6b4dd4a38449c11a6421c3d606fe4dfb69c99f18abd0485acd350102a52aa3fecfb7189abbdd3fe0ee34c63918561825fca6a01132ef8f51f873ba5b53a3d790d859ac7ed081fd5abf24cfc4039c07482761f9a7a94ce08ac1fbc4900cbb35113c4aab5807aed45c66223878a5238b4d44059964b4cbaa85f8495a06ad9356cee8968ace5d52d8f2620f0bf41e700d20420d13d3a7ed85d1e190976cea20efea5912e02afb38f1b5dd726df3dc85911a06420722da62fc8667ea1c4185addaa8912bc45a97c77f83ce31b1fe524f82dcafe4a76064447c95f192ebb7063aa2cf202db80987d484b8938329aeda7ebb59d13149044154ab4a4d3410ee7df303ac4835e904a29ecb3bcc6967f581d57d6f2e44b43b37948a58ce96f5ea66e4c2f18d2308dcafc9c863e1d51e8b2291aa37ca6e640dc854f3ac6ddf2ccf061fa8b930b352e87f5ee980543e97612059b6865ef46b10e15c7a06ebe4a5d587f4ead193a957c9e41471b63e8f5ad143c3f4db736219442ee6b15bb7ffe123f85cf44e8f4a25c28fa05e3852869fa16ebf981f943c1640d4e05caa035da56debbb39aa1261acd18c1283b56b6771b95bb8c64616c5f55b0a432bb4fc39bfd904c32860d231b851330e5a0b673841a2a1a0e5b7038f38e26043f8d3c4288346a93e9f19b8bc040cfc95e957ae91be051ae67a0f095578a479774583d86ae4f29be02c62825d421219ef9ac85fb9b3faf80f72ff03ffa0ada66050dec669a09c8049a2bcd6fb7e3d569f3eeaafb1ebd38afebe7bfb41269d83df52145060e2e25873e0c5385a6084d54129f711962d9f1985e0fd71d46a4a4c8a898167a09a4e7a080421d33398f059a277df28afbbacd4d4f0539b33c1039a2c6f3eec409100fbe7c1c3928cfdd4226dc7a0907e38fa791081f1f5305b58b21ff157ac0de2f3454550717940bae7c2d23b1cced222a90af303600c0b09551d6d9c44b12ff87d7590ca0391c11dfc09dea091d734b264fd8f116c666b956d1cdd945255c23fee36f86fcd4e8d5d953538355ae3cf1ca2b6b65ee226cb8fabf98166cbe845fea92509d1d321ea7f74dd6a2d22f6455dc1782dfb33a58a7f1c75167602b37bfb39a8d3b7042bc859387526e41f107768f3ec032551a07e5ce381d334307c9a69f20e2dcddfa8b44bae710898e5987a0ebd6114ccb2f6815fa2d9818b762b2285aa921d3129335bd90ce817c655ebcf951b23f8783266876fcf84e4fb45751d99219097c67d77a40f71cd628f50140acbb491a51e8c32f699c629161a357fbc4e3f1922c9b1a54719dbb69ba04696436f024cfcccaf66e4509c443dd8260074a8a99df4c5970a63d4ee698f23dbd40c003b41696c3e66aa054be3bb3a5890b958aac0f1dea1b68c2d250d7b16e7d9f463adaece17030a65ce327691e338b8883d085df0617044d29d1cbe7d37d23359ff5a62ec50e79817468ab7081e295cb51f6284a08ecd645ddbb22bcf22de3bf41e9cd98d8bbb9463aaba7b6df9a84794be11328c1cde0ea58a58786b2ae3c13ba083d9883dd6342158c425b68b70507c6daa9d8e764f0f39947992734aeb2fde1c7dba041d3428d309806d39f68cbe8b6c1664c6b44f2de4c4c56ec3cfaaf661f0241f4f12c1bf9e4193511f77e0b1f6ed2327716b56e7937b6f08520d2ccbad5c67c4fa1f3b860f916566401d08e63091e90b501e9fe2fed5aa3ebb1c00d5bc217d7e8e4860cacb676e1ad9cd0f1b660cfc22022dfeca637f27b9ab5ccad6c9b3d1bb42e3d3d112e4e044ffd2c2f4bbe7a9f3fe409143c54c9005b1adb20bda3147fb61516d7c4e28bb8a5bc2e9022bd774ea2cf0e1a8b5144f695899f55e0e1a1cf1950cf42d1c712e60d07090a07be35494485bd949f2f8dff3b0c7dc78643675c7916e42aa9e5184dadf371229c0e5c58daa5b5fc1b495352e", 0x101b}, {&(0x7f0000001700)="b6ae3ee5d899c11cd98e5509900976fd662b17c550720848fd820b7ea651580604267f58198a1855cd8ac74699a3f34c456053fe52ec2fbb750a4cb29be9050f5bc0b34e37f42461d8463554f193c9394e5057ee84f6235297601c7a7d2c9508d77c4cb5e18383842651ce5a8f3a01911d6fdeb114440cbf04da3d34d1aa29e21a", 0x81}, {&(0x7f0000001e00)="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", 0xff6}, {&(0x7f00000017c0)="e24c1f00ffe37d49fd6a85a93f3eb54e35098a725c2540c83b09082b9cec5fecccc394f5afc90e4a148993ac035dda520f191c464f32f44aaf1ae1acd3aa612c9a7c426c72eb6d0f3a79dd3c1297e004a9a3941171d2379cd287286b7ed515a3a9ebb225aca4976aa2c911d7ba081e0a8f15736762fc3f22f277f001402ba026a7dca4707b62ecaf2d3143ec15178770ce2099d3f3d33944d3eab0c1aae6f34394cdf33538a3297bcba45d809c60f5965a464487ec94a17793f49dfadd6a5ae72a013525a27a599f556af278402474964c9a99f4de356ba004f5abdf3ba916dfeb8ddb5df6", 0xe5}], 0xa}}], 0x1, 0x400c045)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x13, r1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @loopback}, 0x1c)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x8000}, 0x4)
syz_io_uring_setup(0x3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfb}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000540)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, r6, &(0x7f0000001a00)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r2}}, 0x8)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpeername(r0, &(0x7f0000000400)=@xdp, &(0x7f0000000180)=0x80)
getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000100)=""/65, 0x41)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0)

19:19:21 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:19:21 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:19:22 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x804000000000000)

19:19:22 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfffff000)

19:19:22 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 32)

19:19:22 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1328.939429]  dump_stack+0x107/0x167
[ 1328.943761]  should_fail.cold+0x5/0xa
[ 1328.944091]  should_failslab+0x5/0x20
[ 1328.944415]  __kmalloc_node_track_caller+0x74/0x3b0
[ 1328.944840]  ? alloc_skb_with_frags+0x92/0x570
[ 1328.945227]  __alloc_skb+0xb1/0x5b0
[ 1328.945537]  alloc_skb_with_frags+0x92/0x570
[ 1328.945908]  ? find_held_lock+0x2c/0x110
[ 1328.946255]  sock_alloc_send_pskb+0x7af/0x930
[ 1328.946639]  ? sk_alloc+0x350/0x350
[ 1328.946950]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1328.947388]  ? find_held_lock+0x2c/0x110
[ 1328.955753]  ? lock_chain_count+0x20/0x20
[ 1328.956112]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1328.956542]  ? ip6_mtu+0x1bb/0x3d0
[ 1328.956847]  ? lock_downgrade+0x6d0/0x6d0
[ 1328.957199]  ? ip_frag_init+0x350/0x350
[ 1328.957543]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1328.957937]  ? ip6_mtu+0x1e9/0x3d0
[ 1328.958240]  ? ip6_setup_cork+0xfb7/0x1740
[ 1328.958599]  ip6_make_skb+0x2de/0x4e0
[ 1328.958919]  ? ip_frag_init+0x350/0x350
[ 1328.959258]  ? ip_frag_init+0x350/0x350
[ 1328.959595]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1328.960014]  ? ip6_dst_hoplimit+0x199/0x440
[ 1328.960380]  ? lock_downgrade+0x6d0/0x6d0
[ 1328.960742]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1328.961093]  ? ip_frag_init+0x350/0x350
[ 1328.961437]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1328.961877]  ? lock_acquire+0x197/0x470
[ 1328.962213]  ? find_held_lock+0x2c/0x110
[ 1328.962558]  ? lock_acquire+0x197/0x470
[ 1328.962892]  ? find_held_lock+0x2c/0x110
[ 1328.963273]  ? sock_has_perm+0x1ea/0x280
19:19:22 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xffffff7f)

[ 1328.963630]  ? __import_iovec+0x458/0x590
[ 1328.963999]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1328.964438]  inet6_sendmsg+0x105/0x140
[ 1328.964767]  ? inet6_compat_ioctl+0x320/0x320
[ 1328.971768]  __sock_sendmsg+0xf2/0x190
[ 1328.972109]  ____sys_sendmsg+0x334/0x870
[ 1328.972472]  ? sock_write_iter+0x3d0/0x3d0
[ 1328.972837]  ? do_recvmmsg+0x6d0/0x6d0
[ 1328.973179]  ? __lock_acquire+0x1657/0x5b00
[ 1328.973557]  ___sys_sendmsg+0xf3/0x170
[ 1328.973888]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1328.974278]  ? vmacache_find+0x55/0x2a0
[ 1328.974620]  ? lock_acquire+0x197/0x470
[ 1328.974954]  ? find_held_lock+0x2c/0x110
[ 1328.975303]  ? __might_fault+0xd3/0x180
[ 1328.975635]  ? lock_downgrade+0x6d0/0x6d0
[ 1328.976006]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1328.976479]  __sys_sendmmsg+0x195/0x470
[ 1328.976815]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1328.977179]  ? lock_downgrade+0x6d0/0x6d0
[ 1328.977540]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1328.977946]  ? wait_for_completion_io+0x270/0x270
[ 1328.978357]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1328.978751]  ? vfs_write+0x354/0xb10
[ 1328.979066]  ? fput_many+0x2f/0x1a0
[ 1328.979375]  ? ksys_write+0x1a9/0x260
[ 1328.979696]  ? __ia32_sys_read+0xb0/0xb0
[ 1328.980057]  __x64_sys_sendmmsg+0x99/0x100
[ 1328.980419]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1328.980850]  do_syscall_64+0x33/0x40
[ 1328.981167]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1328.981632] RIP: 0033:0x7f09c4bc0b19
[ 1328.981987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1328.983639] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1328.984294] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1328.984892] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1328.985489] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1328.986085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1328.986720] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:19:22 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x600000000000000)

[ 1329.007887] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1329.050519] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:19:22 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xc00000000000000)

19:19:22 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:19:22 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 33)

19:19:22 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xffffff8b)

[ 1329.161789] FAULT_INJECTION: forcing a failure.
[ 1329.161789] name failslab, interval 1, probability 0, space 0, times 0
[ 1329.163013] CPU: 1 PID: 8516 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1329.163592] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1329.164312] Call Trace:
[ 1329.164545]  dump_stack+0x107/0x167
[ 1329.164857]  should_fail.cold+0x5/0xa
[ 1329.165188]  ? create_object.isra.0+0x3a/0xa20
[ 1329.165582]  should_failslab+0x5/0x20
[ 1329.165907]  kmem_cache_alloc+0x5b/0x310
[ 1329.166266]  create_object.isra.0+0x3a/0xa20
[ 1329.166641]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1329.167213]  __kmalloc_node_track_caller+0x1a6/0x3b0
[ 1329.167639]  ? alloc_skb_with_frags+0x92/0x570
[ 1329.168046]  __alloc_skb+0xb1/0x5b0
[ 1329.168359]  alloc_skb_with_frags+0x92/0x570
[ 1329.168729]  ? find_held_lock+0x2c/0x110
[ 1329.169076]  sock_alloc_send_pskb+0x7af/0x930
[ 1329.169461]  ? sk_alloc+0x350/0x350
[ 1329.169775]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1329.170216]  ? find_held_lock+0x2c/0x110
[ 1329.170557]  ? lock_chain_count+0x20/0x20
[ 1329.170915]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1329.171343]  ? ip6_mtu+0x1bb/0x3d0
[ 1329.171643]  ? lock_downgrade+0x6d0/0x6d0
[ 1329.172008]  ? ip_frag_init+0x350/0x350
[ 1329.172352]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1329.172744]  ? ip6_mtu+0x1e9/0x3d0
[ 1329.173045]  ? ip6_setup_cork+0xfb7/0x1740
[ 1329.173402]  ip6_make_skb+0x2de/0x4e0
[ 1329.173725]  ? ip_frag_init+0x350/0x350
[ 1329.174063]  ? ip_frag_init+0x350/0x350
[ 1329.174400]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1329.174803]  ? ip6_dst_hoplimit+0x199/0x440
[ 1329.175245]  ? lock_downgrade+0x6d0/0x6d0
[ 1329.175602]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1329.175963]  ? ip_frag_init+0x350/0x350
[ 1329.176307]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1329.176739]  ? trace_hardirqs_on+0x5b/0x180
[ 1329.177105]  ? lock_acquire+0x197/0x470
[ 1329.177440]  ? find_held_lock+0x2c/0x110
[ 1329.177786]  ? lock_acquire+0x197/0x470
[ 1329.178121]  ? find_held_lock+0x2c/0x110
[ 1329.178471]  ? sock_has_perm+0x1ea/0x280
[ 1329.178824]  ? __import_iovec+0x458/0x590
[ 1329.179173]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1329.179605]  inet6_sendmsg+0x105/0x140
[ 1329.179947]  ? inet6_compat_ioctl+0x320/0x320
[ 1329.180326]  __sock_sendmsg+0xf2/0x190
[ 1329.180654]  ____sys_sendmsg+0x334/0x870
[ 1329.180997]  ? sock_write_iter+0x3d0/0x3d0
[ 1329.181354]  ? do_recvmmsg+0x6d0/0x6d0
[ 1329.181683]  ? __lock_acquire+0x1657/0x5b00
[ 1329.182053]  ___sys_sendmsg+0xf3/0x170
[ 1329.182386]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1329.182767]  ? vmacache_find+0x55/0x2a0
[ 1329.183110]  ? lock_acquire+0x197/0x470
[ 1329.183446]  ? find_held_lock+0x2c/0x110
[ 1329.183805]  ? __might_fault+0xd3/0x180
[ 1329.184145]  ? lock_downgrade+0x6d0/0x6d0
[ 1329.184494]  ? asm_exc_page_fault+0x1e/0x30
[ 1329.184867]  __sys_sendmmsg+0x195/0x470
[ 1329.185208]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1329.185570]  ? lock_downgrade+0x6d0/0x6d0
[ 1329.185930]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1329.186339]  ? wait_for_completion_io+0x270/0x270
[ 1329.186747]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1329.187139]  ? vfs_write+0x354/0xb10
[ 1329.187453]  ? fput_many+0x2f/0x1a0
[ 1329.187771]  ? ksys_write+0x1a9/0x260
[ 1329.188101]  ? __ia32_sys_read+0xb0/0xb0
[ 1329.188450]  __x64_sys_sendmmsg+0x99/0x100
[ 1329.188806]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1329.189241]  do_syscall_64+0x33/0x40
[ 1329.189556]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1329.189985] RIP: 0033:0x7f09c4bc0b19
[ 1329.190303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1329.191846] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1329.192489] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1329.193083] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1329.193675] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1329.194271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1329.194865] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
[ 1329.220270] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1329.229020] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:19:35 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x700000000000000)

19:19:35 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xd00000000000000)

19:19:35 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 34)

[ 1342.609740] FAULT_INJECTION: forcing a failure.
[ 1342.609740] name failslab, interval 1, probability 0, space 0, times 0
[ 1342.614539] CPU: 0 PID: 8532 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1342.615196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1342.618910] Call Trace:
[ 1342.619196]  dump_stack+0x107/0x167
[ 1342.619508]  should_fail.cold+0x5/0xa
[ 1342.619890]  ? create_object.isra.0+0x3a/0xa20
[ 1342.620331]  should_failslab+0x5/0x20
[ 1342.620706]  kmem_cache_alloc+0x5b/0x310
[ 1342.621054]  create_object.isra.0+0x3a/0xa20
[ 1342.621492]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1342.621968]  __kmalloc_node_track_caller+0x1a6/0x3b0
[ 1342.622442]  ? alloc_skb_with_frags+0x92/0x570
[ 1342.622907]  __alloc_skb+0xb1/0x5b0
[ 1342.623269]  alloc_skb_with_frags+0x92/0x570
[ 1342.623696]  ? find_held_lock+0x2c/0x110
[ 1342.624347]  sock_alloc_send_pskb+0x7af/0x930
[ 1342.624780]  ? sk_alloc+0x350/0x350
[ 1342.625134]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1342.625629]  ? find_held_lock+0x2c/0x110
[ 1342.625973]  ? lock_chain_count+0x20/0x20
[ 1342.626398]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1342.626920]  ? ip6_mtu+0x1bb/0x3d0
[ 1342.627268]  ? lock_downgrade+0x6d0/0x6d0
[ 1342.627664]  ? ip_frag_init+0x350/0x350
[ 1342.628024]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1342.628468]  ? ip6_mtu+0x1e9/0x3d0
[ 1342.628823]  ? ip6_setup_cork+0xfb7/0x1740
[ 1342.629232]  ip6_make_skb+0x2de/0x4e0
[ 1342.629591]  ? ip_frag_init+0x350/0x350
[ 1342.629941]  ? ip_frag_init+0x350/0x350
[ 1342.630343]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1342.630796]  ? ip6_dst_hoplimit+0x199/0x440
[ 1342.631237]  ? lock_downgrade+0x6d0/0x6d0
[ 1342.631677]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1342.632037]  ? ip_frag_init+0x350/0x350
[ 1342.632430]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1342.632910]  ? trace_hardirqs_on+0x5b/0x180
[ 1342.633328]  ? lock_acquire+0x197/0x470
[ 1342.633712]  ? find_held_lock+0x2c/0x110
[ 1342.634061]  ? lock_acquire+0x197/0x470
[ 1342.634463]  ? find_held_lock+0x2c/0x110
[ 1342.634867]  ? sock_has_perm+0x1ea/0x280
[ 1342.635308]  ? __import_iovec+0x458/0x590
[ 1342.635775]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1342.636278]  inet6_sendmsg+0x105/0x140
[ 1342.636656]  ? inet6_compat_ioctl+0x320/0x320
[ 1342.637037]  __sock_sendmsg+0xf2/0x190
[ 1342.637410]  ____sys_sendmsg+0x334/0x870
[ 1342.637842]  ? sock_write_iter+0x3d0/0x3d0
[ 1342.638267]  ? do_recvmmsg+0x6d0/0x6d0
[ 1342.638647]  ? __lock_acquire+0x1657/0x5b00
[ 1342.639020]  ___sys_sendmsg+0xf3/0x170
[ 1342.639397]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1342.639855]  ? vmacache_find+0x55/0x2a0
[ 1342.640266]  ? lock_acquire+0x197/0x470
[ 1342.640653]  ? find_held_lock+0x2c/0x110
[ 1342.641001]  ? __might_fault+0xd3/0x180
[ 1342.641380]  ? lock_downgrade+0x6d0/0x6d0
[ 1342.641782]  ? asm_exc_page_fault+0x1e/0x30
[ 1342.642227]  __sys_sendmmsg+0x195/0x470
[ 1342.642616]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1342.642984]  ? lock_downgrade+0x6d0/0x6d0
[ 1342.643391]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1342.643883]  ? wait_for_completion_io+0x270/0x270
[ 1342.644351]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1342.644912]  ? vfs_write+0x354/0xb10
[ 1342.645417]  ? fput_many+0x2f/0x1a0
[ 1342.645864]  ? ksys_write+0x1a9/0x260
[ 1342.646366]  ? __ia32_sys_read+0xb0/0xb0
[ 1342.646898]  __x64_sys_sendmmsg+0x99/0x100
[ 1342.647406]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1342.648013]  do_syscall_64+0x33/0x40
[ 1342.648385]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1342.648868] RIP: 0033:0x7f09c4bc0b19
[ 1342.649233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1342.650912] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1342.651662] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1342.652328] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1342.652971] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1342.653657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1342.654318] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:19:35 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:19:35 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:19:35 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xfffffcb5, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x46)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x2}}, './file0\x00'})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000640)={0x53, 0xfffffffffffffffd, 0x7a, 0x3f, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/178, 0xb2}, {&(0x7f0000000240)=""/167, 0xa7}, {&(0x7f0000000300)=""/2, 0x2}]}, &(0x7f0000000440)="e640efec89c70cfc0e497caac1ffaf20652b4e6f37b674927bb6009e56f5b1a6bffdab3f11b8205fb8a82e3911dac21a929bdfda252f279fc1aea0cbb47d251e1efb67000638b237ae0fc853d01a93c590faa1c80614a68cd64a7742d2e907c1a1f9d5eee4a74ef2865bae198b78dd7e3772704057e8c4eca4c8", &(0x7f00000004c0)=""/139, 0x80000001, 0x0, 0xffffffffffffffff, &(0x7f0000000380)})
creat(&(0x7f00000006c0)='./file0\x00', 0x48)

19:19:35 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xffffff8c)

19:19:35 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:19:35 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xe82000000000000)

[ 1342.679175] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:19:35 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xffffffa1)

[ 1342.712394] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:19:35 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:19:35 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x804000000000000)

19:19:35 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:19:35 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfffffff6)

19:19:35 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1000000000000000)

19:19:35 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:19:35 executing program 6:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:19:36 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1342.967143] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1342.979079] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[ 1342.988392] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[ 1342.998587] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
19:19:51 executing program 6:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:19:51 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xc00000000000000)

19:19:51 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:19:51 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1200000000000000)

19:19:51 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 35)

19:19:51 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfffffffb)

19:19:51 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:19:51 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1358.674445] FAULT_INJECTION: forcing a failure.
[ 1358.674445] name failslab, interval 1, probability 0, space 0, times 0
[ 1358.675528] CPU: 1 PID: 8596 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1358.676170] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1358.676937] Call Trace:
[ 1358.677172]  dump_stack+0x107/0x167
[ 1358.677483]  should_fail.cold+0x5/0xa
[ 1358.677863]  ? create_object.isra.0+0x3a/0xa20
[ 1358.678784]  should_failslab+0x5/0x20
[ 1358.679108]  kmem_cache_alloc+0x5b/0x310
[ 1358.679457]  ? lock_acquire+0x197/0x470
[ 1358.679853]  create_object.isra.0+0x3a/0xa20
[ 1358.680245]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1358.680755]  kmem_cache_alloc+0x159/0x310
[ 1358.681112]  skb_clone+0x14f/0x3d0
[ 1358.681419]  dev_queue_xmit_nit+0x3a7/0xb00
[ 1358.681842]  dev_hard_start_xmit+0xab/0x6f0
[ 1358.682210]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1358.682708]  __dev_queue_xmit+0x17ec/0x2710
[ 1358.683077]  ? find_held_lock+0x2c/0x110
[ 1358.683424]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1358.683866]  ? lock_downgrade+0x6d0/0x6d0
[ 1358.684237]  ? lock_acquire+0x197/0x470
[ 1358.684652]  ? ip6_finish_output2+0x203/0x1fe0
[ 1358.685041]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1358.685489]  neigh_connected_output+0x382/0x4d0
[ 1358.685940]  ip6_finish_output2+0xaaf/0x1fe0
[ 1358.686323]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1358.686797]  ip6_output+0x3b8/0x7e0
[ 1358.687114]  ip6_local_out+0xb4/0x1a0
[ 1358.687435]  ip6_send_skb+0xb7/0x350
[ 1358.687813]  udp_v6_send_skb+0x7aa/0x15b0
[ 1358.688228]  udpv6_sendmsg+0x2116/0x2ad0
[ 1358.688647]  ? ip_frag_init+0x350/0x350
[ 1358.688991]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1358.689427]  ? trace_hardirqs_on+0x5b/0x180
[ 1358.689846]  ? lock_acquire+0x197/0x470
[ 1358.690183]  ? find_held_lock+0x2c/0x110
[ 1358.690533]  ? lock_acquire+0x197/0x470
[ 1358.690917]  ? find_held_lock+0x2c/0x110
[ 1358.691272]  ? sock_has_perm+0x1ea/0x280
[ 1358.691690]  ? __import_iovec+0x458/0x590
[ 1358.692041]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1358.695822]  inet6_sendmsg+0x105/0x140
[ 1358.696175]  ? inet6_compat_ioctl+0x320/0x320
[ 1358.696601]  __sock_sendmsg+0xf2/0x190
[ 1358.696938]  ____sys_sendmsg+0x334/0x870
[ 1358.697286]  ? sock_write_iter+0x3d0/0x3d0
[ 1358.697718]  ? do_recvmmsg+0x6d0/0x6d0
[ 1358.698051]  ? __lock_acquire+0x1657/0x5b00
[ 1358.698466]  ___sys_sendmsg+0xf3/0x170
[ 1358.698854]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1358.699247]  ? vmacache_find+0x55/0x2a0
[ 1358.699651]  ? lock_acquire+0x197/0x470
[ 1358.699990]  ? find_held_lock+0x2c/0x110
[ 1358.700357]  ? __might_fault+0xd3/0x180
[ 1358.700744]  ? lock_downgrade+0x6d0/0x6d0
[ 1358.701094]  ? asm_exc_page_fault+0x1e/0x30
[ 1358.701473]  __sys_sendmmsg+0x195/0x470
[ 1358.701885]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1358.702251]  ? lock_downgrade+0x6d0/0x6d0
[ 1358.702670]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1358.703078]  ? wait_for_completion_io+0x270/0x270
[ 1358.703490]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1358.703936]  ? vfs_write+0x354/0xb10
[ 1358.704280]  ? fput_many+0x2f/0x1a0
[ 1358.704641]  ? ksys_write+0x1a9/0x260
[ 1358.704966]  ? __ia32_sys_read+0xb0/0xb0
[ 1358.705317]  __x64_sys_sendmmsg+0x99/0x100
[ 1358.705751]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1358.706189]  do_syscall_64+0x33/0x40
[ 1358.706504]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1358.706982] RIP: 0033:0x7f09c4bc0b19
[ 1358.707301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1358.708953] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1358.709669] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1358.710269] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1358.710913] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
19:19:51 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1201000000000000)

[ 1358.711510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1358.712186] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:19:51 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xd00000000000000)

19:19:51 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1358.790200] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:19:51 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfffffffe)

[ 1358.811954] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
19:19:51 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 36)

[ 1358.824277] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[ 1358.826071] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
19:19:51 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1358.889765] FAULT_INJECTION: forcing a failure.
[ 1358.889765] name failslab, interval 1, probability 0, space 0, times 0
[ 1358.890885] CPU: 0 PID: 8629 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1358.891466] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1358.892202] Call Trace:
[ 1358.892438]  dump_stack+0x107/0x167
[ 1358.892752]  should_fail.cold+0x5/0xa
[ 1358.893079]  ? lock_downgrade+0x6d0/0x6d0
[ 1358.893439]  ? skb_clone+0x14f/0x3d0
[ 1358.893760]  should_failslab+0x5/0x20
[ 1358.894085]  kmem_cache_alloc+0x5b/0x310
[ 1358.894442]  skb_clone+0x14f/0x3d0
[ 1358.894752]  packet_rcv+0x558/0x1410
[ 1358.895074]  ? run_filter+0x4d0/0x4d0
[ 1358.895398]  dev_queue_xmit_nit+0x38b/0xb00
[ 1358.895772]  dev_hard_start_xmit+0xab/0x6f0
[ 1358.896189]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1358.896638]  __dev_queue_xmit+0x17ec/0x2710
[ 1358.897011]  ? find_held_lock+0x2c/0x110
[ 1358.897356]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1358.897744]  ? lock_downgrade+0x6d0/0x6d0
[ 1358.898094]  ? lock_acquire+0x197/0x470
[ 1358.898433]  ? ip6_finish_output2+0x203/0x1fe0
[ 1358.898822]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1358.899267]  neigh_connected_output+0x382/0x4d0
[ 1358.899668]  ip6_finish_output2+0xaaf/0x1fe0
[ 1358.900050]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1358.900513]  ip6_output+0x3b8/0x7e0
[ 1358.900829]  ip6_local_out+0xb4/0x1a0
[ 1358.901154]  ip6_send_skb+0xb7/0x350
[ 1358.901475]  udp_v6_send_skb+0x7aa/0x15b0
[ 1358.901834]  udpv6_sendmsg+0x2116/0x2ad0
[ 1358.902183]  ? ip_frag_init+0x350/0x350
[ 1358.902527]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1358.902968]  ? lock_acquire+0x197/0x470
[ 1358.903305]  ? find_held_lock+0x2c/0x110
[ 1358.903659]  ? lock_acquire+0x197/0x470
[ 1358.903995]  ? find_held_lock+0x2c/0x110
[ 1358.904391]  ? sock_has_perm+0x1ea/0x280
[ 1358.904756]  ? __import_iovec+0x458/0x590
[ 1358.905107]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1358.905545]  inet6_sendmsg+0x105/0x140
[ 1358.905876]  ? inet6_compat_ioctl+0x320/0x320
[ 1358.906257]  __sock_sendmsg+0xf2/0x190
[ 1358.906589]  ____sys_sendmsg+0x334/0x870
[ 1358.906935]  ? sock_write_iter+0x3d0/0x3d0
[ 1358.907300]  ? do_recvmmsg+0x6d0/0x6d0
[ 1358.907634]  ? __lock_acquire+0x1657/0x5b00
[ 1358.908007]  ___sys_sendmsg+0xf3/0x170
[ 1358.908374]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1358.908759]  ? vmacache_find+0x55/0x2a0
[ 1358.909105]  ? lock_acquire+0x197/0x470
[ 1358.909442]  ? find_held_lock+0x2c/0x110
[ 1358.909790]  ? __might_fault+0xd3/0x180
[ 1358.910130]  ? lock_downgrade+0x6d0/0x6d0
[ 1358.910481]  ? asm_exc_page_fault+0x1e/0x30
[ 1358.910859]  __sys_sendmmsg+0x195/0x470
[ 1358.911200]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1358.911566]  ? lock_downgrade+0x6d0/0x6d0
[ 1358.911929]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1358.912373]  ? wait_for_completion_io+0x270/0x270
[ 1358.912786]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1358.913180]  ? vfs_write+0x354/0xb10
[ 1358.913496]  ? fput_many+0x2f/0x1a0
[ 1358.913815]  ? ksys_write+0x1a9/0x260
[ 1358.914139]  ? __ia32_sys_read+0xb0/0xb0
[ 1358.914488]  __x64_sys_sendmmsg+0x99/0x100
[ 1358.914848]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1358.915282]  do_syscall_64+0x33/0x40
[ 1358.915599]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1358.916030] RIP: 0033:0x7f09c4bc0b19
[ 1358.916444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1358.917988] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1358.918631] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1358.919232] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1358.919829] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1358.920460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1358.921058] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:20:05 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xf82000000000000)

19:20:05 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:20:05 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:20:05 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x80000000000)

19:20:05 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1400000000000000)

19:20:05 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:20:05 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:20:05 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 37)

[ 1372.744834] FAULT_INJECTION: forcing a failure.
[ 1372.744834] name failslab, interval 1, probability 0, space 0, times 0
[ 1372.745929] CPU: 1 PID: 8651 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1372.746517] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1372.752583] Call Trace:
[ 1372.752818]  dump_stack+0x107/0x167
[ 1372.753134]  should_fail.cold+0x5/0xa
[ 1372.753460]  ? lock_downgrade+0x6d0/0x6d0
[ 1372.753814]  ? skb_clone+0x14f/0x3d0
[ 1372.754137]  should_failslab+0x5/0x20
[ 1372.754462]  kmem_cache_alloc+0x5b/0x310
[ 1372.754809]  skb_clone+0x14f/0x3d0
[ 1372.755117]  packet_rcv+0x558/0x1410
[ 1372.755448]  ? run_filter+0x4d0/0x4d0
[ 1372.755770]  dev_queue_xmit_nit+0x38b/0xb00
[ 1372.756142]  dev_hard_start_xmit+0xab/0x6f0
[ 1372.756538]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1372.756985]  __dev_queue_xmit+0x17ec/0x2710
[ 1372.757358]  ? find_held_lock+0x2c/0x110
[ 1372.757705]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1372.758096]  ? lock_downgrade+0x6d0/0x6d0
[ 1372.758447]  ? lock_acquire+0x197/0x470
[ 1372.758789]  ? ip6_finish_output2+0x203/0x1fe0
[ 1372.759182]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1372.759632]  neigh_connected_output+0x382/0x4d0
[ 1372.760036]  ip6_finish_output2+0xaaf/0x1fe0
[ 1372.760462]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1372.760892]  ip6_output+0x3b8/0x7e0
[ 1372.761208]  ip6_local_out+0xb4/0x1a0
[ 1372.761530]  ip6_send_skb+0xb7/0x350
[ 1372.761854]  udp_v6_send_skb+0x7aa/0x15b0
[ 1372.762214]  udpv6_sendmsg+0x2116/0x2ad0
[ 1372.762561]  ? ip_frag_init+0x350/0x350
[ 1372.762904]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1372.763345]  ? perf_event_task_disable+0x390/0x390
[ 1372.763757]  ? lock_downgrade+0x6d0/0x6d0
[ 1372.764109]  ? hrtimer_start_range_ns+0x336/0xae0
[ 1372.764540]  ? lock_acquire+0x197/0x470
[ 1372.764878]  ? find_held_lock+0x2c/0x110
[ 1372.765232]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1372.765690]  ? sock_has_perm+0x1ea/0x280
[ 1372.766050]  ? __import_iovec+0x458/0x590
[ 1372.766401]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1372.766837]  inet6_sendmsg+0x105/0x140
[ 1372.767170]  ? inet6_compat_ioctl+0x320/0x320
[ 1372.767556]  __sock_sendmsg+0xf2/0x190
[ 1372.767886]  ____sys_sendmsg+0x334/0x870
[ 1372.768239]  ? sock_write_iter+0x3d0/0x3d0
[ 1372.768608]  ? do_recvmmsg+0x6d0/0x6d0
[ 1372.768939]  ? __lock_acquire+0x1657/0x5b00
[ 1372.769314]  ___sys_sendmsg+0xf3/0x170
[ 1372.769648]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1372.770034]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1372.770476]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1372.770855]  ? trace_hardirqs_on+0x5b/0x180
[ 1372.771225]  ? lock_acquire+0x197/0x470
[ 1372.771566]  ? find_held_lock+0x2c/0x110
[ 1372.771917]  ? __might_fault+0xd3/0x180
19:20:05 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1000000000000000)

[ 1372.772265]  ? lock_downgrade+0x6d0/0x6d0
[ 1372.772622]  ? io_schedule_timeout+0x140/0x140
[ 1372.773019]  __sys_sendmmsg+0x195/0x470
[ 1372.773364]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1372.773729]  ? lock_downgrade+0x6d0/0x6d0
[ 1372.774095]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1372.780487]  ? wait_for_completion_io+0x270/0x270
[ 1372.780897]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1372.781291]  ? vfs_write+0x354/0xb10
[ 1372.781607]  ? fput_many+0x2f/0x1a0
[ 1372.781914]  ? ksys_write+0x1a9/0x260
[ 1372.782238]  ? __ia32_sys_read+0xb0/0xb0
[ 1372.782587]  __x64_sys_sendmmsg+0x99/0x100
[ 1372.782943]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1372.783377]  do_syscall_64+0x33/0x40
[ 1372.783700]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1372.784129] RIP: 0033:0x7f09c4bc0b19
[ 1372.784460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1372.786008] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1372.786656] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1372.787259] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1372.787858] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1372.788483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1372.789084] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:20:05 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1800000000000000)

19:20:05 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1000000000000)

19:20:05 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:20:05 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x4840, 0x0)
sendfile(r0, r1, 0x0, 0x100000001)
r2 = gettid()
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1, 0xb0, 0x1, 0xa6, 0x0, 0x7, 0x2, 0xb, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x10001, 0x6}, 0x200, 0x9, 0x80000001, 0x5, 0x5, 0x7fff, 0x1000, 0x0, 0x80, 0x0, 0x4}, r2, 0x7, 0xffffffffffffffff, 0x3)
r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x9, 0x200000)
syz_io_uring_setup(0x6981, &(0x7f0000000140)={0x0, 0x2b85, 0x8, 0x0, 0x241, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f00000001c0), &(0x7f0000000200))

[ 1372.871843] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:20:06 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1372.942070] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:20:20 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:20:20 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1200000000000000)

19:20:20 executing program 6:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x54}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0xf7, &(0x7f0000000000))
io_setup(0x735, 0x0)
io_destroy(0x0)
openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r2 = eventfd(0x0)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000140)=r2, 0x1)
r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x4000)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))

19:20:20 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:20:20 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8000000000000)

19:20:20 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x2000000000000000)

19:20:20 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 38)

19:20:20 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:20:20 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x2103000000000000)

[ 1387.384470] FAULT_INJECTION: forcing a failure.
[ 1387.384470] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1387.385748] CPU: 0 PID: 8704 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1387.386325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1387.387017] Call Trace:
[ 1387.387249]  dump_stack+0x107/0x167
[ 1387.387561]  should_fail.cold+0x5/0xa
[ 1387.387890]  __alloc_pages_nodemask+0x182/0x600
[ 1387.388293]  ? __lock_acquire+0x1657/0x5b00
[ 1387.388750]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 1387.389266]  ? kmem_cache_alloc+0x301/0x310
[ 1387.389638]  alloc_pages_current+0x187/0x280
[ 1387.390013]  ? __unwind_start+0x523/0x7e0
[ 1387.390371]  allocate_slab+0x26f/0x380
[ 1387.390707]  ___slab_alloc+0x470/0x700
[ 1387.391042]  ? skb_clone+0x14f/0x3d0
[ 1387.391366]  ? run_filter+0x1a2/0x4d0
[ 1387.391696]  ? skb_clone+0x14f/0x3d0
[ 1387.392014]  ? kmem_cache_alloc+0x301/0x310
[ 1387.392384]  kmem_cache_alloc+0x301/0x310
[ 1387.392787]  skb_clone+0x14f/0x3d0
[ 1387.393096]  packet_rcv+0x558/0x1410
[ 1387.393423]  ? run_filter+0x4d0/0x4d0
[ 1387.393748]  dev_queue_xmit_nit+0x38b/0xb00
[ 1387.394126]  dev_hard_start_xmit+0xab/0x6f0
[ 1387.394494]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1387.394947]  __dev_queue_xmit+0x17ec/0x2710
[ 1387.395321]  ? find_held_lock+0x2c/0x110
[ 1387.395671]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1387.396064]  ? lock_downgrade+0x6d0/0x6d0
[ 1387.396435]  ? lock_acquire+0x197/0x470
[ 1387.396786]  ? ip6_finish_output2+0x203/0x1fe0
[ 1387.397181]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1387.397628]  neigh_connected_output+0x382/0x4d0
[ 1387.398033]  ip6_finish_output2+0xaaf/0x1fe0
[ 1387.398420]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1387.398901]  ip6_output+0x3b8/0x7e0
[ 1387.399220]  ip6_local_out+0xb4/0x1a0
[ 1387.399545]  ip6_send_skb+0xb7/0x350
[ 1387.399868]  udp_v6_send_skb+0x7aa/0x15b0
[ 1387.400232]  udpv6_sendmsg+0x2116/0x2ad0
[ 1387.400602]  ? ip_frag_init+0x350/0x350
[ 1387.400984]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1387.401431]  ? perf_event_task_disable+0x390/0x390
[ 1387.401844]  ? lock_downgrade+0x6d0/0x6d0
[ 1387.402200]  ? hrtimer_start_range_ns+0x336/0xae0
[ 1387.402612]  ? lock_acquire+0x197/0x470
[ 1387.402948]  ? find_held_lock+0x2c/0x110
[ 1387.403305]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1387.403750]  ? sock_has_perm+0x1ea/0x280
[ 1387.404113]  ? __import_iovec+0x458/0x590
[ 1387.404525]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1387.404965]  inet6_sendmsg+0x105/0x140
[ 1387.405300]  ? inet6_compat_ioctl+0x320/0x320
[ 1387.405683]  __sock_sendmsg+0xf2/0x190
[ 1387.406016]  ____sys_sendmsg+0x334/0x870
[ 1387.406365]  ? sock_write_iter+0x3d0/0x3d0
[ 1387.406725]  ? do_recvmmsg+0x6d0/0x6d0
[ 1387.407057]  ? __lock_acquire+0x1657/0x5b00
[ 1387.407436]  ___sys_sendmsg+0xf3/0x170
[ 1387.407772]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1387.408166]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1387.408563]  ? _raw_spin_unlock_irq+0x27/0x30
[ 1387.408951]  ? lock_acquire+0x197/0x470
[ 1387.409292]  ? find_held_lock+0x2c/0x110
[ 1387.409643]  ? __might_fault+0xd3/0x180
[ 1387.409984]  ? lock_downgrade+0x6d0/0x6d0
[ 1387.410344]  ? io_schedule_timeout+0x140/0x140
[ 1387.410743]  __sys_sendmmsg+0x195/0x470
[ 1387.411088]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1387.411457]  ? lock_downgrade+0x6d0/0x6d0
[ 1387.411822]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1387.412235]  ? wait_for_completion_io+0x270/0x270
[ 1387.412664]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1387.413059]  ? vfs_write+0x354/0xb10
[ 1387.413383]  ? fput_many+0x2f/0x1a0
[ 1387.413694]  ? ksys_write+0x1a9/0x260
[ 1387.414020]  ? __ia32_sys_read+0xb0/0xb0
[ 1387.414376]  __x64_sys_sendmmsg+0x99/0x100
[ 1387.414738]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1387.415176]  do_syscall_64+0x33/0x40
[ 1387.415498]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1387.415934] RIP: 0033:0x7f09c4bc0b19
[ 1387.416254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1387.417837] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1387.418483] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1387.419087] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1387.419690] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1387.420292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1387.420910] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:20:20 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1201000000000000)

19:20:20 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x20000000000000)

19:20:20 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1387.561072] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1387.587460] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:20:20 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 39)

19:20:20 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:20:20 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x2400000000000000)

19:20:20 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1400000000000000)

19:20:20 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1387.744755] FAULT_INJECTION: forcing a failure.
[ 1387.744755] name failslab, interval 1, probability 0, space 0, times 0
[ 1387.746510] CPU: 1 PID: 8730 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1387.747239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1387.748038] Call Trace:
[ 1387.748289]  dump_stack+0x107/0x167
[ 1387.748705]  should_fail.cold+0x5/0xa
[ 1387.749055]  ? __alloc_skb+0x6d/0x5b0
[ 1387.749407]  should_failslab+0x5/0x20
[ 1387.749836]  kmem_cache_alloc_node+0x55/0x330
[ 1387.750248]  __alloc_skb+0x6d/0x5b0
[ 1387.750647]  alloc_skb_with_frags+0x92/0x570
[ 1387.751050]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1387.751579]  ? trace_hardirqs_on+0x5b/0x180
[ 1387.751984]  sock_alloc_send_pskb+0x7af/0x930
[ 1387.752409]  ? sk_alloc+0x350/0x350
[ 1387.752816]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1387.753289]  ? find_held_lock+0x2c/0x110
[ 1387.753741]  ? lock_chain_count+0x20/0x20
[ 1387.754119]  ? mark_lock+0xf5/0x2df0
[ 1387.754466]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1387.755003]  ? ip6_mtu+0x1bb/0x3d0
[ 1387.755336]  ? lock_downgrade+0x6d0/0x6d0
[ 1387.755761]  ? ip_frag_init+0x350/0x350
[ 1387.756141]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1387.756670]  ? ip6_mtu+0x1e9/0x3d0
[ 1387.757030]  ? ip6_setup_cork+0xfb7/0x1740
[ 1387.757418]  ip6_make_skb+0x2de/0x4e0
[ 1387.757843]  ? ip_frag_init+0x350/0x350
[ 1387.758212]  ? ip_frag_init+0x350/0x350
[ 1387.758631]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1387.759066]  ? ip6_dst_hoplimit+0x199/0x440
[ 1387.759456]  ? lock_downgrade+0x6d0/0x6d0
[ 1387.759893]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1387.760270]  ? ip_frag_init+0x350/0x350
[ 1387.760714]  ? udp_v6_push_pending_frames+0x360/0x360
19:20:20 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x80000000000000)

[ 1387.761190]  ? perf_event_task_disable+0x390/0x390
[ 1387.765833]  ? lock_downgrade+0x6d0/0x6d0
[ 1387.766220]  ? hrtimer_start_range_ns+0x336/0xae0
[ 1387.766776]  ? lock_acquire+0x197/0x470
[ 1387.767139]  ? find_held_lock+0x2c/0x110
[ 1387.767627]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1387.768102]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1387.782850]  ? sock_has_perm+0x1ea/0x280
[ 1387.783248]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1387.796810]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1387.797289]  inet6_sendmsg+0x105/0x140
[ 1387.797705]  ? inet6_compat_ioctl+0x320/0x320
[ 1387.798127]  __sock_sendmsg+0xf2/0x190
[ 1387.798491]  ____sys_sendmsg+0x334/0x870
[ 1387.798917]  ? sock_write_iter+0x3d0/0x3d0
[ 1387.799309]  ? do_recvmmsg+0x6d0/0x6d0
[ 1387.812621]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1387.813130]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1387.813648]  ? trace_hardirqs_on+0x5b/0x180
[ 1387.814056]  ___sys_sendmsg+0xf3/0x170
[ 1387.814423]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1387.814875]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1387.815297]  ? _raw_spin_unlock_irq+0x27/0x30
[ 1387.815741]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1387.816165]  ? finish_task_switch+0x126/0x5d0
[ 1387.817499]  ? finish_task_switch+0xef/0x5d0
[ 1387.817884]  ? __switch_to+0x572/0xf70
[ 1387.818229]  ? __switch_to_asm+0x3a/0x60
[ 1387.818587]  ? __switch_to_asm+0x34/0x60
[ 1387.818946]  ? __schedule+0x82c/0x1ea0
[ 1387.819299]  ? io_schedule_timeout+0x140/0x140
[ 1387.819712]  __sys_sendmmsg+0x195/0x470
[ 1387.820068]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1387.820761]  ? lock_downgrade+0x6d0/0x6d0
[ 1387.821167]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1387.821637]  ? wait_for_completion_io+0x270/0x270
[ 1387.822092]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1387.822528]  ? vfs_write+0x354/0xb10
[ 1387.822861]  ? fput_many+0x2f/0x1a0
[ 1387.823188]  ? ksys_write+0x1a9/0x260
[ 1387.823568]  ? __ia32_sys_read+0xb0/0xb0
[ 1387.823970]  __x64_sys_sendmmsg+0x99/0x100
[ 1387.824371]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1387.825000]  do_syscall_64+0x33/0x40
[ 1387.825332]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1387.825781] RIP: 0033:0x7f09c4bc0b19
[ 1387.826146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1387.827880] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1387.828765] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1387.829439] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1387.830068] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1387.830733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1387.831400] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:20:35 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xf0ffffffffffff)

19:20:35 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 40)

19:20:35 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1800000000000000)

19:20:35 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x3f00000000000000)

19:20:35 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:20:35 executing program 6:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:20:35 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:20:35 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1402.045858] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:20:35 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x100000000000000)

[ 1402.075653] FAULT_INJECTION: forcing a failure.
[ 1402.075653] name failslab, interval 1, probability 0, space 0, times 0
[ 1402.076994] CPU: 1 PID: 8763 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1402.077614] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1402.078348] Call Trace:
[ 1402.078593]  dump_stack+0x107/0x167
[ 1402.078918]  should_fail.cold+0x5/0xa
[ 1402.079260]  ? __alloc_skb+0x6d/0x5b0
[ 1402.079601]  should_failslab+0x5/0x20
[ 1402.079939]  kmem_cache_alloc_node+0x55/0x330
[ 1402.080340]  __alloc_skb+0x6d/0x5b0
[ 1402.080682]  alloc_skb_with_frags+0x92/0x570
[ 1402.081071]  ? find_held_lock+0x2c/0x110
[ 1402.081440]  sock_alloc_send_pskb+0x7af/0x930
[ 1402.081846]  ? sk_alloc+0x350/0x350
[ 1402.082177]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1402.082636]  ? find_held_lock+0x2c/0x110
[ 1402.082998]  ? lock_chain_count+0x20/0x20
[ 1402.083377]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1402.083833]  ? ip6_mtu+0x1bb/0x3d0
[ 1402.084152]  ? lock_downgrade+0x6d0/0x6d0
[ 1402.084523]  ? ip_frag_init+0x350/0x350
[ 1402.084901]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1402.085313]  ? ip6_mtu+0x1e9/0x3d0
[ 1402.085633]  ? ip6_setup_cork+0xfb7/0x1740
[ 1402.086011]  ip6_make_skb+0x2de/0x4e0
[ 1402.086350]  ? ip_frag_init+0x350/0x350
[ 1402.086708]  ? ip_frag_init+0x350/0x350
[ 1402.087065]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1402.087494]  ? ip6_dst_hoplimit+0x199/0x440
[ 1402.087877]  ? lock_downgrade+0x6d0/0x6d0
[ 1402.088261]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1402.088637]  ? ip_frag_init+0x350/0x350
[ 1402.089005]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1402.089461]  ? trace_hardirqs_on+0x5b/0x180
[ 1402.089850]  ? lock_acquire+0x197/0x470
[ 1402.090205]  ? find_held_lock+0x2c/0x110
[ 1402.090571]  ? lock_acquire+0x197/0x470
[ 1402.090927]  ? find_held_lock+0x2c/0x110
[ 1402.091301]  ? sock_has_perm+0x1ea/0x280
[ 1402.091681]  ? __import_iovec+0x458/0x590
[ 1402.092051]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1402.092512]  inet6_sendmsg+0x105/0x140
[ 1402.092913]  ? inet6_compat_ioctl+0x320/0x320
[ 1402.093312]  __sock_sendmsg+0xf2/0x190
[ 1402.093658]  ____sys_sendmsg+0x334/0x870
[ 1402.094021]  ? sock_write_iter+0x3d0/0x3d0
[ 1402.094395]  ? do_recvmmsg+0x6d0/0x6d0
[ 1402.094742]  ? __lock_acquire+0x1657/0x5b00
[ 1402.095135]  ___sys_sendmsg+0xf3/0x170
[ 1402.095483]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1402.095889]  ? vmacache_find+0x55/0x2a0
[ 1402.096255]  ? lock_acquire+0x197/0x470
[ 1402.096617]  ? find_held_lock+0x2c/0x110
[ 1402.096986]  ? __might_fault+0xd3/0x180
[ 1402.097344]  ? lock_downgrade+0x6d0/0x6d0
[ 1402.097714]  ? asm_exc_page_fault+0x1e/0x30
[ 1402.098111]  __sys_sendmmsg+0x195/0x470
[ 1402.098470]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1402.098853]  ? lock_downgrade+0x6d0/0x6d0
[ 1402.099239]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1402.099668]  ? wait_for_completion_io+0x270/0x270
[ 1402.100099]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1402.100512]  ? vfs_write+0x354/0xb10
[ 1402.100861]  ? fput_many+0x2f/0x1a0
[ 1402.101189]  ? ksys_write+0x1a9/0x260
[ 1402.101530]  ? __ia32_sys_read+0xb0/0xb0
[ 1402.101897]  __x64_sys_sendmmsg+0x99/0x100
[ 1402.102276]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1402.102730]  do_syscall_64+0x33/0x40
[ 1402.103062]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1402.103517] RIP: 0033:0x7f09c4bc0b19
[ 1402.103851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1402.105465] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1402.106134] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1402.106761] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1402.107387] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1402.108019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1402.108660] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:20:35 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:20:35 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x2000000000000000)

[ 1402.132361] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[ 1402.137303] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[ 1402.146839] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
19:20:35 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8004000000000000)

19:20:35 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:20:35 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x2103000000000000)

19:20:35 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 41)

19:20:35 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x200000000000000)

19:20:35 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:20:35 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:20:35 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1402.373977] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1402.383917] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[ 1402.397442] FAULT_INJECTION: forcing a failure.
[ 1402.397442] name failslab, interval 1, probability 0, space 0, times 0
[ 1402.400427] CPU: 0 PID: 8795 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1402.402065] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1402.404016] Call Trace:
[ 1402.404643]  dump_stack+0x107/0x167
[ 1402.405495]  should_fail.cold+0x5/0xa
[ 1402.406397]  should_failslab+0x5/0x20
[ 1402.407282]  __kmalloc_node_track_caller+0x74/0x3b0
[ 1402.408457]  ? alloc_skb_with_frags+0x92/0x570
[ 1402.409538]  __alloc_skb+0xb1/0x5b0
[ 1402.410391]  alloc_skb_with_frags+0x92/0x570
[ 1402.411417]  ? find_held_lock+0x2c/0x110
[ 1402.412366]  sock_alloc_send_pskb+0x7af/0x930
[ 1402.413425]  ? sk_alloc+0x350/0x350
[ 1402.414276]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1402.415498]  ? lock_chain_count+0x20/0x20
[ 1402.416470]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1402.417662]  ? ip6_mtu+0x1bb/0x3d0
[ 1402.418489]  ? lock_downgrade+0x6d0/0x6d0
[ 1402.419453]  ? ip_frag_init+0x350/0x350
[ 1402.420396]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1402.421491]  ? ip6_mtu+0x1e9/0x3d0
[ 1402.422320]  ? ip6_setup_cork+0xfb7/0x1740
[ 1402.423303]  ip6_make_skb+0x2de/0x4e0
[ 1402.424195]  ? ip_frag_init+0x350/0x350
[ 1402.425130]  ? ip_frag_init+0x350/0x350
[ 1402.425536]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1402.426040]  ? ip6_dst_hoplimit+0x199/0x440
[ 1402.426504]  ? lock_downgrade+0x6d0/0x6d0
[ 1402.426947]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1402.427381]  ? ip_frag_init+0x350/0x350
[ 1402.427820]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1402.428374]  ? perf_event_task_disable+0x390/0x390
[ 1402.428890]  ? lock_downgrade+0x6d0/0x6d0
[ 1402.429343]  ? hrtimer_start_range_ns+0x336/0xae0
[ 1402.429827]  ? lock_acquire+0x197/0x470
[ 1402.430245]  ? find_held_lock+0x2c/0x110
[ 1402.430687]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1402.431246]  ? sock_has_perm+0x1ea/0x280
[ 1402.431696]  ? __import_iovec+0x458/0x590
[ 1402.432140]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1402.432678]  inet6_sendmsg+0x105/0x140
[ 1402.433079]  ? inet6_compat_ioctl+0x320/0x320
[ 1402.433561]  __sock_sendmsg+0xf2/0x190
[ 1402.433952]  ____sys_sendmsg+0x334/0x870
[ 1402.434381]  ? sock_write_iter+0x3d0/0x3d0
[ 1402.434823]  ? do_recvmmsg+0x6d0/0x6d0
[ 1402.435664]  ? __lock_acquire+0x1657/0x5b00
[ 1402.436068]  ___sys_sendmsg+0xf3/0x170
[ 1402.436436]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1402.436872]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1402.437365]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1402.437784]  ? trace_hardirqs_on+0x5b/0x180
[ 1402.438192]  ? lock_acquire+0x197/0x470
[ 1402.438564]  ? find_held_lock+0x2c/0x110
[ 1402.438946]  ? __might_fault+0xd3/0x180
[ 1402.439315]  ? lock_downgrade+0x6d0/0x6d0
[ 1402.439704]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1402.440901]  __sys_sendmmsg+0x195/0x470
[ 1402.441291]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1402.442235]  ? lock_downgrade+0x6d0/0x6d0
[ 1402.442645]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1402.443700]  ? wait_for_completion_io+0x270/0x270
[ 1402.448677]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1402.449079]  ? vfs_write+0x354/0xb10
[ 1402.449402]  ? fput_many+0x2f/0x1a0
[ 1402.449711]  ? ksys_write+0x1a9/0x260
[ 1402.450035]  ? __ia32_sys_read+0xb0/0xb0
[ 1402.450381]  __x64_sys_sendmmsg+0x99/0x100
[ 1402.450737]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1402.451166]  do_syscall_64+0x33/0x40
[ 1402.451479]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1402.451907] RIP: 0033:0x7f09c4bc0b19
[ 1402.452222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1402.453784] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1402.454421] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1402.455016] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1402.455615] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1402.456208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1402.456841] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:20:49 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8102000000000000)

19:20:49 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 42)

[ 1416.026576] FAULT_INJECTION: forcing a failure.
[ 1416.026576] name failslab, interval 1, probability 0, space 0, times 0
[ 1416.027620] CPU: 0 PID: 8811 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1416.028200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1416.029014] Call Trace:
[ 1416.029248]  dump_stack+0x107/0x167
[ 1416.029604]  should_fail.cold+0x5/0xa
[ 1416.029933]  should_failslab+0x5/0x20
[ 1416.030258]  __kmalloc_node_track_caller+0x74/0x3b0
[ 1416.030729]  ? alloc_skb_with_frags+0x92/0x570
[ 1416.031117]  __alloc_skb+0xb1/0x5b0
[ 1416.031474]  alloc_skb_with_frags+0x92/0x570
[ 1416.031844]  ? find_held_lock+0x2c/0x110
[ 1416.032193]  sock_alloc_send_pskb+0x7af/0x930
[ 1416.032649]  ? sk_alloc+0x350/0x350
[ 1416.032977]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1416.033488]  ? __ip6_append_data.isra.0+0x1bde/0x3a70
[ 1416.033926]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1416.034452]  ? ip6_mtu+0x1bb/0x3d0
[ 1416.034753]  ? lock_downgrade+0x6d0/0x6d0
[ 1416.035104]  ? ip_frag_init+0x350/0x350
[ 1416.035493]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1416.035995]  ? ip6_mtu+0x1e9/0x3d0
[ 1416.036297]  ? ip6_setup_cork+0xfb7/0x1740
[ 1416.036695]  ip6_make_skb+0x2de/0x4e0
[ 1416.037058]  ? ip_frag_init+0x350/0x350
[ 1416.037444]  ? ip_frag_init+0x350/0x350
[ 1416.037779]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1416.038186]  ? ip6_dst_hoplimit+0x199/0x440
[ 1416.038593]  ? lock_downgrade+0x6d0/0x6d0
[ 1416.038975]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1416.039428]  ? ip_frag_init+0x350/0x350
[ 1416.039785]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1416.040226]  ? perf_event_task_disable+0x390/0x390
[ 1416.040680]  ? lock_downgrade+0x6d0/0x6d0
[ 1416.041109]  ? hrtimer_start_range_ns+0x336/0xae0
[ 1416.042058]  ? lock_acquire+0x197/0x470
[ 1416.042794]  ? find_held_lock+0x2c/0x110
[ 1416.043546]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1416.044539]  ? sock_has_perm+0x1ea/0x280
[ 1416.045441]  ? __import_iovec+0x458/0x590
[ 1416.045795]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1416.046233]  inet6_sendmsg+0x105/0x140
[ 1416.046608]  ? inet6_compat_ioctl+0x320/0x320
[ 1416.046985]  __sock_sendmsg+0xf2/0x190
[ 1416.047353]  ____sys_sendmsg+0x334/0x870
[ 1416.047706]  ? sock_write_iter+0x3d0/0x3d0
[ 1416.048059]  ? do_recvmmsg+0x6d0/0x6d0
[ 1416.048440]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1416.048911]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1416.049805]  ? trace_hardirqs_on+0x5b/0x180
[ 1416.050595]  ___sys_sendmsg+0xf3/0x170
[ 1416.051264]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1416.052099]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1416.052963]  ? _raw_spin_unlock_irq+0x27/0x30
[ 1416.053772]  ? finish_task_switch+0x1a4/0x5d0
[ 1416.054576]  ? __switch_to+0x572/0xf70
[ 1416.055229]  ? __switch_to_asm+0x3a/0x60
[ 1416.055952]  ? __switch_to_asm+0x34/0x60
[ 1416.056688]  ? __schedule+0x82c/0x1ea0
[ 1416.057452]  ? io_schedule_timeout+0x140/0x140
[ 1416.058224]  __sys_sendmmsg+0x195/0x470
[ 1416.058941]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1416.059882]  ? lock_downgrade+0x6d0/0x6d0
[ 1416.060455]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1416.061599]  ? wait_for_completion_io+0x270/0x270
[ 1416.062751]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1416.063830]  ? vfs_write+0x354/0xb10
[ 1416.064699]  ? fput_many+0x2f/0x1a0
[ 1416.065585]  ? ksys_write+0x1a9/0x260
[ 1416.066500]  ? __ia32_sys_read+0xb0/0xb0
[ 1416.067473]  __x64_sys_sendmmsg+0x99/0x100
[ 1416.068459]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1416.069668]  do_syscall_64+0x33/0x40
[ 1416.070535]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1416.071726] RIP: 0033:0x7f09c4bc0b19
[ 1416.072609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1416.078569] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1416.080345] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1416.081994] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1416.083710] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1416.085400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1416.087045] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:20:49 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:20:49 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:20:49 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x2400000000000000)

19:20:49 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x201000000000000)

19:20:49 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:20:49 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, 0x0)
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:20:49 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8bffffff00000000)

19:20:49 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1416.154582] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:20:49 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x3f00000000000000)

19:20:49 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0)
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1416.201742] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:21:02 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8cffffff00000000)

19:21:02 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:21:02 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0)
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:21:02 executing program 6:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xfffffffe}, {{@in6=@private1, 0x0, 0x6c}}}, 0xe8)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r1, &(0x7f0000000080), 0x0, 0x40081, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
preadv2(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000380)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x17)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000080))
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fcntl$lock(r3, 0x7, &(0x7f0000000600)={0x1, 0x4, 0x0, 0x6})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
syz_open_dev$vcsu(&(0x7f00000000c0), 0x2, 0xc00)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)
unshare(0x48020200)

19:21:02 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 43)

19:21:02 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, 0x0)
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:21:02 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8004000000000000)

19:21:02 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x300000000000000)

[ 1429.808970] FAULT_INJECTION: forcing a failure.
[ 1429.808970] name failslab, interval 1, probability 0, space 0, times 0
[ 1429.811680] CPU: 1 PID: 8860 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1429.811697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1429.811702] Call Trace:
[ 1429.811723]  dump_stack+0x107/0x167
[ 1429.811740]  should_fail.cold+0x5/0xa
[ 1429.811755]  ? lock_release+0x680/0x680
[ 1429.811770]  ? skb_clone+0x14f/0x3d0
[ 1429.811788]  should_failslab+0x5/0x20
[ 1429.811802]  kmem_cache_alloc+0x5b/0x310
[ 1429.811820]  skb_clone+0x14f/0x3d0
[ 1429.811837]  dev_queue_xmit_nit+0x3a7/0xb00
[ 1429.811860]  dev_hard_start_xmit+0xab/0x6f0
[ 1429.811874]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1429.811893]  __dev_queue_xmit+0x17ec/0x2710
[ 1429.811912]  ? find_held_lock+0x2c/0x110
[ 1429.811926]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1429.811943]  ? lock_downgrade+0x6d0/0x6d0
[ 1429.811957]  ? lock_acquire+0x197/0x470
[ 1429.811973]  ? ip6_finish_output2+0x203/0x1fe0
[ 1429.811992]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1429.812011]  neigh_connected_output+0x382/0x4d0
[ 1429.812036]  ip6_finish_output2+0xaaf/0x1fe0
[ 1429.812060]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1429.812077]  ip6_output+0x3b8/0x7e0
[ 1429.812100]  ip6_local_out+0xb4/0x1a0
[ 1429.812115]  ip6_send_skb+0xb7/0x350
[ 1429.812134]  udp_v6_send_skb+0x7aa/0x15b0
[ 1429.812158]  udpv6_sendmsg+0x2116/0x2ad0
[ 1429.812174]  ? ip_frag_init+0x350/0x350
[ 1429.812197]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1429.812211]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1429.812226]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1429.812257]  ? lock_acquire+0x197/0x470
[ 1429.812269]  ? find_held_lock+0x2c/0x110
[ 1429.812296]  ? sock_has_perm+0x1ea/0x280
[ 1429.812404]  ? __import_iovec+0x458/0x590
[ 1429.812419]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1429.812436]  inet6_sendmsg+0x105/0x140
[ 1429.812450]  ? inet6_compat_ioctl+0x320/0x320
[ 1429.812462]  __sock_sendmsg+0xf2/0x190
[ 1429.812477]  ____sys_sendmsg+0x334/0x870
[ 1429.812493]  ? sock_write_iter+0x3d0/0x3d0
[ 1429.812505]  ? do_recvmmsg+0x6d0/0x6d0
[ 1429.812575]  ? __lock_acquire+0x1657/0x5b00
[ 1429.812603]  ___sys_sendmsg+0xf3/0x170
[ 1429.812617]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1429.812634]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1429.812645]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1429.812656]  ? trace_hardirqs_on+0x5b/0x180
[ 1429.812675]  ? lock_acquire+0x197/0x470
[ 1429.812687]  ? find_held_lock+0x2c/0x110
[ 1429.812706]  ? __might_fault+0xd3/0x180
[ 1429.812720]  ? lock_downgrade+0x6d0/0x6d0
[ 1429.812736]  ? io_schedule_timeout+0x140/0x140
[ 1429.812764]  __sys_sendmmsg+0x195/0x470
[ 1429.812782]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1429.812796]  ? lock_downgrade+0x6d0/0x6d0
[ 1429.812825]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1429.812842]  ? wait_for_completion_io+0x270/0x270
[ 1429.812859]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1429.812873]  ? vfs_write+0x354/0xb10
[ 1429.812886]  ? fput_many+0x2f/0x1a0
[ 1429.812913]  ? ksys_write+0x1a9/0x260
[ 1429.812930]  ? __ia32_sys_read+0xb0/0xb0
[ 1429.812953]  __x64_sys_sendmmsg+0x99/0x100
[ 1429.812978]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1429.854372]  do_syscall_64+0x33/0x40
[ 1429.854819]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1429.855348] RIP: 0033:0x7f09c4bc0b19
[ 1429.855758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1429.857710] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1429.858490] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1429.859195] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1429.859925] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1429.862959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1429.863736] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:21:02 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x400000000000000)

[ 1429.996533] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:21:03 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x500000000000000)

19:21:03 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xa1ffffff00000000)

19:21:03 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8102000000000000)

19:21:03 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:21:03 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xf6ffffff00000000)

19:21:03 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0)
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1430.098596] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:21:17 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:21:17 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfbffffff00000000)

19:21:17 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, 0x0)
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:21:17 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:21:17 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x600000000000000)

19:21:17 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 44)

19:21:17 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8bffffff00000000)

19:21:17 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1444.211114] FAULT_INJECTION: forcing a failure.
[ 1444.211114] name failslab, interval 1, probability 0, space 0, times 0
[ 1444.212526] CPU: 1 PID: 8908 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1444.213282] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1444.214052] Call Trace:
[ 1444.214311]  dump_stack+0x107/0x167
[ 1444.214653]  should_fail.cold+0x5/0xa
[ 1444.215014]  ? create_object.isra.0+0x3a/0xa20
[ 1444.215448]  should_failslab+0x5/0x20
[ 1444.215807]  kmem_cache_alloc+0x5b/0x310
[ 1444.216185]  ? lock_acquire+0x197/0x470
[ 1444.216559]  create_object.isra.0+0x3a/0xa20
[ 1444.216967]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1444.219034]  kmem_cache_alloc+0x159/0x310
[ 1444.219403]  skb_clone+0x14f/0x3d0
[ 1444.219705]  dev_queue_xmit_nit+0x3a7/0xb00
[ 1444.220076]  dev_hard_start_xmit+0xab/0x6f0
[ 1444.220440]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1444.220890]  __dev_queue_xmit+0x17ec/0x2710
[ 1444.221273]  ? find_held_lock+0x2c/0x110
[ 1444.221620]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1444.222012]  ? lock_downgrade+0x6d0/0x6d0
[ 1444.222364]  ? lock_acquire+0x197/0x470
[ 1444.222705]  ? ip6_finish_output2+0x203/0x1fe0
[ 1444.223097]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1444.223545]  neigh_connected_output+0x382/0x4d0
[ 1444.223950]  ip6_finish_output2+0xaaf/0x1fe0
[ 1444.224331]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1444.224755]  ip6_output+0x3b8/0x7e0
[ 1444.225078]  ip6_local_out+0xb4/0x1a0
[ 1444.225419]  ip6_send_skb+0xb7/0x350
[ 1444.225739]  udp_v6_send_skb+0x7aa/0x15b0
[ 1444.226099]  udpv6_sendmsg+0x2116/0x2ad0
[ 1444.226445]  ? ip_frag_init+0x350/0x350
[ 1444.226788]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1444.227229]  ? lock_chain_count+0x20/0x20
[ 1444.227588]  ? lock_acquire+0x197/0x470
[ 1444.227924]  ? find_held_lock+0x2c/0x110
[ 1444.228275]  ? lock_chain_count+0x20/0x20
[ 1444.228627]  ? sock_has_perm+0x1ea/0x280
[ 1444.228988]  ? __import_iovec+0x458/0x590
[ 1444.229356]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1444.229792]  inet6_sendmsg+0x105/0x140
[ 1444.230122]  ? inet6_compat_ioctl+0x320/0x320
[ 1444.230500]  __sock_sendmsg+0xf2/0x190
[ 1444.230831]  ____sys_sendmsg+0x334/0x870
[ 1444.231176]  ? sock_write_iter+0x3d0/0x3d0
[ 1444.231533]  ? do_recvmmsg+0x6d0/0x6d0
[ 1444.231863]  ? rcu_report_exp_cpu_mult+0x323/0x4c0
[ 1444.232290]  ___sys_sendmsg+0xf3/0x170
[ 1444.232622]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1444.233006]  ? lock_downgrade+0x6d0/0x6d0
[ 1444.233372]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1444.233815]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1444.234192]  ? trace_hardirqs_on+0x5b/0x180
[ 1444.234555]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1444.234934]  ? __schedule+0x16a4/0x1ea0
[ 1444.235283]  ? io_schedule_timeout+0x140/0x140
[ 1444.235680]  __sys_sendmmsg+0x195/0x470
[ 1444.236024]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1444.236387]  ? lock_downgrade+0x6d0/0x6d0
[ 1444.236751]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1444.237167]  ? wait_for_completion_io+0x270/0x270
[ 1444.237581]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1444.237974]  ? vfs_write+0x354/0xb10
[ 1444.238295]  ? fput_many+0x2f/0x1a0
[ 1444.238604]  ? ksys_write+0x1a9/0x260
[ 1444.238927]  ? __ia32_sys_read+0xb0/0xb0
[ 1444.239276]  __x64_sys_sendmmsg+0x99/0x100
[ 1444.239634]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1444.240067]  do_syscall_64+0x33/0x40
[ 1444.240382]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1444.240814] RIP: 0033:0x7f09c4bc0b19
[ 1444.241148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1444.242690] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1444.243333] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1444.243931] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1444.244529] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1444.245141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1444.245740] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:21:17 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x700000000000000)

[ 1444.277108] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:21:17 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8cffffff00000000)

19:21:17 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0)
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:21:17 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfeffffff00000000)

19:21:17 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1444.316852] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:21:17 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x804000000000000)

19:21:17 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:21:17 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 45)

19:21:17 executing program 6:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x4, 0x75, 0x0, 0x372, 0x2800, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0x4}, 0x2, 0x5bc, 0x56411dfc, 0x9, 0x7fffffff, 0x0, 0x2, 0x0, 0x401, 0x0, 0x1df}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x11)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140))
r1 = fork()
ptrace(0x10, r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f0000000640)={0x284, 0x3a, 0x2, 0x70bd25, 0x25dfdbfc, {0x8}, [@nested={0x112, 0x5c, 0x0, 0x1, [@typed={0x6, 0x33, 0x0, 0x0, @str=',\x00'}, @typed={0x8, 0x96, 0x0, 0x0, @pid}, @typed={0x14, 0x45, 0x0, 0x0, @ipv6=@private2}, @generic="fbfce10ada5255", @generic="9bb9c2f6edcbe59648c13450f02e04d3c30c91b99831897de491986b16e8378aed2662c2bfc88b22837e75fef509e471b75173fa7ca544060c3971c1d812eec7d1480628055aebe3b10ad5a4a02898d2b70f900ac8ebaa7ea11266e75d23a510a4b622107bcebbf9f46fd189209dc5014506025e4bc86a12f6e4e6f48a39d3769c5bc44538f83b5bb5e642889a56c0be7ef3e1d019343c57cf7c5eb4ffc2ca", @typed={0x42, 0x7b, 0x0, 0x0, @binary="4f4607d1372ad1eaceeebb148863aabb31f960bf3a85b4cd88c880182abfd1c73fe993f2d1b8608d841e71480f1ee63f8c01631433564630bd454cf095c6"}]}, @typed={0x8, 0x42, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x30}}, @nested={0x152, 0x73, 0x0, 0x1, [@typed={0x56, 0x8a, 0x0, 0x0, @binary="3ba4c9845672b9f51b9c68566ec4de1bab006625c9cb2482f1230c7b310a4cd90eebebd3e5d43643ced764162c8a37102deab5794c8846118da71ef366509aa68e4be2c8017b3af1fb21389f74cb2d682941"}, @typed={0x8, 0x43, 0x0, 0x0, @ipv4=@local}, @generic="c4960081d63f0de0d9116cf7ad2b98fe7aaa8bb73fa1982960c87913c000b369a15dcda57dc66370074192834f438b523745d85c9fbec8f3eaf9ebeb0f7d6df534aa5d5b8169849b136d4352cd100331eb98e41ca378965306140a392e27df7b8be7644498e80a8f675c2a717d9f066113aa327ffe995008d7d9609ec738b58e7643f504893e52ae71a0176e030a487f0fc63c7a03b0585658da4fd6e83682a48d8f4c7c8ada3d53d636b527a12350da8b3d6cb7d690c97285614be85a303808409fddf73fda457e17b88e8e4f04cad736ccddba695c027cd73e0c2acbc0549edddc0d2c43d8b65c3d668c2494a4"]}]}, 0x284}, 0x1, 0x0, 0x0, 0x4000840}, 0x20040041)
fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x5, &(0x7f0000000440)=[{&(0x7f0000000140)="a26a0820f84e10b9bef6a5cb4a9567dbcaf858c57f85e9aa4f2b31f3df3b9c9635734569ae8c30d6828bc774b48235bc8a91381bdeffc3697a14002a52015adef779b8db7211df599403b0a8688dc5d9e1fa470d51534f63b4318e7435079e2475dd7668ffd170cbc4f0590937ce2a8aec69583bee4429e0f9d90827829e2f40ba45900cd65412c57947da1343e54b9c9a671206c1abea068996", 0x9a, 0x5}, {&(0x7f0000000200)="4f0080c8b777ca6bc4fddc932a1c8ed9eb0980f02b09d3af6ab15bd298393859d7977516d791d33f3532a2ce91e6ddf5581fbe7e38c654dcdb2b38be68a196852fa61cc9c39f685188254bc4390653fe7a2a874a14360ae12ccd535b71ad8b507f597aaf227622ae6bc47fa4b8e32b7b80ac8a479b52b93d007d6dbaa768a776ec705fb56c4c0c1358540eec51756c1da6ed2ab083ab3b23258f54ef64bc354f7d039b53a2f6c1923f8aca20cfc4ddf6d23fd6d16405d12572485da6938b1fe2dcd4ec89353951d955", 0xc9, 0x8}, {&(0x7f0000000300)="a897901ad2cf95831dd8edd3433f72fdc8a9db65d2341c483c41e4835c2ea7318dae9c1c09c03409dbc2b8e1832cc5bd3a31d3ec48153614d41e5b4ed8e3ee0eb085a52b6e6382aab74c6112cfdda8e53a8c16db3bd4f044e4e9164f235fb16156c045d9cd7fa47539c316b04470723f4ed450b594302c9407947e88f1f7e54f70654d5bf9a0cdbcbb9d5e6056b7ad", 0x8f, 0x1ff}, {&(0x7f00000003c0)="63f5f3e84b249e677ff30ddfe3113dc7", 0x10, 0x3}, {&(0x7f0000000400)="a21993b5017d6b2afccd9b83411b85a5fe835ed4324ebd08e4", 0x19, 0x6}], 0x24, &(0x7f0000000540)={[{@nojournal_checksum}, {@errors_remount}, {@noacl}, {@nojournal_checksum}, {@errors_continue}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfshat={'smackfshat', 0x3d, '-\\!'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@dont_appraise}, {@fsname}]})
ptrace(0x4208, r1)
ptrace(0x11, r1)

19:21:17 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xa1ffffff00000000)

[ 1444.416426] FAULT_INJECTION: forcing a failure.
[ 1444.416426] name failslab, interval 1, probability 0, space 0, times 0
[ 1444.417455] CPU: 1 PID: 8936 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1444.418034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1444.418737] Call Trace:
[ 1444.418973]  dump_stack+0x107/0x167
[ 1444.419288]  should_fail.cold+0x5/0xa
[ 1444.419619]  ? lock_downgrade+0x6d0/0x6d0
[ 1444.419977]  ? skb_clone+0x14f/0x3d0
[ 1444.420300]  should_failslab+0x5/0x20
[ 1444.420629]  kmem_cache_alloc+0x5b/0x310
[ 1444.420979]  skb_clone+0x14f/0x3d0
[ 1444.421306]  packet_rcv+0x558/0x1410
[ 1444.421637]  ? run_filter+0x4d0/0x4d0
[ 1444.421962]  dev_queue_xmit_nit+0x38b/0xb00
[ 1444.422338]  dev_hard_start_xmit+0xab/0x6f0
[ 1444.422707]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1444.423158]  __dev_queue_xmit+0x17ec/0x2710
[ 1444.423532]  ? find_held_lock+0x2c/0x110
[ 1444.423879]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1444.424273]  ? lock_downgrade+0x6d0/0x6d0
[ 1444.424637]  ? lock_acquire+0x197/0x470
[ 1444.424991]  ? ip6_finish_output2+0x203/0x1fe0
[ 1444.425401]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1444.425853]  neigh_connected_output+0x382/0x4d0
[ 1444.426260]  ip6_finish_output2+0xaaf/0x1fe0
[ 1444.426646]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1444.427073]  ip6_output+0x3b8/0x7e0
[ 1444.427391]  ip6_local_out+0xb4/0x1a0
[ 1444.427719]  ip6_send_skb+0xb7/0x350
[ 1444.428045]  udp_v6_send_skb+0x7aa/0x15b0
[ 1444.428408]  udpv6_sendmsg+0x2116/0x2ad0
[ 1444.428762]  ? ip_frag_init+0x350/0x350
[ 1444.429119]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1444.429570]  ? perf_event_task_disable+0x390/0x390
[ 1444.429986]  ? lock_downgrade+0x6d0/0x6d0
[ 1444.430344]  ? hrtimer_start_range_ns+0x336/0xae0
[ 1444.430757]  ? lock_acquire+0x197/0x470
[ 1444.431094]  ? find_held_lock+0x2c/0x110
[ 1444.431450]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1444.431911]  ? sock_has_perm+0x1ea/0x280
[ 1444.432276]  ? __import_iovec+0x458/0x590
[ 1444.432630]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1444.433077]  inet6_sendmsg+0x105/0x140
[ 1444.433416]  ? inet6_compat_ioctl+0x320/0x320
[ 1444.433801]  __sock_sendmsg+0xf2/0x190
[ 1444.434137]  ____sys_sendmsg+0x334/0x870
[ 1444.434487]  ? sock_write_iter+0x3d0/0x3d0
[ 1444.434849]  ? do_recvmmsg+0x6d0/0x6d0
[ 1444.435190]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1444.435642]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1444.436102]  ? trace_hardirqs_on+0x5b/0x180
[ 1444.436474]  ___sys_sendmsg+0xf3/0x170
[ 1444.436815]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1444.437217]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1444.437599]  ? _raw_spin_unlock_irq+0x27/0x30
[ 1444.437985]  ? finish_task_switch+0x1a4/0x5d0
[ 1444.438368]  ? __switch_to+0x572/0xf70
[ 1444.438700]  ? __switch_to_asm+0x3a/0x60
[ 1444.439044]  ? __switch_to_asm+0x34/0x60
[ 1444.439395]  ? __schedule+0x82c/0x1ea0
[ 1444.439740]  ? io_schedule_timeout+0x140/0x140
[ 1444.440140]  __sys_sendmmsg+0x195/0x470
[ 1444.440485]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1444.440852]  ? lock_downgrade+0x6d0/0x6d0
[ 1444.441230]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1444.441645]  ? wait_for_completion_io+0x270/0x270
[ 1444.442058]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1444.442457]  ? vfs_write+0x354/0xb10
[ 1444.442775]  ? fput_many+0x2f/0x1a0
[ 1444.443087]  ? ksys_write+0x1a9/0x260
[ 1444.443414]  ? __ia32_sys_read+0xb0/0xb0
[ 1444.443772]  __x64_sys_sendmmsg+0x99/0x100
[ 1444.444135]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1444.444574]  do_syscall_64+0x33/0x40
[ 1444.444893]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1444.445343] RIP: 0033:0x7f09c4bc0b19
[ 1444.445662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1444.447214] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1444.447861] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1444.448467] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1444.449075] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1444.449683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1444.450287] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:21:17 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xff00000000000000)

19:21:17 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xf6ffffff00000000)

19:21:17 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:21:17 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[ 1444.557309] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1444.571605] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:21:31 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xff01000000000000)

19:21:31 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xc00000000000000)

19:21:31 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfbffffff00000000)

19:21:31 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:21:31 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:21:31 executing program 6:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x4, 0x75, 0x0, 0x372, 0x2800, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0x4}, 0x2, 0x5bc, 0x56411dfc, 0x9, 0x7fffffff, 0x0, 0x2, 0x0, 0x401, 0x0, 0x1df}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x11)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140))
r1 = fork()
ptrace(0x10, r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f0000000640)={0x284, 0x3a, 0x2, 0x70bd25, 0x25dfdbfc, {0x8}, [@nested={0x112, 0x5c, 0x0, 0x1, [@typed={0x6, 0x33, 0x0, 0x0, @str=',\x00'}, @typed={0x8, 0x96, 0x0, 0x0, @pid}, @typed={0x14, 0x45, 0x0, 0x0, @ipv6=@private2}, @generic="fbfce10ada5255", @generic="9bb9c2f6edcbe59648c13450f02e04d3c30c91b99831897de491986b16e8378aed2662c2bfc88b22837e75fef509e471b75173fa7ca544060c3971c1d812eec7d1480628055aebe3b10ad5a4a02898d2b70f900ac8ebaa7ea11266e75d23a510a4b622107bcebbf9f46fd189209dc5014506025e4bc86a12f6e4e6f48a39d3769c5bc44538f83b5bb5e642889a56c0be7ef3e1d019343c57cf7c5eb4ffc2ca", @typed={0x42, 0x7b, 0x0, 0x0, @binary="4f4607d1372ad1eaceeebb148863aabb31f960bf3a85b4cd88c880182abfd1c73fe993f2d1b8608d841e71480f1ee63f8c01631433564630bd454cf095c6"}]}, @typed={0x8, 0x42, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x30}}, @nested={0x152, 0x73, 0x0, 0x1, [@typed={0x56, 0x8a, 0x0, 0x0, @binary="3ba4c9845672b9f51b9c68566ec4de1bab006625c9cb2482f1230c7b310a4cd90eebebd3e5d43643ced764162c8a37102deab5794c8846118da71ef366509aa68e4be2c8017b3af1fb21389f74cb2d682941"}, @typed={0x8, 0x43, 0x0, 0x0, @ipv4=@local}, @generic="c4960081d63f0de0d9116cf7ad2b98fe7aaa8bb73fa1982960c87913c000b369a15dcda57dc66370074192834f438b523745d85c9fbec8f3eaf9ebeb0f7d6df534aa5d5b8169849b136d4352cd100331eb98e41ca378965306140a392e27df7b8be7644498e80a8f675c2a717d9f066113aa327ffe995008d7d9609ec738b58e7643f504893e52ae71a0176e030a487f0fc63c7a03b0585658da4fd6e83682a48d8f4c7c8ada3d53d636b527a12350da8b3d6cb7d690c97285614be85a303808409fddf73fda457e17b88e8e4f04cad736ccddba695c027cd73e0c2acbc0549edddc0d2c43d8b65c3d668c2494a4"]}]}, 0x284}, 0x1, 0x0, 0x0, 0x4000840}, 0x20040041)
fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x5, &(0x7f0000000440)=[{&(0x7f0000000140)="a26a0820f84e10b9bef6a5cb4a9567dbcaf858c57f85e9aa4f2b31f3df3b9c9635734569ae8c30d6828bc774b48235bc8a91381bdeffc3697a14002a52015adef779b8db7211df599403b0a8688dc5d9e1fa470d51534f63b4318e7435079e2475dd7668ffd170cbc4f0590937ce2a8aec69583bee4429e0f9d90827829e2f40ba45900cd65412c57947da1343e54b9c9a671206c1abea068996", 0x9a, 0x5}, {&(0x7f0000000200)="4f0080c8b777ca6bc4fddc932a1c8ed9eb0980f02b09d3af6ab15bd298393859d7977516d791d33f3532a2ce91e6ddf5581fbe7e38c654dcdb2b38be68a196852fa61cc9c39f685188254bc4390653fe7a2a874a14360ae12ccd535b71ad8b507f597aaf227622ae6bc47fa4b8e32b7b80ac8a479b52b93d007d6dbaa768a776ec705fb56c4c0c1358540eec51756c1da6ed2ab083ab3b23258f54ef64bc354f7d039b53a2f6c1923f8aca20cfc4ddf6d23fd6d16405d12572485da6938b1fe2dcd4ec89353951d955", 0xc9, 0x8}, {&(0x7f0000000300)="a897901ad2cf95831dd8edd3433f72fdc8a9db65d2341c483c41e4835c2ea7318dae9c1c09c03409dbc2b8e1832cc5bd3a31d3ec48153614d41e5b4ed8e3ee0eb085a52b6e6382aab74c6112cfdda8e53a8c16db3bd4f044e4e9164f235fb16156c045d9cd7fa47539c316b04470723f4ed450b594302c9407947e88f1f7e54f70654d5bf9a0cdbcbb9d5e6056b7ad", 0x8f, 0x1ff}, {&(0x7f00000003c0)="63f5f3e84b249e677ff30ddfe3113dc7", 0x10, 0x3}, {&(0x7f0000000400)="a21993b5017d6b2afccd9b83411b85a5fe835ed4324ebd08e4", 0x19, 0x6}], 0x24, &(0x7f0000000540)={[{@nojournal_checksum}, {@errors_remount}, {@noacl}, {@nojournal_checksum}, {@errors_continue}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfshat={'smackfshat', 0x3d, '-\\!'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@dont_appraise}, {@fsname}]})
ptrace(0x4208, r1)
ptrace(0x11, r1)

19:21:31 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:21:31 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 46)

[ 1458.673494] FAULT_INJECTION: forcing a failure.
[ 1458.673494] name failslab, interval 1, probability 0, space 0, times 0
[ 1458.674923] CPU: 0 PID: 8984 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1458.675734] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1458.676663] Call Trace:
[ 1458.676961]  dump_stack+0x107/0x167
[ 1458.677425]  should_fail.cold+0x5/0xa
[ 1458.677838]  ? lock_downgrade+0x6d0/0x6d0
[ 1458.678338]  ? skb_clone+0x14f/0x3d0
[ 1458.678751]  should_failslab+0x5/0x20
[ 1458.679160]  kmem_cache_alloc+0x5b/0x310
[ 1458.679687]  skb_clone+0x14f/0x3d0
[ 1458.680083]  packet_rcv+0x558/0x1410
[ 1458.680556]  ? run_filter+0x4d0/0x4d0
[ 1458.680969]  dev_queue_xmit_nit+0x38b/0xb00
[ 1458.681504]  dev_hard_start_xmit+0xab/0x6f0
[ 1458.681982]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1458.682601]  __dev_queue_xmit+0x17ec/0x2710
[ 1458.683090]  ? find_held_lock+0x2c/0x110
[ 1458.683646]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1458.684148]  ? lock_downgrade+0x6d0/0x6d0
[ 1458.684636]  ? lock_acquire+0x197/0x470
[ 1458.685075]  ? ip6_finish_output2+0x203/0x1fe0
[ 1458.685627]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1458.686205]  neigh_connected_output+0x382/0x4d0
[ 1458.686769]  ip6_finish_output2+0xaaf/0x1fe0
[ 1458.687261]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1458.687897]  ip6_output+0x3b8/0x7e0
[ 1458.688337]  ip6_local_out+0xb4/0x1a0
[ 1458.688762]  ip6_send_skb+0xb7/0x350
[ 1458.689185]  udp_v6_send_skb+0x7aa/0x15b0
[ 1458.689654]  udpv6_sendmsg+0x2116/0x2ad0
[ 1458.690024]  ? ip_frag_init+0x350/0x350
[ 1458.690450]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1458.690915]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1458.691478]  ? trace_hardirqs_on+0x5b/0x180
[ 1458.691886]  ? lock_acquire+0x197/0x470
[ 1458.692243]  ? find_held_lock+0x2c/0x110
[ 1458.692672]  ? sock_has_perm+0x1ea/0x280
[ 1458.693059]  ? __import_iovec+0x458/0x590
[ 1458.693509]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1458.693974]  inet6_sendmsg+0x105/0x140
[ 1458.694377]  ? inet6_compat_ioctl+0x320/0x320
[ 1458.694782]  __sock_sendmsg+0xf2/0x190
[ 1458.695138]  ____sys_sendmsg+0x334/0x870
[ 1458.695591]  ? sock_write_iter+0x3d0/0x3d0
[ 1458.695966]  ? do_recvmmsg+0x6d0/0x6d0
[ 1458.696371]  ? __lock_acquire+0x1657/0x5b00
[ 1458.696773]  ___sys_sendmsg+0xf3/0x170
[ 1458.697129]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1458.697614]  ? vmacache_find+0x55/0x2a0
[ 1458.697984]  ? lock_acquire+0x197/0x470
[ 1458.698391]  ? find_held_lock+0x2c/0x110
[ 1458.698759]  ? __might_fault+0xd3/0x180
[ 1458.699117]  ? lock_downgrade+0x6d0/0x6d0
[ 1458.699572]  ? asm_exc_page_fault+0x1e/0x30
[ 1458.699975]  __sys_sendmmsg+0x195/0x470
[ 1458.700389]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1458.702732]  ? lock_downgrade+0x6d0/0x6d0
[ 1458.703127]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1458.703648]  ? wait_for_completion_io+0x270/0x270
[ 1458.704086]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1458.704597]  ? vfs_write+0x354/0xb10
[ 1458.704940]  ? fput_many+0x2f/0x1a0
[ 1458.705288]  ? ksys_write+0x1a9/0x260
[ 1458.705696]  ? __ia32_sys_read+0xb0/0xb0
[ 1458.706073]  __x64_sys_sendmmsg+0x99/0x100
[ 1458.706507]  do_syscall_64+0x33/0x40
[ 1458.706849]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1458.707393] RIP: 0033:0x7f09c4bc0b19
[ 1458.707741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1458.709477] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1458.710161] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1458.710844] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1458.711563] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1458.712191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1458.712868] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:21:31 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfeffffff00000000)

19:21:31 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xd00000000000000)

[ 1458.754134] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:21:31 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xffffff7f00000000)

19:21:31 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1458.813428] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:21:31 executing program 6:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x4, 0x75, 0x0, 0x372, 0x2800, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0x4}, 0x2, 0x5bc, 0x56411dfc, 0x9, 0x7fffffff, 0x0, 0x2, 0x0, 0x401, 0x0, 0x1df}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x11)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140))
r1 = fork()
ptrace(0x10, r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f0000000640)={0x284, 0x3a, 0x2, 0x70bd25, 0x25dfdbfc, {0x8}, [@nested={0x112, 0x5c, 0x0, 0x1, [@typed={0x6, 0x33, 0x0, 0x0, @str=',\x00'}, @typed={0x8, 0x96, 0x0, 0x0, @pid}, @typed={0x14, 0x45, 0x0, 0x0, @ipv6=@private2}, @generic="fbfce10ada5255", @generic="9bb9c2f6edcbe59648c13450f02e04d3c30c91b99831897de491986b16e8378aed2662c2bfc88b22837e75fef509e471b75173fa7ca544060c3971c1d812eec7d1480628055aebe3b10ad5a4a02898d2b70f900ac8ebaa7ea11266e75d23a510a4b622107bcebbf9f46fd189209dc5014506025e4bc86a12f6e4e6f48a39d3769c5bc44538f83b5bb5e642889a56c0be7ef3e1d019343c57cf7c5eb4ffc2ca", @typed={0x42, 0x7b, 0x0, 0x0, @binary="4f4607d1372ad1eaceeebb148863aabb31f960bf3a85b4cd88c880182abfd1c73fe993f2d1b8608d841e71480f1ee63f8c01631433564630bd454cf095c6"}]}, @typed={0x8, 0x42, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x30}}, @nested={0x152, 0x73, 0x0, 0x1, [@typed={0x56, 0x8a, 0x0, 0x0, @binary="3ba4c9845672b9f51b9c68566ec4de1bab006625c9cb2482f1230c7b310a4cd90eebebd3e5d43643ced764162c8a37102deab5794c8846118da71ef366509aa68e4be2c8017b3af1fb21389f74cb2d682941"}, @typed={0x8, 0x43, 0x0, 0x0, @ipv4=@local}, @generic="c4960081d63f0de0d9116cf7ad2b98fe7aaa8bb73fa1982960c87913c000b369a15dcda57dc66370074192834f438b523745d85c9fbec8f3eaf9ebeb0f7d6df534aa5d5b8169849b136d4352cd100331eb98e41ca378965306140a392e27df7b8be7644498e80a8f675c2a717d9f066113aa327ffe995008d7d9609ec738b58e7643f504893e52ae71a0176e030a487f0fc63c7a03b0585658da4fd6e83682a48d8f4c7c8ada3d53d636b527a12350da8b3d6cb7d690c97285614be85a303808409fddf73fda457e17b88e8e4f04cad736ccddba695c027cd73e0c2acbc0549edddc0d2c43d8b65c3d668c2494a4"]}]}, 0x284}, 0x1, 0x0, 0x0, 0x4000840}, 0x20040041)
fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x5, &(0x7f0000000440)=[{&(0x7f0000000140)="a26a0820f84e10b9bef6a5cb4a9567dbcaf858c57f85e9aa4f2b31f3df3b9c9635734569ae8c30d6828bc774b48235bc8a91381bdeffc3697a14002a52015adef779b8db7211df599403b0a8688dc5d9e1fa470d51534f63b4318e7435079e2475dd7668ffd170cbc4f0590937ce2a8aec69583bee4429e0f9d90827829e2f40ba45900cd65412c57947da1343e54b9c9a671206c1abea068996", 0x9a, 0x5}, {&(0x7f0000000200)="4f0080c8b777ca6bc4fddc932a1c8ed9eb0980f02b09d3af6ab15bd298393859d7977516d791d33f3532a2ce91e6ddf5581fbe7e38c654dcdb2b38be68a196852fa61cc9c39f685188254bc4390653fe7a2a874a14360ae12ccd535b71ad8b507f597aaf227622ae6bc47fa4b8e32b7b80ac8a479b52b93d007d6dbaa768a776ec705fb56c4c0c1358540eec51756c1da6ed2ab083ab3b23258f54ef64bc354f7d039b53a2f6c1923f8aca20cfc4ddf6d23fd6d16405d12572485da6938b1fe2dcd4ec89353951d955", 0xc9, 0x8}, {&(0x7f0000000300)="a897901ad2cf95831dd8edd3433f72fdc8a9db65d2341c483c41e4835c2ea7318dae9c1c09c03409dbc2b8e1832cc5bd3a31d3ec48153614d41e5b4ed8e3ee0eb085a52b6e6382aab74c6112cfdda8e53a8c16db3bd4f044e4e9164f235fb16156c045d9cd7fa47539c316b04470723f4ed450b594302c9407947e88f1f7e54f70654d5bf9a0cdbcbb9d5e6056b7ad", 0x8f, 0x1ff}, {&(0x7f00000003c0)="63f5f3e84b249e677ff30ddfe3113dc7", 0x10, 0x3}, {&(0x7f0000000400)="a21993b5017d6b2afccd9b83411b85a5fe835ed4324ebd08e4", 0x19, 0x6}], 0x24, &(0x7f0000000540)={[{@nojournal_checksum}, {@errors_remount}, {@noacl}, {@nojournal_checksum}, {@errors_continue}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfshat={'smackfshat', 0x3d, '-\\!'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@dont_appraise}, {@fsname}]})
ptrace(0x4208, r1)
ptrace(0x11, r1)

19:21:31 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:21:31 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1000000000000000)

19:21:31 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xff00000000000000)

19:21:45 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:21:45 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xff01000000000000)

19:21:45 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:21:45 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xffffffff00000000)

19:21:45 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:21:45 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1200000000000000)

19:21:45 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 47)

19:21:45 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1472.823771] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1472.826793] FAULT_INJECTION: forcing a failure.
[ 1472.826793] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1472.828388] CPU: 0 PID: 9045 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1472.828969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1472.829716] Call Trace:
[ 1472.829949]  dump_stack+0x107/0x167
[ 1472.830261]  should_fail.cold+0x5/0xa
[ 1472.830659]  _copy_from_user+0x2e/0x1b0
[ 1472.831003]  __copy_msghdr_from_user+0x91/0x4b0
[ 1472.831444]  ? __ia32_sys_shutdown+0x80/0x80
[ 1472.835448]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1472.835892]  ? inet6_sendmsg+0xbd/0x140
[ 1472.836235]  ? inet6_compat_ioctl+0x320/0x320
[ 1472.836664]  ? __sock_sendmsg+0x55/0x190
[ 1472.837012]  sendmsg_copy_msghdr+0xa1/0x160
[ 1472.837428]  ? do_recvmmsg+0x6d0/0x6d0
[ 1472.837767]  ? __lock_acquire+0x1657/0x5b00
[ 1472.838143]  ___sys_sendmsg+0xc6/0x170
[ 1472.838522]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1472.838910]  ? do_user_addr_fault+0x549/0xc60
[ 1472.839360]  ? lock_acquire+0x197/0x470
[ 1472.839704]  ? find_held_lock+0x2c/0x110
[ 1472.840052]  ? __might_fault+0xd3/0x180
[ 1472.840439]  ? lock_downgrade+0x6d0/0x6d0
[ 1472.840792]  ? asm_exc_page_fault+0x1e/0x30
[ 1472.841168]  __sys_sendmmsg+0x195/0x470
[ 1472.841567]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1472.841934]  ? lock_downgrade+0x6d0/0x6d0
[ 1472.842335]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1472.842753]  ? wait_for_completion_io+0x270/0x270
[ 1472.843165]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1472.843623]  ? vfs_write+0x354/0xb10
[ 1472.843939]  ? fput_many+0x2f/0x1a0
[ 1472.844248]  ? ksys_write+0x1a9/0x260
[ 1472.844619]  ? __ia32_sys_read+0xb0/0xb0
[ 1472.844968]  __x64_sys_sendmmsg+0x99/0x100
[ 1472.845371]  do_syscall_64+0x33/0x40
[ 1472.845701]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1472.846130] RIP: 0033:0x7f09c4bc0b19
[ 1472.846487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1472.848056] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1472.848763] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1472.849411] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1472.850020] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1472.850659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1472.851254] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
[ 1472.911185] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:21:45 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfffffffffffff000)

19:21:45 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xffffff7f00000000)

19:21:46 executing program 6:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, 0x0)
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:21:46 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1201000000000000)

19:21:46 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:21:46 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1473.029215] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[ 1473.049225] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
[ 1473.084555] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1473.088912] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:22:00 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xffffffffffffffff)

19:22:00 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:22:00 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:22:00 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:22:00 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1400000000000000)

19:22:00 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xffffffff00000000)

19:22:00 executing program 6:
syz_io_uring_setup(0x4816, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x10000}, 0x26, 0x82000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
fork()

19:22:00 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 48)

[ 1487.041739] FAULT_INJECTION: forcing a failure.
[ 1487.041739] name failslab, interval 1, probability 0, space 0, times 0
[ 1487.043230] CPU: 1 PID: 9089 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1487.044111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1487.045162] Call Trace:
[ 1487.045486]  dump_stack+0x107/0x167
[ 1487.046048]  should_fail.cold+0x5/0xa
[ 1487.046409]  ? __alloc_skb+0x6d/0x5b0
[ 1487.047037]  should_failslab+0x5/0x20
[ 1487.047398]  kmem_cache_alloc_node+0x55/0x330
[ 1487.048056]  __alloc_skb+0x6d/0x5b0
[ 1487.048401]  alloc_skb_with_frags+0x92/0x570
[ 1487.049121]  ? find_held_lock+0x2c/0x110
[ 1487.049620]  sock_alloc_send_pskb+0x7af/0x930
[ 1487.050224]  ? sk_alloc+0x350/0x350
[ 1487.051072]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1487.051623]  ? find_held_lock+0x2c/0x110
[ 1487.052185]  ? lock_chain_count+0x20/0x20
[ 1487.052645]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1487.053347]  ? ip6_mtu+0x1bb/0x3d0
[ 1487.053848]  ? lock_downgrade+0x6d0/0x6d0
[ 1487.054378]  ? ip_frag_init+0x350/0x350
[ 1487.054988]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1487.055538]  ? ip6_mtu+0x1e9/0x3d0
[ 1487.056051]  ? ip6_setup_cork+0xfb7/0x1740
[ 1487.056564]  ip6_make_skb+0x2de/0x4e0
[ 1487.057089]  ? ip_frag_init+0x350/0x350
[ 1487.057586]  ? ip_frag_init+0x350/0x350
[ 1487.058121]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1487.058682]  ? ip6_dst_hoplimit+0x199/0x440
[ 1487.059245]  ? lock_downgrade+0x6d0/0x6d0
[ 1487.059830]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1487.060286]  ? ip_frag_init+0x350/0x350
[ 1487.060938]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1487.061428]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1487.062134]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1487.062861]  ? lock_acquire+0x197/0x470
[ 1487.063245]  ? find_held_lock+0x2c/0x110
[ 1487.063687]  ? sock_has_perm+0x1ea/0x280
[ 1487.064267]  ? __import_iovec+0x458/0x590
[ 1487.064744]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1487.065415]  inet6_sendmsg+0x105/0x140
[ 1487.066075]  ? inet6_compat_ioctl+0x320/0x320
[ 1487.066536]  __sock_sendmsg+0xf2/0x190
[ 1487.067141]  ____sys_sendmsg+0x334/0x870
[ 1487.067593]  ? sock_write_iter+0x3d0/0x3d0
[ 1487.068203]  ? do_recvmmsg+0x6d0/0x6d0
[ 1487.068644]  ? __lock_acquire+0x1657/0x5b00
[ 1487.069199]  ___sys_sendmsg+0xf3/0x170
[ 1487.069725]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1487.070378]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1487.071021]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1487.071572]  ? trace_hardirqs_on+0x5b/0x180
[ 1487.072177]  ? lock_acquire+0x197/0x470
[ 1487.072647]  ? find_held_lock+0x2c/0x110
[ 1487.073198]  ? __might_fault+0xd3/0x180
[ 1487.073718]  ? lock_downgrade+0x6d0/0x6d0
[ 1487.074250]  ? io_schedule_timeout+0x140/0x140
[ 1487.074759]  __sys_sendmmsg+0x195/0x470
[ 1487.075138]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1487.075559]  ? lock_downgrade+0x6d0/0x6d0
[ 1487.075957]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1487.076414]  ? wait_for_completion_io+0x270/0x270
[ 1487.076885]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1487.077336]  ? vfs_write+0x354/0xb10
[ 1487.077699]  ? fput_many+0x2f/0x1a0
[ 1487.078056]  ? ksys_write+0x1a9/0x260
[ 1487.078425]  ? __ia32_sys_read+0xb0/0xb0
[ 1487.078845]  __x64_sys_sendmmsg+0x99/0x100
[ 1487.079247]  do_syscall_64+0x33/0x40
[ 1487.079623]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1487.080116] RIP: 0033:0x7f09c4bc0b19
[ 1487.080467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1487.082235] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1487.082909] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1487.083587] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1487.084237] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1487.084850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1487.085514] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:22:00 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000007de0f831d442490100000000000000040000df0ce20100100000000000000020"], 0x24, 0x0)
open$dir(&(0x7f0000000040)='./file0\x00', 0x84402, 0x10)

19:22:00 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfffffffffffff000)

[ 1487.114639] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1487.139134] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:22:00 executing program 0:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000001640)=0x1)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x24, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYRES32], 0x24, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
dup2(r0, r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f00000001c0)={{'\x00', 0x1}, {0x7}, 0x8a2a212913156d73, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)="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", 0x150, 0x0, &(0x7f0000000440)={0x2, 0x10ac, {0x1, 0xc, 0x9f, "0f2c2888df8fc332316c8074460a501c3995974fc62aa70f18a6185ae13ae7a64c3ad363f60944a9799669977f96c40d2b25755c3d226f52d08013a20fdb8adf7bfbdec2793f16a826a29e7bcb57f0ff8091b05c2dcdd3848219388b192470f50fec68d101c3b6acf5c764a040440164e09a6676260c8faa18f76d62dc66bbdc7b8a85d312e9c385f430515f255e50f457a866668e65b12fa1c303da8d18bb", 0x1000, "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"}, 0xa6, "72ae98deb206c81068c39b89558b42dff29b013a67f414b9a09a2a092a3cf1d423d5ebea0c1a47d9a5bb1e5a18cdb622d4b3dd4223cdc3f848df266c44a7d4a26bc197f43a35659a167461b67878eda017f242c59460bb9277fc8ff3d6944d28e22fdd1ee15b69afce2521e484a08e5cff456def6756947eb6b8c6a65dda1992d4e5661c800f2692b291e895acf35e2c764c03119b407c2c84279cf5b236ed1a5c6401f6e4e5"}, 0x115e})
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
r4 = fspick(r2, &(0x7f0000000240)='./file0\x00', 0x1)
ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f00000015c0)={0x0, 0xe2})
openat(r3, &(0x7f0000000040)='./file0\x00', 0x80000, 0x4)

19:22:14 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:22:14 executing program 6:
name_to_handle_at(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{}, 0x80000000, 0x8}}, &(0x7f00000002c0), 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000300)=0x7c44, 0x4)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x80, 0x81, 0x9, 0x1, 0x0, 0x0, 0xc0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x200, 0x688e, 0x401, 0x9, 0x8, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xa, r0, 0x3)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r2, 0xffffffffffffffff)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfe7})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r3 = open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x0)
r4 = signalfd(r3, &(0x7f0000000080)={[0x80000001]}, 0x8)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
dup2(r4, r5)
unshare(0x48020200)

19:22:14 executing program 0:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x16, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1f, 0x85, 0x9, 0x6, 0x3, 0x3e, 0x6, 0xac, 0x40, 0x189, 0x0, 0x1000, 0x38, 0x2, 0x8, 0x978, 0x7fff}, [{0x2, 0xc, 0x7f, 0xfff, 0xffff, 0x1f, 0xffffffff, 0x8}, {0x70000000, 0x2, 0x200, 0x4, 0x1, 0x7f, 0x9, 0xff}], "4c680f7952e91f17973e14e8ced4e92366089046f574d4d3c3adae3c56476169a972dbf9", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5d4)

[ 1501.605808] FAULT_INJECTION: forcing a failure.
[ 1501.605808] name failslab, interval 1, probability 0, space 0, times 0
[ 1501.606881] CPU: 1 PID: 9141 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1501.607500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1501.608245] Call Trace:
[ 1501.608508]  dump_stack+0x107/0x167
[ 1501.608855]  should_fail.cold+0x5/0xa
[ 1501.609217]  ? __alloc_skb+0x6d/0x5b0
[ 1501.609577]  should_failslab+0x5/0x20
[ 1501.609946]  kmem_cache_alloc_node+0x55/0x330
[ 1501.610365]  __alloc_skb+0x6d/0x5b0
[ 1501.610717]  alloc_skb_with_frags+0x92/0x570
[ 1501.611130]  ? find_held_lock+0x2c/0x110
[ 1501.611519]  sock_alloc_send_pskb+0x7af/0x930
[ 1501.611947]  ? sk_alloc+0x350/0x350
[ 1501.612297]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1501.612783]  ? SOFTIRQ_verbose+0x10/0x10
[ 1501.613163]  ? lock_chain_count+0x20/0x20
[ 1501.613566]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1501.614054]  ? ip6_mtu+0x1bb/0x3d0
[ 1501.614395]  ? lock_downgrade+0x6d0/0x6d0
[ 1501.614781]  ? ip_frag_init+0x350/0x350
[ 1501.615168]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1501.615599]  ? ip6_mtu+0x1e9/0x3d0
[ 1501.615937]  ? ip6_setup_cork+0xfb7/0x1740
[ 1501.616334]  ip6_make_skb+0x2de/0x4e0
[ 1501.616687]  ? ip_frag_init+0x350/0x350
[ 1501.617068]  ? ip_frag_init+0x350/0x350
[ 1501.617442]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1501.617904]  ? ip6_dst_hoplimit+0x199/0x440
[ 1501.618308]  ? lock_downgrade+0x6d0/0x6d0
[ 1501.618710]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1501.619082]  ? ip_frag_init+0x350/0x350
[ 1501.619455]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1501.619942]  ? lock_acquire+0x197/0x470
[ 1501.620312]  ? find_held_lock+0x2c/0x110
[ 1501.620701]  ? lock_acquire+0x197/0x470
[ 1501.621069]  ? find_held_lock+0x2c/0x110
19:22:14 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 49)

19:22:14 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:22:14 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:22:14 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xffffffffffffffff)

19:22:14 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1800000000000000)

[ 1501.621460]  ? sock_has_perm+0x1ea/0x280
[ 1501.621869]  ? __import_iovec+0x458/0x590
[ 1501.622812]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1501.623251]  inet6_sendmsg+0x105/0x140
[ 1501.623581]  ? inet6_compat_ioctl+0x320/0x320
[ 1501.623960]  __sock_sendmsg+0xf2/0x190
[ 1501.624290]  ____sys_sendmsg+0x334/0x870
[ 1501.624640]  ? sock_write_iter+0x3d0/0x3d0
[ 1501.624995]  ? do_recvmmsg+0x6d0/0x6d0
[ 1501.625329]  ? __lock_acquire+0x1657/0x5b00
[ 1501.625702]  ___sys_sendmsg+0xf3/0x170
[ 1501.626054]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1501.626439]  ? vmacache_find+0x55/0x2a0
[ 1501.626784]  ? lock_acquire+0x197/0x470
[ 1501.627120]  ? find_held_lock+0x2c/0x110
[ 1501.627468]  ? __might_fault+0xd3/0x180
[ 1501.627805]  ? lock_downgrade+0x6d0/0x6d0
[ 1501.628157]  ? asm_exc_page_fault+0x1e/0x30
[ 1501.628537]  __sys_sendmmsg+0x195/0x470
[ 1501.628880]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1501.629247]  ? lock_downgrade+0x6d0/0x6d0
[ 1501.629612]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1501.646059]  ? wait_for_completion_io+0x270/0x270
[ 1501.646471]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1501.646864]  ? vfs_write+0x354/0xb10
[ 1501.647179]  ? fput_many+0x2f/0x1a0
[ 1501.647488]  ? ksys_write+0x1a9/0x260
[ 1501.647810]  ? __ia32_sys_read+0xb0/0xb0
[ 1501.648157]  __x64_sys_sendmmsg+0x99/0x100
[ 1501.648514]  do_syscall_64+0x33/0x40
[ 1501.648829]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1501.649259] RIP: 0033:0x7f09c4bc0b19
[ 1501.649579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1501.651128] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1501.651776] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1501.652373] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1501.652972] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1501.653574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1501.654183] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:22:14 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="02000000010000000800000004000000002000000000000000de565cdea09ff2348ca2694fdf17f72a6382670c6826d39594e0a28faa00000b7e9bde1c07d93d6f1d70b3a359444d408581f21c530b6cec3920b105ed5292e948deb1c4adb96d2f0c6b01213230010b723d8a92899804d69209d0c9a076a5806fda14ba7856414f733f849952f1abd9"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:22:14 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x1f87000000000000)

[ 1501.713156] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:22:14 executing program 2:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
setresgid(r1, r1, r1)
fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x1}, [], {0x4, 0x3}, [{0x8, 0xe653917e7d827305, 0xee01}, {0x8, 0x2, r1}, {0x8, 0x5, r2}, {0x8, 0x4, r1}], {0x10, 0x3}, {0x20, 0x1}}, 0x44, 0x3)
creat(&(0x7f0000000100)='./file0\x00', 0x18)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

[ 1501.768681] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:22:14 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:22:14 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 50)

[ 1501.844885] FAULT_INJECTION: forcing a failure.
[ 1501.844885] name failslab, interval 1, probability 0, space 0, times 0
[ 1501.846346] CPU: 1 PID: 9168 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1501.846926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1501.847627] Call Trace:
[ 1501.847867]  dump_stack+0x107/0x167
[ 1501.848181]  should_fail.cold+0x5/0xa
[ 1501.848512]  ? create_object.isra.0+0x3a/0xa20
[ 1501.848906]  should_failslab+0x5/0x20
[ 1501.849232]  kmem_cache_alloc+0x5b/0x310
[ 1501.849585]  create_object.isra.0+0x3a/0xa20
[ 1501.849976]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1501.850412]  kmem_cache_alloc_node+0x169/0x330
[ 1501.850809]  __alloc_skb+0x6d/0x5b0
[ 1501.851128]  alloc_skb_with_frags+0x92/0x570
[ 1501.851504]  ? find_held_lock+0x2c/0x110
[ 1501.851859]  sock_alloc_send_pskb+0x7af/0x930
[ 1501.852248]  ? sk_alloc+0x350/0x350
[ 1501.852563]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1501.853007]  ? SOFTIRQ_verbose+0x10/0x10
[ 1501.853354]  ? lock_chain_count+0x20/0x20
[ 1501.853718]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1501.854166]  ? ip6_mtu+0x1bb/0x3d0
[ 1501.854471]  ? lock_downgrade+0x6d0/0x6d0
[ 1501.854827]  ? ip_frag_init+0x350/0x350
[ 1501.855177]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1501.855574]  ? ip6_mtu+0x1e9/0x3d0
[ 1501.855881]  ? ip6_setup_cork+0xfb7/0x1740
[ 1501.856244]  ip6_make_skb+0x2de/0x4e0
[ 1501.856569]  ? ip_frag_init+0x350/0x350
[ 1501.856913]  ? ip_frag_init+0x350/0x350
[ 1501.857254]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1501.857663]  ? ip6_dst_hoplimit+0x199/0x440
[ 1501.862052]  ? lock_downgrade+0x6d0/0x6d0
[ 1501.862415]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1501.862760]  ? ip_frag_init+0x350/0x350
[ 1501.863108]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1501.863548]  ? lock_acquire+0x197/0x470
[ 1501.863882]  ? find_held_lock+0x2c/0x110
[ 1501.864230]  ? lock_acquire+0x197/0x470
[ 1501.864564]  ? find_held_lock+0x2c/0x110
[ 1501.864915]  ? sock_has_perm+0x1ea/0x280
[ 1501.865274]  ? __import_iovec+0x458/0x590
[ 1501.865623]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1501.866071]  inet6_sendmsg+0x105/0x140
[ 1501.866401]  ? inet6_compat_ioctl+0x320/0x320
[ 1501.866779]  __sock_sendmsg+0xf2/0x190
[ 1501.867109]  ____sys_sendmsg+0x334/0x870
[ 1501.867456]  ? sock_write_iter+0x3d0/0x3d0
[ 1501.867818]  ? do_recvmmsg+0x6d0/0x6d0
[ 1501.868149]  ? __lock_acquire+0x1657/0x5b00
[ 1501.868522]  ___sys_sendmsg+0xf3/0x170
[ 1501.868853]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1501.869237]  ? vmacache_find+0x55/0x2a0
[ 1501.869582]  ? lock_acquire+0x197/0x470
[ 1501.869942]  ? find_held_lock+0x2c/0x110
[ 1501.870290]  ? __might_fault+0xd3/0x180
[ 1501.870626]  ? lock_downgrade+0x6d0/0x6d0
[ 1501.870975]  ? asm_exc_page_fault+0x1e/0x30
[ 1501.871350]  __sys_sendmmsg+0x195/0x470
[ 1501.871689]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1501.872052]  ? lock_downgrade+0x6d0/0x6d0
[ 1501.872414]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1501.872821]  ? wait_for_completion_io+0x270/0x270
[ 1501.873229]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1501.873618]  ? vfs_write+0x354/0xb10
[ 1501.873953]  ? fput_many+0x2f/0x1a0
[ 1501.874261]  ? ksys_write+0x1a9/0x260
[ 1501.874585]  ? __ia32_sys_read+0xb0/0xb0
[ 1501.874933]  __x64_sys_sendmmsg+0x99/0x100
[ 1501.875291]  do_syscall_64+0x33/0x40
[ 1501.875605]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1501.876041] RIP: 0033:0x7f09c4bc0b19
[ 1501.876357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1501.877908] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1501.878548] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1501.879149] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1501.879747] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1501.880351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1501.880950] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:22:14 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x2000000000000000)

19:22:14 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:22:14 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
faccessat2(r0, &(0x7f0000000440)='./file1\x00', 0x4, 0x1200)
r1 = syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0xffffffff, 0x6, &(0x7f0000000740)=[{&(0x7f00000001c0)="ba1a45757a372f77c3df358eda1e8367e480735a442657f09aa8b3188d2afea7d6276563d2f63a93d9e0b1b97b367a523477657bb1533d8ddb8af6f613f79ab7b0bf0b8988d12593751a1090432fe594c55b819accfa66bb8ec0a5ddef6adea3c6e23cea18315f45a0f6d913a78fe3b78f576e1151dcd8d27f06eb2e6258d5d483ce700856bce84fb397ae7141982d651ea645b8adca12cab66d48d9cf37517157692d6e23cb669d69ac1532e85b4e451c5f61a1641b548506bfee3f6a5d2d74031ad108a5e62e95200a5003f8006a765914ad60", 0xd4, 0x3}, {&(0x7f00000002c0)="60c6b1b778c4af7bac227063c84edd27aa77a9373286fd9a1d817c2c3c995d1dba84734f0ab914f14063e1db4aa2247671671b7a2501fc573f35d6cf90383511a7b58235ce1b01f9e5c3f430f45f53e2d7329447144867b993634b7ee2a7c4a4c350cd436f00c076705887dd26fea2d8a607829d0433c73333d59011abf78c0cf4cc71d7a6740717afc21a7161b928041d9f08c081de4782cbe3c5d25c4d779a5d17f9103e93920253dd6b9a5f8b5ac2b235f6e80aa0642de03df39e9937090d211e5c39cd1a1db9239af3f4", 0xcc, 0x9}, {&(0x7f0000000440), 0x0, 0x9}, {&(0x7f0000000480)="4bfcd0243844bef8310f017a9a673719a5b04f472707874470465b28545f8aeb5cbcc89f36d7934e3988f0264026f1942c50b18550904a7503bd967ec0e1108c33023320f337bb6367e46c9d337cfe430ea297d2f5b1c9b2b8829f361fbb2f3b34a5dcde42e88ba4241b24066defaae50d6c8657c5abdea988154031fadd66c1df195c8fa30d405a4e2a69034db1c2844a1232fa3e0ca26f5258784491f4e547ce564f81b4975c1f5756571f793cae6a0507d48a2d1be71350d9bb26e7625bd5190b0c0a6c4192489eb096a943ab", 0xce, 0xffffffff80000000}, {&(0x7f0000000640)="924c45b6f80db3a71bf976e98250d5aad0ad98caacedb6b1638614b34899505104f1fe299bb7851d01ae83fe2b6747e962a31e2dab75aa692d909cc7fd4bec4ddbe89f59e9abb84b3f76dd63499068df1945ca29995db546d3ac6f604da8192c7c9fa6966cf8d3bba7f6071ece2a6082c77414ffab2f05dbf2d06ce035261f16b1ac01cbfed5e01a9793a856c0341c26e02d86b9", 0xfffffef5, 0x41}, {&(0x7f0000000700)="46e08b0e9a7539b4cd6e541a3b29e4242571906100d9f0ada6ffd624a76739b64e85ea9281b1679e6b333eb186ac90", 0x2f, 0x1}], 0x101840, &(0x7f0000000800)=ANY=[@ANYBLOB="636865636b3d7374726963742c646f6e745f686173682c6f626a5f747970653dd300000000000000072c736d61636b6673726f6f743d73797374656d2e706f61636c5f64656661756c74002c61707072616973652c00"])
mkdirat(r1, &(0x7f0000000880)='./file1\x00', 0x1c)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYRESHEX=r2], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:22:14 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1502.047476] audit: type=1326 audit(1722972135.158:191): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9136 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc95867db19 code=0x0
19:22:29 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/135, 0x87)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:22:29 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:22:29 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:22:29 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:22:29 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$9p_tcp(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x240000, &(0x7f0000000200)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@cache_fscache}, {@version_u}, {@posixacl}, {@cachetag={'cachetag', 0x3d, '/dev/sr0\x00'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}]}})
openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x10)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:22:29 executing program 6:
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000180), 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000880)=""/33, 0x21}, {&(0x7f00000002c0)=""/77, 0x4d}, {&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000000400)=""/185, 0xb9}, {&(0x7f00000004c0)=""/75, 0x4b}, {&(0x7f0000000240)=""/55, 0x37}, {&(0x7f0000000540)=""/118, 0x76}, {&(0x7f00000005c0)=""/83, 0x53}, {&(0x7f0000000640)=""/199, 0xc7}, {&(0x7f0000000740)=""/126, 0x7e}], 0xa, &(0x7f00000021c0)=[@rights={{0x1c, 0x1, 0x1, [<r0=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [<r1=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r2=>0x0}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0xe0}, 0x12123)
fcntl$setown(0xffffffffffffffff, 0x8, r2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000009c0)={0x0, 0x80, 0x1, 0x8, 0x1, 0x40, 0x0, 0x6, 0x1048, 0xa, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x4, 0x80000000}, 0x4400, 0x100000001, 0x8, 0x1, 0x4, 0x10000, 0x1f, 0x0, 0x6, 0x0, 0x3f}, 0x0, 0x6, r3, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x9)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000008c0)=ANY=[@ANYBLOB="010000f42e521cfffff30000", @ANYRES32=<r5=>r1, @ANYBLOB="04000000000100002e2f66696c6532004d8db22cbcd5314599a6e3c9e0401c33eb6ffe9a451bbff83ce4953d15ff84936ae2b0efd0ce926d547063ed84e49f0a7acfa474"])
openat(r5, &(0x7f0000000a80)='./file0\x00', 0x200001, 0x1af)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r6, 0x2285, &(0x7f00000024c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @scatter={0x2, 0x0, &(0x7f0000000200)=[{&(0x7f0000002540)=""/216, 0xd8}, {&(0x7f00000023c0)=""/116, 0x74}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setresuid(0xffffffffffffffff, r7, 0x0)
r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r8, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002140)={&(0x7f0000003600)=ANY=[@ANYBLOB="201500003500000326bd7000fcdbdf2517000000c4011a80120fc97aa3a09f8a1d3462442be0c3cd7f6a8025cf952b48cdb2acee801d192eb368a11c4e7656402fe44ebab4ac3535cf47e06b8b3e531e37890b004800e508d13ea5aa190004008e0008003400", @ANYRES32=r6, @ANYBLOB="08001300", @ANYRES32=r2, @ANYBLOB="9f5e209b61ebe825851fa56cf28c613ad62ef6ece2990cce8705fb94e763383ff2f91cd0374c86ec3eca913de8f5ae1a0ce2dfa830cb7ff12f0715852ca4fed11e5db594de2f0ae08f621cc42fb9268d657e3388a6bf13e0f241d71b5b0bce4556992cba5c21deafadc95218eb8c975a0e5854ede0e61d99918991b9938482457374711c12ef3ab3a1bf8fbde12d923ef03c697b4bdbd6bf7bf0610400110008006c00", @ANYRES32=r8, @ANYBLOB="77d1726229065291b47ecdf24654abd1d7f430f55bbd44a8898436c0d41cf3b5e3b0ad7e4adbfecba8e28aa85eec2a82d6ae916c1bd7df88541357f36a82df914eb4ef9487ee3b70bcb0f14202185a212d83522c74825bdc1455c5cd33dd98cf984d1c4363ca9d22e58763f5e3727e98413fcd7d2404d4cfc88cc5e09d1984687ef48023be7d0076f9eedd3e166cd2f78309013e3f7b6f3de3bb490c83a7eb54d622d800df984aa8856ab68aabbdfc5533c3488002de6dd0f77d6aa95abceb08002600170400000800288004007a0008007800", @ANYRES32=0x0, @ANYBLOB="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"], 0x1520}}, 0x4018044)
renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r4, &(0x7f0000000080)='./file0\x00', 0x2)
lsetxattr$security_capability(&(0x7f0000000000)='./file2\x00', &(0x7f0000000100), &(0x7f0000000140)=@v1={0x1000000, [{0x9, 0x2}]}, 0xc, 0x3)

19:22:29 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 51)

19:22:29 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x2103000000000000)

19:22:29 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000000000200000e400000000563c837313a256f7e6d210898172393732818a104739c8e3598b47f1528ec5b97b278ab186f7e1ada9f75da4dafb7113f2c9e0dc2643ba7951ddd559e4c72f333ed4b0a7f3e64f0670cde65d77842959151aac12fbc28368ce7c483eebc78101ddd5f1b16bf6a9e3e6eed70dac4ebdf472651a"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

[ 1516.529778] FAULT_INJECTION: forcing a failure.
[ 1516.529778] name failslab, interval 1, probability 0, space 0, times 0
[ 1516.539036] CPU: 1 PID: 9204 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1516.539618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1516.540321] Call Trace:
[ 1516.540554]  dump_stack+0x107/0x167
[ 1516.540866]  should_fail.cold+0x5/0xa
[ 1516.541203]  ? create_object.isra.0+0x3a/0xa20
[ 1516.541596]  should_failslab+0x5/0x20
[ 1516.541928]  kmem_cache_alloc+0x5b/0x310
[ 1516.542302]  create_object.isra.0+0x3a/0xa20
[ 1516.542682]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1516.543123]  __kmalloc_node_track_caller+0x1a6/0x3b0
[ 1516.543561]  ? alloc_skb_with_frags+0x92/0x570
[ 1516.543954]  __alloc_skb+0xb1/0x5b0
[ 1516.544271]  alloc_skb_with_frags+0x92/0x570
[ 1516.544653]  ? find_held_lock+0x2c/0x110
[ 1516.545005]  sock_alloc_send_pskb+0x7af/0x930
[ 1516.545401]  ? sk_alloc+0x350/0x350
[ 1516.545724]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1516.546188]  ? SOFTIRQ_verbose+0x10/0x10
[ 1516.546534]  ? lock_chain_count+0x20/0x20
[ 1516.546893]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1516.547324]  ? ip6_mtu+0x1bb/0x3d0
[ 1516.547626]  ? lock_downgrade+0x6d0/0x6d0
[ 1516.547978]  ? ip_frag_init+0x350/0x350
[ 1516.548329]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1516.548721]  ? ip6_mtu+0x1e9/0x3d0
[ 1516.549026]  ? ip6_setup_cork+0xfb7/0x1740
[ 1516.549388]  ip6_make_skb+0x2de/0x4e0
[ 1516.549716]  ? ip_frag_init+0x350/0x350
[ 1516.550073]  ? ip_frag_init+0x350/0x350
[ 1516.550415]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1516.550821]  ? ip6_dst_hoplimit+0x199/0x440
[ 1516.551191]  ? lock_downgrade+0x6d0/0x6d0
[ 1516.551557]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1516.551905]  ? ip_frag_init+0x350/0x350
[ 1516.552254]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1516.552699]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1516.553163]  ? lock_acquire+0x197/0x470
[ 1516.553503]  ? find_held_lock+0x2c/0x110
[ 1516.553859]  ? sock_has_perm+0x1ea/0x280
[ 1516.554234]  ? __import_iovec+0x458/0x590
[ 1516.554594]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1516.555032]  inet6_sendmsg+0x105/0x140
[ 1516.555367]  ? inet6_compat_ioctl+0x320/0x320
[ 1516.555750]  __sock_sendmsg+0xf2/0x190
[ 1516.556084]  ____sys_sendmsg+0x334/0x870
[ 1516.556432]  ? sock_write_iter+0x3d0/0x3d0
[ 1516.556795]  ? do_recvmmsg+0x6d0/0x6d0
[ 1516.557130]  ? __lock_acquire+0x1657/0x5b00
[ 1516.557506]  ___sys_sendmsg+0xf3/0x170
[ 1516.557841]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1516.558249]  ? vmacache_find+0x55/0x2a0
[ 1516.558597]  ? lock_acquire+0x197/0x470
[ 1516.558935]  ? find_held_lock+0x2c/0x110
[ 1516.559288]  ? __might_fault+0xd3/0x180
[ 1516.559627]  ? lock_downgrade+0x6d0/0x6d0
[ 1516.559981]  ? asm_exc_page_fault+0x1e/0x30
[ 1516.560364]  __sys_sendmmsg+0x195/0x470
[ 1516.560707]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1516.561076]  ? lock_downgrade+0x6d0/0x6d0
[ 1516.561446]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1516.561858]  ? wait_for_completion_io+0x270/0x270
[ 1516.562298]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1516.562691]  ? vfs_write+0x354/0xb10
[ 1516.563008]  ? fput_many+0x2f/0x1a0
[ 1516.563326]  ? ksys_write+0x1a9/0x260
[ 1516.563648]  ? __ia32_sys_read+0xb0/0xb0
[ 1516.563999]  __x64_sys_sendmmsg+0x99/0x100
[ 1516.564363]  do_syscall_64+0x33/0x40
[ 1516.564678]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1516.565113] RIP: 0033:0x7f09c4bc0b19
[ 1516.565436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1516.566995] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1516.567641] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1516.568245] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1516.568842] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1516.569445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1516.570061] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:22:29 executing program 0:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x24, 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
symlinkat(&(0x7f0000000140)='./file0/../file0\x00', r1, &(0x7f0000000180)='./file0\x00')

[ 1516.605384] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:22:29 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:22:29 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x2400000000000000)

[ 1516.632993] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:22:29 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 52)

19:22:29 executing program 6:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000), 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x2, 0xabe5, 0x64, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x8000, 0x7a3, 0x2, 0x6}})

[ 1516.723550] FAULT_INJECTION: forcing a failure.
[ 1516.723550] name failslab, interval 1, probability 0, space 0, times 0
[ 1516.724611] CPU: 0 PID: 9230 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1516.725205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1516.725907] Call Trace:
[ 1516.726169]  dump_stack+0x107/0x167
[ 1516.726484]  should_fail.cold+0x5/0xa
[ 1516.726813]  ? lock_release+0x680/0x680
[ 1516.727170]  ? skb_clone+0x14f/0x3d0
[ 1516.727495]  should_failslab+0x5/0x20
[ 1516.727823]  kmem_cache_alloc+0x5b/0x310
[ 1516.728188]  skb_clone+0x14f/0x3d0
[ 1516.728497]  dev_queue_xmit_nit+0x3a7/0xb00
[ 1516.728876]  dev_hard_start_xmit+0xab/0x6f0
[ 1516.729255]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1516.729707]  __dev_queue_xmit+0x17ec/0x2710
[ 1516.730106]  ? find_held_lock+0x2c/0x110
[ 1516.730468]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1516.730863]  ? lock_downgrade+0x6d0/0x6d0
[ 1516.731229]  ? lock_acquire+0x197/0x470
[ 1516.731574]  ? ip6_finish_output2+0x203/0x1fe0
[ 1516.731971]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1516.732434]  neigh_connected_output+0x382/0x4d0
[ 1516.732850]  ip6_finish_output2+0xaaf/0x1fe0
[ 1516.733236]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1516.733672]  ip6_output+0x3b8/0x7e0
[ 1516.734006]  ip6_local_out+0xb4/0x1a0
[ 1516.734336]  ip6_send_skb+0xb7/0x350
[ 1516.734671]  udp_v6_send_skb+0x7aa/0x15b0
[ 1516.735036]  udpv6_sendmsg+0x2116/0x2ad0
[ 1516.735385]  ? ip_frag_init+0x350/0x350
[ 1516.735745]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1516.736185]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1516.736647]  ? mark_held_locks+0x9e/0xe0
[ 1516.736993]  ? find_held_lock+0x2c/0x110
[ 1516.737347]  ? lock_acquire+0x197/0x470
[ 1516.737696]  ? find_held_lock+0x2c/0x110
[ 1516.738070]  ? sock_has_perm+0x1ea/0x280
[ 1516.738438]  ? __import_iovec+0x458/0x590
[ 1516.738805]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1516.739254]  inet6_sendmsg+0x105/0x140
[ 1516.739589]  ? inet6_compat_ioctl+0x320/0x320
[ 1516.739983]  __sock_sendmsg+0xf2/0x190
[ 1516.740319]  ____sys_sendmsg+0x334/0x870
[ 1516.740671]  ? sock_write_iter+0x3d0/0x3d0
[ 1516.741043]  ? do_recvmmsg+0x6d0/0x6d0
[ 1516.741380]  ? __lock_acquire+0x1657/0x5b00
[ 1516.741764]  ___sys_sendmsg+0xf3/0x170
[ 1516.742135]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1516.742524]  ? vmacache_find+0x55/0x2a0
[ 1516.742888]  ? lock_acquire+0x197/0x470
[ 1516.743229]  ? find_held_lock+0x2c/0x110
[ 1516.743583]  ? __might_fault+0xd3/0x180
[ 1516.743934]  ? lock_downgrade+0x6d0/0x6d0
[ 1516.744294]  ? lock_is_held_type+0xd2/0x110
[ 1516.744677]  __sys_sendmmsg+0x195/0x470
[ 1516.745035]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1516.745403]  ? lock_downgrade+0x6d0/0x6d0
[ 1516.745772]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1516.746212]  ? wait_for_completion_io+0x270/0x270
[ 1516.746627]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1516.747024]  ? vfs_write+0x354/0xb10
[ 1516.747352]  ? fput_many+0x2f/0x1a0
[ 1516.747665]  ? ksys_write+0x1a9/0x260
[ 1516.747992]  ? __ia32_sys_read+0xb0/0xb0
[ 1516.748356]  __x64_sys_sendmmsg+0x99/0x100
[ 1516.748718]  do_syscall_64+0x33/0x40
[ 1516.749035]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1516.749479] RIP: 0033:0x7f09c4bc0b19
[ 1516.749798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1516.751383] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1516.752030] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1516.752642] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1516.753243] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1516.753851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1516.754536] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:22:29 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x7, @scatter={0x6, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f00000001c0)=""/5, 0x5}, {&(0x7f0000000300)}, {&(0x7f0000000200)=""/21, 0x15}, {&(0x7f0000000440)=""/173, 0xad}, {&(0x7f0000000640)=""/194, 0xc2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x32)
openat(r0, &(0x7f0000000140)='./file0/file0\x00', 0x200040, 0x83)

19:22:29 executing program 2:
r0 = gettid()
rt_sigqueueinfo(r0, 0x11, &(0x7f0000000400)={0x29, 0x3, 0x100})
ptrace$peeksig(0x4209, r0, &(0x7f0000000040)={0x100, 0x0, 0x8}, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}])
ptrace$setsig(0x4203, r0, 0x7f, &(0x7f0000000140)={0x16, 0x2d3, 0x20})
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02009418c90e000000000000040000000000000010000000000000002000000000000000"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x110)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40040, 0x1)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(r1, &(0x7f00000001c0)='./file0\x00', 0x80, 0x10)
r2 = syz_open_procfs$userns(r0, &(0x7f0000000200))
readv(r2, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/134, 0x86}, {&(0x7f0000000880)=""/143, 0x8f}, {&(0x7f0000000940)=""/230, 0xe6}, {&(0x7f0000000a40)=""/122, 0x7a}], 0x4)

19:22:29 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:22:29 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x3f00000000000000)

19:22:29 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:22:29 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:22:30 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8004000000000000)

[ 1516.937228] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1516.949699] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:22:44 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 53)

19:22:44 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:22:44 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8102000000000000)

19:22:44 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {}, [], {}, [], {}, {0x20, 0x3}}, 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:22:44 executing program 2:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
statx(r0, &(0x7f0000000040)='./file0\x00', 0xec91926b4ecc3cc6, 0x7ff, &(0x7f0000000140))
open(&(0x7f0000000280)='./file0\x00', 0x4000, 0xd0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000000000000000400090000c8e200000056bd003573f3eaa655ebe50f0e5a329c14395c7ccaac57de84bcde0d0c2322e42a925421a40d52a3"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:22:44 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:22:44 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1531.084923] FAULT_INJECTION: forcing a failure.
[ 1531.084923] name failslab, interval 1, probability 0, space 0, times 0
[ 1531.086174] CPU: 1 PID: 9276 Comm: syz-executor.4 Not tainted 5.10.223 #1
19:22:44 executing program 6:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[ 1531.086976] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1531.088570] Call Trace:
[ 1531.088804]  dump_stack+0x107/0x167
[ 1531.089120]  should_fail.cold+0x5/0xa
[ 1531.089567]  ? create_object.isra.0+0x3a/0xa20
[ 1531.090179]  should_failslab+0x5/0x20
[ 1531.090628]  kmem_cache_alloc+0x5b/0x310
[ 1531.090978]  ? lock_acquire+0x197/0x470
[ 1531.091373]  create_object.isra.0+0x3a/0xa20
[ 1531.091801]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1531.092235]  kmem_cache_alloc+0x159/0x310
[ 1531.092692]  skb_clone+0x14f/0x3d0
[ 1531.092998]  dev_queue_xmit_nit+0x3a7/0xb00
[ 1531.093427]  dev_hard_start_xmit+0xab/0x6f0
[ 1531.093880]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1531.094901]  __dev_queue_xmit+0x17ec/0x2710
[ 1531.095941]  ? find_held_lock+0x2c/0x110
[ 1531.096342]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1531.096782]  ? lock_downgrade+0x6d0/0x6d0
[ 1531.097135]  ? lock_acquire+0x197/0x470
[ 1531.101085]  ? ip6_finish_output2+0x203/0x1fe0
[ 1531.101996]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1531.103305]  neigh_connected_output+0x382/0x4d0
[ 1531.104188]  ip6_finish_output2+0xaaf/0x1fe0
[ 1531.105091]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1531.106146]  ip6_output+0x3b8/0x7e0
[ 1531.106615]  ip6_local_out+0xb4/0x1a0
[ 1531.106941]  ip6_send_skb+0xb7/0x350
[ 1531.107263]  udp_v6_send_skb+0x7aa/0x15b0
[ 1531.107818]  udpv6_sendmsg+0x2116/0x2ad0
[ 1531.108182]  ? ip_frag_init+0x350/0x350
[ 1531.108636]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1531.109078]  ? lock_acquire+0x197/0x470
[ 1531.109470]  ? find_held_lock+0x2c/0x110
[ 1531.109871]  ? lock_acquire+0x197/0x470
[ 1531.110218]  ? find_held_lock+0x2c/0x110
[ 1531.110718]  ? sock_has_perm+0x1ea/0x280
[ 1531.111088]  ? __import_iovec+0x458/0x590
[ 1531.111529]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1531.111977]  inet6_sendmsg+0x105/0x140
[ 1531.112356]  ? inet6_compat_ioctl+0x320/0x320
[ 1531.112793]  __sock_sendmsg+0xf2/0x190
[ 1531.113125]  ____sys_sendmsg+0x334/0x870
[ 1531.113571]  ? sock_write_iter+0x3d0/0x3d0
[ 1531.113929]  ? do_recvmmsg+0x6d0/0x6d0
[ 1531.114340]  ? __lock_acquire+0x1657/0x5b00
[ 1531.114802]  ___sys_sendmsg+0xf3/0x170
[ 1531.115134]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1531.115616]  ? vmacache_find+0x55/0x2a0
[ 1531.115965]  ? lock_acquire+0x197/0x470
[ 1531.116349]  ? find_held_lock+0x2c/0x110
[ 1531.116754]  ? __might_fault+0xd3/0x180
[ 1531.117096]  ? lock_downgrade+0x6d0/0x6d0
[ 1531.117540]  ? asm_exc_page_fault+0x1e/0x30
[ 1531.117926]  __sys_sendmmsg+0x195/0x470
[ 1531.118346]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1531.118793]  ? lock_downgrade+0x6d0/0x6d0
[ 1531.119160]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1531.119690]  ? wait_for_completion_io+0x270/0x270
[ 1531.120100]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1531.120594]  ? vfs_write+0x354/0xb10
[ 1531.120910]  ? fput_many+0x2f/0x1a0
[ 1531.121234]  ? ksys_write+0x1a9/0x260
[ 1531.121700]  ? __ia32_sys_read+0xb0/0xb0
[ 1531.122122]  __x64_sys_sendmmsg+0x99/0x100
[ 1531.122748]  do_syscall_64+0x33/0x40
[ 1531.123092] perf: interrupt took too long (10803 > 10585), lowering kernel.perf_event_max_sample_rate to 18000
[ 1531.123688]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1531.128024] RIP: 0033:0x7f09c4bc0b19
[ 1531.128831] perf: interrupt took too long (16084 > 13503), lowering kernel.perf_event_max_sample_rate to 12000
[ 1531.128945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1531.140326] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1531.142312] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1531.144113] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1531.144907] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1531.146437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1531.148228] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
[ 1531.194809] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1531.225840] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[ 1531.228178] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
19:22:44 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 54)

19:22:44 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x618101, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x5e9e6302e552e624, './file0\x00'}, 0x6e)

[ 1531.259434] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
19:22:44 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8bffffff00000000)

19:22:44 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
r0 = getegid()
setresgid(r0, r0, r0)
r1 = getegid()
setresgid(r1, r1, r1)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0xe}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r3=>0x0}, &(0x7f00000001c0)=0xc)
r4 = getegid()
setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0xf}, [{0x2, 0x0, 0xffffffffffffffff}], {0x4, 0x6}, [{0x8, 0x0, 0xee01}, {0x8, 0x1, r0}, {0x8, 0x4, r1}, {0x8, 0x7, r3}, {0x8, 0x5, r4}], {0x10, 0x1}, {0x20, 0x7}}, 0x54, 0x2)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

[ 1531.305838] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1531.324890] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1531.327560] FAULT_INJECTION: forcing a failure.
[ 1531.327560] name failslab, interval 1, probability 0, space 0, times 0
[ 1531.330324] CPU: 0 PID: 9300 Comm: syz-executor.4 Not tainted 5.10.223 #1
19:22:44 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1531.332158] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1531.334405] Call Trace:
[ 1531.335056]  dump_stack+0x107/0x167
[ 1531.335936]  should_fail.cold+0x5/0xa
[ 1531.336858]  ? lock_downgrade+0x6d0/0x6d0
[ 1531.337861]  ? skb_clone+0x14f/0x3d0
[ 1531.338768]  should_failslab+0x5/0x20
[ 1531.339669]  kmem_cache_alloc+0x5b/0x310
[ 1531.340634]  skb_clone+0x14f/0x3d0
[ 1531.341479]  packet_rcv+0x558/0x1410
[ 1531.342390]  ? run_filter+0x4d0/0x4d0
[ 1531.343318]  dev_queue_xmit_nit+0x38b/0xb00
[ 1531.344378]  dev_hard_start_xmit+0xab/0x6f0
[ 1531.345417]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1531.346712]  __dev_queue_xmit+0x17ec/0x2710
[ 1531.347748]  ? find_held_lock+0x2c/0x110
[ 1531.348703]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1531.349795]  ? lock_downgrade+0x6d0/0x6d0
[ 1531.350783]  ? lock_acquire+0x197/0x470
[ 1531.351736]  ? ip6_finish_output2+0x203/0x1fe0
[ 1531.352819]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1531.354075]  neigh_connected_output+0x382/0x4d0
[ 1531.355195]  ip6_finish_output2+0xaaf/0x1fe0
[ 1531.356250]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1531.357433]  ip6_output+0x3b8/0x7e0
[ 1531.358319]  ip6_local_out+0xb4/0x1a0
[ 1531.359219]  ip6_send_skb+0xb7/0x350
[ 1531.360120]  udp_v6_send_skb+0x7aa/0x15b0
[ 1531.361107]  udpv6_sendmsg+0x2116/0x2ad0
[ 1531.362077]  ? ip_frag_init+0x350/0x350
[ 1531.363058]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1531.364307]  ? perf_event_task_disable+0x390/0x390
[ 1531.365465]  ? lock_downgrade+0x6d0/0x6d0
[ 1531.366459]  ? hrtimer_start_range_ns+0x336/0xae0
[ 1531.367608]  ? lock_acquire+0x197/0x470
[ 1531.368556]  ? find_held_lock+0x2c/0x110
[ 1531.369517]  ? sock_has_perm+0x1ea/0x280
[ 1531.370516]  ? __import_iovec+0x458/0x590
[ 1531.371492]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1531.372731]  inet6_sendmsg+0x105/0x140
[ 1531.373652]  ? inet6_compat_ioctl+0x320/0x320
[ 1531.374724]  __sock_sendmsg+0xf2/0x190
[ 1531.375640]  ____sys_sendmsg+0x334/0x870
[ 1531.376608]  ? sock_write_iter+0x3d0/0x3d0
[ 1531.377603]  ? do_recvmmsg+0x6d0/0x6d0
[ 1531.378267]  ? __lock_acquire+0x1657/0x5b00
[ 1531.378650]  ___sys_sendmsg+0xf3/0x170
[ 1531.378983]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1531.379377]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1531.379827]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1531.380210]  ? trace_hardirqs_on+0x5b/0x180
[ 1531.380585]  ? lock_acquire+0x197/0x470
[ 1531.380925]  ? find_held_lock+0x2c/0x110
[ 1531.381280]  ? __might_fault+0xd3/0x180
[ 1531.381620]  ? lock_downgrade+0x6d0/0x6d0
[ 1531.381984]  ? io_schedule_timeout+0x140/0x140
[ 1531.382956]  __sys_sendmmsg+0x195/0x470
[ 1531.383689]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1531.384470]  ? lock_downgrade+0x6d0/0x6d0
[ 1531.385240]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1531.386155]  ? wait_for_completion_io+0x270/0x270
[ 1531.387299]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1531.388154]  ? vfs_write+0x354/0xb10
[ 1531.388843]  ? fput_many+0x2f/0x1a0
[ 1531.389525]  ? ksys_write+0x1a9/0x260
[ 1531.390300]  ? __ia32_sys_read+0xb0/0xb0
[ 1531.391048]  __x64_sys_sendmmsg+0x99/0x100
[ 1531.391816]  do_syscall_64+0x33/0x40
[ 1531.392496]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1531.393430] RIP: 0033:0x7f09c4bc0b19
[ 1531.394139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1531.398497] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1531.399898] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1531.401207] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1531.402663] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1531.403976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1531.405262] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:22:44 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:22:44 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=<r0=>0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {}, [{0x2, 0x6, r0}, {0x2, 0x4, 0xffffffffffffffff}]}, 0x34, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:22:44 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x8cffffff00000000)

19:22:44 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(0xffffffffffffffff, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:22:44 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001e4010400000000040000000000d24f8b000000000020000000"], 0x24, 0x2)
setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@md5={0x1, "67288e01dacc8f0b84bfaca103e0504a"}, 0x11, 0x3)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:22:44 executing program 6:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:22:44 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xa1ffffff00000000)

19:22:44 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100008d00a7abaa82000000000000002000000000000000"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

[ 1531.563127] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:22:44 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:22:44 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1531.600414] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[ 1531.653464] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[ 1531.691745] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
19:22:59 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 55)

19:22:59 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x2002, 0x80)

19:22:59 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:22:59 executing program 6:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(0xffffffffffffffff, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:22:59 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xf6ffffff00000000)

19:22:59 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(0xffffffffffffffff, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:22:59 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:22:59 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), 0x8000, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bind(r0, &(0x7f00000001c0)=@nfc={0x27, 0x0, 0x0, 0x4}, 0x80)

[ 1546.150389] FAULT_INJECTION: forcing a failure.
[ 1546.150389] name failslab, interval 1, probability 0, space 0, times 0
[ 1546.151487] CPU: 1 PID: 9361 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1546.152107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1546.152784] Call Trace:
[ 1546.153057]  dump_stack+0x107/0x167
[ 1546.153376]  should_fail.cold+0x5/0xa
[ 1546.153697]  ? create_object.isra.0+0x3a/0xa20
[ 1546.154159]  should_failslab+0x5/0x20
19:22:59 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfbffffff00000000)

[ 1546.154503]  kmem_cache_alloc+0x5b/0x310
[ 1546.154844]  ? lock_acquire+0x197/0x470
[ 1546.155357]  create_object.isra.0+0x3a/0xa20
[ 1546.155731]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1546.156206]  kmem_cache_alloc+0x159/0x310
[ 1546.156579]  skb_clone+0x14f/0x3d0
[ 1546.156879]  dev_queue_xmit_nit+0x3a7/0xb00
[ 1546.157300]  dev_hard_start_xmit+0xab/0x6f0
[ 1546.157659]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1546.158174]  __dev_queue_xmit+0x17ec/0x2710
[ 1546.158941]  ? find_held_lock+0x2c/0x110
[ 1546.159334]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1546.159721]  ? lock_downgrade+0x6d0/0x6d0
[ 1546.160117]  ? lock_acquire+0x197/0x470
[ 1546.160451]  ? ip6_finish_output2+0x203/0x1fe0
[ 1546.160839]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1546.161330]  neigh_connected_output+0x382/0x4d0
[ 1546.161732]  ip6_finish_output2+0xaaf/0x1fe0
[ 1546.162184]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1546.162706]  ip6_output+0x3b8/0x7e0
[ 1546.163106]  ip6_local_out+0xb4/0x1a0
[ 1546.163456]  ip6_send_skb+0xb7/0x350
[ 1546.163802]  udp_v6_send_skb+0x7aa/0x15b0
[ 1546.164250]  udpv6_sendmsg+0x2116/0x2ad0
[ 1546.164622]  ? ip_frag_init+0x350/0x350
[ 1546.164990]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1546.165507]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1546.165997]  ? lock_acquire+0x197/0x470
[ 1546.166767]  ? find_held_lock+0x2c/0x110
[ 1546.167246]  ? sock_has_perm+0x1ea/0x280
[ 1546.167644]  ? __import_iovec+0x458/0x590
[ 1546.168675]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1546.169204]  inet6_sendmsg+0x105/0x140
[ 1546.169560]  ? inet6_compat_ioctl+0x320/0x320
[ 1546.169961]  __sock_sendmsg+0xf2/0x190
[ 1546.170554]  ____sys_sendmsg+0x334/0x870
[ 1546.171578]  ? sock_write_iter+0x3d0/0x3d0
[ 1546.172587]  ? do_recvmmsg+0x6d0/0x6d0
[ 1546.173526]  ? __lock_acquire+0x1657/0x5b00
[ 1546.173933]  ___sys_sendmsg+0xf3/0x170
[ 1546.174361]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1546.174774]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1546.175255]  ? _raw_spin_unlock_irq+0x27/0x30
[ 1546.175668]  ? lock_acquire+0x197/0x470
[ 1546.176077]  ? find_held_lock+0x2c/0x110
[ 1546.176459]  ? __might_fault+0xd3/0x180
[ 1546.176818]  ? lock_downgrade+0x6d0/0x6d0
[ 1546.177255]  ? io_schedule_timeout+0x140/0x140
[ 1546.177686]  __sys_sendmmsg+0x195/0x470
[ 1546.178111]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1546.178516]  ? lock_downgrade+0x6d0/0x6d0
[ 1546.178879]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1546.179358]  ? wait_for_completion_io+0x270/0x270
[ 1546.179765]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1546.180203]  ? vfs_write+0x354/0xb10
[ 1546.180518]  ? fput_many+0x2f/0x1a0
[ 1546.180825]  ? ksys_write+0x1a9/0x260
[ 1546.183616]  ? __ia32_sys_read+0xb0/0xb0
[ 1546.183967]  __x64_sys_sendmmsg+0x99/0x100
[ 1546.184893]  do_syscall_64+0x33/0x40
[ 1546.185257]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1546.185682] RIP: 0033:0x7f09c4bc0b19
[ 1546.185999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1546.187632] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1546.188320] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1546.188905] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1546.189541] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1546.190175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1546.190791] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
[ 1546.244532] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[ 1546.261499] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1546.293899] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
[ 1546.295733] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:23:14 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="02000000010000000001fcffff00000000000000100000000000000020000000000000006af271b26fa34421bba0bfb8d4e32ee34f87e02526adbed66be5ab9874f8d025dd3ae4580168e96ded41b3ae2199e77a6df1bc9094f6af1d4371e233fe40a415c2b639e5036b2c7f0fb5d86153711677810735f938e6828d80a8d832b31cafd2efe8dfe450"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:23:14 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(0xffffffffffffffff, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:23:14 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:23:14 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:23:14 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfeffffff00000000)

19:23:14 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:23:14 executing program 2:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
acct(&(0x7f0000000040)='./file0\x00')
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000045c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0xffffffffffffffff, r1, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0xffffffffffffffff, r2, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000042c0)=[{{&(0x7f00000001c0), 0x6e, &(0x7f0000001540)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/208, 0xd0}, {&(0x7f0000001440)=""/130, 0x82}, {&(0x7f0000000240)=""/37, 0x25}, {&(0x7f0000001500)=""/9, 0x9}], 0x6, &(0x7f00000015c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000001640), 0x6e, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/139, 0x8b}], 0x1, &(0x7f00000017c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000002a40)=[{&(0x7f0000001940)=""/244, 0xf4}, {&(0x7f0000001a40)=""/4096, 0x1000}], 0x2, &(0x7f0000002a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r3=>0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b40)=""/222, 0xde}], 0x1, &(0x7f0000002c80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000002d40)=""/66, 0x42}, {&(0x7f0000002dc0)=""/10, 0xa}, {&(0x7f0000002e00)=""/8, 0x8}, {&(0x7f0000002e40)=""/89, 0x59}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/225, 0xe1}, {&(0x7f0000003fc0)=""/169, 0xa9}, {&(0x7f0000004080)=""/65, 0x41}, {&(0x7f0000004100)=""/150, 0x96}], 0x9, &(0x7f0000004280)=ANY=[@ANYBLOB="2400000000000000010001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x5, 0x32, &(0x7f0000004400)={0x0, 0x3938700})
r5 = getegid()
setresgid(r5, r5, r5)
fstat(r0, &(0x7f0000004440)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
connect$unix(r4, &(0x7f0000004540)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000044c0)={{}, {0x1, 0x1}, [{0x2, 0x2, r1}, {0x2, 0x0, r2}], {0x4, 0x2}, [{0x8, 0x2, 0xee00}, {0x8, 0x5, r3}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x1, r5}, {0x8, 0x7}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x2, 0xee01}, {0x8, 0x5, r6}], {0x10, 0x2}, {0x20, 0x3}}, 0x74, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:23:14 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 56)

[ 1561.795855] FAULT_INJECTION: forcing a failure.
[ 1561.795855] name failslab, interval 1, probability 0, space 0, times 0
[ 1561.797022] CPU: 0 PID: 9396 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1561.797648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1561.798398] Call Trace:
[ 1561.798644]  dump_stack+0x107/0x167
[ 1561.798970]  should_fail.cold+0x5/0xa
[ 1561.799345]  ? create_object.isra.0+0x3a/0xa20
[ 1561.799736]  should_failslab+0x5/0x20
[ 1561.800076]  kmem_cache_alloc+0x5b/0x310
[ 1561.800489]  ? lock_acquire+0x197/0x470
[ 1561.800834]  create_object.isra.0+0x3a/0xa20
[ 1561.801223]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1561.801702]  kmem_cache_alloc+0x159/0x310
[ 1561.802078]  skb_clone+0x14f/0x3d0
[ 1561.802430]  dev_queue_xmit_nit+0x3a7/0xb00
[ 1561.802829]  dev_hard_start_xmit+0xab/0x6f0
[ 1561.803212]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1561.803702]  __dev_queue_xmit+0x17ec/0x2710
[ 1561.804073]  ? find_held_lock+0x2c/0x110
[ 1561.804501]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1561.804890]  ? lock_downgrade+0x6d0/0x6d0
[ 1561.805299]  ? lock_acquire+0x197/0x470
[ 1561.805652]  ? ip6_finish_output2+0x203/0x1fe0
[ 1561.806049]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1561.806573]  neigh_connected_output+0x382/0x4d0
[ 1561.806978]  ip6_finish_output2+0xaaf/0x1fe0
[ 1561.807415]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1561.807838]  ip6_output+0x3b8/0x7e0
[ 1561.808156]  ip6_local_out+0xb4/0x1a0
[ 1561.808563]  ip6_send_skb+0xb7/0x350
[ 1561.808891]  udp_v6_send_skb+0x7aa/0x15b0
[ 1561.809254]  udpv6_sendmsg+0x2116/0x2ad0
[ 1561.809669]  ? ip_frag_init+0x350/0x350
[ 1561.810014]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1561.810524]  ? perf_event_task_disable+0x390/0x390
[ 1561.810938]  ? lock_downgrade+0x6d0/0x6d0
[ 1561.811338]  ? hrtimer_start_range_ns+0x336/0xae0
[ 1561.811768]  ? lock_acquire+0x197/0x470
[ 1561.812111]  ? find_held_lock+0x2c/0x110
[ 1561.812530]  ? sock_has_perm+0x1ea/0x280
[ 1561.812910]  ? __import_iovec+0x458/0x590
[ 1561.813303]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1561.813767]  inet6_sendmsg+0x105/0x140
[ 1561.814100]  ? inet6_compat_ioctl+0x320/0x320
[ 1561.814532]  __sock_sendmsg+0xf2/0x190
[ 1561.814880]  ____sys_sendmsg+0x334/0x870
[ 1561.815228]  ? sock_write_iter+0x3d0/0x3d0
[ 1561.815629]  ? do_recvmmsg+0x6d0/0x6d0
[ 1561.815978]  ? __lock_acquire+0x1657/0x5b00
[ 1561.816467]  ___sys_sendmsg+0xf3/0x170
[ 1561.816800]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1561.817209]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1561.820551]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1561.820936]  ? trace_hardirqs_on+0x5b/0x180
[ 1561.821406]  ? lock_acquire+0x197/0x470
[ 1561.821749]  ? find_held_lock+0x2c/0x110
[ 1561.822106]  ? __might_fault+0xd3/0x180
[ 1561.822704]  ? lock_downgrade+0x6d0/0x6d0
[ 1561.823059]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1561.823586]  __sys_sendmmsg+0x195/0x470
[ 1561.823929]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1561.824355]  ? lock_downgrade+0x6d0/0x6d0
[ 1561.824722]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1561.825135]  ? wait_for_completion_io+0x270/0x270
[ 1561.825634]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1561.826035]  ? vfs_write+0x354/0xb10
[ 1561.826414]  ? fput_many+0x2f/0x1a0
[ 1561.826750]  ? ksys_write+0x1a9/0x260
[ 1561.827077]  ? __ia32_sys_read+0xb0/0xb0
[ 1561.827487]  __x64_sys_sendmmsg+0x99/0x100
[ 1561.827849]  do_syscall_64+0x33/0x40
[ 1561.828168]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1561.828667] RIP: 0033:0x7f09c4bc0b19
[ 1561.828992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1561.830684] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1561.831375] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1561.832001] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1561.832645] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1561.833320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1561.833941] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:23:14 executing program 0:
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000240)='\x00', &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x655b, &(0x7f0000000380)={0x0, 0x2cd1, 0x8, 0x2, 0x2ec}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000400)=<r0=>0x0, &(0x7f0000000440))
syz_io_uring_setup(0x3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfb}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000280)=<r1=>0x0, &(0x7f0000000540)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_io_uring_submit(r0, r2, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x5, 0x4004, @fd=r3, 0xfffffffffffffffa, &(0x7f0000000480)="b12c91ef0ccc5a7f68eb1b6abe8dd07fb9d752edb79f9902c07e62474a87fc001d0495f58a5e43ddde30a2c1874221b26e7d17bb1dc6fd241bf8d92685564f2bcada20aa1b29c989dffa47382ce7ffadb2c38d33ad9574e24daa140211b2ff6d03f9ec828b296f8dc60e1ce5d75ad9c23e55acc7541fd2e31e3c19da132626f4b3dbd0b5a975e8ec0cc1b9fd8a9c2e71b098a3a0527224b01f365a9515fb86652f75a7648a07eadfd2bf597daae653a6943dabe2e251e44b6634bca122bc029bc4a84b", 0xc3, 0x2}, 0x9)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x144900, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x620c40, 0x9)
openat(r4, &(0x7f0000000340)='./file0\x00', 0x40000, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@OVL_FILEID_V1={0xa0, 0xf8, {'\x00', {0x0, 0xfb, 0x9d, 0x2, 0x9, "37da7dbb1b30dc2ceb4a5ec3e1567a51", "674eb86a8c378ed551ac6cc0ba1a6d11003ff6465a3399f53c71ada668e45508d1b2e1b88ab4e6b7d3afc6b928e3caaefb9d4c754e45b963fc2e0814e84b4b4aa7d28bc89683d85a6020cfcefbab5527e5c787a903f823be64baa71081c08485eefce5b3fe1d10f8ec3b50fd726efc34a90b80758aa243a1cdb49fba0127e9801aecf372ed262bc3"}}}, &(0x7f0000000200), 0x2000)

19:23:14 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {0x1, 0x3}}, 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:23:15 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1561.893138] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:23:15 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xff00000000000000)

19:23:15 executing program 6:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:23:15 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 57)

[ 1561.945492] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[ 1561.981901] FAULT_INJECTION: forcing a failure.
[ 1561.981901] name failslab, interval 1, probability 0, space 0, times 0
[ 1561.983253] CPU: 0 PID: 9413 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1561.983913] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1561.984656] Call Trace:
[ 1561.984921]  dump_stack+0x107/0x167
[ 1561.985241]  should_fail.cold+0x5/0xa
[ 1561.985618]  ? __alloc_skb+0x6d/0x5b0
[ 1561.985973]  should_failslab+0x5/0x20
[ 1561.986360]  kmem_cache_alloc_node+0x55/0x330
[ 1561.986762]  __alloc_skb+0x6d/0x5b0
[ 1561.987095]  alloc_skb_with_frags+0x92/0x570
[ 1561.987542]  ? find_held_lock+0x2c/0x110
[ 1561.987902]  sock_alloc_send_pskb+0x7af/0x930
[ 1561.988355]  ? sk_alloc+0x350/0x350
[ 1561.988679]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1561.989145]  ? SOFTIRQ_verbose+0x10/0x10
[ 1561.989540]  ? lock_chain_count+0x20/0x20
[ 1561.989905]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1561.990400]  ? ip6_mtu+0x1bb/0x3d0
[ 1561.990722]  ? lock_downgrade+0x6d0/0x6d0
[ 1561.991075]  ? ip_frag_init+0x350/0x350
[ 1561.991481]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1561.991884]  ? ip6_mtu+0x1e9/0x3d0
[ 1561.992193]  ? ip6_setup_cork+0xfb7/0x1740
[ 1561.992632]  ip6_make_skb+0x2de/0x4e0
[ 1561.992963]  ? ip_frag_init+0x350/0x350
[ 1561.993369]  ? ip_frag_init+0x350/0x350
[ 1561.993713]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1561.994131]  ? ip6_dst_hoplimit+0x199/0x440
[ 1561.994577]  ? lock_downgrade+0x6d0/0x6d0
[ 1561.994947]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1561.995354]  ? ip_frag_init+0x350/0x350
[ 1561.995727]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1561.996192]  ? lock_acquire+0x197/0x470
[ 1561.996615]  ? find_held_lock+0x2c/0x110
[ 1561.996969]  ? lock_acquire+0x197/0x470
[ 1561.997367]  ? find_held_lock+0x2c/0x110
[ 1561.997746]  ? sock_has_perm+0x1ea/0x280
[ 1561.998111]  ? __import_iovec+0x458/0x590
[ 1561.998525]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1561.998979]  inet6_sendmsg+0x105/0x140
[ 1561.999370]  ? inet6_compat_ioctl+0x320/0x320
[ 1561.999767]  __sock_sendmsg+0xf2/0x190
[ 1562.000107]  ____sys_sendmsg+0x334/0x870
[ 1562.000523]  ? sock_write_iter+0x3d0/0x3d0
[ 1562.000904]  ? do_recvmmsg+0x6d0/0x6d0
[ 1562.001244]  ? __lock_acquire+0x1657/0x5b00
[ 1562.001665]  ___sys_sendmsg+0xf3/0x170
[ 1562.002015]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1562.002467]  ? vmacache_find+0x55/0x2a0
[ 1562.002824]  ? lock_acquire+0x197/0x470
[ 1562.003177]  ? find_held_lock+0x2c/0x110
[ 1562.003568]  ? __might_fault+0xd3/0x180
[ 1562.003904]  ? lock_downgrade+0x6d0/0x6d0
[ 1562.004338]  ? asm_exc_page_fault+0x1e/0x30
[ 1562.004723]  __sys_sendmmsg+0x195/0x470
[ 1562.005087]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1562.005512]  ? lock_downgrade+0x6d0/0x6d0
[ 1562.005883]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1562.006367]  ? wait_for_completion_io+0x270/0x270
[ 1562.006803]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1562.007215]  ? vfs_write+0x354/0xb10
[ 1562.007574]  ? fput_many+0x2f/0x1a0
[ 1562.007885]  ? ksys_write+0x1a9/0x260
[ 1562.008231]  ? __ia32_sys_read+0xb0/0xb0
[ 1562.008625]  __x64_sys_sendmmsg+0x99/0x100
[ 1562.008986]  do_syscall_64+0x33/0x40
[ 1562.009386]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1562.009939] RIP: 0033:0x7f09c4bc0b19
[ 1562.010320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1562.011963] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1562.012723] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1562.013399] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1562.014031] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1562.014722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1562.015377] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
[ 1562.064968] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[ 1562.078507] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
19:23:29 executing program 6:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xff00000000000000)

[ 1576.270676] FAULT_INJECTION: forcing a failure.
[ 1576.270676] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1576.272226] CPU: 0 PID: 9437 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1576.272971] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1576.273823] Call Trace:
[ 1576.274098]  dump_stack+0x107/0x167
[ 1576.274502]  should_fail.cold+0x5/0xa
[ 1576.274902]  _copy_from_user+0x2e/0x1b0
[ 1576.275298]  __copy_msghdr_from_user+0x91/0x4b0
[ 1576.275798]  ? __ia32_sys_shutdown+0x80/0x80
[ 1576.276247]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1576.276828]  sendmsg_copy_msghdr+0xa1/0x160
[ 1576.277245]  ? do_recvmmsg+0x6d0/0x6d0
[ 1576.277868]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1576.278373]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1576.278933]  ? trace_hardirqs_on+0x5b/0x180
[ 1576.279348]  ___sys_sendmsg+0xc6/0x170
[ 1576.279768]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1576.280211]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1576.280686]  ? _raw_spin_unlock_irq+0x27/0x30
[ 1576.281111]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1576.281605]  ? finish_task_switch+0x126/0x5d0
[ 1576.282025]  ? finish_task_switch+0xef/0x5d0
[ 1576.282440]  ? __switch_to+0x572/0xf70
[ 1576.282869]  ? __switch_to_asm+0x3a/0x60
[ 1576.283263]  ? __switch_to_asm+0x34/0x60
[ 1576.283705]  ? __schedule+0x82c/0x1ea0
[ 1576.284082]  ? io_schedule_timeout+0x140/0x140
[ 1576.284580]  __sys_sendmmsg+0x195/0x470
[ 1576.284964]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1576.285392]  ? lock_downgrade+0x6d0/0x6d0
[ 1576.285862]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1576.286323]  ? wait_for_completion_io+0x270/0x270
[ 1576.286807]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1576.287206]  ? vfs_write+0x354/0xb10
[ 1576.287569]  ? fput_many+0x2f/0x1a0
[ 1576.287878]  ? ksys_write+0x1a9/0x260
[ 1576.288207]  ? __ia32_sys_read+0xb0/0xb0
[ 1576.288605]  __x64_sys_sendmmsg+0x99/0x100
[ 1576.288964]  do_syscall_64+0x33/0x40
[ 1576.289282]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1576.289786] RIP: 0033:0x7f09c4bc0b19
[ 1576.290103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1576.291754] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1576.292833] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1576.294185] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1576.294843] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1576.295445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1576.296086] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:23:29 executing program 0:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
symlinkat(&(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00')
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd_index=0x8, 0xfef, 0x0, 0x1ff, 0x4, 0x4e43b16e60f7cc69}, 0x7)

19:23:29 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:23:29 executing program 2:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
openat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x40200, 0x2d)

19:23:29 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:23:29 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, 0x0, 0x0, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:23:29 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 58)

19:23:29 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xff01000000000000)

19:23:29 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 59)

19:23:29 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:23:29 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x10141, 0xac)

19:23:29 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xffffff7f00000000)

19:23:29 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0200000001000000010000000400000000000000f5004ba19900002000000000000000"], 0x24, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
mkdirat(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0)

19:23:29 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1576.388341] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1576.393950] FAULT_INJECTION: forcing a failure.
[ 1576.393950] name failslab, interval 1, probability 0, space 0, times 0
[ 1576.397960] CPU: 0 PID: 9450 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1576.399623] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1576.401619] Call Trace:
[ 1576.402210]  dump_stack+0x107/0x167
[ 1576.403092]  should_fail.cold+0x5/0xa
[ 1576.404001]  should_failslab+0x5/0x20
[ 1576.404940]  __kmalloc_node_track_caller+0x74/0x3b0
[ 1576.406111]  ? alloc_skb_with_frags+0x92/0x570
[ 1576.407209]  __alloc_skb+0xb1/0x5b0
[ 1576.408080]  alloc_skb_with_frags+0x92/0x570
[ 1576.409149]  ? find_held_lock+0x2c/0x110
[ 1576.410117]  sock_alloc_send_pskb+0x7af/0x930
[ 1576.411195]  ? sk_alloc+0x350/0x350
[ 1576.412070]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1576.413346]  ? __ip6_append_data.isra.0+0x1bc3/0x3a70
[ 1576.414628]  ? __ip6_append_data.isra.0+0x1bd0/0x3a70
[ 1576.415853]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1576.417075]  ? ip6_mtu+0x1bb/0x3d0
[ 1576.417955]  ? lock_downgrade+0x6d0/0x6d0
[ 1576.418941]  ? ip_frag_init+0x350/0x350
[ 1576.419896]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1576.420985]  ? ip6_mtu+0x1e9/0x3d0
[ 1576.421861]  ? ip6_setup_cork+0xfb7/0x1740
[ 1576.422895]  ip6_make_skb+0x2de/0x4e0
[ 1576.423798]  ? ip_frag_init+0x350/0x350
[ 1576.424749]  ? ip_frag_init+0x350/0x350
[ 1576.425701]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1576.426850]  ? ip6_dst_hoplimit+0x199/0x440
[ 1576.427871]  ? lock_downgrade+0x6d0/0x6d0
[ 1576.428875]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1576.429864]  ? ip_frag_init+0x350/0x350
[ 1576.430846]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1576.432069]  ? perf_event_task_disable+0x390/0x390
[ 1576.433213]  ? lock_downgrade+0x6d0/0x6d0
[ 1576.434205]  ? hrtimer_start_range_ns+0x336/0xae0
[ 1576.435377]  ? lock_acquire+0x197/0x470
[ 1576.436321]  ? find_held_lock+0x2c/0x110
[ 1576.437282]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1576.438583]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1576.439857]  ? sock_has_perm+0x1ea/0x280
[ 1576.440842]  ? __import_iovec+0x458/0x590
[ 1576.441827]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1576.443078]  inet6_sendmsg+0x105/0x140
[ 1576.444010]  ? inet6_compat_ioctl+0x320/0x320
[ 1576.445075]  __sock_sendmsg+0xf2/0x190
[ 1576.445997]  ____sys_sendmsg+0x334/0x870
[ 1576.447001]  ? sock_write_iter+0x3d0/0x3d0
[ 1576.448026]  ? do_recvmmsg+0x6d0/0x6d0
[ 1576.449265]  ? find_held_lock+0x2c/0x110
[ 1576.450237]  ___sys_sendmsg+0xf3/0x170
[ 1576.451167]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1576.452264]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1576.453533]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1576.454594]  ? trace_hardirqs_on+0x5b/0x180
[ 1576.455653]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1576.456708]  ? finish_task_switch+0x126/0x5d0
[ 1576.457771]  ? finish_task_switch+0xef/0x5d0
[ 1576.458818]  ? __switch_to+0x572/0xf70
[ 1576.459754]  ? __switch_to_asm+0x3a/0x60
[ 1576.460725]  ? __switch_to_asm+0x34/0x60
[ 1576.461703]  ? __schedule+0x82c/0x1ea0
[ 1576.462642]  ? io_schedule_timeout+0x140/0x140
[ 1576.463730]  __sys_sendmmsg+0x195/0x470
[ 1576.464696]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1576.465722]  ? lock_downgrade+0x6d0/0x6d0
[ 1576.466711]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1576.467854]  ? wait_for_completion_io+0x270/0x270
[ 1576.469011]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1576.470108]  ? vfs_write+0x354/0xb10
[ 1576.470993]  ? fput_many+0x2f/0x1a0
[ 1576.471866]  ? ksys_write+0x1a9/0x260
[ 1576.472796]  ? __ia32_sys_read+0xb0/0xb0
[ 1576.473760]  __x64_sys_sendmmsg+0x99/0x100
[ 1576.474779]  do_syscall_64+0x33/0x40
[ 1576.475675]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1576.476900] RIP: 0033:0x7f09c4bc0b19
[ 1576.477786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1576.482171] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1576.483996] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1576.485721] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1576.487396] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1576.489124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1576.490838] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
[ 1576.543704] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:23:29 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:23:29 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:23:29 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, 0x0, 0x0, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:23:29 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 60)

[ 1576.595595] FAULT_INJECTION: forcing a failure.
[ 1576.595595] name failslab, interval 1, probability 0, space 0, times 0
[ 1576.598404] CPU: 0 PID: 9472 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1576.601380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1576.603372] Call Trace:
[ 1576.604037]  dump_stack+0x107/0x167
[ 1576.604912]  should_fail.cold+0x5/0xa
[ 1576.605816]  ? create_object.isra.0+0x3a/0xa20
[ 1576.606953]  should_failslab+0x5/0x20
[ 1576.608082]  kmem_cache_alloc+0x5b/0x310
[ 1576.609069]  create_object.isra.0+0x3a/0xa20
[ 1576.610104]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1576.611382]  __kmalloc_node_track_caller+0x1a6/0x3b0
[ 1576.612617]  ? alloc_skb_with_frags+0x92/0x570
[ 1576.613700]  __alloc_skb+0xb1/0x5b0
[ 1576.614570]  alloc_skb_with_frags+0x92/0x570
[ 1576.615667]  ? find_held_lock+0x2c/0x110
[ 1576.616636]  sock_alloc_send_pskb+0x7af/0x930
[ 1576.617708]  ? sk_alloc+0x350/0x350
[ 1576.618583]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1576.619844]  ? SOFTIRQ_verbose+0x10/0x10
[ 1576.620833]  ? lock_chain_count+0x20/0x20
[ 1576.621818]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1576.622996]  ? ip6_mtu+0x1bb/0x3d0
[ 1576.623880]  ? lock_downgrade+0x6d0/0x6d0
[ 1576.624858]  ? ip_frag_init+0x350/0x350
[ 1576.625810]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1576.626916]  ? ip6_mtu+0x1e9/0x3d0
[ 1576.627802]  ? ip6_setup_cork+0xfb7/0x1740
[ 1576.628799]  ip6_make_skb+0x2de/0x4e0
[ 1576.629700]  ? ip_frag_init+0x350/0x350
[ 1576.630659]  ? ip_frag_init+0x350/0x350
[ 1576.631643]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1576.632767]  ? ip6_dst_hoplimit+0x199/0x440
[ 1576.633789]  ? lock_downgrade+0x6d0/0x6d0
[ 1576.634801]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1576.635803]  ? ip_frag_init+0x350/0x350
[ 1576.636750]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1576.637970]  ? perf_event_task_disable+0x390/0x390
[ 1576.639128]  ? lock_downgrade+0x6d0/0x6d0
[ 1576.640143]  ? hrtimer_start_range_ns+0x336/0xae0
[ 1576.641276]  ? lock_acquire+0x197/0x470
[ 1576.642222]  ? find_held_lock+0x2c/0x110
[ 1576.643201]  ? sock_has_perm+0x1ea/0x280
[ 1576.644214]  ? __import_iovec+0x458/0x590
[ 1576.645195]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1576.646420]  inet6_sendmsg+0x105/0x140
[ 1576.647355]  ? inet6_compat_ioctl+0x320/0x320
[ 1576.648419]  __sock_sendmsg+0xf2/0x190
[ 1576.649360]  ____sys_sendmsg+0x334/0x870
[ 1576.650328]  ? sock_write_iter+0x3d0/0x3d0
[ 1576.651324]  ? do_recvmmsg+0x6d0/0x6d0
[ 1576.652258]  ? __lock_acquire+0x1657/0x5b00
[ 1576.653305]  ___sys_sendmsg+0xf3/0x170
[ 1576.654241]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1576.655314]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1576.656611]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1576.657656]  ? trace_hardirqs_on+0x5b/0x180
[ 1576.658682]  ? lock_acquire+0x197/0x470
[ 1576.659625]  ? find_held_lock+0x2c/0x110
[ 1576.660617]  ? __might_fault+0xd3/0x180
[ 1576.661541]  ? lock_downgrade+0x6d0/0x6d0
[ 1576.662516]  ? io_schedule_timeout+0x140/0x140
[ 1576.663622]  __sys_sendmmsg+0x195/0x470
[ 1576.664588]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1576.665602]  ? lock_downgrade+0x6d0/0x6d0
[ 1576.666589]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1576.667712]  ? wait_for_completion_io+0x270/0x270
[ 1576.668850]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1576.669955]  ? vfs_write+0x354/0xb10
[ 1576.670842]  ? fput_many+0x2f/0x1a0
[ 1576.671705]  ? ksys_write+0x1a9/0x260
[ 1576.672603]  ? __ia32_sys_read+0xb0/0xb0
[ 1576.673572]  __x64_sys_sendmmsg+0x99/0x100
[ 1576.674577]  do_syscall_64+0x33/0x40
[ 1576.675386]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1576.676580] RIP: 0033:0x7f09c4bc0b19
[ 1576.677369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1576.681620] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1576.683300] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1576.684936] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1576.686578] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1576.688174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1576.689795] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:23:29 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2fe1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x6d, 0x0, 0x0, 0x0, 0x6})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00')
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1)

19:23:29 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xffffffff00000000)

[ 1576.774097] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1576.786067] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:23:44 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000040), 0x24, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x44200, 0x0)
symlinkat(&(0x7f0000000140)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00')
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:23:44 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:23:44 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xfffffffffffff000)

19:23:44 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 61)

19:23:44 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x78, 0x20, 0x400, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x5a, 0x11, 0x0, 0x0, @binary="cbde7422253215f14d0467727ee63ec2170ca84083a2a382e0a160ad53b826c08983f6dc7a87583c8bb816dd37a474c81ed4a65175f7d0b30ac5c4b0ad11a2697273a160f494f4136ccc38d9531e1bf2cd7dec869ab2"}]}, 0x78}}, 0x4000400)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x220}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2)
add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3)
add_key$keyring(&(0x7f0000000340), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fddbdf255a00000000000300", @ANYRES32=r4, @ANYBLOB="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"], 0x3d}}, 0x0)
add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$revoke(0x3, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
io_setup(0xf7, &(0x7f0000000000))
openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x1c7a02, 0x0)
unshare(0x48020200)

19:23:44 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:23:44 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, 0x0, 0x0, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:23:44 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="f8ff0000010f1000000020f4ff0000000200"/27], 0x24, 0x2)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

[ 1591.122443] FAULT_INJECTION: forcing a failure.
[ 1591.122443] name failslab, interval 1, probability 0, space 0, times 0
[ 1591.125600] CPU: 1 PID: 9507 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1591.127702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1591.130060] Call Trace:
[ 1591.130777]  dump_stack+0x107/0x167
[ 1591.132104]  should_fail.cold+0x5/0xa
[ 1591.133314]  ? lock_release+0x680/0x680
[ 1591.134434]  ? skb_clone+0x14f/0x3d0
[ 1591.136963]  should_failslab+0x5/0x20
[ 1591.137928]  kmem_cache_alloc+0x5b/0x310
[ 1591.138983]  skb_clone+0x14f/0x3d0
[ 1591.139907]  dev_queue_xmit_nit+0x3a7/0xb00
[ 1591.141011]  dev_hard_start_xmit+0xab/0x6f0
[ 1591.142117]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1591.143488]  __dev_queue_xmit+0x17ec/0x2710
[ 1591.144586]  ? find_held_lock+0x2c/0x110
[ 1591.145624]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1591.146810]  ? lock_downgrade+0x6d0/0x6d0
[ 1591.147872]  ? lock_acquire+0x197/0x470
[ 1591.148883]  ? ip6_finish_output2+0x203/0x1fe0
[ 1591.150040]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1591.151444]  neigh_connected_output+0x382/0x4d0
[ 1591.152637]  ip6_finish_output2+0xaaf/0x1fe0
[ 1591.153793]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1591.155085]  ip6_output+0x3b8/0x7e0
[ 1591.156032]  ip6_local_out+0xb4/0x1a0
[ 1591.156998]  ip6_send_skb+0xb7/0x350
[ 1591.157969]  udp_v6_send_skb+0x7aa/0x15b0
[ 1591.159050]  udpv6_sendmsg+0x2116/0x2ad0
[ 1591.160096]  ? ip_frag_init+0x350/0x350
[ 1591.161127]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1591.162442]  ? perf_event_task_disable+0x390/0x390
[ 1591.163701]  ? lock_downgrade+0x6d0/0x6d0
[ 1591.164755]  ? hrtimer_start_range_ns+0x336/0xae0
[ 1591.165987]  ? lock_acquire+0x197/0x470
[ 1591.167019]  ? find_held_lock+0x2c/0x110
[ 1591.168067]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1591.169445]  ? sock_has_perm+0x1ea/0x280
[ 1591.170500]  ? __import_iovec+0x458/0x590
[ 1591.171554]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1591.172540]  inet6_sendmsg+0x105/0x140
[ 1591.172874]  ? inet6_compat_ioctl+0x320/0x320
[ 1591.173300]  __sock_sendmsg+0xf2/0x190
[ 1591.173762]  ____sys_sendmsg+0x334/0x870
[ 1591.174151]  ? sock_write_iter+0x3d0/0x3d0
[ 1591.174570]  ? do_recvmmsg+0x6d0/0x6d0
[ 1591.175385]  ? __lock_acquire+0x1657/0x5b00
[ 1591.175982]  ___sys_sendmsg+0xf3/0x170
[ 1591.176363]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1591.176851]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1591.177232]  ? _raw_spin_unlock_irq+0x27/0x30
[ 1591.177687]  ? lock_acquire+0x197/0x470
[ 1591.178450]  ? find_held_lock+0x2c/0x110
[ 1591.179290]  ? __might_fault+0xd3/0x180
[ 1591.180127]  ? lock_downgrade+0x6d0/0x6d0
[ 1591.181062]  ? io_schedule_timeout+0x140/0x140
[ 1591.181499]  __sys_sendmmsg+0x195/0x470
[ 1591.181902]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1591.182703]  ? lock_downgrade+0x6d0/0x6d0
[ 1591.183330]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1591.183801]  ? wait_for_completion_io+0x270/0x270
[ 1591.184490]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1591.185471]  ? vfs_write+0x354/0xb10
[ 1591.186392]  ? fput_many+0x2f/0x1a0
[ 1591.187091]  ? ksys_write+0x1a9/0x260
[ 1591.187623]  ? __ia32_sys_read+0xb0/0xb0
[ 1591.188033]  __x64_sys_sendmmsg+0x99/0x100
[ 1591.188514]  do_syscall_64+0x33/0x40
[ 1591.188874]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1591.189476] RIP: 0033:0x7f09c4bc0b19
[ 1591.189824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1591.191419] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1591.192114] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1591.192764] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1591.193369] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1591.194016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1591.194616] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:23:44 executing program 0:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
execveat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000001c0)='\x00'], &(0x7f0000000400)=[&(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000340)='\\\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='system.posix_acl_default\x00'], 0x1000)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0200800001000000000000200408000000000000100000000000000000000000a2aedce97b0794451fbc6a3de9e867bec2dfa026"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:23:44 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0xffffffffffffffff)

19:23:44 executing program 2:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010edffee000000002000000000000000"], 0x24, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fspick(r1, &(0x7f0000000180)='./file1\x00', 0x0)
mknodat$loop(r0, &(0x7f0000000040)='./file0/file0\x00', 0x10, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

[ 1591.265535] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1591.300349] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:23:44 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020014000100000000000000040000000000000010000000000000002000000000000000"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fdatasync(r0)

19:23:44 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000002000000000000000d192"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:23:44 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 62)

[ 1591.324368] FAULT_INJECTION: forcing a failure.
[ 1591.324368] name failslab, interval 1, probability 0, space 0, times 0
19:23:44 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1591.325818] CPU: 1 PID: 9527 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1591.330992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1591.331946] Call Trace:
[ 1591.332213]  dump_stack+0x107/0x167
[ 1591.332693]  should_fail.cold+0x5/0xa
[ 1591.333106]  ? create_object.isra.0+0x3a/0xa20
[ 1591.333698]  should_failslab+0x5/0x20
[ 1591.334102]  kmem_cache_alloc+0x5b/0x310
[ 1591.334616]  ? lock_acquire+0x197/0x470
[ 1591.335004]  create_object.isra.0+0x3a/0xa20
[ 1591.335549]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1591.336032]  kmem_cache_alloc+0x159/0x310
[ 1591.336585]  skb_clone+0x14f/0x3d0
[ 1591.336960]  dev_queue_xmit_nit+0x3a7/0xb00
[ 1591.337554]  dev_hard_start_xmit+0xab/0x6f0
[ 1591.337967]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1591.338606]  __dev_queue_xmit+0x17ec/0x2710
[ 1591.339017]  ? find_held_lock+0x2c/0x110
[ 1591.339460]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1591.339859]  ? lock_downgrade+0x6d0/0x6d0
[ 1591.340263]  ? lock_acquire+0x197/0x470
[ 1591.340653]  ? ip6_finish_output2+0x203/0x1fe0
[ 1591.341100]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1591.341636]  neigh_connected_output+0x382/0x4d0
[ 1591.342095]  ip6_finish_output2+0xaaf/0x1fe0
[ 1591.342538]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1591.343036]  ip6_output+0x3b8/0x7e0
[ 1591.343388]  ip6_local_out+0xb4/0x1a0
[ 1591.343766]  ip6_send_skb+0xb7/0x350
[ 1591.344121]  udp_v6_send_skb+0x7aa/0x15b0
[ 1591.344517]  udpv6_sendmsg+0x2116/0x2ad0
[ 1591.344928]  ? ip_frag_init+0x350/0x350
[ 1591.345276]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1591.345731]  ? perf_event_task_disable+0x390/0x390
[ 1591.346229]  ? lock_downgrade+0x6d0/0x6d0
[ 1591.346658]  ? hrtimer_start_range_ns+0x336/0xae0
[ 1591.347183]  ? lock_acquire+0x197/0x470
[ 1591.347564]  ? find_held_lock+0x2c/0x110
[ 1591.347943]  ? sock_has_perm+0x1ea/0x280
[ 1591.348307]  ? __import_iovec+0x458/0x590
[ 1591.348658]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1591.349116]  inet6_sendmsg+0x105/0x140
[ 1591.349446]  ? inet6_compat_ioctl+0x320/0x320
[ 1591.349821]  __sock_sendmsg+0xf2/0x190
[ 1591.350170]  ____sys_sendmsg+0x334/0x870
[ 1591.350514]  ? sock_write_iter+0x3d0/0x3d0
[ 1591.350934]  ? do_recvmmsg+0x6d0/0x6d0
[ 1591.351278]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1591.351723]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1591.352191]  ? trace_hardirqs_on+0x5b/0x180
[ 1591.352560]  ___sys_sendmsg+0xf3/0x170
[ 1591.352895]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1591.353297]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1591.353671]  ? _raw_spin_unlock_irq+0x27/0x30
[ 1591.354051]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1591.354445]  ? finish_task_switch+0x126/0x5d0
[ 1591.354856]  ? finish_task_switch+0xef/0x5d0
[ 1591.355293]  ? __switch_to+0x572/0xf70
[ 1591.355657]  ? __switch_to_asm+0x3a/0x60
[ 1591.356043]  ? __switch_to_asm+0x34/0x60
[ 1591.356447]  ? __schedule+0x82c/0x1ea0
[ 1591.356818]  ? io_schedule_timeout+0x140/0x140
[ 1591.357274]  __sys_sendmmsg+0x195/0x470
[ 1591.357674]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1591.358117]  ? lock_downgrade+0x6d0/0x6d0
[ 1591.358585]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1591.359102]  ? wait_for_completion_io+0x270/0x270
[ 1591.359639]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1591.360116]  ? vfs_write+0x354/0xb10
[ 1591.360523]  ? fput_many+0x2f/0x1a0
[ 1591.360913]  ? ksys_write+0x1a9/0x260
[ 1591.361297]  ? __ia32_sys_read+0xb0/0xb0
[ 1591.361741]  __x64_sys_sendmmsg+0x99/0x100
[ 1591.362179]  do_syscall_64+0x33/0x40
[ 1591.362573]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1591.363125] RIP: 0033:0x7f09c4bc0b19
[ 1591.363503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1591.365434] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1591.366261] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1591.366987] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1591.367725] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1591.368480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1591.369217] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
[ 1605.936957] FAULT_INJECTION: forcing a failure.
[ 1605.936957] name failslab, interval 1, probability 0, space 0, times 0
[ 1605.939880] CPU: 1 PID: 9544 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1605.941548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1605.943277] Call Trace:
[ 1605.943908]  dump_stack+0x107/0x167
[ 1605.944754]  should_fail.cold+0x5/0xa
[ 1605.945688]  ? create_object.isra.0+0x3a/0xa20
[ 1605.946772]  should_failslab+0x5/0x20
[ 1605.947688]  kmem_cache_alloc+0x5b/0x310
[ 1605.948674]  create_object.isra.0+0x3a/0xa20
[ 1605.949723]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1605.950932]  __kmalloc_node_track_caller+0x1a6/0x3b0
[ 1605.952224]  ? alloc_skb_with_frags+0x92/0x570
[ 1605.953344]  __alloc_skb+0xb1/0x5b0
[ 1605.954217]  alloc_skb_with_frags+0x92/0x570
[ 1605.955262]  ? find_held_lock+0x2c/0x110
[ 1605.956269]  sock_alloc_send_pskb+0x7af/0x930
[ 1605.957365]  ? sk_alloc+0x350/0x350
[ 1605.958236]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1605.959531]  ? SOFTIRQ_verbose+0x10/0x10
[ 1605.960508]  ? lock_chain_count+0x20/0x20
[ 1605.961518]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1605.962704]  ? ip6_mtu+0x1bb/0x3d0
[ 1605.963577]  ? lock_downgrade+0x6d0/0x6d0
[ 1605.964590]  ? ip_frag_init+0x350/0x350
[ 1605.965571]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1605.966682]  ? ip6_mtu+0x1e9/0x3d0
[ 1605.967553]  ? ip6_setup_cork+0xfb7/0x1740
[ 1605.968568]  ip6_make_skb+0x2de/0x4e0
[ 1605.969479]  ? ip_frag_init+0x350/0x350
[ 1605.970436]  ? ip_frag_init+0x350/0x350
[ 1605.971388]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1605.972525]  ? ip6_dst_hoplimit+0x199/0x440
[ 1605.973566]  ? lock_downgrade+0x6d0/0x6d0
[ 1605.974589]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1605.975563]  ? ip_frag_init+0x350/0x350
[ 1605.976516]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1605.977748]  ? lock_acquire+0x197/0x470
[ 1605.978691]  ? find_held_lock+0x2c/0x110
[ 1605.979675]  ? lock_acquire+0x197/0x470
[ 1605.980648]  ? find_held_lock+0x2c/0x110
[ 1605.981633]  ? sock_has_perm+0x1ea/0x280
[ 1605.982612]  ? __import_iovec+0x458/0x590
[ 1605.983625]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1605.984891]  inet6_sendmsg+0x105/0x140
[ 1605.985822]  ? inet6_compat_ioctl+0x320/0x320
[ 1605.986893]  __sock_sendmsg+0xf2/0x190
[ 1605.987833]  ____sys_sendmsg+0x334/0x870
[ 1605.988807]  ? sock_write_iter+0x3d0/0x3d0
[ 1605.989813]  ? do_recvmmsg+0x6d0/0x6d0
[ 1605.990725]  ? __lock_acquire+0x1657/0x5b00
[ 1605.991771]  ___sys_sendmsg+0xf3/0x170
[ 1605.992696]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1605.993797]  ? vmacache_find+0x55/0x2a0
[ 1605.994739]  ? lock_acquire+0x197/0x470
[ 1605.995937]  ? find_held_lock+0x2c/0x110
[ 1605.996909]  ? __might_fault+0xd3/0x180
[ 1605.997859]  ? lock_downgrade+0x6d0/0x6d0
[ 1605.998828]  ? asm_exc_page_fault+0x1e/0x30
[ 1605.999862]  __sys_sendmmsg+0x195/0x470
[ 1606.000792]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1606.001799]  ? lock_downgrade+0x6d0/0x6d0
[ 1606.002760]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1606.003894]  ? wait_for_completion_io+0x270/0x270
[ 1606.005022]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1606.006104]  ? vfs_write+0x354/0xb10
[ 1606.006957]  ? fput_many+0x2f/0x1a0
[ 1606.007846]  ? ksys_write+0x1a9/0x260
[ 1606.008735]  ? __ia32_sys_read+0xb0/0xb0
[ 1606.009688]  __x64_sys_sendmmsg+0x99/0x100
[ 1606.010660]  do_syscall_64+0x33/0x40
[ 1606.011531]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1606.012744] RIP: 0033:0x7f09c4bc0b19
[ 1606.013616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1606.017927] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1606.019707] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1606.021376] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1606.023028] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1606.024702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1606.026371] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
[ 1606.055712] tmpfs: Bad value for 'gid'
[ 1606.080658] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1606.114521] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:23:59 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f0000000480)='./file0\x00', 0x2, 0x5b, 0x0, 0x40021, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
execve(&(0x7f0000000040)='./file1\x00', &(0x7f0000000240)=[&(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000180)='{^{}!(\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000200)='{!\xe8-\x00'], &(0x7f0000000440)=[&(0x7f00000002c0)='^\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000003c0)='@\x00', &(0x7f0000000400)='\'%.,&\x00'])
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:23:59 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:23:59 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:23:59 executing program 0:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f00000016c0)='./file0\x00', 0x8, 0x1)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, <r1=>0xee00}}, './file0\x00'})
syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x7, 0x6, &(0x7f0000001540)=[{&(0x7f0000000240)="6c813d612cdbd9c28e19551646341e6ac1e4293c8c96eddf273934b6180105e9ac304d0e752c07b14039b9c63174cbc9d2d7f2eafd7e0b3531bbc9eac922ec9c04141a5e71d2b572393450e2feef777f8f3b83e851a6cd9922b0383a16ea2f5466fddfb697fc48a878692b8fcdb2696e24ceba4eb379f7a855ceba5b0821b3e7f09ec70bc53cfefb6e4905c29c53bb0ebb", 0x91, 0x3}, {&(0x7f0000000300)="6645f94c1f921d3cbfd73998d0804d8e3cc638c37982f44eefa799029a9cc3e751e7cfa7faeef9d4e6a2db6b6a8f4cc4ecd3a2cf709317d9237dc4596c417fbad3dc8ea7817a0fc444d329e8ee28ebc65e0501a5a81be457319265dfe10242b5b049c3e975f6c7c0c6d1d340c002a8018362a7670fbaccdfefb0e85ee67b35818435ef1f0ecc0ccad7487630ffe3c4dab44020791083a40e1fd83ee94cc6e8c76ccb8441dfe14c2c33fcdff4d9c282c4f7d8287dc1acac6831b4b67e4b4acacf299c010adfdb475b73409479f8f7f2a094400e47641a32925c069d9d23d2bde73a26b263b962040f5e534d041414215b28b847edf283ac92473c1d67981bae0c2a336d26a6f147231e81971ab15539ef2d5ae77d8496a1d248df3a632d3c99569d88b4f94ce7a67d02f4ab51d0ab89c19b0bf2e0f201591959ae9aa818dc6a6f747071de4640c00ad0a0a825562e8ef9f347c0175760e7ad8c34789fc31f28e7821a314b3ccc7d12d2ef29fdef75467563c0ff4c6e8c1d2eb782f9bb3eb9a593d181ce76a5e6224aa2d5b26c9c0fbc341aa9c6f95fbcb37f89cfa26bdbaf49c9ca892dd4ade0b7e7ca37590344545780ecbc811d6446e96adf582398dbb80ed014471824767c3d18ea6f16e35a240d59e97eb2473ffe46093f9d7c2010e5d71ad9c9f626486904dec2a91412ca2b84fd21f3ede4d8842cd6e6503d4a8220495317f2a31110de1fb1a6619b8e394e8ee8407a166b151e70d75fa26ae8c17fef5c9f6595fd67b4ea08cf2795d25f75e412c0c81781abb555cb4cbd435fcbc854de905566fa02a6e949b721b960e516d7d9b87a320d32014e7cbc47804da815faf43eec93e0aa759da785c5cc481f10ad65aebbddabcd311b6cba6cf1c49ab25d985c3367f93a676004d193ee644a8a7d916673503f09bcbf46c8672e1ead1bc98f11a95048736f80f852b3b79093c676a8cecb2fd6f09138e97930163b06860a07caafa5f7132c07af3cb298e39b83b99233bcae27df425c2dc9d2cdfd5f8fa5918fd89dc1144bc91d51b6cd7c04d4c08b5afa4206aaec7824b6019261d9b3f3f0c9a634cdc525b05fd3c545170c05e5402b3f6f64bdbc4650655ce0e6d9041db7844285f6475d79e417f41c62e0b41f839dadacf9189946460e6cc5b9a51c5d1f39722cd0e4b0c4b31e99c15773ec237d97d843587eae383086d488527c9423020c25a1d9fe79246dfd546132a3e104274f256a18764c47e587c029fa85b9674bed62b5299274af1d6165bec26f2374f8a34f1459fb9380b9b26b3c0641b4f9f201d751967fc9c790e6708c854d3c15bdd6d1c1a8a85b1d0c2cca527aafbcaef8c2ff176ca36da30bd8a32e05b04dfc6ec8cafc1483305abe32366dd69c40178b130132540e028dff027c3f690c1bc4c03a55d2fd7dc7ca52edf321a92b4d9e8b1588cef0e761d4425b1004d6b53033dfad4ac39913ae8f8fb8f65e21d01ad5fa884464e6e0fbd531c07b403a0ae65d06363789c4f58d67b98194152c48b8cef94c93d4f4621c7709f0237f8fe4291a7f13265704541087aa045ce34478bd403a6f3ae953379d5fde922163c2a10a7c647d2391b7f76f51840f673c23b1923ea38ce423d1cc6154170c1d92886f6acb271304e360dfe83ffbdaa4c4898ac301054e0a4a16ffe4dd38db6ccb211c198db26c34e58497ce4684d766bd349a483153aa69b26b1d4603a2d2f813728b5d225cb4a0aae59dbeda5d78ca67c8b80de559a12fc3367be3342c51209bb8611ad17efe64403b11cd485566319bed85d5aad56a8b9d466cfebf1c05a484b56fa2f56d57455fbe82204b4e73714b0b5dbf38fe8f5241d6c61a5ecc4250d9faa58aad09b6376c43293d299f038d799fcaaf77ecdfd4f89d0fbeabb8704f101901094429f38f9a7ee1da412e0b83845942d71ae32548f31c2905705a704973f0495dfe6c7adf9ea70f7eeec53b73073cc6bec200a60219d914715468792cca1cd7d016db5139dd3b6b13a86384d2d637a5cd89049a3fd5c711a49b5d949cfc3876ad4099dd9163c8c53714630c63bf47b63f1b9ad80d0ee3febc3b43d8399860169e6f8078148229b7642b8a63fbf2992bf2a80fbe69ca3d594ddc3cc3378cd7ec2c0589a8b689becafc9de6978d26dc6c5b0cd35650fbbf05d85e2fc6f3b6e8299a9380a72b3346a1890aece7581e34721e9bb86c6eb2032c262c23f1a276fb585a2d00c88b66c50720d99002b027763abc15c10ae88b7a45b73c2b1c43f785ba8e70b242b1d17665da1198ac92f83c669f9459b2c18081e0b61d9c3e0f5a3a8976b6c72ee9e107cbb9942850cf6a440b1f5886b0dec67fa3e5afae417bae112324c5f8382fc70f677c2bd5fc8e5812d5a5c9636f262e4058e21c98860361ba61bf4c9c2bf1442ad8984fa0b978e175f5b7e7b0d3c7e49a652516a7857025605232a399be69c405534f414bab145c4af35542fc649be64e8a0b7b38a8f5836203f619bc14a2caa9259848b7e187c1169aee315394f2cc89a3a834785363af43f5fa0d79073bd4938e4b5c3595832850305aee3eea5996508da52cdce4fbcaaa91947a4f58175450c10784a4ed596a2f083eb3cf308cc2e2a83b4d2bb19d6889900c3a13254b249d488e0da35cb7307c5b6464da3de0f73e7425f6163d314768de5c0ceb9f128002a22b04910d8a1bb8f9c274461a70bfa8222a85d7792ac910ceb8280ebe1c22f0bccc85b33bba1a78c19b10a4cc30cdd6cd12349b250ca8591b19cfbcf309a4101b9911281b0b5da4917ba372e51e0d6e2f48f2c0e92d682ad2f323618f716ef41954ea521a8cadec1e1433499cd742d977a7b7bb777531331a0931943641d75161336eff0a7e2d29308cfbb3fbe96adb4ec1f6dd53debf37c3db870fe4f8ba92c1b70c41dc12ab65821195e587151fd250c98f356e2ee43eefa0da67536c824db5b8308fd8d794f59c39a338b92255ad9d9e4347db7930575c0dc85b85ba4b8cdf4622e5b9d879d5e49ddf9164210b2976a6bdd396139f5917eee50b05712799c87e11de6f5c65ba867914795a5115ad29ce4ff5338485731227c23cd18135c7c8fbba8887a1a004cce37933f74a9768a7f8f7a1f6323fd507324d53559ea632b0deabe12d1e480ff9af72817e738b85c639354f377545e61a4842d25bc626d928c371438f5471734a2b7ad44056f011d9c8022bcdc89ed010e40d6b7963e7a955a27db44ad08806d9e46da0ba648230347ecbf5036b388ee87d2926a5401342749d61b0553453b5efab8b5ad6c89320b7d85f91b20272fe9826ab534e4b1b722292153a49ca78d894329d3f0339bb0d5930f0d8855c3a97ecb6f5b8db83cc7a46e55524cf9c90cb458e615c4d5244ee3514bf7548681b6fd0f117e7cc38b59974d3db5357be64d0b4062dd0649cc2b43ef45bf5d93906f74e01c86d91aea1d7b4ad733c4e9eb48eb1c5f7f3c89464de0316266c25f02a311007f79f7f1be7dff6b59b545826af9b396b0c8b334cdc1b58a7f5e8137587276b059b1294fe762db1caca43da532e3fa98e8e5d421b6e4803ae9beb6d5964402c723939f16246addd5f7c3ee6e841606b2188d99c4639b4bc8a3da2c1f22aa41fa9a060a95f759dc945a6e7006010ca098cef0e45b3ae428b665e4bddbd5f26a8120d1bcc45bdac74a12a791d5fee9112cc70472b91259219da4d8db07bfe93e2c5c6d381da8a1c40c82ffb56b2856a24e76af1a1455f1b3c3dc2a8028ed453a7cc9d455407e406a641569b87f4ce9e8165d69efdeb0b066304084a823cfd53718f6d803de6ea776d6e8433cd6d2fa231f2398290e65c3e75f8f54eb67ff5109b79217cae1320432425fbe0449fc50ecff0985cc18a455d85b4893268f880c7891f7712fc5be5a49969856545792f0ea0807ff563a9ac9ffc00c0fec85fc640676bca60de77e23743be36228c0e5e3124a5a6308388cbeea6d500727125bd4892b974de774379ea93686c6bc10a012354922b1fd435e53bd6ff95de5d46472a124c5e4bd56b8cd706fdaaeea04f31a95123e64d71bc56967577cdf841bc2ffe751f38e9aa123b7b35968e985d3881d8774f658138030bbe9a0bbd33678f416ee74e0e0f32b588d3b89eed17dd5643c3ff3326740ee7289cdf05d2089dfaf267c42cb825ea185d2e98783e5115fb1491860ece70b9f8f343a75d470a9007051b5927aa15055d61a224ca1dc4eb474b3a9efcd66ecff2015658e39b44485f0e95ffe6d765957624ba306107e0f0ccc834cdb7efdbaebe0f2499f55f5e9e4b707e0f69ed10a30580614d6f3d0f9d7ced77065e5f93f44256e54e6a2a5b12b63f6e391c45254c6a67c1a3422a589921c0f7b49e45a82b545ed19289507fe048316d29efa4bf1e4a629606a1426f318b85f0b8a0aaa16644b39085a1e8174705905d1c8a5cd7b0b86a34f6f1b6b3e1831c9b20fdf9d430e4c6f70573394f8a87dda18118af0fe1ada1d40341f3be9377594bfbd75d53c2e0f8133a16e9cbd53d7cecd60c4ef2b9cb939c3d097ef0678c8b05333473e4b710ab7708e606efcd138ef6574de2504b4314340bd7589ebd15722903c3184c5a64789ee0e7732052c09bf2073c422a76b4f9a897ae7f233817fd90fbd685d450a17c87be39ab8a1ded2039c33a372cc298367c931e292ccbceeda17049eb7df7ff44f55942bef48f928c89f127da0da715867a0b494a6ffbd8c50e5ed27806b091c8ed752c7492501ae84a172bb1420410f8f83b17ee95f81056d1eda8e40868caea5f97c7a00bcef7cced5c83018819497cf74fbbc47426a537b403c2bbe0607ba6100af66427d99fccae5595db7117aacf5a5f72defa598caa3134ac388444c6e977d4981f5004dba16c985a2232bf4fb7fe11e4058a1b07e7cd10bd59c0af0f6209140b02c0ac978b00256b1e1ef6f28be00e977e63284fec0646bdce1b535602af3fc90bc02dfe845a7811d24a02e238313ccdff517696849a252db051129e50d8ad69b61d1d2b7ec1bcb3fc6fedaecf1500fc8ac085317fa64892abf024b6dcdddadb28b934d0e946c81b5ef1da59a268c07706a93bdacd2b86c796aa00a86bde5ea78d93ce096dc5f536370d7cd44bf94f7d0d645e194eb50106075f01143592ee9a758de1698e653bdbb9880ee92b38ced5d63d87bc6fd24bbb16f5cb6f2eca627917d72b651470d148e8074ac73c4952344ffd499a96804d9a3d06c5767c61e3b0f2be438bf9d421d96b56cea75df019170750dc8acb590d42fb897773df3da0f9fc4c8fab6403586d950a781a4458facabee344c932abfe1f404f02bde9915347e609eb05f06e1ff6ccb0c8f52b06f033879e3787497f31d565952bfaf672482599d48ef3835aa67320691da63b8ee22c5a1ea9a930b2f63097b3809926d8fc06eb58d41428d6f32ae2f63439eae8b53379e5cfa6faed0ae168b85653f782503497596ad6ccd467c9f20d5efa51028dddcac5abcc99699b7b0b88aef95c0932fb072a527e5212f03833c9f83790c8b017c7415bce0afeae2759b18752df857b8cca65d0134561fa26c9bd0a52ea3a13ade912aff1747342494f989813b5b276c6c7a01731e4adacfedc4117be6fb778d246ebce995de77c05e1d421b906f5b7b922d648a87727dd0ecb15d2f36a2ef8646e22f2c66068c6144df5851e2a4e4f5ef2988210788740da9058f9d1174903314240959536241a577a1176b26cff9f0f838b79d8f3e2d9540825e4e3f907564dafb4dc75c193180034d0", 0x1000, 0x42f}, {&(0x7f0000001300)="a9561e154e8ea50b79346f7b6a14a7c11a6e93c245364d37e82ab1c0f3a7e3530172ffdd2c6a9b8e8433504f850ef0ee71f102171a", 0x35, 0x100}, {&(0x7f0000001340)="f12a8e561d97ebf9377e0f5d06bdbc8d5cd1259ba49b29587fd4156ba4d9d1fb124515d31a0c18340a2abb9ffc823606409e3ecc2890d0ca66763048e1a041b71c1db66aa97a57cc6de40c0530832b26b966e7e6b4b35edd554d515d51ee5f27545cff98c2368ef0bd4cf1d5ca8ef6a992b87ac2e3f303978400becda80f3c9a88073731b1ae1b98bdc2687d839e5c3b321990c6227ee155ce7632fbf9f6f085cb8f6a58fe86ae49b9d4a28616a660601645320124d4dd7f98c3209a0153993f6040791901ad0aacebbed8a91a58c831d0e8e1a7755e64504b8f9ccd7c55845519982f3a6460720e", 0xe8, 0xfffffffffffffffd}, {&(0x7f0000001440)="2f2dd23247647258659200cc59e924130173491765238137abe73cb52ac662a49122dd8486b44a6b925d", 0x2a, 0x6}, {&(0x7f0000001480)="84a818c587915e916abcca9f1dbea1a20d3220b482c56e8701ac0bd394dba0dc0c73a6951b9e2ec4b778bd26ab66ec83b68652e5b50206c5c9ed3e0038ae7da50c78d71fe77d5614e61601751930bbf65e5baebf1be715439cd26d6194f4c7bdd81974e9adb10ee96f3bd27a9122eb8bfd7a7a7b0047b4ab7275de434a3f736c17c63dc5fec0f9143d2dabcd40e1bf1f2876e65de05acf02c0c95a3f387da9088d", 0xa1, 0x3}], 0x8, &(0x7f0000001640)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@gid={'gid', 0x3d, r1}}], [{@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, 'J--,/'}}, {@pcr={'pcr', 0x3d, 0x36}}, {@smackfsfloor={'smackfsfloor', 0x3d, '@%'}}]})
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="02000100008000cf3ed6677ec2e501833e2860fe990000000000040000000000000010000000000000002000000000000000"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')

19:23:59 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}, 0x10c, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r5, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = socket$unix(0x1, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r6, {0xc3fd}}, './file1/file0\x00'})
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000007780)={0x0, 0x0, &(0x7f0000007740)={&(0x7f00000075c0)={0x38, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x38}}, 0x0)
accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14, 0x80000)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x40001)
copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0)
r9 = dup3(r1, r2, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
openat(r9, &(0x7f0000000140)='./file1/file0\x00', 0x40102, 0x2)

19:23:59 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}], 0x9, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:23:59 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 63)

19:23:59 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed581, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x2c, 0x1e00, 0x70bd2a, 0x25dfdbfc, {0x9}, [@typed={0x8, 0x5a, 0x0, 0x0, @str='{+.\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x81)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000002c0), 0x4)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:23:59 executing program 1:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="02000000010000000000000004000000018f17cb796f46d70e8e0000002b000000000000", @ANYRESHEX=r0, @ANYRES16, @ANYRESDEC, @ANYRESOCT, @ANYRES16=r1, @ANYRESOCT, @ANYBLOB="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", @ANYRESOCT=r1, @ANYRES16=r0], 0x24, 0x0)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x402, 0x100)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:24:13 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {}, [], {}, [], {0x10, 0x1}}, 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:24:13 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}, 0x10c, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r5, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = socket$unix(0x1, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r6, {0xc3fd}}, './file1/file0\x00'})
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000007780)={0x0, 0x0, &(0x7f0000007740)={&(0x7f00000075c0)={0x38, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x38}}, 0x0)
accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14, 0x80000)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x40001)
copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0)
r9 = dup3(r1, r2, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
openat(r9, &(0x7f0000000140)='./file1/file0\x00', 0x40102, 0x2)

19:24:13 executing program 1:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
openat(r1, &(0x7f0000000040)='./file0\x00', 0x80, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:24:13 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:24:13 executing program 0:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000040)='./file0/file0\x00', 0x2000, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:24:13 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:24:13 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}], 0x9, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:24:13 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 64)

[ 1620.375821] FAULT_INJECTION: forcing a failure.
[ 1620.375821] name failslab, interval 1, probability 0, space 0, times 0
[ 1620.376920] CPU: 1 PID: 9594 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1620.377581] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1620.378279] Call Trace:
[ 1620.378560]  dump_stack+0x107/0x167
[ 1620.378875]  should_fail.cold+0x5/0xa
[ 1620.379223]  ? lock_release+0x680/0x680
[ 1620.379632]  ? skb_clone+0x14f/0x3d0
[ 1620.379963]  should_failslab+0x5/0x20
[ 1620.380306]  kmem_cache_alloc+0x5b/0x310
[ 1620.380717]  skb_clone+0x14f/0x3d0
[ 1620.381040]  dev_queue_xmit_nit+0x3a7/0xb00
[ 1620.381431]  dev_hard_start_xmit+0xab/0x6f0
[ 1620.381872]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1620.382322]  __dev_queue_xmit+0x17ec/0x2710
[ 1620.382744]  ? find_held_lock+0x2c/0x110
[ 1620.383093]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1620.383558]  ? lock_downgrade+0x6d0/0x6d0
[ 1620.383949]  ? lock_acquire+0x197/0x470
[ 1620.384291]  ? ip6_finish_output2+0x203/0x1fe0
[ 1620.384733]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1620.385187]  neigh_connected_output+0x382/0x4d0
[ 1620.385668]  ip6_finish_output2+0xaaf/0x1fe0
[ 1620.386059]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1620.386530]  ip6_output+0x3b8/0x7e0
[ 1620.386849]  ip6_local_out+0xb4/0x1a0
[ 1620.387201]  ip6_send_skb+0xb7/0x350
[ 1620.387583]  udp_v6_send_skb+0x7aa/0x15b0
[ 1620.387963]  udpv6_sendmsg+0x2116/0x2ad0
[ 1620.388403]  ? ip_frag_init+0x350/0x350
[ 1620.388795]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1620.389240]  ? perf_event_task_disable+0x390/0x390
[ 1620.389723]  ? lock_downgrade+0x6d0/0x6d0
[ 1620.390078]  ? hrtimer_start_range_ns+0x336/0xae0
[ 1620.390535]  ? lock_acquire+0x197/0x470
[ 1620.390871]  ? find_held_lock+0x2c/0x110
[ 1620.391233]  ? sock_has_perm+0x1ea/0x280
[ 1620.391643]  ? __import_iovec+0x458/0x590
[ 1620.391994]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1620.392431]  inet6_sendmsg+0x105/0x140
[ 1620.392809]  ? inet6_compat_ioctl+0x320/0x320
[ 1620.393187]  __sock_sendmsg+0xf2/0x190
[ 1620.393591]  ____sys_sendmsg+0x334/0x870
[ 1620.393938]  ? sock_write_iter+0x3d0/0x3d0
[ 1620.394294]  ? do_recvmmsg+0x6d0/0x6d0
[ 1620.394959]  ? __lock_acquire+0x1657/0x5b00
[ 1620.395426]  ___sys_sendmsg+0xf3/0x170
[ 1620.395871]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1620.396329]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1620.396899]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1620.397352]  ? trace_hardirqs_on+0x5b/0x180
[ 1620.397865]  ? lock_acquire+0x197/0x470
[ 1620.398272]  ? find_held_lock+0x2c/0x110
[ 1620.398738]  ? __might_fault+0xd3/0x180
[ 1620.399153]  ? lock_downgrade+0x6d0/0x6d0
[ 1620.399639]  ? io_schedule_timeout+0x140/0x140
[ 1620.400109]  __sys_sendmmsg+0x195/0x470
[ 1620.400571]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1620.401018]  ? lock_downgrade+0x6d0/0x6d0
[ 1620.401534]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1620.402025]  ? wait_for_completion_io+0x270/0x270
[ 1620.402560]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1620.403683]  ? vfs_write+0x354/0xb10
[ 1620.404062]  ? fput_many+0x2f/0x1a0
[ 1620.404486]  ? ksys_write+0x1a9/0x260
[ 1620.404888]  ? __ia32_sys_read+0xb0/0xb0
[ 1620.405316]  __x64_sys_sendmmsg+0x99/0x100
[ 1620.405823]  do_syscall_64+0x33/0x40
[ 1620.406213]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1620.406767] RIP: 0033:0x7f09c4bc0b19
[ 1620.407685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1620.409542] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1620.410309] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1620.412034] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1620.413757] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1620.415410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1620.417124] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:24:13 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, <r0=>0x0}, &(0x7f0000000340)=0xc)
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x401, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000180)="c2b8fe97f1c9e98991", 0x9, 0x3}, {&(0x7f00000001c0)="013a7b7c095d25afb5b729f8793a699ee89e43060d7599e59ceb6155dedcae26fe8adefbf0c5361959005de70acc09b4ff23ff44ca2684378d81842df7156d167c5f22edb4e68cf7c9b6b151738fdc5cb10801e48f0eaf5e8017bd6b0f8db496ee726ffa3cef7cf57dd410f4af4944ebf54fcfb923b8ccbe1e34db8c60a27c9eefe2dd1d425df9c2443a1b7e1cdbece79033a704161faceac0e98813867cd23aea79faf225a13fcd7961ba", 0xab, 0x8}], 0x8210c0, &(0x7f0000000380)={[{'('}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, '($\\+!\xe2![/-\xf9/:'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x64, 0x33, 0x31, 0x64, 0x33, 0x63, 0x34], 0x2d, [0x37, 0x30, 0x35, 0x34], 0x2d, [0x64, 0x35, 0x64, 0x30], 0x2d, [0x37, 0x61, 0x62, 0x31], 0x2d, [0x37, 0x35, 0x66, 0x65, 0x33, 0x64, 0x61, 0x30]}}}, {@euid_gt={'euid>', r0}}]})
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:24:13 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan3\x00'})
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000140)={0x7, 'wg2\x00', {0x101}, 0xcd0e})
write$P9_RREADLINK(r1, &(0x7f0000000040)={0x16, 0x17, 0x1, {0xd, './file0/file0'}}, 0x16)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:24:13 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xfffffffffffffedb, 0x0, 0x41, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:24:13 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1620.491874] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1620.525636] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:24:13 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:24:13 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}], 0x9, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:24:13 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 65)

19:24:13 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:24:13 executing program 1:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1428, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
open$dir(&(0x7f0000000240)='./file0\x00', 0x200, 0x99)
setresuid(0xffffffffffffffff, r2, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x0, 0x400000)
open_tree(r3, &(0x7f0000000200)='./file0\x00', 0x1001)
mount$cgroup2(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40, &(0x7f00000002c0)={[{@subsystem='rlimit'}, {}], [{@euid_lt={'euid<', r2}}, {@uid_lt={'uid<', r1}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@euid_gt={'euid>', r1}}, {@obj_role={'obj_role', 0x3d, 'system.posix_acl_default\x00'}}, {@pcr={'pcr', 0x3d, 0x24}}, {@obj_type={'obj_type', 0x3d, 'system.posix_acl_default\x00'}}]})
setresuid(0xffffffffffffffff, r1, 0x0)
r4 = getegid()
setresgid(r4, r4, r4)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r1, r4}}, './file0\x00'})
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

[ 1620.707647] FAULT_INJECTION: forcing a failure.
[ 1620.707647] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1620.710642] CPU: 0 PID: 9630 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1620.712205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1620.714100] Call Trace:
[ 1620.714711]  dump_stack+0x107/0x167
[ 1620.715539]  should_fail.cold+0x5/0xa
[ 1620.716411]  _copy_from_user+0x2e/0x1b0
[ 1620.717313]  __copy_msghdr_from_user+0x91/0x4b0
[ 1620.718368]  ? __ia32_sys_shutdown+0x80/0x80
[ 1620.719372]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1620.720552]  ? inet6_sendmsg+0xbd/0x140
[ 1620.721461]  ? inet6_compat_ioctl+0x320/0x320
[ 1620.722470]  ? __sock_sendmsg+0x55/0x190
[ 1620.723404]  sendmsg_copy_msghdr+0xa1/0x160
[ 1620.724397]  ? do_recvmmsg+0x6d0/0x6d0
[ 1620.725276]  ? __lock_acquire+0x1657/0x5b00
[ 1620.726272]  ___sys_sendmsg+0xc6/0x170
[ 1620.727163]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1620.730330]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1620.731417]  ? _raw_spin_unlock_irq+0x27/0x30
[ 1620.732490]  ? lock_acquire+0x197/0x470
[ 1620.733360]  ? find_held_lock+0x2c/0x110
[ 1620.734248]  ? __might_fault+0xd3/0x180
[ 1620.735111]  ? lock_downgrade+0x6d0/0x6d0
[ 1620.736024]  ? io_schedule_timeout+0x140/0x140
[ 1620.737025]  __sys_sendmmsg+0x195/0x470
[ 1620.737895]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1620.738830]  ? lock_downgrade+0x6d0/0x6d0
[ 1620.739811]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1620.740926]  ? wait_for_completion_io+0x270/0x270
[ 1620.742043]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1620.743105]  ? vfs_write+0x354/0xb10
[ 1620.743956]  ? fput_many+0x2f/0x1a0
[ 1620.744793]  ? ksys_write+0x1a9/0x260
[ 1620.745657]  ? __ia32_sys_read+0xb0/0xb0
[ 1620.746578]  __x64_sys_sendmmsg+0x99/0x100
[ 1620.747552]  do_syscall_64+0x33/0x40
[ 1620.748405]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1620.749575] RIP: 0033:0x7f09c4bc0b19
[ 1620.750421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1620.754659] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1620.756418] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1620.758055] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1620.759698] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1620.761337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1620.762965] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
[ 1620.792054] cgroup2: Unknown parameter 'rlimit'
[ 1620.837766] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1620.847369] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[ 1625.839542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1625.840110] blk_update_request: I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x100000 phys_seg 1 prio class 0
[ 1625.840964] Buffer I/O error on dev sr0, logical block 0, lost async page write
[ 1635.371975] FAULT_INJECTION: forcing a failure.
[ 1635.371975] name failslab, interval 1, probability 0, space 0, times 0
[ 1635.374473] CPU: 1 PID: 9648 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1635.375810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1635.377571] Call Trace:
[ 1635.378152]  dump_stack+0x107/0x167
[ 1635.379016]  should_fail.cold+0x5/0xa
[ 1635.379912]  ? __alloc_skb+0x6d/0x5b0
[ 1635.380792]  should_failslab+0x5/0x20
[ 1635.381671]  kmem_cache_alloc_node+0x55/0x330
[ 1635.382727]  __alloc_skb+0x6d/0x5b0
[ 1635.383587]  alloc_skb_with_frags+0x92/0x570
[ 1635.384602]  ? find_held_lock+0x2c/0x110
[ 1635.385541]  sock_alloc_send_pskb+0x7af/0x930
[ 1635.386595]  ? sk_alloc+0x350/0x350
[ 1635.387449]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1635.388636]  ? SOFTIRQ_verbose+0x10/0x10
[ 1635.389570]  ? lock_chain_count+0x20/0x20
[ 1635.390532]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1635.391712]  ? ip6_mtu+0x1bb/0x3d0
[ 1635.392535]  ? lock_downgrade+0x6d0/0x6d0
[ 1635.393500]  ? ip_frag_init+0x350/0x350
[ 1635.394416]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1635.395521]  ? ip6_mtu+0x1e9/0x3d0
[ 1635.396354]  ? ip6_setup_cork+0xfb7/0x1740
[ 1635.397352]  ip6_make_skb+0x2de/0x4e0
19:24:28 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 66)

19:24:28 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:24:28 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {0x0}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:24:28 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0x24, 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f0000000180)=@isdn, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, &(0x7f0000000340)=""/113, 0x71}, 0x4}, {{&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/95, 0x5f}, {&(0x7f0000000540)=""/26, 0x1a}], 0x2, &(0x7f0000000680)=""/208, 0xd0}, 0x400}, {{&(0x7f0000000780)=@caif=@util, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000800)=""/185, 0xb9}, {&(0x7f00000008c0)=""/211, 0xd3}], 0x2, &(0x7f0000000a00)=""/201, 0xc9}, 0x3}, {{&(0x7f0000000b00)=@phonet, 0x80, &(0x7f0000002f80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/251, 0xfb}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/49, 0x31}, {&(0x7f0000002cc0)=""/18, 0x12}, {&(0x7f0000002d00)=""/159, 0x9f}, {&(0x7f0000002dc0)=""/146, 0x92}, {&(0x7f0000002e80)=""/241, 0xf1}], 0x8, &(0x7f0000003000)=""/184, 0xb8}, 0x9}], 0x4, 0x102, &(0x7f00000031c0))
connect$unix(r1, &(0x7f0000003200)=@file={0x1, './file0\x00'}, 0x6e)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000040))

19:24:28 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x12431, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="020000000a00000000000000040000000000000010000000000000002000000000000000c40cb4ac30b31002e3e8e6308cb43ef6ed07bfe74324375ddfb47b29ccd7800f2dc81d204b6c060f6abec50abc10de68a7306abd5de8236a15f738cba2be537c7b35496abb1bac4f142ff5594749a556f259a0f0804dce5185bc3a45b68fd5526c0a975b7c1fe0a5dc39646cf812f60cc6f0"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
listen(0xffffffffffffffff, 0x9)

19:24:28 executing program 1:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0200000001000000001c0000040004000000000210000000000000002000000000000000"], 0x24, 0x0)
statx(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000240)=0xc)
r4 = getegid()
setresgid(r4, r4, r4)
r5 = getegid()
setresgid(r5, r5, r5)
setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{0x8, 0x2, 0xee01}, {0x8, 0x6, 0xffffffffffffffff}, {0x8, 0x3, r1}, {0x8, 0x5, r2}, {0x8, 0x4, r3}, {0x8, 0x4, r4}, {0x8, 0x2, r5}], {0x10, 0x7}, {0x20, 0x5}}, 0x5c, 0x2)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:24:28 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:24:28 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1635.398715]  ? ip_frag_init+0x350/0x350
[ 1635.400033]  ? ip_frag_init+0x350/0x350
[ 1635.400949]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1635.402128]  ? ip6_dst_hoplimit+0x199/0x440
[ 1635.403121]  ? lock_downgrade+0x6d0/0x6d0
[ 1635.404119]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1635.405054]  ? ip_frag_init+0x350/0x350
[ 1635.405972]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1635.407151]  ? lock_acquire+0x197/0x470
[ 1635.408110]  ? find_held_lock+0x2c/0x110
[ 1635.409072]  ? lock_acquire+0x197/0x470
[ 1635.409990]  ? find_held_lock+0x2c/0x110
[ 1635.410938]  ? sock_has_perm+0x1ea/0x280
[ 1635.411905]  ? __import_iovec+0x458/0x590
[ 1635.412879]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1635.414055]  inet6_sendmsg+0x105/0x140
[ 1635.414943]  ? inet6_compat_ioctl+0x320/0x320
[ 1635.415976]  __sock_sendmsg+0xf2/0x190
[ 1635.416899]  ____sys_sendmsg+0x334/0x870
[ 1635.417835]  ? sock_write_iter+0x3d0/0x3d0
[ 1635.418794]  ? do_recvmmsg+0x6d0/0x6d0
[ 1635.419701]  ? __lock_acquire+0x1657/0x5b00
[ 1635.420720]  ___sys_sendmsg+0xf3/0x170
[ 1635.421613]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1635.422657]  ? vmacache_find+0x55/0x2a0
[ 1635.423589]  ? lock_acquire+0x197/0x470
[ 1635.424537]  ? find_held_lock+0x2c/0x110
[ 1635.425494]  ? __might_fault+0xd3/0x180
[ 1635.426433]  ? lock_downgrade+0x6d0/0x6d0
[ 1635.427587]  ? asm_exc_page_fault+0x1e/0x30
[ 1635.428593]  __sys_sendmmsg+0x195/0x470
[ 1635.429509]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1635.430521]  ? lock_downgrade+0x6d0/0x6d0
[ 1635.431492]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1635.432596]  ? wait_for_completion_io+0x270/0x270
[ 1635.433697]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1635.434778]  ? vfs_write+0x354/0xb10
[ 1635.435648]  ? fput_many+0x2f/0x1a0
[ 1635.436492]  ? ksys_write+0x1a9/0x260
[ 1635.437375]  ? __ia32_sys_read+0xb0/0xb0
[ 1635.438300]  __x64_sys_sendmmsg+0x99/0x100
[ 1635.439287]  do_syscall_64+0x33/0x40
[ 1635.440126]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1635.441334] RIP: 0033:0x7f09c4bc0b19
[ 1635.442145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1635.448082] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1635.449853] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1635.451517] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1635.453155] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1635.454827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1635.456497] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:24:28 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x4)

19:24:28 executing program 2:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
recvfrom(r1, &(0x7f0000000140)=""/164, 0xa4, 0x40010002, &(0x7f0000000200)=@ll={0x11, 0xf5, 0x0, 0x1, 0x7f}, 0x80)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x2}, {0x20, 0x3}}, 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:24:28 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
accept$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x6e)

[ 1635.547006] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:24:28 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:24:28 executing program 6:
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x20, 0x4, 0xffffff7fffffff91)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0x80000000, @private1, 0x21}, {0xa, 0x0, 0x8, @private1, 0x76}, 0x8, [0x0, 0x0, 0x0, 0x4af, 0x6, 0x3, 0x3f, 0x401]}, 0x5c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)}}], 0x1, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x4)
r1 = syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="007da1804886b1655e09966a7e17c44ff9f87834ecdbb6650240e96358eb356dcb1b3d4462fe59be4c704b"])
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3}, 0x23)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x2, 0xb}, 0x20)
sendmsg$802154_raw(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)="9d9d21dfdec6629e828211a63ab9a177d0fd5df5bc6cfa42ea874fcfcbaa6502d1473fa4a719e7b34785ec3db92be232be85ad8032fed96b526b214df3bddd49f839e92d8932935964bd914dacc18e220f292c78361b4df4bac0dd4b49c22222cfe0ef57dfe06e0bfa80e32bcbc995f4cc3521085ccf0cd0bbb5487659061fdb544b990edcf2ce07df8dc4f7eddf5d169b4b545e6f3fcc066f56ffed906154b72a022d3f97", 0xa5}, 0x1, 0x0, 0x0, 0x4000}, 0x40001)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@local, 0x80000000, 0x0, 0x0, 0xc}, 0x20)
r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f00000001c0)={0x2, 0x1, 0x8})
mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000180))
epoll_wait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x6226)

[ 1635.575567] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:24:28 executing program 2:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x8000000000005, 0x0, 0x0, 0x402, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
open$dir(&(0x7f0000000080)='./file0\x00', 0x410001, 0x3)
mkdir(&(0x7f0000000040)='./file0\x00', 0x84)
recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/2, 0x2, 0x2000, &(0x7f00000001c0)=@ax25={{0x3, @null}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80)
openat2(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x101400, 0x100, 0x9}, 0x18)

19:24:28 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x34, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x1)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:24:28 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1635.640455] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1635.671441] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
19:24:43 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:24:43 executing program 2:
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x11, 0x9f, &(0x7f0000000140)="930967db60d352382fd3646f08d477f97a65003656196e48032ce57d6fa80653c5d3f68182e873ff29980056ce6b8d67dbc004d9ec430ca672e788b86228c04505d0e09f7b727d48d834efc07ca1ce169b52ca9343cc6056f6af84a3f3ffe41eb580a2a13b3105392212e2355688c4d39d669c85f54a46f3415d2fa9ae47645f4b9f7f0f7e8623314c461cd5ae4d424c9381555d095a230af300ecf70f8a73"})
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:24:43 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:24:43 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {0x0}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:24:43 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 67)

19:24:43 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:24:43 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:24:43 executing program 1:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYRESHEX=r0], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20600, 0x80)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(r2, &(0x7f0000000140)='./file0\x00', 0x20200, 0x10)
r3 = syz_io_uring_complete(0x0)
sendfile(r3, r1, &(0x7f0000000200)=0x8, 0x4)

[ 1650.106786] FAULT_INJECTION: forcing a failure.
[ 1650.106786] name failslab, interval 1, probability 0, space 0, times 0
[ 1650.108198] CPU: 1 PID: 9719 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1650.108839] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1650.109605] Call Trace:
[ 1650.109860]  dump_stack+0x107/0x167
[ 1650.110204]  should_fail.cold+0x5/0xa
[ 1650.110558]  ? create_object.isra.0+0x3a/0xa20
[ 1650.110993]  should_failslab+0x5/0x20
[ 1650.111351]  kmem_cache_alloc+0x5b/0x310
[ 1650.111738]  create_object.isra.0+0x3a/0xa20
[ 1650.112373]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1650.112862]  kmem_cache_alloc_node+0x169/0x330
[ 1650.113853]  __alloc_skb+0x6d/0x5b0
[ 1650.114643]  alloc_skb_with_frags+0x92/0x570
[ 1650.115608]  ? find_held_lock+0x2c/0x110
[ 1650.116492]  sock_alloc_send_pskb+0x7af/0x930
[ 1650.117457]  ? sk_alloc+0x350/0x350
[ 1650.118075]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1650.118958]  ? SOFTIRQ_verbose+0x10/0x10
[ 1650.119659]  ? lock_chain_count+0x20/0x20
[ 1650.120551]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1650.121641]  ? ip6_mtu+0x1bb/0x3d0
[ 1650.122406]  ? lock_downgrade+0x6d0/0x6d0
[ 1650.123302]  ? ip_frag_init+0x350/0x350
[ 1650.124189]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1650.125197]  ? ip6_mtu+0x1e9/0x3d0
[ 1650.125971]  ? ip6_setup_cork+0xfb7/0x1740
[ 1650.126890]  ip6_make_skb+0x2de/0x4e0
[ 1650.127721]  ? ip_frag_init+0x350/0x350
[ 1650.128586]  ? ip_frag_init+0x350/0x350
[ 1650.129448]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1650.130479]  ? ip6_dst_hoplimit+0x199/0x440
[ 1650.131413]  ? lock_downgrade+0x6d0/0x6d0
[ 1650.132339]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1650.133222]  ? ip_frag_init+0x350/0x350
[ 1650.134088]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1650.135216]  ? lock_acquire+0x197/0x470
[ 1650.136087]  ? find_held_lock+0x2c/0x110
[ 1650.136972]  ? lock_acquire+0x197/0x470
[ 1650.137838]  ? find_held_lock+0x2c/0x110
[ 1650.138728]  ? sock_has_perm+0x1ea/0x280
[ 1650.139634]  ? __import_iovec+0x458/0x590
[ 1650.140533]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1650.141653]  inet6_sendmsg+0x105/0x140
[ 1650.142494]  ? inet6_compat_ioctl+0x320/0x320
[ 1650.143469]  __sock_sendmsg+0xf2/0x190
[ 1650.144326]  ____sys_sendmsg+0x334/0x870
[ 1650.145208]  ? sock_write_iter+0x3d0/0x3d0
[ 1650.146123]  ? do_recvmmsg+0x6d0/0x6d0
[ 1650.146973]  ? __lock_acquire+0x1657/0x5b00
[ 1650.147930]  ___sys_sendmsg+0xf3/0x170
[ 1650.148774]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1650.149762]  ? vmacache_find+0x55/0x2a0
[ 1650.150633]  ? lock_acquire+0x197/0x470
[ 1650.151497]  ? find_held_lock+0x2c/0x110
[ 1650.152386]  ? __might_fault+0xd3/0x180
[ 1650.153248]  ? lock_downgrade+0x6d0/0x6d0
[ 1650.154146]  ? asm_exc_page_fault+0x1e/0x30
[ 1650.155089]  __sys_sendmmsg+0x195/0x470
[ 1650.155963]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1650.156905]  ? lock_downgrade+0x6d0/0x6d0
[ 1650.157815]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1650.158861]  ? wait_for_completion_io+0x270/0x270
[ 1650.159919]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1650.160926]  ? vfs_write+0x354/0xb10
[ 1650.161734]  ? fput_many+0x2f/0x1a0
[ 1650.162529]  ? ksys_write+0x1a9/0x260
[ 1650.163354]  ? __ia32_sys_read+0xb0/0xb0
[ 1650.164251]  __x64_sys_sendmmsg+0x99/0x100
[ 1650.165170]  do_syscall_64+0x33/0x40
[ 1650.165980]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1650.167092] RIP: 0033:0x7f09c4bc0b19
[ 1650.167905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1650.171925] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1650.173577] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1650.175123] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1650.176679] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1650.178223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1650.179775] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:24:43 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000001000400000004000000000000001000010000000000000000000000000000002659b25a24020c2dd6413471ceaad81c454cfd315b5eaae581c2a85cec600b0b441544cd7f3f47a271491072f1d6b78216aebdb49d24032a9ccfb596cc3c8b06f10c55044542b8aa98f23904179035fa1e3cb99bc59519"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x470501, 0x62)
chroot(&(0x7f0000000040)='./file0\x00')

19:24:43 executing program 2:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
openat(r1, &(0x7f0000000040)='./file0\x00', 0x408400, 0x40)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:24:43 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0)
close_range(r1, r0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0)
fallocate(0xffffffffffffffff, 0x1, 0x7, 0x4)
r2 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, r2)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
r4 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000540)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3b5a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfafb2e0f", 0xd4, 0xfffffffffffffffa)
add_key(0x0, &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r4)
add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3)
add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, 0x0, 0x20000010)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/196})
unshare(0x48020200)

[ 1650.223843] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:24:43 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x301000, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x401, 0x0)
r1 = getegid()
setresgid(r1, r1, r1)
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)={0x440600, 0x18d, 0x4}, 0x18)
r3 = getegid()
setresgid(r3, r3, r3)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, <r4=>r3}}, './file0\x00'})
r5 = getegid()
setresgid(r5, r5, r5)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {}, [], {}, [{0x8, 0x4, r4}, {0x8, 0x4, r4}, {0x8, 0x5, r5}, {0x8, 0x3, r4}, {0x8, 0x1, r5}], {0x10, 0x3}}, 0x4c, 0x0)
setgid(r1)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:24:43 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 68)

[ 1650.264616] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:24:43 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
open_tree(r0, &(0x7f0000000140)='./file0\x00', 0x800)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

[ 1650.309253] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1650.349305] FAULT_INJECTION: forcing a failure.
[ 1650.349305] name failslab, interval 1, probability 0, space 0, times 0
[ 1650.351950] CPU: 1 PID: 9742 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1650.353433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1650.355235] Call Trace:
[ 1650.355826]  dump_stack+0x107/0x167
[ 1650.356617]  should_fail.cold+0x5/0xa
[ 1650.357447]  should_failslab+0x5/0x20
[ 1650.358273]  __kmalloc_node_track_caller+0x74/0x3b0
[ 1650.359357]  ? alloc_skb_with_frags+0x92/0x570
[ 1650.360364]  __alloc_skb+0xb1/0x5b0
[ 1650.361157]  alloc_skb_with_frags+0x92/0x570
[ 1650.362112]  ? find_held_lock+0x2c/0x110
[ 1650.362998]  sock_alloc_send_pskb+0x7af/0x930
[ 1650.363992]  ? sk_alloc+0x350/0x350
[ 1650.364788]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1650.365924]  ? SOFTIRQ_verbose+0x10/0x10
[ 1650.366803]  ? lock_chain_count+0x20/0x20
[ 1650.367721]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1650.368817]  ? ip6_mtu+0x1bb/0x3d0
[ 1650.369588]  ? lock_downgrade+0x6d0/0x6d0
[ 1650.370483]  ? ip_frag_init+0x350/0x350
[ 1650.371356]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1650.372375]  ? ip6_mtu+0x1e9/0x3d0
[ 1650.373145]  ? ip6_setup_cork+0xfb7/0x1740
[ 1650.374058]  ip6_make_skb+0x2de/0x4e0
[ 1650.374877]  ? ip_frag_init+0x350/0x350
[ 1650.375750]  ? ip_frag_init+0x350/0x350
[ 1650.376608]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1650.377640]  ? ip6_dst_hoplimit+0x199/0x440
[ 1650.378575]  ? lock_downgrade+0x6d0/0x6d0
[ 1650.379491]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1650.380378]  ? ip_frag_init+0x350/0x350
[ 1650.381250]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1650.382377]  ? lock_acquire+0x197/0x470
[ 1650.383233]  ? find_held_lock+0x2c/0x110
[ 1650.384141]  ? lock_acquire+0x197/0x470
[ 1650.384999]  ? find_held_lock+0x2c/0x110
[ 1650.385888]  ? sock_has_perm+0x1ea/0x280
[ 1650.386779]  ? __import_iovec+0x458/0x590
[ 1650.387684]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1650.388802]  inet6_sendmsg+0x105/0x140
[ 1650.389646]  ? inet6_compat_ioctl+0x320/0x320
[ 1650.390613]  __sock_sendmsg+0xf2/0x190
[ 1650.391453]  ____sys_sendmsg+0x334/0x870
[ 1650.392351]  ? sock_write_iter+0x3d0/0x3d0
[ 1650.393273]  ? do_recvmmsg+0x6d0/0x6d0
[ 1650.394115]  ? __lock_acquire+0x1657/0x5b00
[ 1650.395053]  ___sys_sendmsg+0xf3/0x170
[ 1650.395909]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1650.396896]  ? vmacache_find+0x55/0x2a0
[ 1650.397766]  ? lock_acquire+0x197/0x470
[ 1650.398626]  ? find_held_lock+0x2c/0x110
[ 1650.399515]  ? __might_fault+0xd3/0x180
[ 1650.400381]  ? lock_downgrade+0x6d0/0x6d0
[ 1650.401278]  ? asm_exc_page_fault+0x1e/0x30
[ 1650.402226]  __sys_sendmmsg+0x195/0x470
[ 1650.403098]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1650.404044]  ? lock_downgrade+0x6d0/0x6d0
[ 1650.404955]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1650.406002]  ? wait_for_completion_io+0x270/0x270
[ 1650.407052]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1650.408074]  ? vfs_write+0x354/0xb10
[ 1650.408880]  ? fput_many+0x2f/0x1a0
[ 1650.409670]  ? ksys_write+0x1a9/0x260
[ 1650.410494]  ? __ia32_sys_read+0xb0/0xb0
[ 1650.411384]  __x64_sys_sendmmsg+0x99/0x100
[ 1650.412318]  do_syscall_64+0x33/0x40
[ 1650.413124]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1650.414238] RIP: 0033:0x7f09c4bc0b19
[ 1650.415048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1650.419078] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1650.420735] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1650.422289] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1650.423857] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1650.425401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1650.426950] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:24:43 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:24:43 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:24:43 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {0x0}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:24:43 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000040)='./file0\x00', 0x45c503, 0xb)

[ 1650.531328] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1650.546273] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:24:57 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 69)

[ 1664.599786] FAULT_INJECTION: forcing a failure.
[ 1664.599786] name failslab, interval 1, probability 0, space 0, times 0
[ 1664.602555] CPU: 0 PID: 9774 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1664.604050] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1664.613114] Call Trace:
[ 1664.613687]  dump_stack+0x107/0x167
[ 1664.614491]  should_fail.cold+0x5/0xa
[ 1664.615325]  ? create_object.isra.0+0x3a/0xa20
[ 1664.616370]  should_failslab+0x5/0x20
[ 1664.617187]  kmem_cache_alloc+0x5b/0x310
[ 1664.618071]  create_object.isra.0+0x3a/0xa20
[ 1664.619038]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1664.620163]  __kmalloc_node_track_caller+0x1a6/0x3b0
[ 1664.621252]  ? alloc_skb_with_frags+0x92/0x570
[ 1664.622249]  __alloc_skb+0xb1/0x5b0
[ 1664.623038]  alloc_skb_with_frags+0x92/0x570
[ 1664.624018]  ? find_held_lock+0x2c/0x110
[ 1664.624890]  sock_alloc_send_pskb+0x7af/0x930
[ 1664.625894]  ? sk_alloc+0x350/0x350
[ 1664.626707]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1664.627900]  ? SOFTIRQ_verbose+0x10/0x10
[ 1664.628810]  ? lock_chain_count+0x20/0x20
[ 1664.629758]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1664.630879]  ? ip6_mtu+0x1bb/0x3d0
[ 1664.631692]  ? lock_downgrade+0x6d0/0x6d0
[ 1664.632620]  ? ip_frag_init+0x350/0x350
[ 1664.633322]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1664.634132]  ? ip6_mtu+0x1e9/0x3d0
[ 1664.634957]  ? ip6_setup_cork+0xfb7/0x1740
[ 1664.635913]  ip6_make_skb+0x2de/0x4e0
[ 1664.636774]  ? ip_frag_init+0x350/0x350
[ 1664.637662]  ? ip_frag_init+0x350/0x350
[ 1664.638555]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1664.639622]  ? ip6_dst_hoplimit+0x199/0x440
[ 1664.640601]  ? lock_downgrade+0x6d0/0x6d0
[ 1664.641526]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1664.642448]  ? ip_frag_init+0x350/0x350
[ 1664.643341]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1664.644532]  ? lock_acquire+0x197/0x470
[ 1664.645407]  ? find_held_lock+0x2c/0x110
[ 1664.646332]  ? lock_acquire+0x197/0x470
[ 1664.647203]  ? find_held_lock+0x2c/0x110
[ 1664.648174]  ? sock_has_perm+0x1ea/0x280
[ 1664.649098]  ? __import_iovec+0x458/0x590
[ 1664.650034]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1664.651188]  inet6_sendmsg+0x105/0x140
[ 1664.652086]  ? inet6_compat_ioctl+0x320/0x320
[ 1664.653078]  __sock_sendmsg+0xf2/0x190
[ 1664.653960]  ____sys_sendmsg+0x334/0x870
[ 1664.654869]  ? sock_write_iter+0x3d0/0x3d0
[ 1664.655842]  ? do_recvmmsg+0x6d0/0x6d0
[ 1664.656715]  ? __lock_acquire+0x1657/0x5b00
[ 1664.657698]  ___sys_sendmsg+0xf3/0x170
[ 1664.658563]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1664.659600]  ? vmacache_find+0x55/0x2a0
[ 1664.660543]  ? lock_acquire+0x197/0x470
[ 1664.661489]  ? find_held_lock+0x2c/0x110
[ 1664.662432]  ? __might_fault+0xd3/0x180
[ 1664.663376]  ? lock_downgrade+0x6d0/0x6d0
[ 1664.664374]  ? asm_exc_page_fault+0x1e/0x30
[ 1664.665406]  __sys_sendmmsg+0x195/0x470
[ 1664.666339]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1664.667357]  ? lock_downgrade+0x6d0/0x6d0
[ 1664.668292]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1664.669343]  ? wait_for_completion_io+0x270/0x270
[ 1664.670386]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1664.671402]  ? vfs_write+0x354/0xb10
[ 1664.672226]  ? fput_many+0x2f/0x1a0
[ 1664.673030]  ? ksys_write+0x1a9/0x260
[ 1664.673844]  ? __ia32_sys_read+0xb0/0xb0
[ 1664.674730]  __x64_sys_sendmmsg+0x99/0x100
[ 1664.675634]  do_syscall_64+0x33/0x40
[ 1664.676478]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1664.677585] RIP: 0033:0x7f09c4bc0b19
[ 1664.678398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1664.682411] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1664.684100] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1664.685633] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1664.687198] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1664.688762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1664.690318] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:24:57 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xd7, 0x33, 0x0, 0x1800000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0xe)
setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="020000000100000000000000040001000000000010ffffffe0000000200000000099e60000"], 0x24, 0x2)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:24:57 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f00000009c0)=""/249, 0xf9}], 0x9, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:24:57 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:24:57 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x0, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:24:57 executing program 2:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000c00000000000000400002000000000000000"], 0x24, 0x0)
r1 = signalfd4(r0, &(0x7f0000000140)={[0x1000]}, 0x8, 0x800)
symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00')
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:24:57 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:24:57 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0xffffffffffffffff, r0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f00000002c0)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000400)=0xe8)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xffffffffffffffff, r3, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@local}}}, &(0x7f0000000540)=0xe8)
stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0xffffffffffffffff, r6, 0x0)
setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x1, 0x5}, [{0x2, 0x2, r0}, {0x2, 0x5, r1}, {0x2, 0x7, r2}, {0x2, 0x1, r3}, {0x2, 0x5, r4}, {0x2, 0x4}, {0x2, 0x3, r5}, {0x2, 0x2, r6}], {0x4, 0x1}, [{0x8, 0x6, 0xee01}, {}, {0x8, 0x0, 0xffffffffffffffff}], {0x10, 0x5}, {0x20, 0x2}}, 0x7c, 0x2)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:24:57 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x80, 0x4, &(0x7f0000000340)=[{&(0x7f00000001c0)="e89b99ce9ee91638252f7135d0a1db0a8f58b3fa86d2664d0a4101cbede08a473e537d38dcb222dff1618a3b0911f585aed4eb2e6279bb1eea094a85b9bfe988baa2e7", 0x43, 0x10001}, {&(0x7f0000000240)="9a5a8de8b08cf6b237e8b79d5f40c0f6defbee0f08d82df04b3c051c0814fdd03c8095", 0x23, 0xffff}, {&(0x7f00000002c0)="ee5caefccb3e19cc78876e65c8f3e8a7d07427da98f1a310b184ba75d26dad92da79e458b96178128e8fd002d45f2536e04f935360af6fb761f378e26406a152a77c6ae63cd33d451cfd56a47ca24585d290562b31aa0d10b39f3822bc9097e6d9962e30fc87271317a9644c70876348961f", 0x72, 0x4}, {&(0x7f0000000440)="5ecb953e1fefdd728c8b3a88fabb085b1875370638a29f247812598a99847dca14962c09120ad9839b4ef7db2dc252612475fd90af88971e11d6033712a245faf0f4cb76ed6deecf3d676da3fb0bd07b3d59855b55f12b33b7e0424109d6eac6754d90ddcabd9b39d9aaa1e3ec3fa5730542288573537ea02475b08b7dfc463ce38b98499368d88d329f6cff2652b631c3e7e3cb9128c9d43666d3e10d3c", 0x9e, 0x896}], 0x800880, &(0x7f0000000640)={[{@stripe={'stripe', 0x3d, 0x10001}}, {@oldalloc}, {@max_dir_size_kb}, {@stripe={'stripe', 0x3d, 0x67}}, {@acl}], [{@obj_role={'obj_role', 0x3d, '/dev/sr0\x00'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@hash}, {@obj_user={'obj_user', 0x3d, '!,%#*%&'}}, {@obj_role={'obj_role', 0x3d, '\x00\x00\x11\x11\"\"33'}}]})
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000040)={@desc={0x1, 0x0, @desc1}})

[ 1664.754092] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[ 1664.756162] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:24:57 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 70)

19:24:57 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:24:57 executing program 0:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x8, 0x1)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:24:57 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0)
r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in=@multicast1, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@sec_ctx={0xc, 0x8, {0xfffffecd}}]}, 0x134}}, 0x0)
close(r2)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(r4)
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000040)={{}, {}, 0x0, 0x6})
syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r5, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5)
syz_io_uring_submit(r4, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7}, 0x80000001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128)
copy_file_range(r6, 0x0, r1, 0x0, 0x200f5ef, 0x0)

19:24:57 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x0, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1664.805248] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[ 1664.815936] FAULT_INJECTION: forcing a failure.
[ 1664.815936] name failslab, interval 1, probability 0, space 0, times 0
19:24:57 executing program 2:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0xffffffffffffffff, r1, 0x0)
fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {}, [{0x2, 0x4, 0xee00}, {0x2, 0x1, r1}, {0x2, 0x2, r1}, {0x2, 0x5, r1}, {0x2, 0x1, r2}], {0x4, 0x7}, [], {0x10, 0x54920dbdbd547dcd}}, 0x4c, 0x6)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0)

[ 1664.818632] CPU: 1 PID: 9795 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1664.820283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1664.822111] Call Trace:
[ 1664.822687]  dump_stack+0x107/0x167
[ 1664.823491]  should_fail.cold+0x5/0xa
[ 1664.824354]  ? lock_release+0x680/0x680
[ 1664.825233]  ? skb_clone+0x14f/0x3d0
[ 1664.826044]  should_failslab+0x5/0x20
[ 1664.826879]  kmem_cache_alloc+0x5b/0x310
[ 1664.827802]  skb_clone+0x14f/0x3d0
[ 1664.828603]  dev_queue_xmit_nit+0x3a7/0xb00
[ 1664.829566]  dev_hard_start_xmit+0xab/0x6f0
[ 1664.830518]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1664.831671]  __dev_queue_xmit+0x17ec/0x2710
[ 1664.832703]  ? find_held_lock+0x2c/0x110
[ 1664.833673]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1664.834754]  ? lock_downgrade+0x6d0/0x6d0
[ 1664.835724]  ? lock_acquire+0x197/0x470
[ 1664.836659]  ? ip6_finish_output2+0x203/0x1fe0
[ 1664.837740]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1664.838984]  neigh_connected_output+0x382/0x4d0
[ 1664.841972]  ip6_finish_output2+0xaaf/0x1fe0
[ 1664.843011]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1664.844175]  ip6_output+0x3b8/0x7e0
[ 1664.845031]  ip6_local_out+0xb4/0x1a0
[ 1664.845919]  ip6_send_skb+0xb7/0x350
[ 1664.846798]  udp_v6_send_skb+0x7aa/0x15b0
[ 1664.847775]  udpv6_sendmsg+0x2116/0x2ad0
[ 1664.848732]  ? ip_frag_init+0x350/0x350
[ 1664.849696]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1664.850907]  ? perf_event_task_disable+0x390/0x390
[ 1664.852026]  ? lock_downgrade+0x6d0/0x6d0
[ 1664.852989]  ? hrtimer_start_range_ns+0x336/0xae0
[ 1664.854107]  ? lock_acquire+0x197/0x470
[ 1664.855028]  ? find_held_lock+0x2c/0x110
[ 1664.855990]  ? sock_has_perm+0x1ea/0x280
[ 1664.856951]  ? __import_iovec+0x458/0x590
[ 1664.857912]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1664.859113]  inet6_sendmsg+0x105/0x140
[ 1664.860016]  ? inet6_compat_ioctl+0x320/0x320
[ 1664.861064]  __sock_sendmsg+0xf2/0x190
[ 1664.861960]  ____sys_sendmsg+0x334/0x870
[ 1664.862905]  ? sock_write_iter+0x3d0/0x3d0
[ 1664.863905]  ? do_recvmmsg+0x6d0/0x6d0
[ 1664.864825]  ? __lock_acquire+0x1657/0x5b00
[ 1664.865838]  ___sys_sendmsg+0xf3/0x170
[ 1664.866748]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1664.867819]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1664.869052]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1664.870088]  ? trace_hardirqs_on+0x5b/0x180
[ 1664.871108]  ? lock_acquire+0x197/0x470
[ 1664.872037]  ? find_held_lock+0x2c/0x110
[ 1664.872986]  ? __might_fault+0xd3/0x180
[ 1664.873898]  ? lock_downgrade+0x6d0/0x6d0
[ 1664.874868]  ? io_schedule_timeout+0x140/0x140
[ 1664.875942]  __sys_sendmmsg+0x195/0x470
[ 1664.876894]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1664.877909]  ? lock_downgrade+0x6d0/0x6d0
[ 1664.878889]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1664.880023]  ? wait_for_completion_io+0x270/0x270
[ 1664.881169]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1664.882196]  ? vfs_write+0x354/0xb10
[ 1664.883010]  ? fput_many+0x2f/0x1a0
[ 1664.883812]  ? ksys_write+0x1a9/0x260
[ 1664.884640]  ? __ia32_sys_read+0xb0/0xb0
[ 1664.885526]  __x64_sys_sendmmsg+0x99/0x100
[ 1664.886450]  do_syscall_64+0x33/0x40
[ 1664.887257]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1664.888422] RIP: 0033:0x7f09c4bc0b19
[ 1664.889243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1664.893422] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1664.895115] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1664.896711] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1664.898292] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1664.899899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1664.901481] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:24:58 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {}, [], {0x4, 0x2}}, 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x6000, 0x0)

19:25:12 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x3ff}}, './file0\x00'})
openat(r1, &(0x7f0000000140)='./file0\x00', 0x438900, 0x8)

19:25:12 executing program 6:
r0 = memfd_create(&(0x7f0000000340)='\x00', 0x6)
ftruncate(r0, 0x200000)
r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0)
copy_file_range(r0, &(0x7f0000000180)=0xfff, r1, 0x0, 0x9, 0x0)

19:25:12 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 71)

19:25:12 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000700)={0x40000, 0x68, 0x19}, 0x18)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0/file0\x00', 0x6, 0x7, &(0x7f0000000500)=[{&(0x7f0000000180)="505c96d13c7249abe98d20a0855eba34b0155dfeb411c07b0f36dd8dac8386424f2b79dc14af4e8508369f2adec83903321249fe9a26bcbebb0ab02ab31b79044efa89e1b81a951c72f7dd36f7a94cbb8cc57931e2ea4470d0ca5d3df92fd5e9eda60ba863a912664d12aac2c7c5003fbd45a7dc46f001e8d1ef872d9d26fb", 0x7f, 0x2011adf0}, {&(0x7f0000000200)="03820171fdc6ff9f93b16efbf94f038cec67a4bae1210f2803b525e46b", 0x1d, 0x401}, {&(0x7f00000002c0)="891130a7ec2029bd3bc21a8933521427789413b13472a2a3a475f78c4a6bda58758f90c09dd847b7256f8212b1c641ea4918dc10aabc84f915d41a566f3071ab05d8b7bdd7d25313129c1f9f38b1bb3d31cf7e944b303020918009f0b6fc017dfab625061bd33dda55c3c7ecc9e4b6c11f2b16d52cfda67890fdf09f10eef2bff1c08ca2c281c87bbfe90fb91c907625905029c05013c6a80567acd134a8d7a132881353162c1c36d9538bd4b3", 0xad, 0x6}, {&(0x7f0000000380)="85e0fec95ae73eeb83f4ee1a9dacd6659de70bc77c919ad52afc01b57547e4159b6817785f0893b312d69f58b4d62ba8b13ada787e2fa5a84af0c744ccb6fd7d10a1fb2664ac567065a703d90918c492d572e9b10b8e74e42e7031b75a2327fa6050fbcc570f8595281a0aec8c57e193a50b02a8f0e942559224092bd2383da2233e9003aa6631d0a53c81cf585b3c757fe549fb3f3eebcd1d539839cd54ccf074c65215bc687892a3c2ee284a27db886327d87cd7b9be7b41f994d4", 0xbc, 0x3}, {&(0x7f0000000440)="0df9072d5d93763e6ec0bd4ebd26814df8cbda10e9c10110fb310d95db8590038ab83696737e341023f6998ab06c7d71daa59a6441141d2827fdc85a4fc55fd805c3faf311326d8803d4b6675ecd465c0eff3874eb", 0x55, 0xf9}, {&(0x7f0000000240)="eb6d14fe1cbb799e64ff34c7bf467f3b5826d283", 0x14, 0xff}, {&(0x7f00000004c0)="b8e3c247564c6f5c659d5296ab530946e7df675412cbf0c1ea4fa03a90f07f14c1273ce7d936c4b5513ca92fafeffd01006deb6238ccbcde3c23bb245701", 0x3e, 0x2}], 0x1200440, &(0x7f00000005c0)={[{@numtail}, {@numtail}, {@shortname_win95}], [{@dont_measure}]})
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="022cd1000101000000000000040000000000000010000000000000002000000000000059eac0fb4cd039b8b4e60022b8ea66bd5e00000000000000000000000000000000000000e8ca6cadd8a31626d7d6ce243a7142f3f52ed5e09d9d035bae8a1a3e169a22de22cf7523033a2dc98ae6bdf6e92ea82fea8c935b74bfed0befd884da62c927fed2b94b6bdd672cfd0dd6d70914899084f080979202002b3a2fe167eea52d0d766591cf10df7d2f9fee3118f1a55504bcb3026dbf661d6cb22ead6d438f552e9c55795e0f47af55c75e8a7b38abe42537e2179bd502da98d44f914ff95a7c0cd8b75dfaf9ac"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:25:12 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x0, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:25:12 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f00000009c0)=""/249, 0xf9}], 0x9, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:25:12 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:25:12 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
accept$unix(r0, &(0x7f00000001c0)=@abs, &(0x7f00000002c0)=0x6e)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='{!.-[{\x00', &(0x7f0000000140)='./file0\x00', r0)
creat(&(0x7f0000000180)='./file0\x00', 0x10)

[ 1679.186402] FAULT_INJECTION: forcing a failure.
[ 1679.186402] name failslab, interval 1, probability 0, space 0, times 0
[ 1679.187303] CPU: 0 PID: 9831 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1679.187823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1679.188469] Call Trace:
[ 1679.188670]  dump_stack+0x107/0x167
[ 1679.188934]  should_fail.cold+0x5/0xa
[ 1679.189239]  should_failslab+0x5/0x20
[ 1679.189549]  __kmalloc_node_track_caller+0x74/0x3b0
[ 1679.189906]  ? alloc_skb_with_frags+0x92/0x570
[ 1679.190269]  __alloc_skb+0xb1/0x5b0
[ 1679.190552]  alloc_skb_with_frags+0x92/0x570
[ 1679.190869]  ? find_held_lock+0x2c/0x110
[ 1679.191182]  sock_alloc_send_pskb+0x7af/0x930
[ 1679.191547]  ? sk_alloc+0x350/0x350
[ 1679.191823]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1679.192242]  ? SOFTIRQ_verbose+0x10/0x10
[ 1679.192563]  ? lock_chain_count+0x20/0x20
[ 1679.192867]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1679.193267]  ? ip6_mtu+0x1bb/0x3d0
[ 1679.193543]  ? lock_downgrade+0x6d0/0x6d0
[ 1679.193842]  ? ip_frag_init+0x350/0x350
[ 1679.194154]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1679.194519]  ? ip6_mtu+0x1e9/0x3d0
[ 1679.194775]  ? ip6_setup_cork+0xfb7/0x1740
[ 1679.195098]  ip6_make_skb+0x2de/0x4e0
[ 1679.195389]  ? ip_frag_init+0x350/0x350
[ 1679.195702]  ? ip_frag_init+0x350/0x350
[ 1679.196027]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1679.196400]  ? ip6_dst_hoplimit+0x199/0x440
[ 1679.196728]  ? lock_downgrade+0x6d0/0x6d0
[ 1679.197056]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1679.197367]  ? ip_frag_init+0x350/0x350
[ 1679.197676]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1679.198073]  ? perf_event_task_disable+0x390/0x390
[ 1679.198445]  ? lock_downgrade+0x6d0/0x6d0
[ 1679.198830]  ? hrtimer_start_range_ns+0x336/0xae0
[ 1679.199289]  ? lock_acquire+0x197/0x470
[ 1679.199671]  ? find_held_lock+0x2c/0x110
[ 1679.200070]  ? sock_has_perm+0x1ea/0x280
[ 1679.200478]  ? __import_iovec+0x458/0x590
[ 1679.200867]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1679.201357]  inet6_sendmsg+0x105/0x140
[ 1679.201697]  ? inet6_compat_ioctl+0x320/0x320
[ 1679.202035]  __sock_sendmsg+0xf2/0x190
[ 1679.202345]  ____sys_sendmsg+0x334/0x870
[ 1679.202657]  ? sock_write_iter+0x3d0/0x3d0
[ 1679.202964]  ? do_recvmmsg+0x6d0/0x6d0
[ 1679.203289]  ? __lock_acquire+0x1657/0x5b00
[ 1679.203684]  ___sys_sendmsg+0xf3/0x170
[ 1679.204043]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1679.204435]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1679.204904]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1679.205322]  ? trace_hardirqs_on+0x5b/0x180
[ 1679.205718]  ? lock_acquire+0x197/0x470
[ 1679.206082]  ? find_held_lock+0x2c/0x110
[ 1679.206431]  ? __might_fault+0xd3/0x180
[ 1679.206733]  ? lock_downgrade+0x6d0/0x6d0
[ 1679.207053]  ? io_schedule_timeout+0x140/0x140
[ 1679.207410]  __sys_sendmmsg+0x195/0x470
[ 1679.207716]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1679.208064]  ? lock_downgrade+0x6d0/0x6d0
[ 1679.208390]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1679.208756]  ? wait_for_completion_io+0x270/0x270
[ 1679.209125]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1679.209494]  ? vfs_write+0x354/0xb10
[ 1679.209766]  ? fput_many+0x2f/0x1a0
[ 1679.210055]  ? ksys_write+0x1a9/0x260
[ 1679.210349]  ? __ia32_sys_read+0xb0/0xb0
[ 1679.210663]  __x64_sys_sendmmsg+0x99/0x100
[ 1679.210975]  do_syscall_64+0x33/0x40
[ 1679.211280]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1679.211664] RIP: 0033:0x7f09c4bc0b19
[ 1679.211949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1679.213319] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1679.213882] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1679.214427] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1679.214950] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1679.215501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1679.216042] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:25:12 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
umount2(&(0x7f0000000180)='./file0\x00', 0xe)
openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x210001, 0x2, 0x14}, 0x18)

19:25:12 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000005e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x220}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2)
add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3)
add_key$keyring(&(0x7f0000000340), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fddbdf255a00000000000300", @ANYRES32=r4, @ANYBLOB="1f0000000000000003000000fa07cc866e3f59691ac919c8ebbb5f9e4a841702908f6a5979a9ccbfc7295976a86232796c89157da3ce27d8b43e77909574b97131a6310409fe90770cd202199761f6c729e7dbec6383de90ba826019be232f962e2d892d7156d5d37607e11dd4f39b44768ad908f313d355d6c347ee06a1d145e411de18b000000000"], 0x3d}}, 0x0)
add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$revoke(0x3, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
io_setup(0xf7, &(0x7f0000000000))
openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x1c7a02, 0x0)
unshare(0x48020200)

[ 1679.251282] FAT-fs (loop2): Unrecognized mount option "dont_measure" or missing value
[ 1679.268204] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:25:12 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1679.328740] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[ 1679.333227] FAT-fs (loop2): Unrecognized mount option "dont_measure" or missing value
19:25:12 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 72)

19:25:12 executing program 2:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000109d000000000013d2eb47eca06010a278103335f7e77a34355705657ea7b2"], 0x24, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x102000)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000001c0)={0x7f, 0x8, 0x1, 'queue1\x00', 0x3})
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc0a85320, &(0x7f0000000100)={0x80})
r3 = dup3(r1, r2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x32, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x7, 0x6}, 0x0, 0x0, r3, 0x0)
dup2(r1, 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffff7ffffff, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000040)="800000", 0x3}, {&(0x7f0000000300)="4311d0b41c741da426191c7779cd9b4525408e4a7c5bad7283d729df38dfabe57e6152f4fbd55ea8079560dad448cf4a909b20424ff833e36209ee4de0e2ddfda7a74b4e5f6433b42b34a86d0d7edf7b6ae42bceae786080dbfd5e112bd59a5c46dfe3be41d927bada7f283f1ef0312d0755c3c922c975", 0x77}, {&(0x7f0000000440)='9', 0x1}], 0x3)
getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/61, 0x3d)
dup2(r2, r5)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r6, 0x3a, 0x1, 0x0, &(0x7f0000000080)=0x2000)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x20043, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@privport}], [{@euid_gt={'euid>', 0xffffffffffffffff}}]}})
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000002c0))
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:25:12 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1679.393967] FAULT_INJECTION: forcing a failure.
[ 1679.393967] name failslab, interval 1, probability 0, space 0, times 0
[ 1679.394889] CPU: 0 PID: 9854 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1679.395409] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1679.396051] Call Trace:
[ 1679.396267]  dump_stack+0x107/0x167
[ 1679.396551]  should_fail.cold+0x5/0xa
[ 1679.396832]  ? lock_downgrade+0x6d0/0x6d0
[ 1679.397211]  ? skb_clone+0x14f/0x3d0
[ 1679.397584]  should_failslab+0x5/0x20
[ 1679.397934]  kmem_cache_alloc+0x5b/0x310
[ 1679.398318]  skb_clone+0x14f/0x3d0
[ 1679.398681]  packet_rcv+0x558/0x1410
[ 1679.399048]  ? run_filter+0x4d0/0x4d0
[ 1679.399403]  dev_queue_xmit_nit+0x38b/0xb00
[ 1679.399845]  dev_hard_start_xmit+0xab/0x6f0
[ 1679.400260]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1679.400771]  __dev_queue_xmit+0x17ec/0x2710
[ 1679.401185]  ? find_held_lock+0x2c/0x110
[ 1679.401587]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1679.402016]  ? lock_downgrade+0x6d0/0x6d0
[ 1679.402417]  ? lock_acquire+0x197/0x470
[ 1679.402804]  ? ip6_finish_output2+0x203/0x1fe0
[ 1679.403232]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1679.403745]  neigh_connected_output+0x382/0x4d0
[ 1679.404206]  ip6_finish_output2+0xaaf/0x1fe0
[ 1679.404648]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1679.405116]  ip6_output+0x3b8/0x7e0
[ 1679.405481]  ip6_local_out+0xb4/0x1a0
[ 1679.405840]  ip6_send_skb+0xb7/0x350
[ 1679.406195]  udp_v6_send_skb+0x7aa/0x15b0
[ 1679.406618]  udpv6_sendmsg+0x2116/0x2ad0
[ 1679.406990]  ? ip_frag_init+0x350/0x350
[ 1679.407385]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1679.407891]  ? lock_acquire+0x197/0x470
[ 1679.408283]  ? find_held_lock+0x2c/0x110
[ 1679.408689]  ? lock_acquire+0x197/0x470
[ 1679.409057]  ? find_held_lock+0x2c/0x110
[ 1679.409445]  ? sock_has_perm+0x1ea/0x280
[ 1679.409846]  ? __import_iovec+0x458/0x590
[ 1679.410229]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1679.410729]  inet6_sendmsg+0x105/0x140
[ 1679.411095]  ? inet6_compat_ioctl+0x320/0x320
[ 1679.411544]  __sock_sendmsg+0xf2/0x190
[ 1679.411922]  ____sys_sendmsg+0x334/0x870
[ 1679.412325]  ? sock_write_iter+0x3d0/0x3d0
[ 1679.412735]  ? do_recvmmsg+0x6d0/0x6d0
[ 1679.413104]  ? __lock_acquire+0x1657/0x5b00
[ 1679.413546]  ___sys_sendmsg+0xf3/0x170
[ 1679.413911]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1679.414346]  ? vmacache_find+0x55/0x2a0
[ 1679.414751]  ? lock_acquire+0x197/0x470
[ 1679.415121]  ? find_held_lock+0x2c/0x110
[ 1679.415531]  ? __might_fault+0xd3/0x180
[ 1679.415913]  ? lock_downgrade+0x6d0/0x6d0
[ 1679.416317]  ? asm_exc_page_fault+0x1e/0x30
[ 1679.416755]  __sys_sendmmsg+0x195/0x470
[ 1679.417136]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1679.417569]  ? lock_downgrade+0x6d0/0x6d0
[ 1679.417975]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1679.418443]  ? wait_for_completion_io+0x270/0x270
[ 1679.418908]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1679.419354]  ? vfs_write+0x354/0xb10
[ 1679.419720]  ? fput_many+0x2f/0x1a0
[ 1679.420078]  ? ksys_write+0x1a9/0x260
[ 1679.420447]  ? __ia32_sys_read+0xb0/0xb0
[ 1679.420849]  __x64_sys_sendmmsg+0x99/0x100
[ 1679.421257]  do_syscall_64+0x33/0x40
[ 1679.421626]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1679.422099] RIP: 0033:0x7f09c4bc0b19
[ 1679.422465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1679.424171] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1679.424894] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1679.425573] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1679.426223] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1679.426900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1679.427579] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:25:12 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x3)

19:25:12 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2000000, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0xffffffffffffffff, r0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0xe6e9, 0x6, &(0x7f0000000540)=[{&(0x7f0000000200)="3c854c7edf38e24d61a03e5d86ce90fd85d14eff5705726396447a441a68f18572985f5d45164fd23524aa4f980f0fc59274e6b1acf190316ee67566e52f37536ea89b5c62aa63d505a812b41b184eb9e7f6892cb72606949c9830b4c7d872cdf466733958adc1cadc0169", 0x6b, 0x8}, {&(0x7f00000002c0)="bef26e109b946898b88873395fa133fb51b10895df692ffcda2424a4083d5e", 0x1f, 0xfffffffffffffff8}, {&(0x7f0000000300)="d22dfcc2cc2082a1c617d6cdb57a400a5c708ca3c65148143f6ef2a6455615692b344b1220ed530650465455abf8d793316af6e8694d02bf1f936c47bdf07634d7262db9cb31e5f05f893372edf9811b634d9acdca1c2652dbd3f6fd6913f66c94dc8380d162fff7a381b46c96b4d4d3ac24b415cdd31872e6cd347a54bba48a9c6d04b8d9c393faf5a324a0e8a3246f8081c4e8c6b4", 0x96, 0x9}, {&(0x7f00000003c0)="5a64bebf01e6eb9ee697fb397eb98706d67b180e3cf0549a7a0ae9e82c337daeab1d64196a38778ae7c13b557cbf3497150d97c80a5f505109d63710b45aba9faf676e0bcd9d6b7d7acd325366483aca52951bbe554655c9b28b7eedc5c0f9f81caa4db6aa80030981b26de32e8b2c1501febe0b745354f690616996027dd155070bb159e5d25b9280f8e0857a6f0fa699c567e322897a2f06e5a48e58494b6e764fadeb6df7cd7d858565d55208f810b03b6a073a12871b", 0xb8, 0x3}, {&(0x7f0000000480)="78fbdb7f938477811fc4fdd96de93a3a706f099b6d0df1003710a67d438a5890922bc9e9355cf5eb8dc837d7ba864bceb679709b20127a9e4be4862825fc05007b040959aae2556bff9eaf27cd", 0x4d, 0x4}, {&(0x7f0000000500), 0x0, 0xa2d2}], 0x810000, &(0x7f0000000600)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x30, 0x32]}}}}, {@huge_never}, {@huge_within_size}], [{@obj_role}, {@smackfshat={'smackfshat', 0x3d, 'system.posix_acl_default\x00'}}, {@fowner_gt={'fowner>', r0}}, {@seclabel}, {@mask={'mask', 0x3d, '^MAY_READ'}}]})
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00')

19:25:12 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)

19:25:12 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f00000009c0)=""/249, 0xf9}], 0x9, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[ 1679.605292] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:25:12 executing program 0:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
mknodat$loop(r0, &(0x7f0000000040)='./file0/file0\x00', 0x8, 0x0)

19:25:12 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000002000000000000000e7c83a455a600b9687ed53556d3705a498aeef53d089d2dfcbecb6f0c06f96c4d3fd86c359441266a2575b97994a1700a97b01645eb63befa2c65a8f32534c02fd5a8ca5ad2905c5799ee8d24d993953bef72949995c33138330894ec9"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:25:12 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1679.651110] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:25:12 executing program 6:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f00000009c0)=""/249, 0xf9}], 0x9, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[ 1679.890093] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[ 1679.916501] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
19:25:27 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 73)

19:25:27 executing program 6:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000109d000000000013d2eb47eca06010a278103335f7e77a34355705657ea7b2"], 0x24, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x102000)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000001c0)={0x7f, 0x8, 0x1, 'queue1\x00', 0x3})
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc0a85320, &(0x7f0000000100)={0x80})
r3 = dup3(r1, r2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x32, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x7, 0x6}, 0x0, 0x0, r3, 0x0)
dup2(r1, 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffff7ffffff, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000040)="800000", 0x3}, {&(0x7f0000000300)="4311d0b41c741da426191c7779cd9b4525408e4a7c5bad7283d729df38dfabe57e6152f4fbd55ea8079560dad448cf4a909b20424ff833e36209ee4de0e2ddfda7a74b4e5f6433b42b34a86d0d7edf7b6ae42bceae786080dbfd5e112bd59a5c46dfe3be41d927bada7f283f1ef0312d0755c3c922c975", 0x77}, {&(0x7f0000000440)='9', 0x1}], 0x3)
getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/61, 0x3d)
dup2(r2, r5)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r6, 0x3a, 0x1, 0x0, &(0x7f0000000080)=0x2000)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x20043, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@privport}], [{@euid_gt={'euid>', 0xffffffffffffffff}}]}})
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000002c0))
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:25:27 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0x7e0602, 0xc4)

19:25:27 executing program 1:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fspick(r0, &(0x7f0000000040)='./file0\x00', 0x1)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:25:27 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)

19:25:27 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {0x0}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:25:27 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="020000000004000004000000001000dc87041496098493a22ab371f04ef300000000000020000079774b53b98c"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:25:27 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1694.627396] FAULT_INJECTION: forcing a failure.
[ 1694.627396] name failslab, interval 1, probability 0, space 0, times 0
[ 1694.628695] CPU: 0 PID: 9915 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1694.628714] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1694.629417] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1694.629423] Call Trace:
[ 1694.629449]  dump_stack+0x107/0x167
[ 1694.633800]  should_fail.cold+0x5/0xa
[ 1694.634280]  ? create_object.isra.0+0x3a/0xa20
[ 1694.634741]  should_failslab+0x5/0x20
[ 1694.635181]  kmem_cache_alloc+0x5b/0x310
[ 1694.635616]  ? lock_acquire+0x197/0x470
[ 1694.636079]  create_object.isra.0+0x3a/0xa20
[ 1694.636538]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1694.637102]  kmem_cache_alloc+0x159/0x310
[ 1694.637543]  skb_clone+0x14f/0x3d0
[ 1694.637908]  dev_queue_xmit_nit+0x3a7/0xb00
[ 1694.638420]  dev_hard_start_xmit+0xab/0x6f0
[ 1694.638866]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1694.639443]  __dev_queue_xmit+0x17ec/0x2710
[ 1694.639898]  ? find_held_lock+0x2c/0x110
[ 1694.640377]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1694.640850]  ? lock_downgrade+0x6d0/0x6d0
[ 1694.641315]  ? lock_acquire+0x197/0x470
[ 1694.641738]  ? ip6_finish_output2+0x203/0x1fe0
[ 1694.642281]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1694.642820]  neigh_connected_output+0x382/0x4d0
[ 1694.643349]  ip6_finish_output2+0xaaf/0x1fe0
[ 1694.643815]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1694.644376]  ip6_output+0x3b8/0x7e0
[ 1694.644756]  ip6_local_out+0xb4/0x1a0
[ 1694.645215]  ip6_send_skb+0xb7/0x350
[ 1694.645598]  udp_v6_send_skb+0x7aa/0x15b0
[ 1694.646122]  udpv6_sendmsg+0x2116/0x2ad0
[ 1694.646536]  ? ip_frag_init+0x350/0x350
[ 1694.646931]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1694.647419]  ? perf_event_task_disable+0x390/0x390
[ 1694.647832]  ? lock_downgrade+0x6d0/0x6d0
[ 1694.648277]  ? hrtimer_start_range_ns+0x336/0xae0
[ 1694.648687]  ? lock_acquire+0x197/0x470
[ 1694.649085]  ? find_held_lock+0x2c/0x110
[ 1694.649441]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1694.649880]  ? sock_has_perm+0x1ea/0x280
[ 1694.650329]  ? __import_iovec+0x458/0x590
[ 1694.650681]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1694.651180]  inet6_sendmsg+0x105/0x140
[ 1694.651512]  ? inet6_compat_ioctl+0x320/0x320
[ 1694.651890]  __sock_sendmsg+0xf2/0x190
[ 1694.652291]  ____sys_sendmsg+0x334/0x870
[ 1694.652639]  ? sock_write_iter+0x3d0/0x3d0
[ 1694.653043]  ? do_recvmmsg+0x6d0/0x6d0
[ 1694.653390]  ? __lock_acquire+0x1657/0x5b00
[ 1694.653764]  ___sys_sendmsg+0xf3/0x170
[ 1694.654170]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1694.654573]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1694.655063]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1694.655454]  ? trace_hardirqs_on+0x5b/0x180
[ 1694.655822]  ? lock_acquire+0x197/0x470
[ 1694.656528]  ? find_held_lock+0x2c/0x110
[ 1694.657271]  ? __might_fault+0xd3/0x180
[ 1694.657949]  ? lock_downgrade+0x6d0/0x6d0
[ 1694.658733]  ? io_schedule_timeout+0x140/0x140
[ 1694.659570]  __sys_sendmmsg+0x195/0x470
[ 1694.660410]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1694.664674]  ? lock_downgrade+0x6d0/0x6d0
[ 1694.665451]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1694.666344]  ? wait_for_completion_io+0x270/0x270
[ 1694.667220]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1694.668065]  ? vfs_write+0x354/0xb10
[ 1694.668400]  ? fput_many+0x2f/0x1a0
[ 1694.668711]  ? ksys_write+0x1a9/0x260
[ 1694.669087]  ? __ia32_sys_read+0xb0/0xb0
[ 1694.669451]  __x64_sys_sendmmsg+0x99/0x100
[ 1694.669808]  do_syscall_64+0x33/0x40
[ 1694.670204]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1694.670636] RIP: 0033:0x7f09c4bc0b19
[ 1694.670988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1694.672735] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1694.673545] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1694.674314] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1694.675076] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1694.675783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1694.676537] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:25:27 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:25:27 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
r1 = signalfd4(r0, &(0x7f0000000040)={[0x3]}, 0x8, 0x800)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0xffffffffffffffff, r2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x6000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '(}'}}, {@privport}, {@posixacl}], [{@measure}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@context={'context', 0x3d, 'root'}}, {@uid_lt={'uid<', 0xee01}}, {@euid_lt={'euid<', r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'system.posix_acl_default\x00'}}, {@pcr={'pcr', 0x3d, 0x13}}]}})
openat(r1, &(0x7f0000000140)='./file0\x00', 0x202001, 0x11)

19:25:27 executing program 2:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x6, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
move_mount(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4)

19:25:27 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 74)

19:25:27 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000040), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:25:27 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)

[ 1694.804281] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[ 1694.829777] FAULT_INJECTION: forcing a failure.
[ 1694.829777] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1694.832684] CPU: 1 PID: 9931 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1694.834181] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1694.835984] Call Trace:
[ 1694.836574]  dump_stack+0x107/0x167
[ 1694.837359]  should_fail.cold+0x5/0xa
[ 1694.838192]  _copy_from_user+0x2e/0x1b0
[ 1694.839049]  __copy_msghdr_from_user+0x91/0x4b0
[ 1694.840079]  ? __ia32_sys_shutdown+0x80/0x80
[ 1694.841028]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1694.842152]  ? inet6_sendmsg+0xbd/0x140
[ 1694.843012]  ? inet6_compat_ioctl+0x320/0x320
[ 1694.843987]  ? __sock_sendmsg+0x55/0x190
[ 1694.844882]  sendmsg_copy_msghdr+0xa1/0x160
[ 1694.845826]  ? do_recvmmsg+0x6d0/0x6d0
[ 1694.846713]  ? __lock_acquire+0x1657/0x5b00
[ 1694.847736]  ___sys_sendmsg+0xc6/0x170
[ 1694.848582]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1694.849573]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1694.850750]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1694.851732]  ? trace_hardirqs_on+0x5b/0x180
[ 1694.852695]  ? lock_acquire+0x197/0x470
[ 1694.853564]  ? find_held_lock+0x2c/0x110
[ 1694.854470]  ? __might_fault+0xd3/0x180
[ 1694.855332]  ? lock_downgrade+0x6d0/0x6d0
[ 1694.856242]  ? io_schedule_timeout+0x140/0x140
[ 1694.857241]  __sys_sendmmsg+0x195/0x470
[ 1694.858180]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1694.859115]  ? lock_downgrade+0x6d0/0x6d0
[ 1694.860024]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1694.861082]  ? wait_for_completion_io+0x270/0x270
[ 1694.862117]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1694.863121]  ? vfs_write+0x354/0xb10
[ 1694.863920]  ? fput_many+0x2f/0x1a0
[ 1694.864731]  ? ksys_write+0x1a9/0x260
[ 1694.865550]  ? __ia32_sys_read+0xb0/0xb0
[ 1694.866430]  __x64_sys_sendmmsg+0x99/0x100
[ 1694.867332]  do_syscall_64+0x33/0x40
[ 1694.868151]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1694.869252] RIP: 0033:0x7f09c4bc0b19
[ 1694.870060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1694.874077] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1694.875722] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1694.877278] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1694.878834] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1694.880386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1694.881933] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:25:27 executing program 0:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
name_to_handle_at(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@orangefs={0x14, 0x1, {"2bbed20cddd3e972fd2b1b8777d00496", 0xa49}}, &(0x7f0000000180), 0x400)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:25:27 executing program 6:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0)
lseek(r0, 0x9e46, 0x1)

19:25:27 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:25:28 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 75)

[ 1694.991398] FAULT_INJECTION: forcing a failure.
[ 1694.991398] name failslab, interval 1, probability 0, space 0, times 0
[ 1694.992799] CPU: 0 PID: 9950 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1694.993484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1694.994265] Call Trace:
[ 1694.994555]  dump_stack+0x107/0x167
[ 1694.994902]  should_fail.cold+0x5/0xa
[ 1694.995277]  ? __alloc_skb+0x6d/0x5b0
[ 1694.995670]  should_failslab+0x5/0x20
[ 1694.996040]  kmem_cache_alloc_node+0x55/0x330
[ 1694.996483]  __alloc_skb+0x6d/0x5b0
[ 1694.996865]  alloc_skb_with_frags+0x92/0x570
[ 1694.997288]  ? find_held_lock+0x2c/0x110
[ 1694.997717]  sock_alloc_send_pskb+0x7af/0x930
[ 1694.998157]  ? sk_alloc+0x350/0x350
[ 1694.998516]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1694.999048]  ? SOFTIRQ_verbose+0x10/0x10
[ 1694.999450]  ? lock_chain_count+0x20/0x20
[ 1694.999892]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1695.000397]  ? ip6_mtu+0x1bb/0x3d0
[ 1695.000735]  ? lock_downgrade+0x6d0/0x6d0
[ 1695.001149]  ? ip_frag_init+0x350/0x350
[ 1695.001536]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1695.002005]  ? ip6_mtu+0x1e9/0x3d0
[ 1695.002347]  ? ip6_setup_cork+0xfb7/0x1740
[ 1695.002751]  ip6_make_skb+0x2de/0x4e0
[ 1695.003143]  ? ip_frag_init+0x350/0x350
[ 1695.003523]  ? ip_frag_init+0x350/0x350
[ 1695.003904]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1695.004401]  ? ip6_dst_hoplimit+0x199/0x440
[ 1695.004812]  ? lock_downgrade+0x6d0/0x6d0
[ 1695.005241]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1695.005643]  ? ip_frag_init+0x350/0x350
[ 1695.006032]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1695.006548]  ? lock_acquire+0x197/0x470
[ 1695.006924]  ? find_held_lock+0x2c/0x110
[ 1695.007348]  ? lock_acquire+0x197/0x470
[ 1695.007731]  ? find_held_lock+0x2c/0x110
[ 1695.008138]  ? sock_has_perm+0x1ea/0x280
[ 1695.008577]  ? __import_iovec+0x458/0x590
[ 1695.008976]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1695.009495]  inet6_sendmsg+0x105/0x140
[ 1695.009866]  ? inet6_compat_ioctl+0x320/0x320
[ 1695.010316]  __sock_sendmsg+0xf2/0x190
[ 1695.010695]  ____sys_sendmsg+0x334/0x870
[ 1695.011088]  ? sock_write_iter+0x3d0/0x3d0
[ 1695.011475]  ? do_recvmmsg+0x6d0/0x6d0
[ 1695.011810]  ? __lock_acquire+0x1657/0x5b00
[ 1695.012192]  ___sys_sendmsg+0xf3/0x170
[ 1695.012548]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1695.012929]  ? vmacache_find+0x55/0x2a0
[ 1695.013276]  ? lock_acquire+0x197/0x470
[ 1695.013636]  ? find_held_lock+0x2c/0x110
[ 1695.013988]  ? __might_fault+0xd3/0x180
[ 1695.014326]  ? lock_downgrade+0x6d0/0x6d0
[ 1695.014708]  ? asm_exc_page_fault+0x1e/0x30
[ 1695.015089]  __sys_sendmmsg+0x195/0x470
[ 1695.015429]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1695.015819]  ? lock_downgrade+0x6d0/0x6d0
[ 1695.016191]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1695.016600]  ? wait_for_completion_io+0x270/0x270
[ 1695.017034]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1695.017433]  ? vfs_write+0x354/0xb10
[ 1695.017782]  ? fput_many+0x2f/0x1a0
[ 1695.018093]  ? ksys_write+0x1a9/0x260
[ 1695.018413]  ? __ia32_sys_read+0xb0/0xb0
[ 1695.018760]  __x64_sys_sendmmsg+0x99/0x100
[ 1695.019142]  do_syscall_64+0x33/0x40
[ 1695.019457]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1695.019911] RIP: 0033:0x7f09c4bc0b19
[ 1695.020268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1695.022062] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1695.022781] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1695.023478] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1695.024184] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1695.024861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1695.025561] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:25:42 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 76)

19:25:42 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:25:42 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)

19:25:42 executing program 1:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400040000000000100000000000000020000000000000009ae121"], 0x24, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0xfff}}, './file0\x00'})
renameat2(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:25:42 executing program 6:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0)
lseek(r0, 0x9e46, 0x1)

19:25:42 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fsetxattr$security_selinux(r0, &(0x7f0000000040), 0x0, 0x0, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000005a00002000000000000000774bcb9212f810bfd3d11c7110e9438b3b1144e127846acfe10e39ea6e82815da2b5052a6d715bde7951c19259c15af5fc1663915f068b999fc8924604c913c766423498b7fc4fe97ab4b0cb4899a886fd9023cdce99e3b758dfaf2e3854abcec92bef393c896966820b0ddd1fa2e55b63c625b575"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x810020, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c63616368653d667363616368652c6e6f817874656e642c736d736d7574657374656d2e706f7369785f61636c5f64656661756c74002ca3e161636b66736861743d73656375a3e8726974792e73656c696e7578002c666f776e65723e000000000000000000ae4c24aaddb44cfb48339c97ce462f043696df9063e2ac8131059171e9fcb8c8d9380d444055bf1a56f6e4501d08b0b8579ccc02d4fb22aff9a90272f162812768c3dcd351d265b332dcbb899817aa19483e02c97cc533705f0d431c699d252e1b411132e48545bd6497cacb5e1b23927bd0db64b7299d3ccdf6e0f8389613c14d2c2f01437b", @ANYRESDEC=0xee00, @ANYBLOB="2c6f626a5f726f6c653d2d2b5e942c6673636f6e746578743d726f6f742c666f776e65723e", @ANYRESDEC=0xee01, @ANYBLOB=',subj_type=(,smackfsroot=security.selinux\x00,\x00'])

[ 1709.309629] FAULT_INJECTION: forcing a failure.
[ 1709.309629] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1709.313221] CPU: 1 PID: 9957 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1709.314065] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1709.315039] Call Trace:
[ 1709.315325]  dump_stack+0x107/0x167
[ 1709.315766]  should_fail.cold+0x5/0xa
[ 1709.316252]  _copy_from_user+0x2e/0x1b0
[ 1709.316770]  __copy_msghdr_from_user+0x91/0x4b0
[ 1709.317359]  ? __ia32_sys_shutdown+0x80/0x80
[ 1709.317887]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1709.318603]  ? inet6_sendmsg+0xbd/0x140
[ 1709.319090]  ? inet6_compat_ioctl+0x320/0x320
[ 1709.319600]  ? __sock_sendmsg+0x55/0x190
[ 1709.320107]  sendmsg_copy_msghdr+0xa1/0x160
[ 1709.320619]  ? do_recvmmsg+0x6d0/0x6d0
[ 1709.321133]  ? __lock_acquire+0x1657/0x5b00
[ 1709.321686]  ___sys_sendmsg+0xc6/0x170
[ 1709.322159]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1709.322692]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1709.323296]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1709.323814]  ? trace_hardirqs_on+0x5b/0x180
[ 1709.324334]  ? lock_acquire+0x197/0x470
[ 1709.324801]  ? find_held_lock+0x2c/0x110
[ 1709.325330]  ? __might_fault+0xd3/0x180
[ 1709.325832]  ? lock_downgrade+0x6d0/0x6d0
[ 1709.326372]  ? io_schedule_timeout+0x140/0x140
[ 1709.326908]  __sys_sendmmsg+0x195/0x470
[ 1709.327391]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1709.327897]  ? lock_downgrade+0x6d0/0x6d0
[ 1709.328408]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1709.329025]  ? wait_for_completion_io+0x270/0x270
[ 1709.329580]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1709.330117]  ? vfs_write+0x354/0xb10
[ 1709.330587]  ? fput_many+0x2f/0x1a0
[ 1709.331018]  ? ksys_write+0x1a9/0x260
[ 1709.331412]  ? __ia32_sys_read+0xb0/0xb0
[ 1709.332003]  __x64_sys_sendmmsg+0x99/0x100
[ 1709.332527]  do_syscall_64+0x33/0x40
[ 1709.332921]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1709.333593] RIP: 0033:0x7f09c4bc0b19
[ 1709.334043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1709.336098] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1709.336936] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1709.337796] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1709.338630] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1709.339412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1709.340280] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:25:42 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {0x1, 0x5}}, 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:25:42 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {0x0}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:25:42 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700))

19:25:42 executing program 2:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$inet6(r0, &(0x7f0000001740)={&(0x7f0000000040)={0xa, 0x4e24, 0x200, @mcast1, 0x800}, 0x1c, &(0x7f0000001500)=[{&(0x7f0000000140)="5621565e775c1a99e2153972796c69d70b0cdfeecd57077f233b196237e81cd56d781c29fe2081902f8d90e6e24c6b0b32072d0610c5d6df9bea2dfaaff7a53ecb81682fd43a541dff050950e2c5cc1c2119d1ed9e9e75f5bf5c895de7086b372ddf34f97396643b4b0b060a4b05f68cdad55f0b99645961f35468dd73117b43476f39aa396c398fbdaac34fde2b3b73d4f17a24e3bb727b57a55928a75e3f63aa8a6565e0258fab9aef28c1e08f2ce8a854ada43103e94cc422ba961d8f30b6d0575c253b38d8df0c861f3c9cc8d2798d74ad673834cf4d235ce3", 0xdb}, {&(0x7f0000000240)="1863f6d7e798c8c9c4087e12cebcf35aaba120501f9f46bbadde882706d23670f6630dbed1c6", 0x26}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="a45f352aca49d1772099b42bf16d8c5f0dcd272be293f15be4040ca88acddba13aa760262524aa3a17780973a7f3135d68a2b10e9c3e53a6d6e952644afe1e8515325898be408d66567d6a6b4c920707a80dbef3b75f151e6a88d079", 0x5c}, {&(0x7f0000000380)="bbf303a15eb7bfa58fd653cd70d701c64df6d175a35f7a278489b75f75f539a15fa4b22466ce302cb31d8802ed482c1acf0005b4b6898fc197527541b33f9bd08d4ee086d0873e7095b5d77f9c5547f21386738bb8c31e7445eaa51cac7ff3259dea80d3a97dfc2b17f0782a202809577edada19aadda0238e6ccc54587d0d89b8c816b2ebadc67b9960d177da10e7388699362649dcb153c2e762ea7f1b32fa094747de5e60363f0495395beb30da2b7e49c02b77ac69", 0xb7}, {&(0x7f0000000440)="71e8f194b3e7a68460e363598aab824eccae5d0c907a51c090f8c990afed050834a78e16378f4185be1dd422f81115b0a9ed4ab6f008638e09362a741461e4c5cdd985042fa8407a217a27cac26bf40d38e0d8f837edd01e2bebbd332538c1b9d5744e00068e5633d81de1af9281558a9a7c35559124ce5a54aacaa599b195e3f2c3570a48312420e3cb81d2aba89284f014b6a9fff859eb36e9f108b41ea48e296de3d8a153f91ed27982459ef4d3", 0xaf}, {&(0x7f0000000500)="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", 0x1000}], 0x7, &(0x7f0000001580)=[@rthdr={{0x38, 0x29, 0x39, {0x32, 0x4, 0x0, 0xce, 0x0, [@remote, @empty]}}}, @rthdr={{0x48, 0x29, 0x39, {0x88, 0x6, 0x1, 0x6, 0x0, [@mcast2, @loopback, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x40}}, @hoplimit={{0x14, 0x29, 0x34, 0x7fffffff}}, @rthdrdstopts={{0x78, 0x29, 0x37, {0x3a, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0xb5}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xc4}, @ra={0x5, 0x2, 0x7fff}, @generic={0x3f, 0x47, "59041e3ce8034f734c82b243b0809a5a4215cad7b2091da1e866ace8774e31a8e84794b84394dfb6019e4792decac2ba54e0501e856bdf103e67189cb76ebcc3f599af85581149"}, @pad1]}}}, @hopopts={{0x60, 0x29, 0x36, {0x0, 0x8, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x18, {0x3, 0x4, 0x0, 0x401, [0x1ff, 0x3839]}}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}], 0x1a0}, 0x4)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r1=>r0, {0xfffffffa}}, './file0\x00'})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001780)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x222}, 0x1}, 0x2)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {0x1, 0x4}, [], {}, [], {0x10, 0x7}}, 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:25:42 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)

[ 1709.419833] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1709.455145] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[ 1709.466283] isofs_fill_super: bread failed, dev=loop6, iso_blknum=32, block=64
[ 1709.515505] isofs_fill_super: bread failed, dev=loop6, iso_blknum=32, block=64
19:25:57 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/15, 0xf}, {0x0}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:25:57 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)

19:25:57 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x9, &(0x7f00000008c0)=[{&(0x7f0000000240)="9d331beb15f3d3ec806ec8e3aa1b8d14cd708508213205ffcdd8e43a7fbc79ec481b69c645ba96413597f8f0272f8ef2b2046b37278a03dec00353531693723550ee5e22d3f8653cab7161ba0cad07c14de8f72b1e69a333d04b1f5366368fe8c2701de43cd4e1f7fe6cc10b59fbe56c34d687414078014448abc567bdec67288b414ec1344899627c38873d8195dc78a3248510a6c71429317816e1dbdb58ebb442ae0aa8f0e9a47cc8f41febbf7dcb927ac4336899c369f040c3e90db35f7c8412df649a5fe0259d30ef", 0xcb, 0x2}, {&(0x7f0000000340)="c6a9ece20979dfd84a580e5fd2001660298d0357715bf547edd147533a4da6b8214ae08786586281022b9e1b1bf1c4fffbd5122a489fdb9a6b8161ab7a3e2840e8211583652fcbfabf8976f3dce709ca86e8", 0x52}, {&(0x7f00000003c0)="778083858cb3ae5d9d5ffdb6e62aaf4ca8bc6fc83778b0958f05f523e69518e303814ee81e033b1a4d5be199cea32d7c6e972c50ed1cb0ae7ee19395a4654834315760f10b41cd1e19b8ed7576126d8f9390b6338bc8ab8ee10d2508de099a2308c92583e2f51f576999be965f0034198b18eeec3cb88e6ae461390dbd60277e4b1b1551a55dbaca37f057bbb8cdb9dcc000215d75c370d890b37bdddebd6e01", 0xa0, 0xfffffffffffeffff}, {&(0x7f0000000480)="a6e6345cbeaad4fafd5367adeafe6b0e1c697f1dcf51a48a905038dbce36b4c374f77fc57b1b0235cba7b1485d5b889dea6a83fee2f1905cff5d1d9d431416f8d330aec3535a95fe1088f2a11b022deec26b5d80eb710a9a29dd0d0f535111109c1b6b3a130e7324446fc66232fbd22ba7a0641739dd56da6aa88d2109e097533a01dc43dd9020fb3e1986511e272f412fce193c6b11268924401d5da2b9d0b0e693637d4a82b3edd04c3a26ab9364d34f2eaa0d0a5eb6c21ea8e68f33e3b66b1003c9e25ded399c3c5ad3d054412b62fffb42d161ee26381faf3a24b0ba894e046ddd", 0xe3, 0x5}, {&(0x7f0000000580)="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", 0xfd, 0x4bf91ab5}, {&(0x7f0000000680)="d2253db0d24574b73fe1359457f481486127b42154ecee71563eda2bbe3e1193c9c0ac8ba0e367d279b12d3f61e547dd0897866f141a57132f85f6175bde40e0a7c1777fcc42d188d9bf45c1c9366065e62d23799b281f285aaa039d4440ff3f11c8c5b9545a4b4f02e822e58b555b0c558c898724343675e72143d3d30b79775a1a876fce10baa505c2a4eda3c95f01bd8cce291a216d0fda72d90c1bc6c435fee4d8abc07bcf13f9", 0xa9, 0x20}, {&(0x7f0000000740)="d1445d0254681e5dc9682dff1e04df8585078fb1f6721c9d39f49cf06d54b140df91e647a639bf33e457749a01ef4d92", 0x30, 0xff}, {&(0x7f0000000780)="bc1623ad6b3b7671e65cada10bac7c361ae3ccdb140a09827459ab92a76a6fa4a3df81b147261ca7f09ea292aedeea759967a7222c556c856ae47394d5018a219097cf41da7527ade628dc3e3aa3cdf258a160e089ae6a86aca834c99137df3f8065604c1ee9263d5c027840e59e545e4ccd9b851a8a75", 0x77, 0xfffffffffffffff8}, {&(0x7f0000000800)="5b1ca6f90025c9959f849d45dedd25d7af4996095dbf793a88b5f1fbab2d011a1be907f75213708ecab4efb18cbf20909b839250e3d4497727d4ebceb8a73be7049e2f7c1a1ef9c0b0d7f07cf7b244765850a8afbebf29515a09266b3d8bad8622b877253b6939aac90571fddceae0557e8e5c1ee87e08d925355744d9bbb743b1c0b1259a04d567f7b42284e03ba694096a7db1fd8be2ead663b2d32be3d1e6bb73cc8a", 0xa4, 0x4}], 0x20050, &(0x7f0000000ac0)=ANY=[@ANYBLOB="6a71666d743d76667376312c6e6f62682c70726a71756f74612c6772706a71756f74613d2e2f66696c65312c6a71666d743d76667376302c6a6f75726e616c5f696f7072696f3d3078303030303030303030303030303030312c6f626a5f726f6c653d262c007efafc3a0cff3141967c2f7fc7d3e8b5414fe4e6423e97464523f30df04ed01a5ab88dcae5762140670418578e5317112edde7665600a99ccf480edab3f73177c848d8f9d5e70e97f7c039657e665164b9f3b6c9016df1a8fc0af612513f8448de2ebc2ce7be7a05313bccf99a665ce400"/227])
r1 = syz_io_uring_complete(0x0)
statx(r1, &(0x7f00000009c0)='./file0\x00', 0x0, 0x8, &(0x7f0000000bc0))
mknodat$loop(r0, &(0x7f0000000a40)='.\x00', 0x100, 0x1)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="02000000ed000000000000000400000000000000100000000000000077c0297caedd772000000000000000426168967acd93151bd88a4ec59e000003da6c575f3fea465f509245a836f606353a39764c70068888e6afcacf293c13cbe1369ef7f7dd5ecb8012431a537ec0349f4e52340a81df887f0c8654372079e524210757833baba565308776a4f079593182f066dab8d58a3671a02d6a8677fbb7a366530ae3acc4fd000000"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:25:57 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:25:57 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 77)

19:25:57 executing program 2:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x8400, 0x102)
creat(&(0x7f0000000140)='./file0\x00', 0x24)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:25:57 executing program 6:
r0 = socket$inet(0x2, 0x3, 0xffff)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x0, @private}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="b683ae40f3fdac402b01b439fa7588927ad9dcc878d124b8", 0x18}], 0x1}, 0x14000240)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e23, @private=0xa010102}, 0x21a, 0x0, 0x0, 0x0, 0x4, 0x0, 0x86, 0x0, 0x1})
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x4, 0x0, 0x0, 0x0, 0x80, &(0x7f0000000080)='veth1_to_hsr\x00', 0x80000000, 0x1, 0xff})
syz_io_uring_setup(0x3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfb}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000280)=<r1=>0x0, &(0x7f0000000540)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfb}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000540)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r5, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x2c, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
r8 = syz_io_uring_setup(0x21, &(0x7f0000000340)={0x0, 0x4000000, 0x2, 0x3, 0x1c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r9=>0x0, &(0x7f0000000080)=<r10=>0x0)
r11 = dup2(r7, 0xffffffffffffffff)
r12 = pidfd_getfd(r11, r6, 0x0)
r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000600)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r12, &(0x7f0000000580)={0x30201, 0x20, 0x2}, &(0x7f00000005c0)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r13}}, 0xff)
syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd=r5, 0x7ff, 0x0, 0x7fffffff, 0x0, 0x1, {0x0, r13}}, 0xd3)

19:25:57 executing program 1:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="050000000001000000000000040000000000000010000000000000002000000000000000f2fee477bc821b679ebe655befe51a346334fa68e000b3b1067f41fbeabc4ea3717bfc7c4d11475dad5794b143afac4417154b4562bba3ead283cac812a22f8431ae13f5e3c3478d5d"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
mkdirat(r0, &(0x7f00000001c0)='./file0\x00', 0x1c2)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xffffffffffffffff, r3, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@private0}, 0x0, @in=@private}}, &(0x7f0000000440)=0xe8)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000480)=<r5=>0x0)
setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {0x1, 0x3}, [{0x2, 0x2, r3}, {0x2, 0x5, r1}, {0x2, 0x0, r4}, {0x2, 0x4, r5}, {0x2, 0x2, r1}], {}, [{0x8, 0x5, r2}, {0x8, 0x2, r2}], {0x10, 0x1}}, 0x5c, 0x2)
setresuid(0xffffffffffffffff, r1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r6=>r0, {0xea}}, './file0\x00'})
unlinkat(r6, &(0x7f0000000180)='./file0\x00', 0x200)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc)

[ 1724.290008] FAULT_INJECTION: forcing a failure.
[ 1724.290008] name failslab, interval 1, probability 0, space 0, times 0
[ 1724.292825] CPU: 1 PID: 10011 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1724.294432] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1724.296363] Call Trace:
[ 1724.296975]  dump_stack+0x107/0x167
[ 1724.297816]  should_fail.cold+0x5/0xa
[ 1724.298690]  should_failslab+0x5/0x20
[ 1724.299578]  __kmalloc_node_track_caller+0x74/0x3b0
[ 1724.300740]  ? alloc_skb_with_frags+0x92/0x570
[ 1724.301798]  __alloc_skb+0xb1/0x5b0
[ 1724.302633]  alloc_skb_with_frags+0x92/0x570
[ 1724.303650]  ? find_held_lock+0x2c/0x110
[ 1724.304598]  sock_alloc_send_pskb+0x7af/0x930
[ 1724.305646]  ? sk_alloc+0x350/0x350
[ 1724.306484]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1724.307693]  ? SOFTIRQ_verbose+0x10/0x10
[ 1724.308638]  ? lock_chain_count+0x20/0x20
[ 1724.309602]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1724.310760]  ? ip6_mtu+0x1bb/0x3d0
[ 1724.311587]  ? lock_downgrade+0x6d0/0x6d0
[ 1724.312542]  ? ip_frag_init+0x350/0x350
[ 1724.313468]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1724.314535]  ? ip6_mtu+0x1e9/0x3d0
[ 1724.315352]  ? ip6_setup_cork+0xfb7/0x1740
[ 1724.316310]  ip6_make_skb+0x2de/0x4e0
[ 1724.317189]  ? ip_frag_init+0x350/0x350
[ 1724.318095]  ? ip_frag_init+0x350/0x350
[ 1724.319013]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1724.320106]  ? ip6_dst_hoplimit+0x199/0x440
[ 1724.321099]  ? lock_downgrade+0x6d0/0x6d0
[ 1724.322055]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1724.322996]  ? ip_frag_init+0x350/0x350
[ 1724.323926]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1724.325149]  ? perf_event_task_disable+0x390/0x390
[ 1724.326262]  ? lock_downgrade+0x6d0/0x6d0
[ 1724.327156]  ? hrtimer_start_range_ns+0x336/0xae0
[ 1724.328243]  ? lock_acquire+0x197/0x470
[ 1724.329176]  ? find_held_lock+0x2c/0x110
[ 1724.330134]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1724.331356]  ? sock_has_perm+0x1ea/0x280
[ 1724.332310]  ? __import_iovec+0x458/0x590
[ 1724.333268]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1724.334446]  inet6_sendmsg+0x105/0x140
[ 1724.335342]  ? inet6_compat_ioctl+0x320/0x320
[ 1724.336320]  __sock_sendmsg+0xf2/0x190
[ 1724.337168]  ____sys_sendmsg+0x334/0x870
[ 1724.338036]  ? sock_write_iter+0x3d0/0x3d0
[ 1724.338945]  ? do_recvmmsg+0x6d0/0x6d0
[ 1724.339776]  ? __lock_acquire+0x1657/0x5b00
[ 1724.340720]  ___sys_sendmsg+0xf3/0x170
[ 1724.341562]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1724.342546]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1724.343665]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1724.344650]  ? trace_hardirqs_on+0x5b/0x180
[ 1724.345604]  ? lock_acquire+0x197/0x470
[ 1724.346503]  ? find_held_lock+0x2c/0x110
[ 1724.347418]  ? __might_fault+0xd3/0x180
[ 1724.348311]  ? lock_downgrade+0x6d0/0x6d0
[ 1724.349266]  ? io_schedule_timeout+0x140/0x140
[ 1724.350310]  __sys_sendmmsg+0x195/0x470
[ 1724.351209]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1724.352188]  ? lock_downgrade+0x6d0/0x6d0
[ 1724.353146]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1724.354250]  ? wait_for_completion_io+0x270/0x270
[ 1724.355341]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1724.356415]  ? vfs_write+0x354/0xb10
[ 1724.357255]  ? fput_many+0x2f/0x1a0
[ 1724.358078]  ? ksys_write+0x1a9/0x260
[ 1724.358933]  ? __ia32_sys_read+0xb0/0xb0
[ 1724.359862]  __x64_sys_sendmmsg+0x99/0x100
[ 1724.360816]  do_syscall_64+0x33/0x40
[ 1724.361666]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1724.362826] RIP: 0033:0x7f09c4bc0b19
[ 1724.363675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1724.367890] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1724.369645] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1724.371286] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1724.372938] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1724.374561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1724.376206] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:25:57 executing program 0:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {}, [], {}, [], {}, {0x20, 0x1}}, 0x24, 0x3)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x410080, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
connect$unix(r1, &(0x7f0000001c00)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendfile(r0, r3, 0x0, 0x3f)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r4, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
readv(r4, &(0x7f0000001b80)=[{&(0x7f0000000940)=""/68, 0x44}, {&(0x7f00000009c0)=""/152, 0x98}, {&(0x7f0000000a80)=""/247, 0xf7}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000000540)=""/8, 0x8}], 0x5)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {r5, 0xee00}}, './file0\x00'})
r6 = socket(0x5, 0x5, 0x7000000)
sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000180)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)="aa6a71be2c3f1a8660c367527d6eaeadec3fa59d7693fb91163759e48cf518149570aff88bbc2d06450547c52ce294c78628ee1ccc508baef15ed35c0d8493b07595f2a996e7ad6b845dc307f07156a23fab24df3f0dd1767be7329fed9874d98a4802955e859af552a1f074542578b50cb04e3600f0e806e37df1a2673440667124e1a667d714fbeabbd77304f9cbfe8fd3b952f0ac82cd8afe654168363a32d3", 0xa1}, {&(0x7f0000000640)="13e33a81471e9ead6e0235d019cdb1fa9e45774438f2335a74de01364777b856e827692d361a376bba1b676e99cd01b2bdd391647039dd838e9132eff540a6c8292b4e1c2727315b053a8ade374f4e85cd2caf5abb4ab7c204a9411751b01a0da4a905a6cb64cad73f517c520c94f37953373e34f032ea9f434fde9793ea15223deef91c9fcb9d8cb1c82e", 0x8b}, {&(0x7f0000000700)="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", 0xfc}], 0x3, &(0x7f0000000800)=[{0xf0, 0x20, 0xfc2a, "0c81d2b9660d531f5291d1b0624e8e6155d2f98020752bd87aed91a868ff839dce01e8be131c0b77908a310f17d6cf472cda8ad0711772c48cd9de23d005908adc61c76f5decd559bfcf831a453cd0f800d9ba429956345f78645c582c8db109c1ffc079ce3d40c537bc104dee2397eaeb0ca04e7d636075d8d8f8422a7fae678877bbdef54e2ecc19601cde1a330e3d8b01047ef77d38d4e4b9338e0bd123697d1ee038f75814d942b1990e1df6c0dadc0cdfa9ac50dc821da167921a120ec8a07f9eba4055f25636ac362f081567c9908b24cb3e276ff6bd9cb548"}, {0x48, 0xff, 0x1, "bf360fa3834c7d1e7ff7ecd55e4428b153bf5201673a7b8fe1992c4fbac2735267fb1d8f8ce47b27c344d663a824a4d06d9e"}], 0x138}, 0x24008004)

[ 1724.392166] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1724.403376] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:25:57 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="843d1b7f0000100000000000000020000000000000"], 0x24, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, @out_args}, './file0\x00'})
mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x18)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

[ 1724.426619] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:25:57 executing program 1:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
statx(r0, &(0x7f0000000780)='./file0\x00', 0x1000, 0x100, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003b00)=[{{&(0x7f00000008c0), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/1, 0x1}, {&(0x7f0000000980)=""/14, 0xe}, {&(0x7f00000009c0)=""/105, 0x69}, {&(0x7f0000000a40)=""/195, 0xc3}, {&(0x7f0000000b40)=""/115, 0x73}, {&(0x7f0000000bc0)=""/99, 0x63}, {&(0x7f0000000c40)=""/179, 0xb3}], 0x7, &(0x7f0000000d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000dc0), 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000e40)=""/131, 0x83}, {&(0x7f0000000f00)=""/229, 0xe5}, {&(0x7f0000001000)=""/197, 0xc5}, {&(0x7f0000001100)=""/124, 0x7c}, {&(0x7f0000001180)=""/80, 0x50}, {&(0x7f0000001200)=""/212, 0xd4}, {&(0x7f0000001300)=""/61, 0x3d}, {&(0x7f0000001340)=""/113, 0x71}, {&(0x7f00000013c0)=""/223, 0xdf}], 0x9, &(0x7f0000001580)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001640)=""/180, 0xb4}], 0x1, &(0x7f0000001740)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001780)=@abs, 0x6e, &(0x7f0000001900)=[{&(0x7f0000001800)=""/241, 0xf1}], 0x1, &(0x7f0000001940)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000002f80)=[{&(0x7f0000001a80)=""/240, 0xf0}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/95, 0x5f}, {&(0x7f0000002c00)=""/196, 0xc4}, {&(0x7f0000002d00)=""/242, 0xf2}, {&(0x7f0000002e00)=""/153, 0x99}, {&(0x7f0000002ec0)}, {&(0x7f0000002f00)=""/96, 0x60}], 0x8, &(0x7f0000003000)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000003080), 0x6e, &(0x7f0000003640)=[{&(0x7f0000003100)=""/233, 0xe9}, {&(0x7f0000003200)=""/78, 0x4e}, {&(0x7f0000003280)=""/93, 0x5d}, {&(0x7f0000003300)=""/122, 0x7a}, {&(0x7f0000003380)=""/223, 0xdf}, {&(0x7f0000003480)=""/203, 0xcb}, {&(0x7f0000003580)=""/167, 0xa7}], 0x7, &(0x7f00000036c0)}}, {{&(0x7f0000003700)=@abs, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003780)=""/4, 0x4}, {&(0x7f00000037c0)=""/65, 0x41}, {&(0x7f0000003840)=""/59, 0x3b}, {&(0x7f0000003880)=""/164, 0xa4}, {&(0x7f0000003940)=""/36, 0x24}, {&(0x7f0000003980)=""/67, 0x43}], 0x6, &(0x7f0000003a80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r2=>0x0}}}], 0x58}}], 0x7, 0x0, &(0x7f0000003cc0))
lstat(&(0x7f0000003d00)='./file0\x00', &(0x7f0000003d40)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./file0/file0\x00', 0xffffffffcb492f1f, 0x9, &(0x7f0000000680)=[{&(0x7f0000000180)="b6b29b5467e1d2d1e3dc24072283d5185ca899c688456301ee9808f1238f567064dfe3bdba02c13c75b6d4131748c4ee49818a8b7d3f5852c7e8a0da2c3f898718c4d6022e5a532a121543ec54fe53a7ef0bd08867df5d1672662cbb90b8d63cf8f0c40364691950d6b73e0341", 0x6d, 0x5}, {&(0x7f0000000200)="9ede4bb8", 0x4, 0x4}, {&(0x7f00000002c0)="cb69b49d0d31059279e02b7716ceb826649233d20552fa2ac9bb756f0b4f59fe38770c7b0391fc5ce27acc48b7a68fe06fb74b54dbbc5d1bc1f632d24390d2e610be8ab4d297194bcddab54f2a2ffe862f89775415c42590e6cde2f873e66c8417d9553cd477ab8dc6273eae4c4c3e736427a2d031c12337ccdc6fa669528d02dbc25dcf49d1769e202679fb94becec4c70c66f99603e8c7e8e74e71305b12f6bf3b", 0xa2}, {&(0x7f0000000380)="e3bb9088018143b85b05f2a47cec3e86c6163c28347ea5a5dd52ba71a9792e5a9a743c586f73fe03b9ac9cdfd7d60ad8a55b9ed0c064c9009d4ab8fa69a4f3cf929b03076497d22c3edbe2b537ddd9d009f20311bde50f109325a265af66dd854ec0", 0x62, 0x7d}, {&(0x7f0000000400)="f5a0a9af1e5762d6310dbbf010331f1345cbb12fce00c507f05f291892090089e2e184e22fd2a4393e589e9862bea2b8b8bb5f0443b2184561185bc8b0c4500965e91f1213799f4feef57ac3fff499d54f12bc1ec3d3ee89dc8ce3cf214787c3f903cdec0809f600aa8bcceed176513d", 0x70, 0x6}, {&(0x7f0000000480)="ddcd6ac8aa9d8bc05650b6ab8cb0f23e119993a50cb4d602d5455cae029fa96b6d5bf73f8f6dce5f674e735e7019c104a04fc039ddf6d0385a37b301ee943c58cf0980ec85285dfd0976e84f3e22097272c525259a58218e6eb0bbb32fdfc8de73e91d0d63c7258f1cfb583cfcc0b52a5978c976b5e9f8dda4f2ac93ade4203bc80006669a9c1064fbb7774f7e", 0x8d, 0x9}, {&(0x7f0000000240)="255b35d33f9a07b5ed9b7256b57d21188c7978127c", 0x15, 0xd94a}, {&(0x7f0000000540)="ed1cf6721ad9b899c3e67140c85495d2d49d019cee70145a9b45fcb2ba10cbcdf8d6e1cae28246159628e132c5b480284dc952eec49e0a872c2a122decc154995fd3b243e3a673d016a4ae98d76f61", 0x4f, 0xffffffffffffffe1}, {&(0x7f00000005c0)="b2e34b73ee8bf47d7d35a40c232a6cfab7dff0c441230afa2178fc93bb123ea6768515f085354d7b64e57aec2e76b20cbd66ff77057663090eb8f36f271423a757e7ca5aaaccdebccef9d39b299d624bd2e1d8373ad28c1e305b0956579809255f3bdbd532247db3ecfe84185999ba1fb7503e2cdbbb82d2bbdc9c5a9030335ac320496f47a5ac44ec56820e74e6d2e9f29cd36e8a65ebcfd2f714ab15a5e05a483943161a4622b5d732737c20", 0xad, 0x1ff}], 0x2080a, &(0x7f0000003dc0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x39, 0x35, 0x32]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x32]}}, {@huge_always}, {@uid={'uid', 0x3d, 0xee01}}, {@size={'size', 0x3d, [0x2d, 0x33, 0x40, 0x33]}}, {@gid={'gid', 0x3d, r1}}, {@gid={'gid', 0x3d, 0xee00}}], [{@measure}, {@uid_lt={'uid<', r2}}, {@smackfsdef={'smackfsdef', 0x3d, '-'}}, {@smackfsroot={'smackfsroot', 0x3d, '.$\xd8%/\\$\\{\\$@[[\'--@'}}, {@smackfsroot={'smackfsroot', 0x3d, '\\}'}}, {@smackfshat}, {@uid_gt={'uid>', r3}}, {@obj_user={'obj_user', 0x3d, 'system.posix_acl_default\x00'}}]})
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:25:57 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:25:57 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 78)

[ 1724.504413] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1724.534859] FAULT_INJECTION: forcing a failure.
[ 1724.534859] name failslab, interval 1, probability 0, space 0, times 0
[ 1724.537674] CPU: 1 PID: 10034 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1724.539267] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1724.541169] Call Trace:
[ 1724.541774]  dump_stack+0x107/0x167
[ 1724.542605]  should_fail.cold+0x5/0xa
[ 1724.543489]  ? create_object.isra.0+0x3a/0xa20
[ 1724.544541]  should_failslab+0x5/0x20
[ 1724.545415]  kmem_cache_alloc+0x5b/0x310
[ 1724.546337]  create_object.isra.0+0x3a/0xa20
[ 1724.547343]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1724.548514]  kmem_cache_alloc_node+0x169/0x330
[ 1724.549564]  __alloc_skb+0x6d/0x5b0
[ 1724.550381]  alloc_skb_with_frags+0x92/0x570
[ 1724.551392]  ? find_held_lock+0x2c/0x110
[ 1724.552309]  sock_alloc_send_pskb+0x7af/0x930
[ 1724.553341]  ? sk_alloc+0x350/0x350
[ 1724.554170]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1724.555370]  ? SOFTIRQ_verbose+0x10/0x10
[ 1724.556293]  ? lock_chain_count+0x20/0x20
[ 1724.557262]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1724.558404]  ? ip6_mtu+0x1bb/0x3d0
[ 1724.559208]  ? lock_downgrade+0x6d0/0x6d0
[ 1724.560163]  ? ip_frag_init+0x350/0x350
[ 1724.561089]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1724.562151]  ? ip6_mtu+0x1e9/0x3d0
[ 1724.562959]  ? ip6_setup_cork+0xfb7/0x1740
[ 1724.563924]  ip6_make_skb+0x2de/0x4e0
[ 1724.564804]  ? ip_frag_init+0x350/0x350
[ 1724.565706]  ? ip_frag_init+0x350/0x350
[ 1724.566618]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1724.567686]  ? ip6_dst_hoplimit+0x199/0x440
[ 1724.568672]  ? lock_downgrade+0x6d0/0x6d0
[ 1724.569616]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1724.570539]  ? ip_frag_init+0x350/0x350
[ 1724.571438]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1724.572622]  ? perf_event_task_disable+0x390/0x390
[ 1724.573732]  ? lock_downgrade+0x6d0/0x6d0
19:25:57 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000001000000000000000e50138f88a2e9ce0be8627e2ec9d24d6d59edc783ade5e9b7717dfc86ebaec9990d3918153eb05a9f2200ab8e8b246d562bf742a559c6f0b9b9e5a567a56cb540d58c7473ef7a5ff457829fe5069"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x43)

[ 1724.574672]  ? hrtimer_start_range_ns+0x336/0xae0
[ 1724.576006]  ? lock_acquire+0x197/0x470
[ 1724.576916]  ? find_held_lock+0x2c/0x110
[ 1724.577857]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1724.579045]  ? sock_has_perm+0x1ea/0x280
[ 1724.579983]  ? __import_iovec+0x458/0x590
[ 1724.580933]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1724.582125]  inet6_sendmsg+0x105/0x140
[ 1724.583005]  ? inet6_compat_ioctl+0x320/0x320
[ 1724.584028]  __sock_sendmsg+0xf2/0x190
[ 1724.584918]  ____sys_sendmsg+0x334/0x870
[ 1724.585845]  ? sock_write_iter+0x3d0/0x3d0
[ 1724.586796]  ? do_recvmmsg+0x6d0/0x6d0
[ 1724.587686]  ? __lock_acquire+0x1657/0x5b00
[ 1724.588675]  ___sys_sendmsg+0xf3/0x170
[ 1724.589565]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1724.590604]  ? _raw_spin_unlock_irq+0x1f/0x30
19:25:57 executing program 2:
write(0xffffffffffffffff, &(0x7f0000000140)="702172509653f0802f49be8478fa0c202830cae41519c98d63188ab5e2cc9f015fdc7602671076d07804bad7b9e5519eba47ca68c76a5cfb9110da43d7d9695faaff3e91eeb530a7b95af2c57673e3d15d059d116573960a59a4388953241798ee0a096fd2c17694842b042c27a7", 0x6e)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'})
syz_mount_image$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x1000000000, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02000000010000001900c2b7000000000000000010000000000000002000000000000000"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

[ 1724.591625]  ? _raw_spin_unlock_irq+0x27/0x30
[ 1724.592849]  ? lock_acquire+0x197/0x470
[ 1724.593741]  ? find_held_lock+0x2c/0x110
[ 1724.594658]  ? __might_fault+0xd3/0x180
[ 1724.595569]  ? lock_downgrade+0x6d0/0x6d0
[ 1724.596550]  ? io_schedule_timeout+0x140/0x140
[ 1724.597603]  __sys_sendmmsg+0x195/0x470
[ 1724.598841]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1724.599986]  ? lock_downgrade+0x6d0/0x6d0
[ 1724.601187]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1724.602526]  ? wait_for_completion_io+0x270/0x270
[ 1724.603842]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1724.605083]  ? vfs_write+0x354/0xb10
[ 1724.606127]  ? fput_many+0x2f/0x1a0
[ 1724.607143]  ? ksys_write+0x1a9/0x260
[ 1724.608299]  ? __ia32_sys_read+0xb0/0xb0
[ 1724.609376]  __x64_sys_sendmmsg+0x99/0x100
[ 1724.610483]  do_syscall_64+0x33/0x40
[ 1724.611313]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1724.612699] RIP: 0033:0x7f09c4bc0b19
[ 1724.613688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1724.618552] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1724.620465] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1724.622256] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1724.624218] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1724.625999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1724.627775] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:25:57 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:25:57 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0x9, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:25:57 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0) (fail_nth: 1)

[ 1724.730679] FAULT_INJECTION: forcing a failure.
[ 1724.730679] name failslab, interval 1, probability 0, space 0, times 0
[ 1724.732398] CPU: 1 PID: 10049 Comm: syz-executor.3 Not tainted 5.10.223 #1
[ 1724.733979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1724.735460] Call Trace:
[ 1724.735950]  dump_stack+0x107/0x167
[ 1724.736712]  should_fail.cold+0x5/0xa
[ 1724.737401]  ? __alloc_skb+0x6d/0x5b0
[ 1724.738089]  should_failslab+0x5/0x20
[ 1724.738773]  kmem_cache_alloc_node+0x55/0x330
[ 1724.739587]  __alloc_skb+0x6d/0x5b0
[ 1724.740252]  inet_netconf_notify_devconf+0xdd/0x250
[ 1724.741154]  inetdev_event+0x1035/0x1610
[ 1724.741889]  ? devinet_init_net+0x650/0x650
[ 1724.742670]  ? nh_netdev_event+0x8c/0x370
[ 1724.743406]  ? __sanitizer_cov_trace_switch+0x45/0x80
[ 1724.744326]  raw_notifier_call_chain+0xb3/0x110
[ 1724.744792]  call_netdevice_notifiers_info+0xb5/0x130
[ 1724.745297]  unregister_netdevice_many+0x852/0x1490
[ 1724.745758]  ? netdev_pick_tx+0xc70/0xc70
[ 1724.746181]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1724.746653]  ? queue_delayed_work_on+0xb4/0xe0
[ 1724.747076]  ? trace_hardirqs_on+0x5b/0x180
[ 1724.747479]  unregister_netdevice_queue+0x201/0x2c0
[ 1724.747921]  ? unregister_netdevice_many+0x1490/0x1490
[ 1724.748398]  ? linkwatch_fire_event+0x63/0x190
[ 1724.749405]  __tun_detach+0xfc1/0x12b0
[ 1724.749757]  tun_chr_close+0xc4/0x250
[ 1724.750089]  __fput+0x285/0x9f0
[ 1724.750375]  ? __tun_detach+0x12b0/0x12b0
[ 1724.750738]  task_work_run+0xe2/0x1a0
[ 1724.751073]  exit_to_user_mode_prepare+0x186/0x190
[ 1724.751532]  syscall_exit_to_user_mode+0x38/0x1d0
[ 1724.751946]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1724.752393] RIP: 0033:0x7f047e003b19
[ 1724.752735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1724.754378] RSP: 002b:00007f047b579188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 1724.755030] RAX: 0000000000000003 RBX: 00007f047e116f60 RCX: 00007f047e003b19
[ 1724.755636] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005
[ 1724.756243] RBP: 00007f047b5791d0 R08: 0000000000000000 R09: 0000000000000000
[ 1724.756865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1724.757470] R13: 00007ffc33053dff R14: 00007f047b579300 R15: 0000000000022000
19:25:57 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file2\x00', 0x2, 0x26, 0x0, 0x40, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:25:57 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0xc000000000000000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000180)="0a477ef6aae3a5e27412458f45b983a7943080d7205d82b75594fa1d75bdc8c23411f46904bd91bc18a9a00d642efe77cb22045c44a49f7dfb48b1196187504461aa5c5d", 0x44}, {&(0x7f0000000200)="3dfaca3321abed6484", 0x9, 0x5}], 0x22050, &(0x7f0000000340)=ANY=[@ANYBLOB="6e725f696e6f6465733d3339706d6d6b2c687567653d616c776179732c6d61736b3d5e4d41595f455845432c726f6f74636f6e746578743d75eabbed358aa1fb7c22d6d7546e636f6e66696e65645f752c61707072616973655f747970653d696d617369672c00"])

[ 1724.829729] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1724.845256] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:26:12 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@private2}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8)
mount$cgroup2(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x110000, &(0x7f0000000300)={[{@memory_recursiveprot}, {@memory_localevents}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@appraise}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@uid_lt}, {@euid_lt={'euid<', r0}}]})
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:26:12 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x600000, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x1, 0xa, &(0x7f0000001780)=[{&(0x7f0000000180)="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", 0xfb, 0x2}, {&(0x7f00000002c0)="22f6ec7a7e6c4a56fa97782e5f74d40b1b8ec679af3edd22ecd590d8a62d1c4e0ee56879d6d1a478f7afcb8c698ddc6a297c3a7c77bd1d682170ee8c5f0ed6d5a9aed10be48eb1bc547c2dc1b6714fa1a2710e47547d95ff7b15fd811cca2c09", 0x60, 0xac4e}, {&(0x7f0000000340)="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", 0x1000, 0x4}, {&(0x7f0000001340)="9db05e7d6afaee020c234d7461bb9253c1b3a1717cafd8ab942265f1f4064c4934f702d0507ce6743ff62fc030e392c8fec3", 0x32, 0x1401c000000000}, {&(0x7f0000001380)="56e2b4a4937ed1e754d47c908e3132a9b610a8973254257bdf400847bdcfded746d4c73640b7b400d9cb56f825d438666824051e7e3aa28ca0ac2201d0d0ed75cd29a2e75ff63d473dcd9054ada133e8f452b0c27ca0505ce87d24e0649316cc620f9894da70b52a3e8ff82b22418242cd189e588feed87b2df4cdd0cee76adc7befd049b5331fc8f7a2bff658c3488beae0226d7990210167e0c314704719d29a14525209a21e941cd896ad3793b90d868fc662121e173568d9f34b259e6a14", 0xc0, 0x5}, {&(0x7f0000001440)="f4bb9cfd6ee4e3606528a6af5fc15c86f858b76a4dd6c51e482405d1d6aaa9da597b965ac8307369a10d1152674db2698b6634759fcdeddaf7b12f68a9c57edf07bd4d32d93a5562f79836eada19", 0x4e, 0x14f5}, {&(0x7f00000014c0)="b164f150195d415efd657aee658aa4", 0xf}, {&(0x7f0000001500)="6969578da4ca5f8a383c9714695b398ccf96b85a33d38043c2dddf58b1664899162ebd4ab2331e56dc9d8d8072cab1fd89e6ebdb9031d775c76162e112a3bdf432fca48d7407c2b7ecb8a765f127a6f2f489b27d4603923f86f818e17aabdbe2c2822e5211dcc11d095eac2fac71fc19718f2700e297e3fd18beb67938b5b162bd53a437840ec676ffde41b5e162f2649fd013f55bf69a7fbee4e82df608316b7e1bd60c4c1b51b5ecc6fb417d3b243da812d5a9a54ec75ce20743c5790c181d8ad8", 0xc2, 0xa}, {&(0x7f0000001600)="7010a5cc5586951dfcf739b45a9cd4f8bbfd930baba229dbe72863afb0b994944895684514c7fb82185db4922ec1f5d0640662ccc935ecf320ca6ce36bd7ee4b2f9697d7e7a8dea84dbc65fb421c003a5b13bdde0c6401dafe301ad02a0319c093fd45e51a816a0239da406550ff93ad3518a51ed7796926f4224e01b54d0e362917535a72f40cc7fa8599dcfa1d55dcad836f62497f9535d47f17d380b55322bbc8d9a11929004fbea6bf7df406fdb05cf228114c75590d4ce0472afac97ace4f0d1225678dfbe39d62a65048b8ccf7df0e7050cbdfccc5e1c62add045b39d3b976ac3c503375bd9502a5de9940", 0xee, 0x1}, {&(0x7f0000001700)="3f10f399be1696e12e7d1b951883af36b1a6b0efaccd101d755cd2b5d323c3e48bee6e10481dd71e6e2c7af7dc806b5a9f5ec5d9560d471015e13b43a857c4cb0c20b3ed66", 0x45, 0x4}], 0x2804420, &(0x7f0000001880)={[{@norecovery}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}, {@jqfmt_vfsv0}, {@nodelalloc}], [{@seclabel}, {@obj_role={'obj_role', 0x3d, 'system.posix_acl_default\x00'}}, {@hash}, {@pcr={'pcr', 0x3d, 0x21}}, {@dont_appraise}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_user}]})
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:26:12 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0x9, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:26:12 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:26:12 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 79)

19:26:12 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="00000100b24866c08895580ff7d5cb9c496b21000100000000000000040000000000000010000000000000002000000000000000"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:26:12 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0) (fail_nth: 2)

19:26:12 executing program 6:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
stat(0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(r2, 0x0, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000)
syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x80000001)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000580)={0x30201, 0x20, 0x2}, &(0x7f00000005c0)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r4}}, 0xff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r4}}, 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0)
r6 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
execveat(r6, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=[&(0x7f0000000140)=']\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)='secu\xaf\xf7AHn\xc5/\xab;lity\x00', &(0x7f0000000500)='%-\x00'], &(0x7f0000000440)=[&(0x7f00000003c0)='\x00', &(0x7f0000000400)=']$-\x00'], 0x1000)
ftruncate(r5, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000))
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@empty}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8)
fsetxattr$security_capability(r5, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0)
write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef)
readlinkat(r5, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/2, 0x2)

[ 1739.054732] FAULT_INJECTION: forcing a failure.
[ 1739.054732] name failslab, interval 1, probability 0, space 0, times 0
[ 1739.056137] CPU: 1 PID: 10080 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1739.056783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1739.057528] Call Trace:
[ 1739.057777]  dump_stack+0x107/0x167
[ 1739.058115]  should_fail.cold+0x5/0xa
[ 1739.058475]  should_failslab+0x5/0x20
[ 1739.058825]  __kmalloc_node_track_caller+0x74/0x3b0
[ 1739.059280]  ? alloc_skb_with_frags+0x92/0x570
[ 1739.059701]  __alloc_skb+0xb1/0x5b0
[ 1739.060041]  alloc_skb_with_frags+0x92/0x570
[ 1739.060442]  ? find_held_lock+0x2c/0x110
[ 1739.060922]  sock_alloc_send_pskb+0x7af/0x930
[ 1739.061388]  ? sk_alloc+0x350/0x350
[ 1739.061727]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1739.062250]  ? SOFTIRQ_verbose+0x10/0x10
[ 1739.062618]  ? lock_chain_count+0x20/0x20
[ 1739.063057]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1739.063523]  ? ip6_mtu+0x1bb/0x3d0
[ 1739.063846]  ? lock_downgrade+0x6d0/0x6d0
[ 1739.064296]  ? ip_frag_init+0x350/0x350
[ 1739.064688]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1739.065161]  ? ip6_mtu+0x1e9/0x3d0
[ 1739.065489]  ? ip6_setup_cork+0xfb7/0x1740
[ 1739.065873]  ip6_make_skb+0x2de/0x4e0
[ 1739.066265]  ? ip_frag_init+0x350/0x350
[ 1739.066628]  ? ip_frag_init+0x350/0x350
[ 1739.067037]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1739.067474]  ? ip6_dst_hoplimit+0x199/0x440
[ 1739.067860]  ? lock_downgrade+0x6d0/0x6d0
[ 1739.068325]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1739.068721]  ? ip_frag_init+0x350/0x350
[ 1739.069142]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1739.069616]  ? perf_event_task_disable+0x390/0x390
[ 1739.070106]  ? lock_downgrade+0x6d0/0x6d0
[ 1739.070489]  ? hrtimer_start_range_ns+0x336/0xae0
[ 1739.070927]  ? lock_acquire+0x197/0x470
[ 1739.071343]  ? find_held_lock+0x2c/0x110
[ 1739.071724]  ? sock_has_perm+0x1ea/0x280
[ 1739.072166]  ? __import_iovec+0x458/0x590
[ 1739.072562]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1739.073110]  inet6_sendmsg+0x105/0x140
[ 1739.073470]  ? inet6_compat_ioctl+0x320/0x320
[ 1739.073872]  __sock_sendmsg+0xf2/0x190
[ 1739.074278]  ____sys_sendmsg+0x334/0x870
[ 1739.074652]  ? sock_write_iter+0x3d0/0x3d0
[ 1739.075083]  ? do_recvmmsg+0x6d0/0x6d0
[ 1739.075443]  ? __lock_acquire+0x1657/0x5b00
[ 1739.075847]  ___sys_sendmsg+0xf3/0x170
[ 1739.076251]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1739.076689]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1739.077172]  ? _raw_spin_unlock_irq+0x27/0x30
[ 1739.077589]  ? lock_acquire+0x197/0x470
[ 1739.077989]  ? find_held_lock+0x2c/0x110
[ 1739.078373]  ? __might_fault+0xd3/0x180
[ 1739.078733]  ? lock_downgrade+0x6d0/0x6d0
[ 1739.079155]  ? io_schedule_timeout+0x140/0x140
[ 1739.079582]  __sys_sendmmsg+0x195/0x470
[ 1739.079987]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1739.080385]  ? lock_downgrade+0x6d0/0x6d0
[ 1739.080803]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1739.081320]  ? wait_for_completion_io+0x270/0x270
[ 1739.081760]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1739.082227]  ? vfs_write+0x354/0xb10
[ 1739.082568]  ? fput_many+0x2f/0x1a0
[ 1739.082900]  ? ksys_write+0x1a9/0x260
[ 1739.083296]  ? __ia32_sys_read+0xb0/0xb0
[ 1739.083670]  __x64_sys_sendmmsg+0x99/0x100
[ 1739.084101]  do_syscall_64+0x33/0x40
[ 1739.084441]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1739.084921] RIP: 0033:0x7f09c4bc0b19
[ 1739.085361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1739.087138] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1739.087826] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1739.088578] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1739.089330] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1739.090049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1739.090728] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:26:12 executing program 2:
setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040), 0x4)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

[ 1739.131885] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:26:12 executing program 1:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
openat(r1, &(0x7f00000001c0)='./file0\x00', 0x2c6000, 0x20)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000004506286500000000000010004000000000002000000000000000"], 0x24, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(r2, &(0x7f0000000040)='./file0\x00', 0x121000, 0x1)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
getdents64(r3, &(0x7f0000000140)=""/85, 0x55)
dup2(0xffffffffffffffff, r0)

[ 1739.147356] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:26:12 executing program 0:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {}, [], {}, [], {0x10, 0x1}}, 0x24, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'})
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

[ 1739.185813] FAULT_INJECTION: forcing a failure.
[ 1739.185813] name failslab, interval 1, probability 0, space 0, times 0
[ 1739.187213] CPU: 0 PID: 10093 Comm: syz-executor.3 Not tainted 5.10.223 #1
[ 1739.187797] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1739.188492] Call Trace:
[ 1739.188747]  dump_stack+0x107/0x167
[ 1739.189061]  should_fail.cold+0x5/0xa
[ 1739.189389]  ? create_object.isra.0+0x3a/0xa20
[ 1739.189781]  should_failslab+0x5/0x20
[ 1739.190108]  kmem_cache_alloc+0x5b/0x310
[ 1739.190457]  create_object.isra.0+0x3a/0xa20
[ 1739.190831]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1739.191265]  kmem_cache_alloc_node+0x169/0x330
[ 1739.191658]  __alloc_skb+0x6d/0x5b0
[ 1739.191976]  inet_netconf_notify_devconf+0xdd/0x250
[ 1739.192402]  inetdev_event+0x1035/0x1610
[ 1739.192773]  ? devinet_init_net+0x650/0x650
[ 1739.193146]  ? nh_netdev_event+0x8c/0x370
[ 1739.193499]  ? __sanitizer_cov_trace_switch+0x45/0x80
[ 1739.193939]  raw_notifier_call_chain+0xb3/0x110
[ 1739.194339]  call_netdevice_notifiers_info+0xb5/0x130
[ 1739.194773]  unregister_netdevice_many+0x852/0x1490
[ 1739.195200]  ? netdev_pick_tx+0xc70/0xc70
[ 1739.195558]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1739.196000]  ? queue_delayed_work_on+0xb4/0xe0
[ 1739.196390]  ? trace_hardirqs_on+0x5b/0x180
[ 1739.196782]  unregister_netdevice_queue+0x201/0x2c0
[ 1739.197206]  ? unregister_netdevice_many+0x1490/0x1490
[ 1739.197657]  ? linkwatch_fire_event+0x63/0x190
[ 1739.198055]  __tun_detach+0xfc1/0x12b0
[ 1739.198398]  tun_chr_close+0xc4/0x250
[ 1739.198725]  __fput+0x285/0x9f0
[ 1739.199011]  ? __tun_detach+0x12b0/0x12b0
[ 1739.199371]  task_work_run+0xe2/0x1a0
[ 1739.199704]  exit_to_user_mode_prepare+0x186/0x190
[ 1739.200125]  syscall_exit_to_user_mode+0x38/0x1d0
[ 1739.200544]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1739.200988] RIP: 0033:0x7f047e003b19
[ 1739.201309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1739.202854] RSP: 002b:00007f047b579188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 1739.203503] RAX: 0000000000000003 RBX: 00007f047e116f60 RCX: 00007f047e003b19
[ 1739.204108] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005
[ 1739.204723] RBP: 00007f047b5791d0 R08: 0000000000000000 R09: 0000000000000000
[ 1739.205328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1739.205933] R13: 00007ffc33053dff R14: 00007f047b579300 R15: 0000000000022000
19:26:12 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0x9, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:26:12 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:26:12 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x48c801, 0x34}, 0x18)

19:26:12 executing program 6:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000600)=@file={0x0, './file0/file0\x00'}, 0x6e)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x0, 0x0, {0xd}}, 0x14}}, 0x0)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000600))
capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0x4, 0xcba, 0x6, 0x3, 0x3ff, 0x5})
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000020000004836000000000000000000000000000000f900cbc1936a440b0c050000a70000"], 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000240)=0x1)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000001c0))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
read(r1, &(0x7f0000000080)=""/65, 0x41)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x3022404, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cachetag=./-#},access=client,cache=fscache,audit,obj_type=\')],subj_user=\x00,smackfshat=,rootcontext=user_u,dont_hash,dont_y:praise,\x00'])
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="7472616e733d26642c6a9e0c8fd582a5cdce0c177266646e6f3d647d7fff86a517ace6304c8402c6fbf178c8183c22bd92d4e8c440c3fec809edd37d0cc2df4e1ddc3ff7b6784b80fa9b3954254708d4539e3d87e2f31bb1809e028a91fb7a59d0d0ee51a12af38b282a0320f2139f3381bc04c064dcf74e8514a9200af9176ffbd2f1b82902c5793ae2360e795730139fde0d6eac764bf5bdac0875d074e60b1707e1c46fc323a7777f4244d67df82dbbe5dab157ea4cf85c700c17bbb31df3438b000000000000", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c63616368653d6d6d61702c63616368653d6c6f6f73652c66736e616d653d63616368653d6d6d61702c6673636f6e746578743d73797361646d5f752c6f626a5f726f6c653dee3b6f626a5f747970653d63616368653d6c6f6f73652c00"])
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)

[ 1739.293549] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1739.299656] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:26:12 executing program 1:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r1=>r0, {<r2=>0xffffffffffffffff, <r3=>0xee01}}, './file1\x00'})
stat(&(0x7f0000000280)='./file1\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {<r6=>r4, r3}}, './file0\x00'})
r7 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r7, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x101, 0x0)
r9 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r9, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_generic(r5, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000580)={0x2fc, 0x37, 0x400, 0x70bd2c, 0x25dfdbfc, {0x18}, [@typed={0x8, 0x2f, 0x0, 0x0, @fd=r7}, @generic="16e76614f5dee2311c9b5cf6378f56354eb515ea886db6462a105549a888610cf48774b12bd44ef0df4b9eb7461ea008391eb0828db14610ffdd9b1d89971b76c98e60e44e2cd6c8a8e0374f969f9b5c4ddea2e42446054315846e1721775c0c67d10fb84f8e03b48529cee99b3147", @typed={0x8, 0x94, 0x0, 0x0, @fd=r8}, @nested={0x12c, 0xe, 0x0, 0x1, [@typed={0x8, 0x82, 0x0, 0x0, @fd=r9}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x8f, 0x0, 0x0, @u32}, @generic="cbe713ffd7768a99af7f99f69fc4361af40d74038fcd92b9c73359a1", @typed={0x8, 0x7c, 0x0, 0x0, @u32=0x7fffffff}, @generic="0105326ee0b6f83b477ce6844a0a30efb12cf0704662def21f1de5f57cbe712dbf14159994b8e6e386b025128b98612d690e8f0fb581619132ccc25132e6a88836ef91734374c607b9d676dfb30136dc87fe5e43bd5de95f0e0a37007752ec06f24cd6f547c3489e7714d91c0f7f3a384656ca70e8d582d22bb956627b440d340a4f3edd30b136ebf9e6fb62e3eb34b5996ca41a0aa3c71b08fc379f2bd71f2d0b075463aa53ca3c017dd64bfb81d42443cdd76dbe09052a25d3ca2922aa9bab264e130f798c4109553fa265c6e0322383feb98879167d3eea6bfbf8", @typed={0x4, 0x57}]}, @nested={0x139, 0x46, 0x0, 0x1, [@generic="5acb962818014db4f67400132e01d3d6abccc2b4a45cb8ff6df660cec1be1a77bd275db5ecfcfc8110d93b985ead9b362a196a47d6db76dcac4ed3cff0883febd2321770cbe76702b934861675876440653e013f46261fc58bd07c06fb67bb8ac3974991da0324953f415a1fda7ba1dff766ecc3f7b85d4ef20bacb05a63c0dd079c8978b449cf3813612839daf108436cdb78006634e0d0f0be056fc62698c70982262dd77d8b1ac1a05f6afe44100ae4e70c56c07c81d2e3a0ee41818f7bf3", @typed={0xc, 0x78, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x37, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="0c3ca8ae0a519b09d037bf4238ed11d91d5a0b10de95cb4f268fd80357e8b0a122023ec986cb5f53b69312e1463b78a554baa02c4d1eafc69cdea0e0a2e8d4416618538c1efa6069b7746c19c86923d912", @typed={0x8, 0x6b, 0x0, 0x0, @u32=0xffff}, @typed={0x7, 0x58, 0x0, 0x0, @str='*^\x00'}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
stat(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
setresuid(0xffffffffffffffff, r10, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480))
stat(&(0x7f0000000900)='./file1/../file0\x00', &(0x7f0000000940))
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x4, r4}, {0x2, 0x1, r4}, {0x2, 0x5, r2}, {0x2, 0x2, r6}, {0x2, 0x1, r6}]}, 0x54, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
llistxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)=""/245, 0xf5)

19:26:12 executing program 0:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0x80, &(0x7f0000000140)=0x4)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410803, 0x0)

19:26:12 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0) (fail_nth: 3)

[ 1739.328818] 9pnet: Could not find request transport: &d
[ 1739.350911] 9pnet: Could not find request transport: &d
19:26:12 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1739.409886] FAULT_INJECTION: forcing a failure.
[ 1739.409886] name failslab, interval 1, probability 0, space 0, times 0
[ 1739.411186] CPU: 0 PID: 10132 Comm: syz-executor.3 Not tainted 5.10.223 #1
[ 1739.411780] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1739.412486] Call Trace:
[ 1739.412749]  dump_stack+0x107/0x167
[ 1739.413073]  should_fail.cold+0x5/0xa
[ 1739.413418]  should_failslab+0x5/0x20
[ 1739.413763]  __kmalloc_node_track_caller+0x74/0x3b0
[ 1739.414208]  ? inet_netconf_notify_devconf+0xdd/0x250
[ 1739.414676]  __alloc_skb+0xb1/0x5b0
[ 1739.415018]  inet_netconf_notify_devconf+0xdd/0x250
[ 1739.415466]  inetdev_event+0x1035/0x1610
[ 1739.415831]  ? devinet_init_net+0x650/0x650
[ 1739.416208]  ? netdev_notify+0x1c/0x170
[ 1739.416564]  ? netdev_notify+0xec/0x170
[ 1739.416920]  ? __sanitizer_cov_trace_pc+0x14/0x60
[ 1739.417336]  ? __sanitizer_cov_trace_switch+0x45/0x80
[ 1739.417786]  raw_notifier_call_chain+0xb3/0x110
[ 1739.418195]  call_netdevice_notifiers_info+0xb5/0x130
[ 1739.418642]  unregister_netdevice_many+0x852/0x1490
[ 1739.419074]  ? netdev_pick_tx+0xc70/0xc70
[ 1739.419438]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1739.419887]  ? queue_delayed_work_on+0xb4/0xe0
[ 1739.420277]  ? trace_hardirqs_on+0x5b/0x180
[ 1739.420668]  unregister_netdevice_queue+0x201/0x2c0
[ 1739.421092]  ? unregister_netdevice_many+0x1490/0x1490
[ 1739.421542]  ? linkwatch_fire_event+0x63/0x190
[ 1739.421937]  __tun_detach+0xfc1/0x12b0
[ 1739.422280]  tun_chr_close+0xc4/0x250
[ 1739.422607]  __fput+0x285/0x9f0
[ 1739.422891]  ? __tun_detach+0x12b0/0x12b0
[ 1739.423251]  task_work_run+0xe2/0x1a0
[ 1739.423583]  exit_to_user_mode_prepare+0x186/0x190
[ 1739.424003]  syscall_exit_to_user_mode+0x38/0x1d0
[ 1739.424413]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1739.424862] RIP: 0033:0x7f047e003b19
[ 1739.425185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1739.426739] RSP: 002b:00007f047b579188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 1739.427389] RAX: 0000000000000003 RBX: 00007f047e116f60 RCX: 00007f047e003b19
[ 1739.427992] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005
[ 1739.428611] RBP: 00007f047b5791d0 R08: 0000000000000000 R09: 0000000000000000
[ 1739.429219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1739.429827] R13: 00007ffc33053dff R14: 00007f047b579300 R15: 0000000000022000
19:26:12 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {0x0}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[ 1739.551340] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1739.559115] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[ 1754.127185] FAULT_INJECTION: forcing a failure.
[ 1754.127185] name failslab, interval 1, probability 0, space 0, times 0
[ 1754.128224] CPU: 1 PID: 10160 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1754.128819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1754.129522] Call Trace:
[ 1754.129755]  dump_stack+0x107/0x167
[ 1754.130069]  should_fail.cold+0x5/0xa
[ 1754.130402]  should_failslab+0x5/0x20
[ 1754.130733]  __kmalloc_node_track_caller+0x74/0x3b0
[ 1754.131158]  ? alloc_skb_with_frags+0x92/0x570
[ 1754.131556]  __alloc_skb+0xb1/0x5b0
[ 1754.131876]  alloc_skb_with_frags+0x92/0x570
[ 1754.132252]  ? find_held_lock+0x2c/0x110
19:26:27 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 80)

19:26:27 executing program 6:
syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0, 0x801010, &(0x7f0000000080)=ANY=[@ANYBLOB="6d706f6c3d62696e643d726503006976653a590647221ea1f65861cdd7463b94b8405feb79815c"])
mkdir(&(0x7f0000000200)='./file0\x00', 0x9)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0xffffffffffffffff, r0, 0x0)
mount$9p_xen(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x12000a0, &(0x7f0000000180)={'trans=xen,', {[{@version_L}, {@posixacl}], [{@obj_role={'obj_role', 0x3d, '-$'}}, {@uid_eq={'uid', 0x3d, r0}}, {@audit}]}})

19:26:27 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {0x0}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:26:27 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02003b833b0f2e2daae70fbc16bf81324900000140000000190000040000000000001010"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:26:27 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0220000001000000000000000400006b173c107dd060cb000000009c0d2cdfd99ef500002000000000000000"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:26:27 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0) (fail_nth: 4)

19:26:27 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1754.132603]  sock_alloc_send_pskb+0x7af/0x930
[ 1754.133010]  ? sk_alloc+0x350/0x350
[ 1754.133329]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1754.133773]  ? SOFTIRQ_verbose+0x10/0x10
[ 1754.134119]  ? lock_chain_count+0x20/0x20
[ 1754.134487]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1754.141061]  ? ip6_mtu+0x1bb/0x3d0
[ 1754.141363]  ? lock_downgrade+0x6d0/0x6d0
[ 1754.141711]  ? ip_frag_init+0x350/0x350
[ 1754.142054]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1754.142449]  ? ip6_mtu+0x1e9/0x3d0
[ 1754.142751]  ? ip6_setup_cork+0xfb7/0x1740
[ 1754.143109]  ip6_make_skb+0x2de/0x4e0
[ 1754.143429]  ? ip_frag_init+0x350/0x350
[ 1754.143768]  ? ip_frag_init+0x350/0x350
[ 1754.144104]  ? ip6_push_pending_frames+0xf0/0xf0
19:26:27 executing program 2:
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x3a4, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKMODES_OURS={0x350, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0xd1, 0x5, "5dfd78bf11b09c4f0bd42ae5db35637a74a4a9b433e9e1f44a7217b2e829acaaedbb324f5d80cc6b27548195dfabf73cc7bc2614184a3be40391946862f9aa4bcb6b385d5beffc7aee474f02346d26a582879813ed5b7f89b700d4d0acef0c825e892eb89ea6a53694dc7ff34c187add9c000c4ba87df4599000023e1cf9b728b669365628054ec40b30b2c971a1e8d07b2eaf021f4bfedb070f52dec58cdddc158288f39efda9af3ffc8aba92c72dc4a9933803cef535f09b6bb192bd658aad6089e58bb9d31e90bcd8830a9e"}, @ETHTOOL_A_BITSET_BITS={0x140, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '}##%(+/*(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1d, 0x2, 'system.posix_acl_default\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.)@\'\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1d, 0x2, 'system.posix_acl_default\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1d, 0x2, 'system.posix_acl_default\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$}})\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x1d, 0x2, 'system.posix_acl_default\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{#%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1d, 0x2, 'system.posix_acl_default\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x42, 0x5, "574d8a7ebe0718db20e0e1e6fd7449ef63cbd272876405c29fc819727955ea2d3914b3fd4f77f2f1a2f9a84084358d72aa397a748cf9dfb59de0904e8303"}, @ETHTOOL_A_BITSET_MASK={0xea, 0x5, "7348d0fcfe18a1b9d56902e58e811d3eb3ca4e4571e8f53ffd30949c11f82eb65b11fecd674e1a31e50976073312202d1b5d1287f4cf1c0784eefb9d8f7c48a1f6ba1116090921a7598641815e2d60edccf5e5d676d4ca56931074c5d54ad7844a407c97dd2b0f9398b612507ee1e3839abd0ae1389f55d173e6207c225e762d31cd2d6e8c7792adc7c9c1c1449b2c68796cba774e4032a82bb7cc7b6ed14764f588057820af2c86b229f4ac16bb985cf78acb930c47ef6cde6d3807cff8e8edf413ba226ae062e69849459b4a87ff53ef5fefe9564e8fe305497225f6731eb0371441e1d722"}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x8}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x8}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x8d4}, 0x4000000)
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={<r1=>r0, 0x8, 0x8000, 0x80000001})
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', <r4=>0x0})
bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14)
[ 1754.144507]  ? ip6_dst_hoplimit+0x199/0x440
[ 1754.148893]  ? lock_downgrade+0x6d0/0x6d0
[ 1754.149256]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1754.149603]  ? ip_frag_init+0x350/0x350
[ 1754.149944]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1754.150383]  ? perf_event_task_disable+0x390/0x390
[ 1754.150799]  ? lock_downgrade+0x6d0/0x6d0
[ 1754.151155]  ? lock_acquire+0x197/0x470
[ 1754.151489]  ? find_held_lock+0x2c/0x110
[ 1754.151839]  ? lock_is_held_type+0xd2/0x110
[ 1754.152202]  ? sock_has_perm+0x1ea/0x280
[ 1754.152562]  ? __import_iovec+0x458/0x590
[ 1754.164932]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1754.165371]  inet6_sendmsg+0x105/0x140
[ 1754.165702]  ? inet6_compat_ioctl+0x320/0x320
[ 1754.166081]  __sock_sendmsg+0xf2/0x190
[ 1754.166412]  ____sys_sendmsg+0x334/0x870
[ 1754.166758]  ? sock_write_iter+0x3d0/0x3d0
[ 1754.167114]  ? do_recvmmsg+0x6d0/0x6d0
[ 1754.167445]  ? __lock_acquire+0x1657/0x5b00
[ 1754.173011]  ___sys_sendmsg+0xf3/0x170
[ 1754.173343]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1754.173728]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1754.174166]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1754.174541]  ? trace_hardirqs_on+0x5b/0x180
[ 1754.174908]  ? lock_acquire+0x197/0x470
[ 1754.175242]  ? find_held_lock+0x2c/0x110
[ 1754.175588]  ? __might_fault+0xd3/0x180
[ 1754.175924]  ? lock_downgrade+0x6d0/0x6d0
[ 1754.176275]  ? io_schedule_timeout+0x140/0x140
[ 1754.176669]  __sys_sendmmsg+0x195/0x470
[ 1754.177031]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1754.177395]  ? lock_downgrade+0x6d0/0x6d0
[ 1754.177756]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1754.178167]  ? wait_for_completion_io+0x270/0x270
[ 1754.178578]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1754.178968]  ? vfs_write+0x354/0xb10
[ 1754.179284]  ? fput_many+0x2f/0x1a0
[ 1754.179593]  ? ksys_write+0x1a9/0x260
[ 1754.179914]  ? __ia32_sys_read+0xb0/0xb0
[ 1754.180263]  __x64_sys_sendmmsg+0x99/0x100
[ 1754.180619]  do_syscall_64+0x33/0x40
[ 1754.187883]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1754.188317] RIP: 0033:0x7f09c4bc0b19
[ 1754.188635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1754.190810] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1754.191452] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1754.192047] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
sendmmsg$inet6(r1, &(0x7f00000069c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="dbc8e0f716701f6cbc96bdfcf04005c4e19a70f081587f4553160c0a405b5baae85f690b6a2b19b7", 0x28}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="212f4bb26d9eec6ad044f41c0a45662b5b8b897c0db36437ecc5b0271f4a0c6cc1817fa8e7925cfd74144995c2dc7b8adb94ee9c56cbd23ae4c67ff061eeda3a1c9423fc5acb1ee86637c9d0441c2635f46cd0347ba4ddff9242f54256", 0x5d}], 0x3}}, {{&(0x7f0000001700)={0xa, 0x4e22, 0x3, @loopback, 0x7}, 0x1c, &(0x7f0000001a40)=[{&(0x7f0000001740)="2e4d7f6c98e78ca35f7d2bec8802686c10fa86752889dc07587b4243bfc0fecc802e96170c07e15e5591caa4577f0444b324bc50ca5ca12a30162374853a9cc873ca9003c4d3e692f78407ff0612cc36ce2e8429e213e0d0c56c529696c62c96989d8c4fb63319ab08e7e44c4f6c91a9f0d6d2a6eca9cb78abb4058e27434d2952b03f1c542356e701120a7482caabe40977ac22edd08f2a3e2c6aefbd3dae6c5053425a5baf554469f3d83bda857a90a4570eba822751e84594d502a46395f4fab262f5b173263665404e22956771351c8a0054126f77cc7210815c0c", 0xdd}, {&(0x7f0000001840)="a06b74c9e1762a145b9cdfc15476a4db36132971794967c7637798602d0cadd4a46900b8121fbdc107272de10074bfebd966119d3381353d2830df04b38a16e06631d2e26742e2683550db7cd9d0d287b4f4299b06ebf4409b78a9f89beef08df7d31e832f9ac7bc26f91d69fd01abeec84b2762213360b3cb84f869aae3af629423c5b966b134140412e64d1a5fec", 0x8f}, {&(0x7f0000001900)="3bebe42ddda3c31ecd83cb64bf4f23f13b69d23491dbdef1cc733490a203efd1660e57649ef5b41a4469d0d0aaadf2ed6e2086a63acf1d74227582a6fa963c9eb5893b51f845a7844cc2a8d18b157eb85bfa887e813dedd04bec6a04a81b2dfd3bc52f119553841d71e27404ee3aafccc231ff15428929943fcc0e7a6078f971af68e6ecbb9140b728693d622a081223d9d9999893733324f81809149f09d2187d494ed5fb394ce2bb1c7d57409226bd2d908d956f0f7745c502010d5535c9cc689bb3ac5f099d29bcabb05474b08747361f", 0xd2}, {&(0x7f0000001a00)="398faf3d6025ab243164d4bb3fcc96404bc19f951611cedfda", 0x19}], 0x4, &(0x7f0000001a80)=[@tclass={{0x14, 0x29, 0x43, 0x1000}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @rthdr={{0x58, 0x29, 0x39, {0x0, 0x8, 0x2, 0x3, 0x0, [@private1, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @loopback]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @rthdrdstopts={{0x1050, 0x29, 0x37, {0x21, 0x206, '\x00', [@pad1, @generic={0xcf, 0x1000, "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"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x7, 0x30, [0x2, 0x9, 0x6]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}]}}}], 0x10f0}}, {{&(0x7f0000002b80)={0xa, 0x4e21, 0x3f, @mcast1, 0x10000}, 0x1c, &(0x7f0000003e00)=[{&(0x7f0000002bc0)="eb1af5065d840c137248550dd66b62bf144d4e7ea129733417118c09d091112acbcbd45ed0d94b7c89486a9dc5e187208a0afe2aa0918ac58cfbac285cf86626e4be340198f3a84991578f461c1ff260fb7618f3512f3f9215a9a6d5007f60926d1d08e6b9db4e69bbb6adc04b67f79f4d2f01d05bb8b903e5624522b3bcc7c13722e80c328bc02759e1b967c2abd30ef400b4afe0259f4083940994044a5a0b89fb73e4a02a681f4f53cdce6bfc076db85f81fb2888123a4f0bcbd5306078368fa9ad3412856c0a6a", 0xc9}, {&(0x7f0000002cc0)="b40b4ed094c43afec59a458aebd2abcdde270d592a22eb8b9de40d51e0559d764a342f59679513843871170155a17c0d162d237fb23ad97ec8f0fbdb8870ffd2f6510ccefe57", 0x46}, {&(0x7f0000002d40)="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", 0x1000}, {&(0x7f0000003d40)="7609744bb5f51c541260eed4026d494e030806d07d1cd7a7de867a818cbb5173d2ceed242b1f6ea1b45889bffb72ac047fdde200e7f7191013e21b4a9ef88e669a876cf0b4a3b8ce1a75aebf767f6832e38f7aa30f711a6d219866d9141f72179522272663a5bfc310da3933de43f042f9d8d7378406a78a5b425c68aa8ed4c36144a7f9666314ab5840ab50578ff965d9b8ea845e087af7b903ec3d8d31f8f6f9886ea24823b659ee4eeea92ea50e574496b1b959d9ccbf8e", 0xb9}], 0x4, &(0x7f0000003e40)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x93, 0x4, 0x1, 0x3f, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @rthdr={{0x48, 0x29, 0x39, {0x11, 0x6, 0x2, 0x0, 0x0, [@remote, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x8001}}], 0x110}}, {{&(0x7f0000003f80)={0xa, 0x4e24, 0x5, @private0, 0x6}, 0x1c, &(0x7f00000060c0)=[{&(0x7f0000003fc0)="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", 0x1000}, {&(0x7f0000004fc0)="ec576619d80d1ccad68d353ad4d6f4142752849d702fb2cb53004f8d597c1d2af218f6e4cfc353af99524182b20246f18ae17eb984f7c0da9828b5b05376661a648f2ee56c0afa4ecd8592887e1968c4e2f40d47ec4c935e757069255bc2ad351bbdc590c030d372dc683299ea554cfe098c70ba1f664cbad78b8b7d036167f2b97b6638e9014683bb31ac1bd20bb1081d5800edceb60f001111ae024333a8543594f49fbf8a550a17023f3713a3458d11790dfc05ab64d396b3332e45894f73161e386e3d13d1498f3a", 0xca}, {&(0x7f00000050c0)="4eaff927ee1a78b94885fa0165252490a12f1ac34143df8db3fbf99e84bdee191030af96a50b6bed51eb86dcf598a3732ee4b76beae4321690968518f37adb96ffec968b9375a42e164848c12c50e9f640727010e78bd433fc0007cd42a0c8d188efa88540645caed8984f0b8ee90b42e4e52760a329c8cc73b48c0aa0ca27a7c3fe2e0f3bfdc083dec56fcbd0e1ea82a7ba876331234b5017c6fd089a2006ec4fcda85217c25d1760894909101bbdc5d8d977937deec3283faed38a96a7974ea5ef0fc512547d31a4fc5313969e0327c065b5cfc652a0db2f760ee21839090eecdf311266c706d9f5d0589c5b5b74ce977556683a9762ab0fa1f5592bf188e9554e9e0a3ace925a19d98e684ecada782a640bc6b7c7200b5feaa615f3af7c5c0f6a530f5b96f42b7cd6e26f1f2d32ae5257d98b9813875c1173514ba66a695778c48472e15475961faee3e81372157640fead726f55c7789bc86587febeb015d17b84791baf41e0b032250dda424edcdda4f77f0a9491f1fa49c9da54463ff085c2a6d011414421d63a3f255db7f7b7298eeb867654d5cea0a89bfd000bb5c176bce1d9e7ce937a03e21afe57277982097abfc149fb92206b0f229c4b92cdbf0bca6458113672bbe81a47fc4047fa0eb4bf549ef4f7c0882cf2c9d9a51f1d1d908547a9dc0d3eed6e8eeb7e4b3d95ccbb22fbeed8f78736ac68acc1cff445c91a967ee2d9f5b7c8f8c97881e5a8f5e9504708197072b794a19d94bf15699ce52a338164c7a596d61b5ffcb7c4f6f3b004639fe803fa557f8186ede4af5741d5f4e0695299951932c1e509047ed5aff3a6ecdba3aa50928867683e1e1a996b63253a269b8de70f10fd96cacbad224e5144ec3fc5bdfa3df4dcaad0aacac95b5f0c8c3b9c8b7581e3dc8125be72f7b96dd43c2e90b54457d4b85c5233a0394df7a3c0197efc1a82ec17e86ac84eea01f633e6ccc964bc02907b0bb05d9f20f80171b2ff0026a5aa6bb9ba1bb18656d5b2a5332a0782da02e5707424e8c668eebe0de3cf8f9bb57b9e4d9bbe9aba90a1c5d717e878cd275e55b46c96859f5229e499647513b1350ee7bff672bcdc8cb91ea39229fcd19d1df677cb540f287df69ad95f0d1b6deea35c90f4b02b5e18915c4bdf0247b66880c54c294114f1cd04e090357506af0ad34b4fd92348402326d94a4a48a4e9fb4028d3b63f35f606bf044244f615713daaac61f5d18ce8f51196c83000de63aef36efaa4abbe7b297e5ebb98fb9a5bb126b9cabe1af0d8fd77aeb7e618d3b012d293562dcccc29dc4e323258ae0fe52adb77839b4566a5b5af8ef5503388d4c3931eb57d6f6887feffd371b860e879a59cb2c2a1188a9feefcd5a669310a94b796a4b582946ff8c6465a744c043c49c6fbd920b09a829fbe1f184cf86945e471831b47e999bfa570511781b8f0d04761a26138ce6beeac19d4335f5826be0e43567af7e292bd4faa4cc5e807eb3a3343590511bec89456238bab5a2efe01132e77cf4f5acd564a7c3621e29289df55f555ef5438a78d52879ac0028c244efd374080b3fb9bf33d86ed416fc92d2299a0c338f24c3824deebf00f4c4a5e678829d14b49f6b5e7f684db3bc94994c783f9840ecef65c6fb46eda83c15a80ff95b131a740b8a3c9481ad26b8e2138b168c945937860324aa2d8d0f51e0dfb596078b242dfc1b95fff1119d4c81cecc170e3d491b47f481c8bd64f44bfb17d1de2b69a785c934be254fb4e0962e105bc7f169b7325da410766b1331b97a3dcb981a19ab33673e33abbecb5c3d965776560675e9b04b1b2e7a9a76685fd4e82548c49f11d6ce82b0b0ea51a46e55f594c64b8af0f3412941813245cf2f9130f6d143629c97a36a68ffc45e1998e29be99b68ecdc46b0ef488e6ec420d38ca0b5606b34b095ceabe47df7c6b3325789fd5830c1f007625b87880f7a490d398c5febfb7973b04465b60a2d486c96f5966cc552b866240fa22140087e1261acb914b3004bfd137100b4d3db94e6ab837602f0969fc80816401e4ed6ef31db6d7c522aca8f2184ab795285061dd123a15236d970b241438b14da25511a7e105c9fa4f6f6352ce355f3dc3460a340bddbb4bd9cf09706537768324dfcba906ef7ab4b5cf52aaf1a0f2a76ae4b5e4667446b3c2e35c181e4f7bda89f06a7aab130ced4c29f3851318731a39e5a97ad73d5d36fbfa29fbb4be8473cbfa0b7bc1af1769ee04fb5d6492c9818cde597fd13efd4f58330f0f497914b8454d1c5d2d91f86fa20b3aaa14ae04cd9af83803c3c6289b52b7a91583d7c7d96b60b4afcb8c4b37ad18d98616e308e30723ccbd8c98bed3f84218bca9f9cddbb2842e7fe0f76d5b79faccfbd6bd0d506d9036a8c4b9a4aae64085f4130adf9d5ed5d77951f6dc855e674ae9b07c1c573e6adaaf63e7e4f95fc370e1e56582dc731441712a5d987cab9768566e0aee994327304c712b99917e49f37121c591cff232208df5665dbbe18b00b0b11edb40cb3eb2373827282b1c7f14e52252d23c4943b4aa0373709f133a969ff8df09dbda9b093f43c7ffce5e30fd8439936190a50f35ee3a89bb7b19b295a258470a67c7c64915dda2b4d3e8049f6e833fd3d0e83e127516741bb6d1f9cec346bd5c4f743202df3792095ecf0969d6aec661ec77415ebe0112487d289ba9c7816c03d3e7117bfa942ae5989b66c7e9ba297721f62c7fbfb6a0a72ce72e6be136dfa05cd8f765c70e0ab6071108c79166e4b1953759d343e08fc4fab1998c8f50fec8277dda410b9ec995b2096a864b5fd63495d8350e6b83fbace2b8165aabe62bc0e37e489a0ae083c464d2d71ecb97682c0299ca0957673cbce5c18208c5a931d1df0dab808b462dc78dc54a888132151fbf2d3a32d0ed0fec4ad7c5722d2fdae7fb8daa21c7e41896dd371e5faad7a92cab30eb42eb440cc24f3dc182ccb999d125d7af4341cbf5d4944a2223fad9cfca2f4793704f0558566aa23baf910f75e63eb49d2278e95c27de9a2d12ec12c297e53fdeadaef344805587c38e7def22e09ad221bb36fb5f49437751975d8606e0cecdf38c3caaab93d39c96c32c7c84ab040050ab51feb4f0ff60f73eb55a4b97e6a9f4559359067958124cb2dc406bb24c8e705c960a092a16b25baf0f6718d7338732890c97ea0043cae2f09d2e68ba3cb8a4f39b0342cfa525d0d303a5b3067268adc87b024ede3d5f9fd2f488a4b99993d073cd100be7a22646761ccf89ce2fb4e424d18122b225f5103338fd4f6d5d2908ea95b7d1084c0e48a65792b2b65b0fce1b4b257d954175a075cdb5c64270d36138b416de9d40983133a3924b68c357f83c39a729b1b61f4bd3d418b50f966df9caa8762e8372eab720d1e3e1b13081694825ec59fc3b1830cc0acc1c9d7180491df075f212de858548c81050b385aa0710f5bfb6da62f60cf3efa4906da79516096ade5f7f7cd83c05466b5054934213c5c1c6196bc1f92ebb8573b79a0b18acd48c26636449617c2261a2a157298dec2e5ea9528652b15b22307c6aebbf44022d1e367d829ca992ccabc6a68ab0683864a93caa6eb7d491b109e34510df6ace75d685b855f046273038d83a3af1f36613535cd506993cb2d5c71a97b04c09f5f0c39b17d4bb8f7b5b930f32e4459338746e9164b4c16268f38d82539635a4aad9fccee9e26718936b0c36e1c8dc3adcb9a0f1d2c35ec3a1f6ddd5632a756ed88382666fb77600a7cc05ea38743dd19fc9b8b763795b375ce450abcbdd3edba3302c3e8237335978dba4b4f8c7ce5dc33461fc38424fa008520261e1768a34ee49dceb944b25851907cdbf6fbfb53a05660fc234c922b787cd14bb528e0931648caf1eedf705ee0b1bce470a9dd9eac55ac7d0a7b8ec0cf0f91184823c294b49232abdf296fda449b9a8375c38b9b3d13ed7cac9511f336dbf482f71aa8b011389625e2caaceae13470c557b2bb9d3bf61ceddfe11683df90371a38a86c96150fd1e5c86ebb8f4ebc23cdff2cb377e930188ae9c5b9f9e80198afcc96f9cea87d477b06009da91356c984189c6fee36d25dc4aad264106eb87f4b1ef7b5cacaea9caabd875e9a53abec666a392de5a93a904a51994ac8634e0ca5558969e45bb348189c0af87a3deb377036227ed0df6ee55aad3c4add3ce45906af7689b3095774a409979db80d4ace44dcaa4ce827128f1059d4a6b7059ed2083cf062dae05aedc3d45a7b4d9d759b0f66d821072798a78081a281036bb16e7eae57c1d2208b6d0bae2863e7254b809623707e6315b3fe2e098558c0a98395d39a504cdcfbc3b1d364a46295c38b42a988305ec9fc6d54f7cc9eda4fd6a99bac3ef874466a84b8831414772e55f5aa513fbb414b58faea770e2d99d14161c3ea7cab2103aabb13805313805326b2bdf30867ad7d44f3010221f17de6b433f50de516930cc5843aa95a09e6c683724602eece06ec3c001059fb272b29b7a01d95e17f09cd44a57451c7ad52427e2c7f0fc399d2ad6b92ac5e53e8112f0976b36ca9998cb97e6f3bd3f8c3add403fdb7b7233d3a377ea35691c03f83c7d77b18248773f13a605f48e60bd134b133d5fd858f70cd7cc78bd6540b6a1df10be28057bd3ac5db3a3a6c9fb404e82881160cae0b2b4d9e1566ab209fc322647c45719ebd9c13cd57a382a772cbddaa51266f8cdf95a3ed335ccfe51006cfdb1294d707c278d36512b75f33d74cfdcb01938e1c560c8710ac16f1c2fea2d5362de71de274f24005dd9b96c9907e07de6cdbf539be08465e279837c0257516c72f1b35b51db127beb5eb28e3ccdeec6f1b25094cb0a0a3def2e2621a8a609db656ba8c7ebb5b542bec0de5e8c8b6b669e5db7e0cb294f6f2fd5d305e1771a73a5406cc4ba6cd688b1ab31db26ee1813485d30acc090987b38bcc33e6a66cd41c8c8338c6bed8f805120b4e14192ec9d763b3d1825da559aa74f0a99a8f5699a7ff407b430ef96519301f94726ef3d45bdc4352b67a2c0b954a1f9509cc0ed2251cea2cac2494de56e59a1aa4c82d8b3faf4a9a4e390a744adfd6b3ec8c2972e349332e9c7d326084481120944f8b446d50ada43ddff3700b0dca47e0e66850598c60122c6417eeb79c09129ffb629a0a81ae8d4162f36555b9cbb9a04ef93eb161f2bf8f89fae54221e96bac64880ada4261c4cdf57c8b142c1ae2e582971eb308a6c1383524f71e53bb65862f019ee3bc011bbc29fc96bd26d684f4166287f7dba9c5fab7d3a891be10ed937197c4cdfd0209d4a3443aad7e2bb54fa3dcc835787ad0ffe29c064d37c6758df09d23678ec2862784c5c524053265393b444881878149c2f16772ae5ff9426147d1a917c47e404edcd196d0bbdc7df85a8022edc29faffc5006e58a0485f38dcd79e2d612c4a14fe96edc4cfa4c2bdad44be552aac76f11b23a34d49a18cccfbdb0dab6b936b8be1d3aaf38102e752c0e5d7c505fd0f56168a5ceaa356a5a0be5de90e17f891e1d47b1a6042e3739a2631dd7064ff34d3aed86b0bcf94c733c7c2ca39fd7c17f9f152de818aee1ce8bb334532d6f19798736c8e19dcb8b5eba327062205686b31744cc459325457e64290447bcdad9f380be79f26448cd9015621e40e4d3d0e373f30e31c039e5d10308885ef3e932c72785cb02f098971f721e803be36a71c78190966b092fa9d10fee8e438a121b413172d8f1a131fb2b3defe1ae2e6cf59e0c67f85a6ffb804769e2ef1bfd2e80b9f70c356ca183d98edce", 0x1000}], 0x3}}, {{&(0x7f0000006100)={0xa, 0x4e22, 0x9, @local, 0x9}, 0x1c, &(0x7f0000006180)=[{&(0x7f0000006140)="3fe58385044f9ae1359168c49ccc71be4b9d543b34c1", 0x16}], 0x1, &(0x7f00000061c0)}}, {{&(0x7f0000006200)={0xa, 0x4e20, 0xffffffff, @local, 0x714}, 0x1c, &(0x7f0000006780)=[{&(0x7f0000006240)="61ab7f3adcb9c3542b226089bae38ebf1dffe4d7650ea41863551c19083bd28ff55ff1fecc3065dfcc185b22029cf860e170791a3cb0347497ab6c3ef68136c35228", 0x42}, {&(0x7f00000062c0)="068b3273f3383e1ac47e569c6b30ec96b581b568413cfbc30027ddf0e90dfa2e793607d6ed84063a99582459b0352a165adf0bc9400df2f0b7b8c92193d43349a2bba0cb687a4beb4952000017d71ff9b3dc77b3e19961887b6ef319077e989d822f055e0009a0880e913c8f1b7bd090f38656d3b36e2dacd391932b9b2213d2381bd4e450c14e247cbc65d371e090541ff831025ee057920cd719b89423f9ada504f4b3439ba34a327b4fb1dcf5f2d38377356994e431fcbc5acfb6452c07be843aee77672fe5f9ecd58319ffd9e16726cec1ea19e6302d7ca13b04db550f84dc00bf3b07a366ba95", 0xe9}, {&(0x7f00000063c0)}, {&(0x7f0000006400)="9138bc47b3770bdd24eaefb846b9357e184c074bfff49610959b21f5203b3644967be85fad8e537a228d5ea48879dc95eccb892f8dd34d0c8f8a33eea0ba230a7646722759b46f0ef4568114579fe30c1cadf35377585aeaaaa5a35bf0", 0x5d}, {&(0x7f0000006480)="9cb4d42fed8fc2aca0432f95904493a4cc98ece85f5308dded617dc415fd16ccd5abba6e35411d0c3fe51fc1c4150ab963bc65feb284e377b71dcbb37b2e5958baefb135dd4b005449c18cbb4eb7aa82b10933105f9179f47645bfb618d37609c90685ca7338ea9b5c4fa8197da29bc8dbdf22e7f8bf5efc6e95aa286e728fb714953fca4bf30f44497fb6742e3266d07720ddd04f0058ccb4b381f1d6e511e6774879cc31fa5340baf6c9c931e18fa9d0d9d337bed8b600586ef831b6714ebeb941c4002343a523ad3cde82a0a07613fe5acf13820e170d5d", 0xd9}, {&(0x7f0000006580)="a46c5142a390e3ed85a9ec56476119284d91b9f03bdc253f40b5d772abedb76284d1ba1fbd51228bfee496506be169f5841ec69fdf27e6472225cedc701e9acc00c1312a594e4e54299b4ecbdd153f6ead22f844450bb2915cb94757a5980a7872f940211443c72f3ec076d32f6fe6ed475062a2fb758f7d9e5797", 0x7b}, {&(0x7f0000006600)="c28cd325d7a4358e81e6f1f8f30170e438d9be966b138cf80ce3cb7cd972aaee8b3834f8732bbb6135f69b67ec0ad0ff28d5c3908562f03069241b0d4233c005e589e60ec3bbef6f51df2e3057ebd88ccc3985f9dfbe8c7c3d2c10cd9d9e7335457aa527d4622d470e3dcba309b2bdb33dae76e2780d42f4303b6852289f0f83c0f7827a81dd3acc1bb92c683f458afeeb5157f97cd51ea3501ff5", 0x9b}, {&(0x7f00000066c0)="eb4f2e842b58ee4a28f823d8b64c92fb5c9aa5fe1cb950d26cc49d217f94f42cec8dd68a31ba625c1ac78794d5769ff06acfc32246dd561ef6e37edc2876a7de551103df29d12d6e8ab7330c45cbc83cae27ac611756055cce08963f8799ab2178d2cbd715fd29fe57d0a47c0d6004382fcd3052d067c9a43d2176e03afad6e162eea84dd7d46241bf47674125e8891857c9b04f4e3fb2d6e72060e87a7edea3289cb2a4041de9", 0xa7}], 0x8, &(0x7f0000006800)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r4}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @dstopts={{0xa8, 0x29, 0x37, {0x2b, 0x11, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x2, 0x4, [0x1f, 0x4, 0x0, 0x101]}}, @hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x48, {0x3, 0x10, 0x8, 0x80, [0x7418, 0x2, 0x5, 0x0, 0x6, 0x5, 0x8, 0x7]}}, @pad1]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x29, 0x6, 0x1, 0x2, 0x0, [@loopback, @private2, @remote]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffffc}}, @tclass={{0x14, 0x29, 0x43, 0x7ff}}], 0x190}}], 0x6, 0x80)
open$dir(&(0x7f0000000080)='./file0\x00', 0x4181c0, 0x42)

[ 1754.192644] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1754.193581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1754.194371] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
[ 1754.217778] FAULT_INJECTION: forcing a failure.
[ 1754.217778] name failslab, interval 1, probability 0, space 0, times 0
[ 1754.219093] CPU: 0 PID: 10155 Comm: syz-executor.3 Not tainted 5.10.223 #1
[ 1754.219677] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1754.220377] Call Trace:
[ 1754.220607]  dump_stack+0x107/0x167
[ 1754.220939]  should_fail.cold+0x5/0xa
[ 1754.221268]  ? create_object.isra.0+0x3a/0xa20
[ 1754.221659]  should_failslab+0x5/0x20
[ 1754.221984]  kmem_cache_alloc+0x5b/0x310
[ 1754.222340]  create_object.isra.0+0x3a/0xa20
[ 1754.222724]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1754.223171]  __kmalloc_node_track_caller+0x1a6/0x3b0
[ 1754.223607]  ? inet_netconf_notify_devconf+0xdd/0x250
[ 1754.224051]  __alloc_skb+0xb1/0x5b0
[ 1754.224367]  inet_netconf_notify_devconf+0xdd/0x250
[ 1754.224809]  inetdev_event+0x1035/0x1610
[ 1754.225159]  ? devinet_init_net+0x650/0x650
[ 1754.225531]  ? nh_netdev_event+0x8c/0x370
[ 1754.225887]  ? __sanitizer_cov_trace_switch+0x45/0x80
[ 1754.226331]  raw_notifier_call_chain+0xb3/0x110
[ 1754.226732]  call_netdevice_notifiers_info+0xb5/0x130
[ 1754.227173]  unregister_netdevice_many+0x852/0x1490
[ 1754.227601]  ? netdev_pick_tx+0xc70/0xc70
[ 1754.227961]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1754.228408]  ? queue_delayed_work_on+0xb4/0xe0
[ 1754.228810]  ? trace_hardirqs_on+0x5b/0x180
[ 1754.229182]  unregister_netdevice_queue+0x201/0x2c0
[ 1754.229608]  ? unregister_netdevice_many+0x1490/0x1490
[ 1754.230060]  ? linkwatch_fire_event+0x63/0x190
[ 1754.230456]  __tun_detach+0xfc1/0x12b0
[ 1754.230799]  tun_chr_close+0xc4/0x250
[ 1754.231126]  __fput+0x285/0x9f0
[ 1754.231411]  ? __tun_detach+0x12b0/0x12b0
[ 1754.231773]  task_work_run+0xe2/0x1a0
[ 1754.232106]  exit_to_user_mode_prepare+0x186/0x190
[ 1754.232525]  syscall_exit_to_user_mode+0x38/0x1d0
[ 1754.232966]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1754.233401] RIP: 0033:0x7f047e003b19
[ 1754.233722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1754.235270] RSP: 002b:00007f047b579188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 1754.235916] RAX: 0000000000000003 RBX: 00007f047e116f60 RCX: 00007f047e003b19
[ 1754.236520] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005
[ 1754.237140] RBP: 00007f047b5791d0 R08: 0000000000000000 R09: 0000000000000000
[ 1754.237745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1754.238349] R13: 00007ffc33053dff R14: 00007f047b579300 R15: 0000000000022000
[ 1754.259836] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
19:26:27 executing program 6:
write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0x17}, @void, @mpls={[{0xb0c95}, {0x7fff, 0x0, 0x1}], @ipv6=@gre_packet={0x2, 0x6, "3de7b8", 0x2e0, 0x2f, 0x0, @loopback, @empty, {[@routing={0x2c, 0xe, 0x1, 0x6, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @dev={0xfe, 0x80, '\x00', 0xd}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @private2]}, @routing={0x89, 0xe, 0x0, 0x8, 0x0, [@local, @mcast1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @empty, @local]}, @fragment={0x3b, 0x0, 0x8, 0x0, 0x0, 0x2, 0x65}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x32, 0x3, [0x2c9], "192a4d8983b99b8f503939774099c1425c7742e643728e6f607c8f41d5a45b932d7b3dfbd27906d5c39d52ccff9c6dac4bf4"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x0, 0x7], "4234efe7c7f79e6c5d536895eb17f56163084ef3d614dc29d209a72f68a232b774bb4e96ccd1c2fbf1df03c8b48379e034285f792907a37e74adc10bf7e6707be70d8d7144180e280c884ba8bbb7341b76b55f269873adbb0f4e3f9d"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x8000], "25cf21dc35c840a8ab1d0f90f90d7fa019afc7c8343d6fd8018c1038f73052d16c8c99eb60b3a3d096b6490d5d2c74605b7b34536225d5fb50b285e91b06510eabaf0e768390612017c1c960ade8776b1e4876be075f2666e2c8ee2dcf82f2d3197076ffb5980c2b402174a81779b8d9e33b894ef9fbd383c681f1144e4af4f617"}, {0x8, 0x88be, 0x4, {{0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x5, 0x20}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x2, {{0x1, 0x2, 0x4, 0x0, 0x1, 0x2, 0x6, 0x3}, 0x2, {0x200, 0x8, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "e9682b18fd6a6731fccc394a39cf294375a3ed10b590c4f59539141d8a6ad5a363fbb83c72fdbddb49f03ec3277b9446f78e0d24b761fba839990502943e2998c92aee7e5fea576f07a94e94fde5ac7c9c91f9cc325a9449605f5c506d7997582b9c2edf9cc41a28e57eba162437c949fca61b3dab440c4ddf3eb5c204ef90260d3ab6770df05293f589c852f7"}}}}}}, 0x314)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
io_uring_setup(0x3e6, &(0x7f0000000340)={0x0, 0x1af8, 0x20, 0x1, 0xfd, 0x0, r0})

19:26:27 executing program 1:
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020043209538e029d600000100000000000000040000000000000010000000000000002000000000000000"], 0x24, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x404802, 0x0)
unlinkat(r0, &(0x7f0000000480)='./file0\x00', 0x0)
r1 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffa, 0x3, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0xff, 0x1}, {&(0x7f00000002c0)="3ebe9969c79c8401dfdf3c07fa7580cb6bf098c4a73590913e37dd631a55945489e412fdd0faa928e8a358dd8ad69f0bee3841f1494ade68c55910a06696690c09a1a0bf0ea89e13e0fbb12929d0ee2e83f712ec183478df81bd55953983e05ddf281bcdfffac9034e352737e5fe9b80f7d275", 0x73, 0x2}, {&(0x7f0000000340), 0x0, 0x2512}], 0x2000040, &(0x7f0000000400)={[{@fat=@quiet}, {@fat=@quiet}, {@dots}, {@fat=@showexec}]})
faccessat2(r1, &(0x7f0000000440)='./file0\x00', 0x80, 0x1200)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:26:27 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0) (fail_nth: 5)

[ 1754.304195] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[ 1754.306361] FAT-fs (loop1): invalid media value (0xc4)
[ 1754.307632] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1754.340864] FAULT_INJECTION: forcing a failure.
[ 1754.340864] name failslab, interval 1, probability 0, space 0, times 0
[ 1754.342205] CPU: 0 PID: 10184 Comm: syz-executor.3 Not tainted 5.10.223 #1
[ 1754.342812] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1754.343528] Call Trace:
[ 1754.343781]  dump_stack+0x107/0x167
[ 1754.344121]  should_fail.cold+0x5/0xa
[ 1754.344474]  ? __alloc_skb+0x6d/0x5b0
[ 1754.344883]  should_failslab+0x5/0x20
[ 1754.345242]  kmem_cache_alloc_node+0x55/0x330
[ 1754.345663]  __alloc_skb+0x6d/0x5b0
[ 1754.346011]  inet6_netconf_notify_devconf+0x84/0x1a0
[ 1754.346475]  addrconf_sysctl_unregister+0x131/0x1c0
[ 1754.346930]  addrconf_ifdown.isra.0+0x122b/0x15f0
[ 1754.347381]  ? addrconf_dad_run+0x180/0x180
[ 1754.347796]  addrconf_notify+0x159/0x2410
[ 1754.348183]  ? tun_device_event+0x71/0x1160
[ 1754.348558]  ? __sanitizer_cov_trace_switch+0x45/0x80
[ 1754.349021]  ? inet6_ifinfo_notify+0x150/0x150
[ 1754.349411]  ? failover_register+0x530/0x530
[ 1754.349791]  ? cfg80211_netdev_notifier_call+0x298/0x10c0
[ 1754.350261]  ? ipmr_device_event+0x18b/0x1f0
[ 1754.350644]  raw_notifier_call_chain+0xb3/0x110
[ 1754.351048]  call_netdevice_notifiers_info+0xb5/0x130
[ 1754.351487]  unregister_netdevice_many+0x852/0x1490
[ 1754.351916]  ? netdev_pick_tx+0xc70/0xc70
[ 1754.352280]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1754.352736]  ? queue_delayed_work_on+0xb4/0xe0
[ 1754.353131]  ? trace_hardirqs_on+0x5b/0x180
[ 1754.353503]  unregister_netdevice_queue+0x201/0x2c0
[ 1754.353930]  ? unregister_netdevice_many+0x1490/0x1490
[ 1754.354384]  ? linkwatch_fire_event+0x63/0x190
[ 1754.354780]  __tun_detach+0xfc1/0x12b0
[ 1754.355125]  tun_chr_close+0xc4/0x250
[ 1754.355455]  __fput+0x285/0x9f0
[ 1754.355738]  ? __tun_detach+0x12b0/0x12b0
[ 1754.356104]  task_work_run+0xe2/0x1a0
[ 1754.356437]  exit_to_user_mode_prepare+0x186/0x190
[ 1754.356877]  syscall_exit_to_user_mode+0x38/0x1d0
[ 1754.357292]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1754.357729] RIP: 0033:0x7f047e003b19
[ 1754.358051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1754.359599] RSP: 002b:00007f047b579188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 1754.360248] RAX: 0000000000000003 RBX: 00007f047e116f60 RCX: 00007f047e003b19
[ 1754.360869] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005
[ 1754.361471] RBP: 00007f047b5791d0 R08: 0000000000000000 R09: 0000000000000000
[ 1754.362073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1754.362674] R13: 00007ffc33053dff R14: 00007f047b579300 R15: 0000000000022000
19:26:41 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 81)

19:26:41 executing program 0:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
setresuid(0xffffffffffffffff, r1, 0x0)
statx(r0, &(0x7f0000000140)='./file0\x00', 0x4000, 0x200, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = getegid()
setresgid(r4, r4, r4)
setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000500", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYBLOB], 0x3c, 0x3)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
open$dir(&(0x7f0000000040)='./file0\x00', 0x105002, 0x1c)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r5, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mknodat$loop(r5, &(0x7f0000000000)='./file0\x00', 0x8, 0x1)

[ 1768.478854] FAULT_INJECTION: forcing a failure.
[ 1768.478854] name failslab, interval 1, probability 0, space 0, times 0
[ 1768.479954] CPU: 1 PID: 10195 Comm: syz-executor.4 Not tainted 5.10.223 #1
19:26:41 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0) (fail_nth: 6)

19:26:41 executing program 1:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffff7, 0x5d, 0x0, 0x2210088, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0220006c0100000000000000040000000000000010001700000000002000000000000000"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
open$dir(&(0x7f0000000440)='./file0/file0\x00', 0x100540, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {<r1=>0xffffffffffffffff, 0xffffffffffffffff}}, './file0/file0\x00'})
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0xffffffffffffffff, r2, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0xe833, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000180)="c054521e32959c30c2a0120f39e61e805c1997aa671126874bf40a4a78326db106bd657ac940ee5031e03fd8ff5da683009a38143208cfb739a3d3aad6d3d850c4b936668ee5423dcc9127b31f8db5cb83fb", 0x52, 0xffffffffffffffe0}, {&(0x7f0000000200)="de689f052c9e12ae5b8eb68f9354bad37d5bf983daffb9a0c86786092db2ec99629b7eb2f1984aa3d6875edc86e1ff0772dd612ecfdb7b1f460a0308f2f50cc33b51e16324a365d491a3ab1e13f574fc4d687670b23a335079baed5dba5ecf91d186", 0x62, 0x4}], 0x10000, &(0x7f0000000340)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}, {@huge_always}, {@huge_within_size}, {@uid={'uid', 0x3d, r1}}, {@huge_never}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@mode}, {@mpol={'mpol', 0x3d, {'prefer', '=static', @void}}}], [{@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}, {@euid_lt={'euid<', r2}}, {@subj_role}, {@fowner_gt={'fowner>', 0xee01}}]})

19:26:41 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:26:41 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:26:41 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x4)
fsync(0xffffffffffffffff)
ioctl$VT_WAITACTIVE(r1, 0x5607)
r2 = gettid()
pidfd_open(r2, 0x0)
prlimit64(0x0, 0x1, &(0x7f00000015c0)={0x0, 0x3}, &(0x7f0000001600))
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/tcp\x00')
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000140)={0x7, 0x0, 0x400, 0x0, 0x5, "020d413cc96c2d23ccc5963c1b539e66b59a9f", 0x7})
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/887])
readv(r3, 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000300)=""/231)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0)
readv(0xffffffffffffffff, 0x0, 0x30)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x5, 0x7f8, 0x9089}})
write(0xffffffffffffffff, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/auth_rpcgss', 0x200, 0x0)
unshare(0x48020200)

19:26:41 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/156, 0x9c}, {0x0}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0xa, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[ 1768.480570] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1768.489115] Call Trace:
[ 1768.489350]  dump_stack+0x107/0x167
[ 1768.489668]  should_fail.cold+0x5/0xa
[ 1768.489996]  ? create_object.isra.0+0x3a/0xa20
[ 1768.490384]  should_failslab+0x5/0x20
[ 1768.490712]  kmem_cache_alloc+0x5b/0x310
[ 1768.491061]  create_object.isra.0+0x3a/0xa20
[ 1768.491430]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1768.491863]  __kmalloc_node_track_caller+0x1a6/0x3b0
[ 1768.492291]  ? alloc_skb_with_frags+0x92/0x570
[ 1768.492679]  __alloc_skb+0xb1/0x5b0
[ 1768.493022]  alloc_skb_with_frags+0x92/0x570
[ 1768.493394]  ? find_held_lock+0x2c/0x110
[ 1768.493744]  sock_alloc_send_pskb+0x7af/0x930
[ 1768.494137]  ? sk_alloc+0x350/0x350
[ 1768.494451]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1768.494891]  ? SOFTIRQ_verbose+0x10/0x10
[ 1768.495239]  ? lock_chain_count+0x20/0x20
[ 1768.495606]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1768.496037]  ? ip6_mtu+0x1bb/0x3d0
[ 1768.496340]  ? lock_downgrade+0x6d0/0x6d0
[ 1768.496691]  ? ip_frag_init+0x350/0x350
[ 1768.497063]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1768.497475]  ? ip6_mtu+0x1e9/0x3d0
[ 1768.497788]  ? ip6_setup_cork+0xfb7/0x1740
[ 1768.498161]  ip6_make_skb+0x2de/0x4e0
[ 1768.498484]  ? ip_frag_init+0x350/0x350
[ 1768.498829]  ? ip_frag_init+0x350/0x350
[ 1768.499171]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1768.499582]  ? ip6_dst_hoplimit+0x199/0x440
[ 1768.499952]  ? lock_downgrade+0x6d0/0x6d0
[ 1768.500317]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1768.500665]  ? ip_frag_init+0x350/0x350
[ 1768.501030]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1768.501476]  ? lock_acquire+0x197/0x470
[ 1768.501813]  ? find_held_lock+0x2c/0x110
[ 1768.502170]  ? lock_acquire+0x197/0x470
[ 1768.502507]  ? find_held_lock+0x2c/0x110
[ 1768.502863]  ? sock_has_perm+0x1ea/0x280
[ 1768.503230]  ? __import_iovec+0x458/0x590
[ 1768.503585]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1768.504029]  inet6_sendmsg+0x105/0x140
[ 1768.504366]  ? inet6_compat_ioctl+0x320/0x320
[ 1768.504746]  __sock_sendmsg+0xf2/0x190
[ 1768.505097]  ____sys_sendmsg+0x334/0x870
[ 1768.505450]  ? sock_write_iter+0x3d0/0x3d0
[ 1768.505809]  ? do_recvmmsg+0x6d0/0x6d0
[ 1768.506145]  ? __lock_acquire+0x1657/0x5b00
[ 1768.506525]  ___sys_sendmsg+0xf3/0x170
[ 1768.506857]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1768.507246]  ? vmacache_find+0x55/0x2a0
[ 1768.507599]  ? lock_acquire+0x197/0x470
[ 1768.507936]  ? find_held_lock+0x2c/0x110
[ 1768.508287]  ? __might_fault+0xd3/0x180
[ 1768.508630]  ? lock_downgrade+0x6d0/0x6d0
[ 1768.509006]  ? asm_exc_page_fault+0x1e/0x30
[ 1768.509383]  __sys_sendmmsg+0x195/0x470
[ 1768.509731]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1768.510098]  ? lock_downgrade+0x6d0/0x6d0
[ 1768.510464]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1768.510877]  ? wait_for_completion_io+0x270/0x270
[ 1768.511292]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1768.511714]  ? vfs_write+0x354/0xb10
[ 1768.512043]  ? fput_many+0x2f/0x1a0
[ 1768.512388]  ? ksys_write+0x1a9/0x260
[ 1768.512736]  ? __ia32_sys_read+0xb0/0xb0
[ 1768.513134]  __x64_sys_sendmmsg+0x99/0x100
[ 1768.513532]  do_syscall_64+0x33/0x40
[ 1768.513862]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1768.514316] RIP: 0033:0x7f09c4bc0b19
[ 1768.514655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1768.516299] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
19:26:41 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

[ 1768.521037] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1768.521045] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1768.521052] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1768.521059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1768.521066] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
[ 1768.544549] FAULT_INJECTION: forcing a failure.
[ 1768.544549] name failslab, interval 1, probability 0, space 0, times 0
[ 1768.545634] CPU: 0 PID: 10207 Comm: syz-executor.3 Not tainted 5.10.223 #1
[ 1768.546212] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1768.546899] Call Trace:
[ 1768.547139]  dump_stack+0x107/0x167
[ 1768.547449]  should_fail.cold+0x5/0xa
[ 1768.547776]  ? create_object.isra.0+0x3a/0xa20
[ 1768.548167]  should_failslab+0x5/0x20
[ 1768.548491]  kmem_cache_alloc+0x5b/0x310
[ 1768.548838]  create_object.isra.0+0x3a/0xa20
[ 1768.549228]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1768.549660]  kmem_cache_alloc_node+0x169/0x330
[ 1768.550054]  __alloc_skb+0x6d/0x5b0
[ 1768.550371]  inet6_netconf_notify_devconf+0x84/0x1a0
[ 1768.550801]  addrconf_sysctl_unregister+0x131/0x1c0
[ 1768.551226]  addrconf_ifdown.isra.0+0x122b/0x15f0
[ 1768.551643]  ? addrconf_dad_run+0x180/0x180
[ 1768.552022]  addrconf_notify+0x159/0x2410
[ 1768.552379]  ? tun_device_event+0x71/0x1160
[ 1768.552747]  ? __sanitizer_cov_trace_switch+0x45/0x80
[ 1768.553232]  ? inet6_ifinfo_notify+0x150/0x150
[ 1768.553622]  ? failover_register+0x530/0x530
[ 1768.554005]  ? cfg80211_netdev_notifier_call+0x298/0x10c0
[ 1768.554484]  ? ipmr_device_event+0x18b/0x1f0
[ 1768.554864]  raw_notifier_call_chain+0xb3/0x110
[ 1768.555286]  call_netdevice_notifiers_info+0xb5/0x130
[ 1768.555726]  unregister_netdevice_many+0x852/0x1490
[ 1768.556158]  ? netdev_pick_tx+0xc70/0xc70
[ 1768.556521]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1768.556981]  ? queue_delayed_work_on+0xb4/0xe0
[ 1768.557370]  ? trace_hardirqs_on+0x5b/0x180
[ 1768.557742]  unregister_netdevice_queue+0x201/0x2c0
[ 1768.558171]  ? unregister_netdevice_many+0x1490/0x1490
[ 1768.558621]  ? linkwatch_fire_event+0x63/0x190
[ 1768.559017]  __tun_detach+0xfc1/0x12b0
[ 1768.559362]  tun_chr_close+0xc4/0x250
[ 1768.559689]  __fput+0x285/0x9f0
[ 1768.559974]  ? __tun_detach+0x12b0/0x12b0
[ 1768.560336]  task_work_run+0xe2/0x1a0
[ 1768.560670]  exit_to_user_mode_prepare+0x186/0x190
[ 1768.561110]  syscall_exit_to_user_mode+0x38/0x1d0
[ 1768.561523]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1768.561974] RIP: 0033:0x7f047e003b19
[ 1768.562308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1768.563849] RSP: 002b:00007f047b579188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 1768.564493] RAX: 0000000000000003 RBX: 00007f047e116f60 RCX: 00007f047e003b19
[ 1768.565148] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005
[ 1768.565750] RBP: 00007f047b5791d0 R08: 0000000000000000 R09: 0000000000000000
[ 1768.566350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1768.566953] R13: 00007ffc33053dff R14: 00007f047b579300 R15: 0000000000022000
19:26:41 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000001500)=ANY=[@ANYBLOB="03000008c89e3c52b85715ae01000000000000008e7fd2040000000000000010000000000000002000000000000000"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
r0 = syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x584a, 0x6, &(0x7f0000001340)=[{&(0x7f0000000180)="ea82bb0e09094ae86a4fa9ececb4624fda7e44f2d325fb3159e171b73bb1", 0x1e, 0x8}, {&(0x7f00000001c0)="bee8ea9ccc5bd7c16b6dc79be8de02f2339e0fa620", 0x15, 0x9}, {&(0x7f0000000200)="88b50d1fc15ff9aef73e83fae0725a22f72a9d2d20b8bc4c807c59", 0x1b, 0x6}, {&(0x7f00000002c0)="f08b2e4ea9cc100bfcdfadfe3a1735f17d40f0aa532f0fda4a8d364231f933835276ca3b4c61d8ba2cd7690f4a95b2ebadb850744568c988c0e8dcafabeadc0d6c223cb52e126926ad4ed5e95c0e54b4d1038dde898dde8f9a3b3e81df8bfa457fb7d4bda4", 0x65, 0x9}, {&(0x7f0000000240)="e6e9f338919d75fe4fd335ebaa3dd2e88d2a5d4ada8f93718d3240542ee3675f7b8f73eddf6edc8ebf0819f28d3517da7825b83f30efedf9fd9fff06c118", 0x3e, 0x1}, {&(0x7f0000000340)="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", 0x1000, 0x101}], 0x84009, &(0x7f0000001400)={[{'system.posix_acl_default\x00'}, {'system.posix_acl_default\x00'}, {'}.\\@[#,+[/'}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, '@'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]})
getdents(r0, &(0x7f0000001480)=""/127, 0x7f)

[ 1768.601270] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1768.620220] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:26:56 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:26:56 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 82)

[ 1783.034531] FAULT_INJECTION: forcing a failure.
[ 1783.034531] name failslab, interval 1, probability 0, space 0, times 0
[ 1783.035635] CPU: 1 PID: 10237 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1783.036265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1783.037023] Call Trace:
[ 1783.037289]  dump_stack+0x107/0x167
[ 1783.037629]  should_fail.cold+0x5/0xa
[ 1783.037990]  ? lock_downgrade+0x6d0/0x6d0
[ 1783.038376]  ? skb_clone+0x14f/0x3d0
[ 1783.038721]  should_failslab+0x5/0x20
[ 1783.039084]  kmem_cache_alloc+0x5b/0x310
[ 1783.039458]  skb_clone+0x14f/0x3d0
[ 1783.039787]  packet_rcv+0x558/0x1410
[ 1783.040154]  ? run_filter+0x4d0/0x4d0
[ 1783.040505]  dev_queue_xmit_nit+0x38b/0xb00
[ 1783.040915]  dev_hard_start_xmit+0xab/0x6f0
[ 1783.041331]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1783.041808]  __dev_queue_xmit+0x17ec/0x2710
[ 1783.042223]  ? find_held_lock+0x2c/0x110
[ 1783.042593]  ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1783.043022]  ? lock_downgrade+0x6d0/0x6d0
[ 1783.043401]  ? lock_acquire+0x197/0x470
[ 1783.043764]  ? ip6_finish_output2+0x203/0x1fe0
[ 1783.044205]  ? lockdep_hardirqs_on_prepare+0x129/0x3e0
[ 1783.044688]  neigh_connected_output+0x382/0x4d0
[ 1783.045162]  ip6_finish_output2+0xaaf/0x1fe0
[ 1783.045576]  __ip6_finish_output.part.0+0x4f7/0xbc0
[ 1783.046053]  ip6_output+0x3b8/0x7e0
[ 1783.046399]  ip6_local_out+0xb4/0x1a0
[ 1783.046754]  ip6_send_skb+0xb7/0x350
[ 1783.047119]  udp_v6_send_skb+0x7aa/0x15b0
[ 1783.047519]  udpv6_sendmsg+0x2116/0x2ad0
[ 1783.047899]  ? ip_frag_init+0x350/0x350
[ 1783.048291]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1783.048776]  ? perf_event_task_disable+0x390/0x390
[ 1783.049252]  ? lock_downgrade+0x6d0/0x6d0
[ 1783.049624]  ? hrtimer_start_range_ns+0x336/0xae0
[ 1783.051043]  ? lock_acquire+0x197/0x470
[ 1783.051464]  ? find_held_lock+0x2c/0x110
[ 1783.052000]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1783.052522]  ? sock_has_perm+0x1ea/0x280
[ 1783.052887]  ? __import_iovec+0x458/0x590
19:26:56 executing program 6:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x200100, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x2, r0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
fallocate(r2, 0x60, 0x8, 0x6)
creat(0xfffffffffffffffc, 0x85)
lstat(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=<r3=>r1, @ANYBLOB="000011e26f899a1d75412100"])
pread64(0xffffffffffffffff, &(0x7f0000000140)=""/4096, 0x1000, 0xb9)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa8, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8001}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x800}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1ff}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffffff80}, @ETHTOOL_A_CHANNELS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1ca91954}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}]}, 0xa8}}, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000001140)=ANY=[@ANYBLOB="18000000000000040006809a8cd1d9082a85541e010000002b66af6c9ab3dc474c65b6c325e8c6d319a8cd28a3999f52f4e9ef94ef45286158adf52b4f2a3d26a4928e0cc6d03e77f934a78c24712271c70a4e67480846f344219960601acb40d6ff41a5c80b152af5a6a54a5c8cbff67cbb40753b79d94b88310e993c5de11b012dc86eeb0838bdf5325e256e0e18eae35fde00"], 0x18}}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

19:26:56 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0x9, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:26:56 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000007a000000d1a6d2ba00000000"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:26:56 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000000)={{}, {0x1, 0x2}, [], {0x4, 0x4}, [], {}, {0x20, 0x6}}, 0x24, 0x2)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004840)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000001380)=[{&(0x7f0000000240)=""/144, 0x90}, {&(0x7f0000000300)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/62, 0x3e}], 0x4, &(0x7f00000013c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f00000014c0)=@abs, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001540)=""/243, 0xf3}, {&(0x7f0000001640)=""/204, 0xcc}, {&(0x7f0000001740)=""/254, 0xfe}], 0x3, &(0x7f0000004c80)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000f0e6be7e90fac90451d314e632cf23c9b82c5d3716554a3e91d9198adb55af996d79dc3b70a947950414223ccfc43e784596eddbba9309bfde602e78a9308b820cc00461cf00fcb1fe0f391c02805650abc7976058e0fd7e719d3a86f"], 0x40}}, {{&(0x7f0000004b40)=@abs, 0x6e, &(0x7f0000001940), 0x0, &(0x7f0000001980)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r1=>0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000001a40)=@abs, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000001ac0)=""/20, 0x14}, {&(0x7f0000001b00)=""/212, 0xd4}, {&(0x7f0000001c00)=""/238, 0xee}, {&(0x7f0000001d00)=""/98, 0x62}, {&(0x7f00000018c0)=""/99, 0x63}, {&(0x7f0000001e00)=""/223, 0xdf}, {&(0x7f0000001f00)=""/79, 0x4f}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)}, {&(0x7f0000002fc0)=""/254, 0xfe}], 0xa, &(0x7f0000003180)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r2=>0x0}}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000003240)=@abs, 0x6e, &(0x7f0000004440)=[{&(0x7f00000032c0)=""/182, 0xb6}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/9, 0x9}, {&(0x7f00000043c0)=""/112, 0x70}], 0x4, &(0x7f0000004480)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000004540), 0x6e, &(0x7f0000004800)=[{&(0x7f00000045c0)=""/8, 0x8}, {&(0x7f0000004600)=""/203, 0xcb}, {&(0x7f0000004700)=""/254, 0xfe}], 0x3}}], 0x6, 0x40010000, &(0x7f00000049c0)={0x77359400})
mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x20000, &(0x7f0000004a00)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}, {@afid={'afid', 0x3d, 0x8001}}, {@aname={'aname', 0x3d, '$/y(%/-){#$$'}}, {@cache_none}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@subj_role={'subj_role', 0x3d, 'system.posix_acl_default\x00'}}, {@euid_eq={'euid', 0x3d, r2}}, {@obj_user={'obj_user', 0x3d, ')'}}, {@fsname={'fsname', 0x3d, '%\''}}, {@context={'context', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fsmagic={'fsmagic', 0x3d, 0xce000000000000}}]}})
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x810, r3, 0x8000000)
syz_io_uring_setup(0x1db, &(0x7f0000001d80)={0x0, 0xf9ac, 0x4, 0x0, 0x397, 0x0, r5}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000002f80), &(0x7f0000004bc0)=<r7=>0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
r9 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000004c00))
r10 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r10, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EXT4_IOC_GROUP_ADD(r10, 0x40286608, &(0x7f0000001880)={0xfffffffb, 0x7, 0x6, 0x2, 0xffffffff})
syz_io_uring_submit(r6, r7, &(0x7f0000004c40)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x1, 0x80000001, {0x0, r1}, 0x0, 0x8, 0x1, {0x0, r8, r9}}, 0x6)
r11 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x40010, 0xffffffffffffffff, 0x8000000)
ioctl$SG_IO(r11, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FITRIM(r11, 0xc0185879, &(0x7f0000001940)={0xd9f, 0x56})

19:26:56 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02000001010000000000000004000000000000001000e78b000000002000000000000000"], 0x24, 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
statx(r0, &(0x7f0000000180)='./file0\x00', 0x100, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x808800, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r2}}, {@afid={'afid', 0x3d, 0x9}}, {@access_any}, {@version_L}, {@nodevmap}, {@afid={'afid', 0x3d, 0x2}}, {@afid={'afid', 0x3d, 0x5}}, {@loose}, {@version_u}], [{@hash}]}})

19:26:56 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0) (fail_nth: 7)

[ 1783.053268]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1783.053849]  inet6_sendmsg+0x105/0x140
[ 1783.054219]  ? inet6_compat_ioctl+0x320/0x320
[ 1783.054671]  __sock_sendmsg+0xf2/0x190
[ 1783.055003]  ____sys_sendmsg+0x334/0x870
[ 1783.055351]  ? sock_write_iter+0x3d0/0x3d0
[ 1783.055771]  ? do_recvmmsg+0x6d0/0x6d0
[ 1783.056104]  ? __lock_acquire+0x1657/0x5b00
[ 1783.056528]  ___sys_sendmsg+0xf3/0x170
[ 1783.056876]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1783.057275]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1783.057805]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1783.058185]  ? trace_hardirqs_on+0x5b/0x180
[ 1783.058610]  ? lock_acquire+0x197/0x470
[ 1783.058964]  ? find_held_lock+0x2c/0x110
[ 1783.059314]  ? __might_fault+0xd3/0x180
[ 1783.059699]  ? lock_downgrade+0x6d0/0x6d0
[ 1783.060068]  ? io_schedule_timeout+0x140/0x140
[ 1783.060516]  __sys_sendmmsg+0x195/0x470
[ 1783.060860]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1783.061250]  ? lock_downgrade+0x6d0/0x6d0
[ 1783.061725]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1783.062153]  ? wait_for_completion_io+0x270/0x270
[ 1783.062617]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1783.063010]  ? vfs_write+0x354/0xb10
[ 1783.063342]  ? fput_many+0x2f/0x1a0
[ 1783.063700]  ? ksys_write+0x1a9/0x260
[ 1783.064026]  ? __ia32_sys_read+0xb0/0xb0
[ 1783.064432]  __x64_sys_sendmmsg+0x99/0x100
[ 1783.064800]  do_syscall_64+0x33/0x40
[ 1783.065125]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1783.065643] RIP: 0033:0x7f09c4bc0b19
[ 1783.065962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1783.067608] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1783.068247] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1783.068902] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1783.069594] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1783.070191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1783.070856] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:26:56 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200080, 0x1a1)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000140)='./file0\x00', 0x410500, 0x10)

[ 1783.148331] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1783.164570] FAULT_INJECTION: forcing a failure.
[ 1783.164570] name failslab, interval 1, probability 0, space 0, times 0
[ 1783.165892] CPU: 1 PID: 10251 Comm: syz-executor.3 Not tainted 5.10.223 #1
[ 1783.166531] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1783.167236] Call Trace:
[ 1783.167544]  dump_stack+0x107/0x167
[ 1783.167870]  should_fail.cold+0x5/0xa
[ 1783.168202]  should_failslab+0x5/0x20
[ 1783.168582]  __kmalloc_node_track_caller+0x74/0x3b0
[ 1783.169019]  ? inet6_netconf_notify_devconf+0x84/0x1a0
[ 1783.169541]  __alloc_skb+0xb1/0x5b0
[ 1783.169855]  inet6_netconf_notify_devconf+0x84/0x1a0
[ 1783.170301]  addrconf_sysctl_unregister+0x131/0x1c0
[ 1783.170773]  addrconf_ifdown.isra.0+0x122b/0x15f0
[ 1783.171203]  ? addrconf_dad_run+0x180/0x180
[ 1783.171653]  addrconf_notify+0x159/0x2410
[ 1783.172009]  ? tun_device_event+0x71/0x1160
[ 1783.172437]  ? __sanitizer_cov_trace_switch+0x45/0x80
[ 1783.172884]  ? inet6_ifinfo_notify+0x150/0x150
[ 1783.173311]  ? failover_register+0x530/0x530
[ 1783.173735]  ? cfg80211_netdev_notifier_call+0x298/0x10c0
[ 1783.174215]  ? ipmr_device_event+0x18b/0x1f0
[ 1783.174641]  raw_notifier_call_chain+0xb3/0x110
[ 1783.175040]  call_netdevice_notifiers_info+0xb5/0x130
[ 1783.175564]  unregister_netdevice_many+0x852/0x1490
[ 1783.175988]  ? netdev_pick_tx+0xc70/0xc70
[ 1783.176365]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1783.176861]  ? queue_delayed_work_on+0xb4/0xe0
[ 1783.177269]  ? trace_hardirqs_on+0x5b/0x180
[ 1783.177698]  unregister_netdevice_queue+0x201/0x2c0
[ 1783.178119]  ? unregister_netdevice_many+0x1490/0x1490
[ 1783.178623]  ? linkwatch_fire_event+0x63/0x190
[ 1783.179012]  __tun_detach+0xfc1/0x12b0
[ 1783.179350]  tun_chr_close+0xc4/0x250
[ 1783.179762]  __fput+0x285/0x9f0
[ 1783.180044]  ? __tun_detach+0x12b0/0x12b0
[ 1783.180447]  task_work_run+0xe2/0x1a0
[ 1783.180800]  exit_to_user_mode_prepare+0x186/0x190
[ 1783.181234]  syscall_exit_to_user_mode+0x38/0x1d0
[ 1783.181705]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1783.182140] RIP: 0033:0x7f047e003b19
[ 1783.182506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1783.184132] RSP: 002b:00007f047b579188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 1783.184838] RAX: 0000000000000003 RBX: 00007f047e116f60 RCX: 00007f047e003b19
[ 1783.185503] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005
[ 1783.186113] RBP: 00007f047b5791d0 R08: 0000000000000000 R09: 0000000000000000
[ 1783.186754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1783.187364] R13: 00007ffc33053dff R14: 00007f047b579300 R15: 0000000000022000
[ 1783.191344] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:26:56 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1d3})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

19:26:56 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 83)

19:26:56 executing program 3:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0xffffffff, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00', 0x400})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'})
flock(0xffffffffffffffff, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0], 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4000, @fd_index=0x4, 0x5, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1\x00'})
r1 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0) (fail_nth: 8)

[ 1783.286301] FAULT_INJECTION: forcing a failure.
[ 1783.286301] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1783.287572] CPU: 1 PID: 10268 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1783.288167] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1783.288878] Call Trace:
[ 1783.289131]  dump_stack+0x107/0x167
[ 1783.289458]  should_fail.cold+0x5/0xa
[ 1783.289795]  _copy_from_user+0x2e/0x1b0
[ 1783.290143]  __copy_msghdr_from_user+0x91/0x4b0
[ 1783.290554]  ? __ia32_sys_shutdown+0x80/0x80
[ 1783.290935]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1783.291381]  ? inet6_sendmsg+0xbd/0x140
[ 1783.291734]  ? inet6_compat_ioctl+0x320/0x320
[ 1783.292118]  ? __sock_sendmsg+0x55/0x190
[ 1783.292471]  sendmsg_copy_msghdr+0xa1/0x160
[ 1783.292851]  ? do_recvmmsg+0x6d0/0x6d0
[ 1783.293201]  ? __lock_acquire+0x1657/0x5b00
[ 1783.293584]  ___sys_sendmsg+0xc6/0x170
[ 1783.293932]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1783.294323]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1783.294780]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1783.295165]  ? trace_hardirqs_on+0x5b/0x180
[ 1783.295541]  ? lock_acquire+0x197/0x470
[ 1783.295892]  ? find_held_lock+0x2c/0x110
[ 1783.296249]  ? __might_fault+0xd3/0x180
[ 1783.296595]  ? lock_downgrade+0x6d0/0x6d0
[ 1783.296965]  ? io_schedule_timeout+0x140/0x140
[ 1783.297378]  __sys_sendmmsg+0x195/0x470
[ 1783.297725]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1783.298106]  ? lock_downgrade+0x6d0/0x6d0
[ 1783.298479]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1783.298897]  ? wait_for_completion_io+0x270/0x270
[ 1783.299322]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1783.299720]  ? vfs_write+0x354/0xb10
[ 1783.300053]  ? fput_many+0x2f/0x1a0
[ 1783.300366]  ? ksys_write+0x1a9/0x260
[ 1783.300699]  ? __ia32_sys_read+0xb0/0xb0
19:26:56 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x10020, 0x0, 0x0, 0x4}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = gettid()
rt_sigqueueinfo(r1, 0x11, &(0x7f0000000400)={0x29, 0x3, 0x100})
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x3, 0x5, 0x5, 0x6, 0x0, 0x2, 0x11100, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2d309ae1, 0x0, @perf_config_ext={0x3, 0x3}, 0x400, 0x7, 0x0, 0x2, 0x7, 0x115b, 0x9, 0x0, 0x1d02, 0x0, 0x7}, r1, 0xd, r2, 0x9)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00')
dup3(r3, r0, 0x0)

[ 1783.301067]  __x64_sys_sendmmsg+0x99/0x100
[ 1783.301434]  do_syscall_64+0x33/0x40
[ 1783.301753]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1783.302457] RIP: 0033:0x7f09c4bc0b19
[ 1783.302778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1783.304334] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1783.304978] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1783.305609] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1783.306209] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1783.306859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1783.307493] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
19:26:56 executing program 2:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02000008010000000000000004000000000000001000000000eb000000000000"], 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

19:26:56 executing program 1:
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
setresuid(0xffffffffffffffff, r1, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xffffffffffffffff, r3, 0x0)
r4 = getegid()
setresgid(r4, r4, r4)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000005c0)={{0x3, r3, r2, r1, r4, 0x70, 0xffc1}, 0x9, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x101})
mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x2)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f00000005c0)}, {&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f0000000380)=""/114, 0x72}, {&(0x7f0000000240)=""/38, 0x26}], 0x4, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r5=>0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x78}, 0x40002022)
setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000540)={{}, {0x1, 0x3}, [{0x2, 0x0, r1}], {0x4, 0x4}, [{0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x3, 0xee01}, {0x8, 0x5, r5}], {0x10, 0x1}, {0x20, 0x1}}, 0x44, 0x2)
open$dir(&(0x7f00000004c0)='./file0\x00', 0x511141, 0x296)

19:26:56 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 84)

19:26:56 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0x9, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[ 1783.432470] FAULT_INJECTION: forcing a failure.
[ 1783.432470] name failslab, interval 1, probability 0, space 0, times 0
[ 1783.433760] CPU: 1 PID: 10283 Comm: syz-executor.4 Not tainted 5.10.223 #1
[ 1783.434351] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1783.435061] Call Trace:
[ 1783.435295]  dump_stack+0x107/0x167
[ 1783.435621]  should_fail.cold+0x5/0xa
[ 1783.435956]  ? __alloc_skb+0x6d/0x5b0
[ 1783.436284]  should_failslab+0x5/0x20
[ 1783.436623]  kmem_cache_alloc_node+0x55/0x330
[ 1783.437009]  __alloc_skb+0x6d/0x5b0
[ 1783.437341]  alloc_skb_with_frags+0x92/0x570
[ 1783.437729]  ? find_held_lock+0x2c/0x110
[ 1783.438081]  sock_alloc_send_pskb+0x7af/0x930
[ 1783.438471]  ? sk_alloc+0x350/0x350
[ 1783.438797]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1783.439241]  ? SOFTIRQ_verbose+0x10/0x10
[ 1783.439587]  ? lock_chain_count+0x20/0x20
[ 1783.439961]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 1783.440392]  ? ip6_mtu+0x1bb/0x3d0
[ 1783.440696]  ? lock_downgrade+0x6d0/0x6d0
[ 1783.441071]  ? ip_frag_init+0x350/0x350
[ 1783.441427]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 1783.441822]  ? ip6_mtu+0x1e9/0x3d0
[ 1783.442146]  ? ip6_setup_cork+0xfb7/0x1740
[ 1783.442508]  ip6_make_skb+0x2de/0x4e0
[ 1783.442833]  ? ip_frag_init+0x350/0x350
[ 1783.443218]  ? ip_frag_init+0x350/0x350
[ 1783.443558]  ? ip6_push_pending_frames+0xf0/0xf0
[ 1783.443976]  ? ip6_dst_hoplimit+0x199/0x440
[ 1783.444343]  ? lock_downgrade+0x6d0/0x6d0
[ 1783.444707]  udpv6_sendmsg+0x20d3/0x2ad0
[ 1783.445080]  ? ip_frag_init+0x350/0x350
[ 1783.445430]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1783.445876]  ? perf_event_task_disable+0x390/0x390
[ 1783.445996] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1783.446313]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1783.447368]  ? lock_acquire+0x197/0x470
[ 1783.447708]  ? find_held_lock+0x2c/0x110
[ 1783.448069]  ? sock_has_perm+0x1ea/0x280
[ 1783.448442]  ? __import_iovec+0x458/0x590
[ 1783.448797]  ? udp_v6_push_pending_frames+0x360/0x360
[ 1783.449263]  inet6_sendmsg+0x105/0x140
[ 1783.449598]  ? inet6_compat_ioctl+0x320/0x320
[ 1783.449983]  __sock_sendmsg+0xf2/0x190
[ 1783.450326]  ____sys_sendmsg+0x334/0x870
[ 1783.450675]  ? sock_write_iter+0x3d0/0x3d0
[ 1783.451038]  ? do_recvmmsg+0x6d0/0x6d0
[ 1783.451384]  ? __lock_acquire+0x1657/0x5b00
[ 1783.451762]  ___sys_sendmsg+0xf3/0x170
[ 1783.452099]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1783.452500]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1783.452947]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 1783.453342]  ? trace_hardirqs_on+0x5b/0x180
[ 1783.453727]  ? lock_acquire+0x197/0x470
[ 1783.454069]  ? find_held_lock+0x2c/0x110
[ 1783.454420]  ? __might_fault+0xd3/0x180
[ 1783.454772]  ? lock_downgrade+0x6d0/0x6d0
[ 1783.455132]  ? io_schedule_timeout+0x140/0x140
[ 1783.455534]  __sys_sendmmsg+0x195/0x470
[ 1783.455888]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1783.456261]  ? lock_downgrade+0x6d0/0x6d0
[ 1783.456627]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1783.457059]  ? wait_for_completion_io+0x270/0x270
[ 1783.457520]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1783.457929]  ? vfs_write+0x354/0xb10
[ 1783.458248]  ? fput_many+0x2f/0x1a0
[ 1783.458560]  ? ksys_write+0x1a9/0x260
[ 1783.458897]  ? __ia32_sys_read+0xb0/0xb0
[ 1783.459251]  __x64_sys_sendmmsg+0x99/0x100
[ 1783.459611]  do_syscall_64+0x33/0x40
[ 1783.459939]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1783.460376] RIP: 0033:0x7f09c4bc0b19
[ 1783.460700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1783.462277] RSP: 002b:00007f09c2136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1783.462924] RAX: ffffffffffffffda RBX: 00007f09c4cd3f60 RCX: 00007f09c4bc0b19
[ 1783.463538] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003
[ 1783.464150] RBP: 00007f09c21361d0 R08: 0000000000000000 R09: 0000000000000000
[ 1783.464756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1783.465381] R13: 00007ffdaf46c22f R14: 00007f09c2136300 R15: 0000000000022000
[ 1783.468598] FAULT_INJECTION: forcing a failure.
[ 1783.468598] name failslab, interval 1, probability 0, space 0, times 0
[ 1783.469664] CPU: 1 PID: 10274 Comm: syz-executor.3 Not tainted 5.10.223 #1
[ 1783.470252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1783.470969] Call Trace:
[ 1783.471200]  dump_stack+0x107/0x167
[ 1783.471525]  should_fail.cold+0x5/0xa
[ 1783.471854]  ? create_object.isra.0+0x3a/0xa20
[ 1783.472249]  should_failslab+0x5/0x20
[ 1783.472586]  kmem_cache_alloc+0x5b/0x310
[ 1783.472938]  create_object.isra.0+0x3a/0xa20
[ 1783.473328]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1783.473781]  __kmalloc_node_track_caller+0x1a6/0x3b0
[ 1783.474217]  ? inet6_netconf_notify_devconf+0x84/0x1a0
[ 1783.474676]  __alloc_skb+0xb1/0x5b0
[ 1783.474995]  inet6_netconf_notify_devconf+0x84/0x1a0
[ 1783.475432]  addrconf_sysctl_unregister+0x131/0x1c0
[ 1783.475869]  addrconf_ifdown.isra.0+0x122b/0x15f0
[ 1783.476290]  ? addrconf_dad_run+0x180/0x180
[ 1783.476669]  addrconf_notify+0x159/0x2410
19:26:56 executing program 2:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x452301, 0x0)

19:26:56 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x3, 0x60)
open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x800)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)
r0 = syz_io_uring_complete(0x0)
write$P9_RREADLINK(r0, &(0x7f0000000140)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

[ 1783.477045]  ? tun_device_event+0x71/0x1160
[ 1783.477423]  ? __sanitizer_cov_trace_switch+0x45/0x80
[ 1783.477874]  ? inet6_ifinfo_notify+0x150/0x150
[ 1783.478270]  ? failover_register+0x530/0x530
[ 1783.478650]  ? cfg80211_netdev_notifier_call+0x298/0x10c0
[ 1783.485677]  ? ipmr_device_event+0x18b/0x1f0
[ 1783.486890]  raw_notifier_call_chain+0xb3/0x110
[ 1783.488123]  call_netdevice_notifiers_info+0xb5/0x130
[ 1783.493255]  unregister_netdevice_many+0x852/0x1490
[ 1783.493736]  ? netdev_pick_tx+0xc70/0xc70
[ 1783.494183]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1783.494744]  ? queue_delayed_work_on+0xb4/0xe0
[ 1783.495233]  ? trace_hardirqs_on+0x5b/0x180
[ 1783.495698]  unregister_netdevice_queue+0x201/0x2c0
[ 1783.496221]  ? unregister_netdevice_many+0x1490/0x1490
[ 1783.496775]  ? linkwatch_fire_event+0x63/0x190
[ 1783.497275]  __tun_detach+0xfc1/0x12b0
[ 1783.497693]  tun_chr_close+0xc4/0x250
[ 1783.498100]  __fput+0x285/0x9f0
[ 1783.498428]  ? __tun_detach+0x12b0/0x12b0
[ 1783.498786]  task_work_run+0xe2/0x1a0
[ 1783.499181]  exit_to_user_mode_prepare+0x186/0x190
[ 1783.499696]  syscall_exit_to_user_mode+0x38/0x1d0
[ 1783.500838]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1783.502247] RIP: 0033:0x7f047e003b19
[ 1783.503283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1783.508440] RSP: 002b:00007f047b558188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 1783.510546] RAX: 0000000000000003 RBX: 00007f047e117020 RCX: 00007f047e003b19
[ 1783.512453] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005
[ 1783.514235] RBP: 00007f047b5581d0 R08: 0000000000000000 R09: 0000000000000000
[ 1783.516073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1783.517856] R13: 00007ffc33053dff R14: 00007f047b558300 R15: 0000000000022000
[ 1783.544742] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
19:26:56 executing program 6:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0x9, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:26:56 executing program 7:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv2(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/249, 0xf9}], 0x9, 0x3, 0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

19:26:56 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x9c, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000140)=@ax25={{0x3, @netrom}, [@rose, @remote, @default, @bcast, @null, @netrom, @bcast, @default]}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/98, 0x62}], 0x1, &(0x7f00000002c0)=""/4096, 0x1000}, 0x10000)
open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0)

[ 1783.684072] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[ 1783.696050] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
[ 1783.711835] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 1783.727781] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue

VM DIAGNOSIS:
19:32:01  Registers:
info registers vcpu 0
RAX=ffffffff83e75230 RBX=0000000000000000 RCX=ffffffff83e5d02c RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff83e75838 RBP=fffffbfff09c6450 RSP=ffffffff84e07e38
R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001
R12=0000000000000000 R13=ffffffff85675808 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff83e7523e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000557ea3e116cc CR3=0000000017dd2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000004108a8c000000000 XMM03=0000ff00000000000000000000000000
XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962
XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff83e75230 RBX=0000000000000001 RCX=ffffffff83e5d02c RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff83e75838 RBP=ffffed1001130000 RSP=ffff88800898fe70
R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001
R12=0000000000000001 R13=ffffffff85675808 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff83e7523e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000c0068824f0 CR3=0000000017dd2000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=006002fe016c6c6f502e726567616e61
XMM02=67d2534b7c3d3c7f26fdb1e499fb8877 XMM03=d9026f8c836105bdadd2cb66f2ab53b7
XMM04=00000000005ed2f000000000005efcd3 XMM05=dce1d449743338e230de7cab231c7bea
XMM06=00000000005ed2f000000000005efcd3 XMM07=f57a7df2331d5933028b7fb8cf4e2143
XMM08=2494d8c32ee21aef6564e5f20be51fd6 XMM09=00000001000000000000000000000000
XMM10=0c0d0e0f08090a0b0405060700010203 XMM11=00000000005ec68000000000005ecaaf
XMM12=07354d68467014e86a93a917159b66fb XMM13=5b71a3767de05d78c13cb57db49d3e4e
XMM14=30c94d39845b35234420622bf3f2edcc XMM15=677f9a6d775a928e88fac77f4941be04