/0xb0 [ 208.266289][ T7799] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 208.272202][ T7799] RIP: 0033:0x7fd4f9c5f059 [ 208.276624][ T7799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 208.296236][ T7799] RSP: 002b:00007fd4f85b3168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 208.304661][ T7799] RAX: ffffffffffffffda RBX: 00007fd4f9d72030 RCX: 00007fd4f9c5f059 [ 208.312637][ T7799] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 208.320609][ T7799] RBP: 00007fd4f9cb908d R08: 000000000004ffe2 R09: 0000000000000000 [ 208.328583][ T7799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 10:50:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200008d5}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) (async) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r6, 0x1) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f00000012c0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "e538c04111b81e"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f00000000c0)={{r7, 0x100000001, 0xffffffffffffffff, 0x4, 0x9, 0x2, 0x7fffffff, 0xb6d8, 0x9, 0x80000000, 0xfe000000, 0x800, 0xb6b, 0x8001}, 0x10, [0x0, 0x0]}) 10:50:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 208.336562][ T7799] R13: 00007ffced8949cf R14: 00007fd4f85b3300 R15: 0000000000022000 [ 208.344557][ T7799] [ 208.404070][ T7799] Mem-Info: [ 208.410105][ T7799] active_anon:888 inactive_anon:80691 isolated_anon:0 [ 208.410105][ T7799] active_file:4193 inactive_file:7674 isolated_file:0 [ 208.410105][ T7799] unevictable:768 dirty:45 writeback:0 [ 208.410105][ T7799] slab_reclaimable:19734 slab_unreclaimable:98055 [ 208.410105][ T7799] mapped:30609 shmem:4834 pagetables:825 bounce:0 [ 208.410105][ T7799] kernel_misc_reclaimable:0 [ 208.410105][ T7799] free:1388953 free_pcp:9748 free_cma:0 [ 208.464899][ T7790] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.2'. [ 208.539357][ T7799] Node 0 active_anon:6352kB inactive_anon:320264kB active_file:16700kB inactive_file:32496kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120236kB dirty:1976kB writeback:0kB shmem:17800kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB kernel_stack:11232kB pagetables:3296kB all_unreclaimable? no [ 208.604821][ T7799] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 208.647658][ T7799] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 208.742413][ T7799] lowmem_reserve[]: 0 2647 2648 2648 2648 [ 208.748302][ T7799] Node 0 DMA32 free:1612880kB boost:0kB min:35688kB low:44608kB high:53528kB reserved_highatomic:0KB active_anon:4680kB inactive_anon:311408kB active_file:16788kB inactive_file:30884kB unevictable:1536kB writepending:328kB present:3129332kB managed:2716784kB mlocked:0kB bounce:0kB free_pcp:32172kB local_pcp:22284kB free_cma:0kB [ 208.781990][ T7799] lowmem_reserve[]: 0 0 0 0 0 [ 208.798965][ T7799] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:656kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 208.832490][ T7799] lowmem_reserve[]: 0 0 0 0 0 [ 208.837342][ T7799] Node 1 Normal free:3934140kB boost:0kB min:54208kB low:67760kB high:81312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:10424kB local_pcp:5880kB free_cma:0kB [ 208.867785][ T7799] lowmem_reserve[]: 0 0 0 0 0 [ 208.873036][ T7799] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 208.887663][ T7799] Node 0 DMA32: 904*4kB (UME) 446*8kB (UME) 262*16kB (UME) 447*32kB (UME) 65*64kB (UME) 146*128kB (UM) 68*256kB (UM) 22*512kB (UM) 14*1024kB (UME) 3*2048kB (UME) 370*4096kB (M) = 1613200kB [ 208.908548][ T7799] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 208.920244][ T7799] Node 1 Normal: 61*4kB (UE) 35*8kB (UME) 23*16kB (UE) 92*32kB (UE) 39*64kB (UE) 16*128kB (UE) 9*256kB (U) 1*512kB (U) 1*1024kB (M) 1*2048kB (U) 957*4096kB (UM) = 3934140kB [ 208.938613][ T7799] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 208.948606][ T7799] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 208.958738][ T7799] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 208.969395][ T7799] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 208.981605][ T7799] 13840 total pagecache pages [ 208.988211][ T7799] 0 pages in swap cache [ 208.992701][ T7799] Swap cache stats: add 0, delete 0, find 0/0 10:50:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='pids.current\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 10:50:36 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, 0x0, 0x0, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200008d5}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendfile(r5, r4, 0x0, 0x10000a006) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r6, 0x1) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f00000012c0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "e538c04111b81e"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f00000000c0)={{r7, 0x100000001, 0xffffffffffffffff, 0x4, 0x9, 0x2, 0x7fffffff, 0xb6d8, 0x9, 0x80000000, 0xfe000000, 0x800, 0xb6b, 0x8001}, 0x10, [0x0, 0x0]}) 10:50:36 executing program 2: unshare(0x6c060000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001640)={0x0, 0x8}, 0xc) (async) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000016c0)={&(0x7f0000001680)='./file0\x00', 0x0, 0x8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x15, 0x3, &(0x7f0000001440)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0x7, 0xb, 0x0, 0xfffffffffffffff4, 0x10}], &(0x7f0000000300)='GPL\x00', 0x0, 0x1000, &(0x7f0000000440)=""/4096, 0x41000, 0xf, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000001580)={0x4, 0x6, 0x2, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[0xffffffffffffffff, r0, 0xffffffffffffffff, r4, r5]}, 0x80) (async) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r6, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b01d84dd3bb3170b"], 0x140}}, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async, rerun: 32) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xcbf817abc708b8f5, @rand_addr=' \x01\x00', @mcast1, 0x0, 0x0, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r7, 0x0, 0xcc, 0x6, 0x3, 0x5c, @loopback, @local, 0x0, 0x0, 0x0, 0xf15a}}) (async, rerun: 32) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) (async, rerun: 32) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 10:50:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 208.998893][ T7799] Free swap = 0kB [ 209.002904][ T7799] Total swap = 0kB [ 209.006792][ T7799] 2097051 pages RAM [ 209.010697][ T7799] 0 pages HighMem/MovableOnly [ 209.015632][ T7799] 384446 pages reserved [ 209.019965][ T7799] 0 pages cma reserved 10:50:36 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, 0x0, 0x0, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 10:50:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 10:50:37 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, 0x0, 0x0, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r2, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40000) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) (async) r5 = accept4$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14, 0x81000) ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x5000940f, &(0x7f0000000280)={{r1}, "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"}) (async) openat$cgroup_ro(r4, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) (async) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0xbc10, 0x0, 0xe001900) 10:50:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='pids.current\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='pids.current\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) (async) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) (async) 10:50:37 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 10:50:37 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}], 0x1, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:37 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 10:50:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 10:50:37 executing program 2: unshare(0x6c060000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001640)={0x0, 0x8}, 0xc) (async) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000016c0)={&(0x7f0000001680)='./file0\x00', 0x0, 0x8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x15, 0x3, &(0x7f0000001440)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0x7, 0xb, 0x0, 0xfffffffffffffff4, 0x10}], &(0x7f0000000300)='GPL\x00', 0x0, 0x1000, &(0x7f0000000440)=""/4096, 0x41000, 0xf, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000001580)={0x4, 0x6, 0x2, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[0xffffffffffffffff, r0, 0xffffffffffffffff, r4, r5]}, 0x80) (async) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r6, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b01d84dd3bb3170b"], 0x140}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xcbf817abc708b8f5, @rand_addr=' \x01\x00', @mcast1, 0x0, 0x0, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r7, 0x0, 0xcc, 0x6, 0x3, 0x5c, @loopback, @local, 0x0, 0x0, 0x0, 0xf15a}}) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 10:50:37 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}], 0x1, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r2, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) r5 = accept4$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14, 0x81000) ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x5000940f, &(0x7f0000000280)={{r1}, "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"}) openat$cgroup_ro(r4, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0xbc10, 0x0, 0xe001900) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$FITRIM(r2, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) (async) accept4$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14, 0x81000) (async) ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x5000940f, &(0x7f0000000280)={{r1}, "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"}) (async) openat$cgroup_ro(r4, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) (async) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0xbc10, 0x0, 0xe001900) (async) 10:50:37 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 10:50:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='pids.current\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='pids.current\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) (async) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) (async) 10:50:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf9051a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x3, 0x9, 0x0, 0x8}) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x8000000000010) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf9051a7511bf74", 0x49, 0x20c49a, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/242, 0xf2}, {&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000580)=""/159, 0x9f}, {&(0x7f0000000640)=""/224, 0xe0}, {&(0x7f0000000000)=""/40, 0x28}, {&(0x7f0000000180)=""/59, 0x3b}], 0x7}, 0x40000000) socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) 10:50:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 10:50:38 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}], 0x1, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:38 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d4, &(0x7f0000000000)={0x0, 0x0}) 10:50:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 10:50:38 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:38 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d4, &(0x7f0000000000)={0x0, 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x4) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d4, &(0x7f0000000000)={0x0, 0x0}) (async) 10:50:38 executing program 2: unshare(0x40000400) unshare(0x90100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'mangle\x00', 0x0, [0x5, 0x0, 0xfffffffd, 0x1]}, &(0x7f0000000280)=0x54) 10:50:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf9051a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x3, 0x9, 0x0, 0x8}) (async) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) (async) sendfile(r1, r2, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x8000000000010) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000040)=0x76, 0x4) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf9051a7511bf74", 0x49, 0x20c49a, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/242, 0xf2}, {&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000580)=""/159, 0x9f}, {&(0x7f0000000640)=""/224, 0xe0}, {&(0x7f0000000000)=""/40, 0x28}, {&(0x7f0000000180)=""/59, 0x3b}], 0x7}, 0x40000000) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) 10:50:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 10:50:38 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:38 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d4, &(0x7f0000000000)={0x0, 0x0}) 10:50:38 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000006000000000000000000850000007500000085125633c042c19953"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_mb_release_inode_pa\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) 10:50:39 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000006000000000000000000850000007500000085125633c042c19953"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_mb_release_inode_pa\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) 10:50:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 211.137758][ T25] kauditd_printk_skb: 18 callbacks suppressed [ 211.137775][ T25] audit: type=1804 audit(1645786238.969:96): pid=7957 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/109/memory.events" dev="sda1" ino=1176 res=1 errno=0 10:50:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffe}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x2, 0x1, 0x409, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x710, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x41}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 10:50:39 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf9051a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) (async) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x3, 0x9, 0x0, 0x8}) (async) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) (async) sendfile(r1, r2, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x8000000000010) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf9051a7511bf74", 0x49, 0x20c49a, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/242, 0xf2}, {&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000580)=""/159, 0x9f}, {&(0x7f0000000640)=""/224, 0xe0}, {&(0x7f0000000000)=""/40, 0x28}, {&(0x7f0000000180)=""/59, 0x3b}], 0x7}, 0x40000000) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) [ 211.236294][ T25] audit: type=1804 audit(1645786239.019:97): pid=7957 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/109/memory.events" dev="sda1" ino=1176 res=1 errno=0 10:50:39 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000006000000000000000000850000007500000085125633c042c19953"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_mb_release_inode_pa\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000006000000000000000000850000007500000085125633c042c19953"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_mb_release_inode_pa\x00', r1}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) (async) 10:50:39 executing program 2: unshare(0x40000400) unshare(0x90100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'mangle\x00', 0x0, [0x5, 0x0, 0xfffffffd, 0x1]}, &(0x7f0000000280)=0x54) unshare(0x40000400) (async) unshare(0x90100) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'mangle\x00', 0x0, [0x5, 0x0, 0xfffffffd, 0x1]}, &(0x7f0000000280)=0x54) (async) 10:50:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffe}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x2, 0x1, 0x409, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x710, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x41}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (rerun: 64) 10:50:39 executing program 5: r0 = socket(0x0, 0xe, 0x7fff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x40}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x83, &(0x7f0000000000)={r3}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x6, 0x9, 0x9, 0x1, 0x2, 0x1, 0x5, r3}, &(0x7f0000000140)=0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000ffffff807c000000000000009500000000000000ff9d8e6ef40707397e530e0827a742b43dd1c6c07554376904633a3ff8922210929e910a5679263743ccc8dd39ace2dd9d14c265fdb39b78caf36ff1977355fbc23afdd10dbfe70ff5c7362f1c6c73d826213fb77f02ed25a763a22a345ad205a1e55a869a5446a193305f679f228ce44766622bc8574cbca78ef9da975d9fed9e22cfaafd9f713fedf6c154b552617e41c506756ecd09c6503b9267805c0f9680dc02994508652b1124a955ac4d7fb5aca7d67bcb41fdaf5431e23b42c0c8033dfa19000000000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0x1000, &(0x7f0000000880)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = socket(0x1a, 0x2, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r3, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000300)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000340)={0x8, 0x3, 0x408, 0x9, 0x3, 0xe0, 0x80010000, 0x6, r5}, &(0x7f00000003c0)=0x20) 10:50:39 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:39 executing program 0: unshare(0x42000200) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x7f}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c080}, 0x40c01) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x4000000) 10:50:39 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffe}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x2, 0x1, 0x409, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x710, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x41}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 10:50:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 10:50:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x60, 0x24}}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfc76, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe77}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/64, 0x40}, {&(0x7f0000000340)=""/167, 0xa7}, {&(0x7f0000000400)=""/203, 0xcb}], 0x3, &(0x7f0000000500)=""/227, 0xe3}, 0x2000) 10:50:39 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:39 executing program 0: unshare(0x42000200) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x7f}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c080}, 0x40c01) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x4000000) 10:50:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x60, 0x24}}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfc76, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe77}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/64, 0x40}, {&(0x7f0000000340)=""/167, 0xa7}, {&(0x7f0000000400)=""/203, 0xcb}], 0x3, &(0x7f0000000500)=""/227, 0xe3}, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x60, 0x24}}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfc76, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe77}, 0x48) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/64, 0x40}, {&(0x7f0000000340)=""/167, 0xa7}, {&(0x7f0000000400)=""/203, 0xcb}], 0x3, &(0x7f0000000500)=""/227, 0xe3}, 0x2000) (async) 10:50:40 executing program 2: unshare(0x40000400) unshare(0x90100) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'mangle\x00', 0x0, [0x5, 0x0, 0xfffffffd, 0x1]}, &(0x7f0000000280)=0x54) 10:50:40 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, 0x0}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:40 executing program 5: r0 = socket(0x0, 0xe, 0x7fff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x40}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x83, &(0x7f0000000000)={r3}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x6, 0x9, 0x9, 0x1, 0x2, 0x1, 0x5, r3}, &(0x7f0000000140)=0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000ffffff807c000000000000009500000000000000ff9d8e6ef40707397e530e0827a742b43dd1c6c07554376904633a3ff8922210929e910a5679263743ccc8dd39ace2dd9d14c265fdb39b78caf36ff1977355fbc23afdd10dbfe70ff5c7362f1c6c73d826213fb77f02ed25a763a22a345ad205a1e55a869a5446a193305f679f228ce44766622bc8574cbca78ef9da975d9fed9e22cfaafd9f713fedf6c154b552617e41c506756ecd09c6503b9267805c0f9680dc02994508652b1124a955ac4d7fb5aca7d67bcb41fdaf5431e23b42c0c8033dfa19000000000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0x1000, &(0x7f0000000880)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = socket(0x1a, 0x2, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r3, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000300)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000340)={0x8, 0x3, 0x408, 0x9, 0x3, 0xe0, 0x80010000, 0x6, r5}, &(0x7f00000003c0)=0x20) socket(0x0, 0xe, 0x7fff) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x40}]}, &(0x7f0000000200)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x83, &(0x7f0000000000)={r3}, 0x8) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x6, 0x9, 0x9, 0x1, 0x2, 0x1, 0x5, r3}, &(0x7f0000000140)=0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000ffffff807c000000000000009500000000000000ff9d8e6ef40707397e530e0827a742b43dd1c6c07554376904633a3ff8922210929e910a5679263743ccc8dd39ace2dd9d14c265fdb39b78caf36ff1977355fbc23afdd10dbfe70ff5c7362f1c6c73d826213fb77f02ed25a763a22a345ad205a1e55a869a5446a193305f679f228ce44766622bc8574cbca78ef9da975d9fed9e22cfaafd9f713fedf6c154b552617e41c506756ecd09c6503b9267805c0f9680dc02994508652b1124a955ac4d7fb5aca7d67bcb41fdaf5431e23b42c0c8033dfa19000000000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0x1000, &(0x7f0000000880)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) socket(0x1a, 0x2, 0x1) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r3, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000300)=0x84) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000340)={0x8, 0x3, 0x408, 0x9, 0x3, 0xe0, 0x80010000, 0x6, r5}, &(0x7f00000003c0)=0x20) (async) 10:50:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x60, 0x24}}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfc76, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe77}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/64, 0x40}, {&(0x7f0000000340)=""/167, 0xa7}, {&(0x7f0000000400)=""/203, 0xcb}], 0x3, &(0x7f0000000500)=""/227, 0xe3}, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x60, 0x24}}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfc76, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe77}, 0x48) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/64, 0x40}, {&(0x7f0000000340)=""/167, 0xa7}, {&(0x7f0000000400)=""/203, 0xcb}], 0x3, &(0x7f0000000500)=""/227, 0xe3}, 0x2000) (async) 10:50:40 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, 0x0}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 10:50:40 executing program 0: unshare(0x42000200) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x7f}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c080}, 0x40c01) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x4000000) unshare(0x42000200) (async) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x7f}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c080}, 0x40c01) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x4000000) (async) 10:50:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 10:50:40 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:40 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, 0x0}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:40 executing program 5: r0 = socket(0x0, 0xe, 0x7fff) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x40}]}, &(0x7f0000000200)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x83, &(0x7f0000000000)={r3}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x6, 0x9, 0x9, 0x1, 0x2, 0x1, 0x5, r3}, &(0x7f0000000140)=0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000ffffff807c000000000000009500000000000000ff9d8e6ef40707397e530e0827a742b43dd1c6c07554376904633a3ff8922210929e910a5679263743ccc8dd39ace2dd9d14c265fdb39b78caf36ff1977355fbc23afdd10dbfe70ff5c7362f1c6c73d826213fb77f02ed25a763a22a345ad205a1e55a869a5446a193305f679f228ce44766622bc8574cbca78ef9da975d9fed9e22cfaafd9f713fedf6c154b552617e41c506756ecd09c6503b9267805c0f9680dc02994508652b1124a955ac4d7fb5aca7d67bcb41fdaf5431e23b42c0c8033dfa19000000000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0x1000, &(0x7f0000000880)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = socket(0x1a, 0x2, 0x1) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r3, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000300)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000340)={0x8, 0x3, 0x408, 0x9, 0x3, 0xe0, 0x80010000, 0x6, r5}, &(0x7f00000003c0)=0x20) 10:50:40 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:40 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:40 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:40 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 10:50:40 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:40 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 213.382336][ T25] audit: type=1804 audit(1645786241.209:98): pid=8088 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/113/memory.events" dev="sda1" ino=1169 res=1 errno=0 10:50:41 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="c59f69ab2cd4cbfc9aca3da4a801181e440829a01aea1d8edcc87039fb74f5540cb46d71d27c01ff41b018f628860f6548f6f8af3692300a6a661a53ac67c57f5b0d6a09631321cd16656ae39d697db51d6906752d3e6c9536ca492a9a8b3131bc4ec0c94eaa06715b9c9a0039f8e82a5f85e44da48632e4e7827e75a81f4a11f6ced797bc71549e62b8466553259a094fee645ccd0284762712514d9b95587f9891250088d8b3327956a4cf7caa1b295ff4812226782b9d60f8f03691b72694f09b4a389d09a6ca02a5386975ebe1fe99", 0xd1}], 0x1}}], 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'vcan0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'tunl0\x00', 0x1}) ioctl$TUNATTACHFILTER(r0, 0x400454ca, &(0x7f0000000100)={0x0, 0x0}) ioctl$TUNSETOWNER(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETIFF(r0, 0x800454dd, &(0x7f0000000000)={'macsec0\x00'}) 10:50:41 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{0x0}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:41 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 10:50:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) 10:50:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 10:50:41 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:41 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{0x0}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:41 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 213.733561][ T8099] tun0: tun_chr_ioctl cmd 2147767517 10:50:41 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="c59f69ab2cd4cbfc9aca3da4a801181e440829a01aea1d8edcc87039fb74f5540cb46d71d27c01ff41b018f628860f6548f6f8af3692300a6a661a53ac67c57f5b0d6a09631321cd16656ae39d697db51d6906752d3e6c9536ca492a9a8b3131bc4ec0c94eaa06715b9c9a0039f8e82a5f85e44da48632e4e7827e75a81f4a11f6ced797bc71549e62b8466553259a094fee645ccd0284762712514d9b95587f9891250088d8b3327956a4cf7caa1b295ff4812226782b9d60f8f03691b72694f09b4a389d09a6ca02a5386975ebe1fe99", 0xd1}], 0x1}}], 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'vcan0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'tunl0\x00', 0x1}) ioctl$TUNATTACHFILTER(r0, 0x400454ca, &(0x7f0000000100)={0x0, 0x0}) ioctl$TUNSETOWNER(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETIFF(r0, 0x800454dd, &(0x7f0000000000)={'macsec0\x00'}) sendmmsg(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="c59f69ab2cd4cbfc9aca3da4a801181e440829a01aea1d8edcc87039fb74f5540cb46d71d27c01ff41b018f628860f6548f6f8af3692300a6a661a53ac67c57f5b0d6a09631321cd16656ae39d697db51d6906752d3e6c9536ca492a9a8b3131bc4ec0c94eaa06715b9c9a0039f8e82a5f85e44da48632e4e7827e75a81f4a11f6ced797bc71549e62b8466553259a094fee645ccd0284762712514d9b95587f9891250088d8b3327956a4cf7caa1b295ff4812226782b9d60f8f03691b72694f09b4a389d09a6ca02a5386975ebe1fe99", 0xd1}], 0x1}}], 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'vcan0\x00'}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'tunl0\x00', 0x1}) (async) ioctl$TUNATTACHFILTER(r0, 0x400454ca, &(0x7f0000000100)={0x0, 0x0}) (async) ioctl$TUNSETOWNER(r0, 0x400454c9, 0xffffffffffffffff) (async) ioctl$TUNGETIFF(r0, 0x800454dd, &(0x7f0000000000)={'macsec0\x00'}) (async) 10:50:41 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{0x0}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:41 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 213.985962][ T8116] tun0: tun_chr_ioctl cmd 2147767517 10:50:41 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:41 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:42 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x7f, 0x9, 0x3, 0x43, @mcast1, @dev={0xfe, 0x80, '\x00', 0x16}, 0x8000, 0x7800, 0x5c, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'sit0\x00', r1, 0x2f, 0x3, 0x6, 0x401, 0xa6, @private0, @remote, 0x20, 0x7, 0x6, 0xfffff29c}}) sendmmsg$inet6(r0, &(0x7f0000000d40)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote, 0xdc07}, 0x1c, 0x0, 0x0, &(0x7f0000000780)=[@pktinfo={{0x24, 0x29, 0x32, {@private1}}}], 0x28}}], 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffd}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x1f4) pipe(&(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='ertpan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, r5, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x3f, 0x9, 0x7ff, 0xa, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x700, 0x3, 0x4f}}) [ 214.123867][ T25] audit: type=1804 audit(1645786241.959:99): pid=8110 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/114/memory.events" dev="sda1" ino=1157 res=1 errno=0 10:50:42 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) (async) sendfile(r1, r2, 0x0, 0xf03b0000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) (async) openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) 10:50:42 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="c59f69ab2cd4cbfc9aca3da4a801181e440829a01aea1d8edcc87039fb74f5540cb46d71d27c01ff41b018f628860f6548f6f8af3692300a6a661a53ac67c57f5b0d6a09631321cd16656ae39d697db51d6906752d3e6c9536ca492a9a8b3131bc4ec0c94eaa06715b9c9a0039f8e82a5f85e44da48632e4e7827e75a81f4a11f6ced797bc71549e62b8466553259a094fee645ccd0284762712514d9b95587f9891250088d8b3327956a4cf7caa1b295ff4812226782b9d60f8f03691b72694f09b4a389d09a6ca02a5386975ebe1fe99", 0xd1}], 0x1}}], 0x1, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'vcan0\x00'}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'tunl0\x00', 0x1}) (async) ioctl$TUNATTACHFILTER(r0, 0x400454ca, &(0x7f0000000100)={0x0, 0x0}) ioctl$TUNSETOWNER(r0, 0x400454c9, 0xffffffffffffffff) (async) ioctl$TUNGETIFF(r0, 0x800454dd, &(0x7f0000000000)={'macsec0\x00'}) 10:50:42 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 214.419061][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:50:42 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 214.529815][ T8147] tun0: tun_chr_ioctl cmd 2147767517 10:50:42 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) 10:50:42 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x7f, 0x9, 0x3, 0x43, @mcast1, @dev={0xfe, 0x80, '\x00', 0x16}, 0x8000, 0x7800, 0x5c, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'sit0\x00', r1, 0x2f, 0x3, 0x6, 0x401, 0xa6, @private0, @remote, 0x20, 0x7, 0x6, 0xfffff29c}}) (async) sendmmsg$inet6(r0, &(0x7f0000000d40)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote, 0xdc07}, 0x1c, 0x0, 0x0, &(0x7f0000000780)=[@pktinfo={{0x24, 0x29, 0x32, {@private1}}}], 0x28}}], 0x2, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffd}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x1f4) (async) pipe(&(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) (async) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='ertpan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, r5, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x3f, 0x9, 0x7ff, 0xa, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x700, 0x3, 0x4f}}) 10:50:42 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x1, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:42 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) (async, rerun: 32) sendfile(r1, r2, 0x0, 0xf03b0000) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) (async) openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) (async) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) [ 214.855116][ T25] audit: type=1804 audit(1645786242.689:100): pid=8151 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/115/memory.events" dev="sda1" ino=1177 res=1 errno=0 [ 214.876292][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:50:42 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x1, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 10:50:42 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (fail_nth: 1) 10:50:42 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x1, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:43 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x7f, 0x9, 0x3, 0x43, @mcast1, @dev={0xfe, 0x80, '\x00', 0x16}, 0x8000, 0x7800, 0x5c, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'sit0\x00', r1, 0x2f, 0x3, 0x6, 0x401, 0xa6, @private0, @remote, 0x20, 0x7, 0x6, 0xfffff29c}}) (async) sendmmsg$inet6(r0, &(0x7f0000000d40)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote, 0xdc07}, 0x1c, 0x0, 0x0, &(0x7f0000000780)=[@pktinfo={{0x24, 0x29, 0x32, {@private1}}}], 0x28}}], 0x2, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffd}}, 0xe8) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x1f4) (async) pipe(&(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) (async) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='ertpan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, r5, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x3f, 0x9, 0x7ff, 0xa, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x700, 0x3, 0x4f}}) 10:50:43 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:43 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 215.349864][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 215.413190][ T8212] FAULT_INJECTION: forcing a failure. [ 215.413190][ T8212] name failslab, interval 1, probability 0, space 0, times 1 10:50:43 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:43 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 215.493590][ T25] audit: type=1804 audit(1645786243.329:101): pid=8195 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3056829688/syzkaller.0VW25A/137/memory.events" dev="sda1" ino=1168 res=1 errno=0 [ 215.542514][ T8212] CPU: 0 PID: 8212 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 215.552989][ T8212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.563065][ T8212] Call Trace: [ 215.566356][ T8212] [ 215.569301][ T8212] dump_stack_lvl+0xcd/0x134 [ 215.573925][ T8212] should_fail.cold+0x5/0xa [ 215.578456][ T8212] ? getname_flags.part.0+0x50/0x4f0 [ 215.583768][ T8212] should_failslab+0x5/0x10 [ 215.588298][ T8212] kmem_cache_alloc+0x5e/0x4b0 10:50:43 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 215.593101][ T8212] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 215.599111][ T8212] getname_flags.part.0+0x50/0x4f0 [ 215.604245][ T8212] getname+0x8e/0xd0 [ 215.608161][ T8212] do_sys_openat2+0xf5/0x4d0 [ 215.612770][ T8212] ? find_held_lock+0x2d/0x110 [ 215.617562][ T8212] ? build_open_flags+0x6f0/0x6f0 [ 215.622622][ T8212] ? lock_downgrade+0x6e0/0x6e0 [ 215.627499][ T8212] __x64_sys_openat+0x13f/0x1f0 [ 215.632369][ T8212] ? __ia32_sys_open+0x1c0/0x1c0 [ 215.637333][ T8212] ? syscall_enter_from_user_mode+0x21/0x70 [ 215.643255][ T8212] do_syscall_64+0x35/0xb0 [ 215.647701][ T8212] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 215.653607][ T8212] RIP: 0033:0x7f92796d4059 [ 215.658023][ T8212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 215.677631][ T8212] RSP: 002b:00007f9278007168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 215.686046][ T8212] RAX: ffffffffffffffda RBX: 00007f92797e7100 RCX: 00007f92796d4059 [ 215.694013][ T8212] RDX: 000000000000275a RSI: 0000000020000040 RDI: ffffffffffffff9c [ 215.701983][ T8212] RBP: 00007f92780071d0 R08: 0000000000000000 R09: 0000000000000000 [ 215.709954][ T8212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.717930][ T8212] R13: 00007fff831519ef R14: 00007f9278007300 R15: 0000000000022000 [ 215.725920][ T8212] 10:50:43 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x275a, 0x0) openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cpu.stat\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x111906, 0x800, 0x0, 0x1}, 0x2a) 10:50:43 executing program 2: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x1, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 215.824203][ T25] audit: type=1804 audit(1645786243.659:102): pid=8202 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/116/memory.events" dev="sda1" ino=1179 res=1 errno=0 10:50:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) recvmmsg(r2, &(0x7f00000035c0)=[{{&(0x7f0000000140)=@rc={0x1f, @none}, 0x80, &(0x7f0000002600)=[{&(0x7f0000000240)=""/132, 0x84}, {&(0x7f0000000040)}, {&(0x7f00000000c0)=""/62, 0x3e}, {&(0x7f0000000300)=""/230, 0xe6}, {&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000000400)=""/107, 0x6b}, {&(0x7f0000000480)=""/153, 0x99}, {&(0x7f0000000540)=""/150, 0x96}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/4096, 0x1000}], 0xa, &(0x7f0000003700)=""/160, 0xa0}, 0xfffffffc}, {{&(0x7f0000002780)=@nl, 0x80, &(0x7f0000002880)=[{&(0x7f0000002800)=""/83, 0x53}], 0x1, &(0x7f00000028c0)=""/250, 0xfa}, 0x53}, {{&(0x7f00000029c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002a40)=""/27, 0x1b}, {&(0x7f0000002a80)=""/229, 0xe5}, {&(0x7f0000002b80)=""/243, 0xf3}, {&(0x7f0000002c80)=""/32, 0x20}, {&(0x7f0000002cc0)=""/214, 0xd6}, {&(0x7f0000002dc0)=""/189, 0xbd}, {&(0x7f0000002e80)=""/210, 0xd2}], 0x7}, 0x89d}, {{&(0x7f0000003000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000003080)=""/42, 0x2a}], 0x1, &(0x7f0000003100)=""/196, 0xc4}, 0x4}, {{&(0x7f0000003200)=@rc={0x1f, @none}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003280)=""/98, 0x62}, {&(0x7f0000003300)=""/56, 0x38}, {&(0x7f0000003340)=""/105, 0x69}, {&(0x7f00000033c0)=""/234, 0xea}], 0x4, &(0x7f0000003500)=""/177, 0xb1}, 0x67e}], 0x5, 0x0, 0x0) 10:50:43 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (fail_nth: 2) 10:50:43 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:43 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:43 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x275a, 0x0) openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) (async, rerun: 32) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cpu.stat\x00', 0x7a05, 0x1700) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) (async) sendfile(r2, r3, 0x0, 0xf03b0000) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) (async, rerun: 32) socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x111906, 0x800, 0x0, 0x1}, 0x2a) 10:50:43 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:43 executing program 2: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:44 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:44 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 216.225121][ T8247] FAULT_INJECTION: forcing a failure. [ 216.225121][ T8247] name fail_usercopy, interval 1, probability 0, space 0, times 1 10:50:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x275a, 0x0) openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cpu.stat\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x111906, 0x800, 0x0, 0x1}, 0x2a) 10:50:44 executing program 2: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 216.385889][ T8247] CPU: 0 PID: 8247 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 216.396345][ T8247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.406416][ T8247] Call Trace: [ 216.409709][ T8247] [ 216.412661][ T8247] dump_stack_lvl+0xcd/0x134 [ 216.417280][ T8247] should_fail.cold+0x5/0xa [ 216.421811][ T8247] strncpy_from_user+0x34/0x3e0 [ 216.425788][ T25] audit: type=1804 audit(1645786244.219:103): pid=8240 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/117/memory.events" dev="sda1" ino=1174 res=1 errno=0 [ 216.426689][ T8247] getname_flags.part.0+0x95/0x4f0 [ 216.426729][ T8247] getname+0x8e/0xd0 [ 216.426759][ T8247] do_sys_openat2+0xf5/0x4d0 [ 216.466185][ T8247] ? find_held_lock+0x2d/0x110 [ 216.470973][ T8247] ? build_open_flags+0x6f0/0x6f0 [ 216.476021][ T8247] ? lock_downgrade+0x6e0/0x6e0 [ 216.480900][ T8247] __x64_sys_openat+0x13f/0x1f0 [ 216.485771][ T8247] ? __ia32_sys_open+0x1c0/0x1c0 [ 216.490732][ T8247] ? syscall_enter_from_user_mode+0x21/0x70 [ 216.496660][ T8247] do_syscall_64+0x35/0xb0 [ 216.501102][ T8247] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 216.507010][ T8247] RIP: 0033:0x7f92796d4059 [ 216.511436][ T8247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 216.531056][ T8247] RSP: 002b:00007f9278007168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 216.539493][ T8247] RAX: ffffffffffffffda RBX: 00007f92797e7100 RCX: 00007f92796d4059 [ 216.547480][ T8247] RDX: 000000000000275a RSI: 0000000020000040 RDI: ffffffffffffff9c [ 216.555463][ T8247] RBP: 00007f92780071d0 R08: 0000000000000000 R09: 0000000000000000 [ 216.563446][ T8247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.571431][ T8247] R13: 00007fff831519ef R14: 00007f9278007300 R15: 0000000000022000 [ 216.579472][ T8247] 10:50:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r2, 0x1) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) (async) recvmmsg(r2, &(0x7f00000035c0)=[{{&(0x7f0000000140)=@rc={0x1f, @none}, 0x80, &(0x7f0000002600)=[{&(0x7f0000000240)=""/132, 0x84}, {&(0x7f0000000040)}, {&(0x7f00000000c0)=""/62, 0x3e}, {&(0x7f0000000300)=""/230, 0xe6}, {&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000000400)=""/107, 0x6b}, {&(0x7f0000000480)=""/153, 0x99}, {&(0x7f0000000540)=""/150, 0x96}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/4096, 0x1000}], 0xa, &(0x7f0000003700)=""/160, 0xa0}, 0xfffffffc}, {{&(0x7f0000002780)=@nl, 0x80, &(0x7f0000002880)=[{&(0x7f0000002800)=""/83, 0x53}], 0x1, &(0x7f00000028c0)=""/250, 0xfa}, 0x53}, {{&(0x7f00000029c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002a40)=""/27, 0x1b}, {&(0x7f0000002a80)=""/229, 0xe5}, {&(0x7f0000002b80)=""/243, 0xf3}, {&(0x7f0000002c80)=""/32, 0x20}, {&(0x7f0000002cc0)=""/214, 0xd6}, {&(0x7f0000002dc0)=""/189, 0xbd}, {&(0x7f0000002e80)=""/210, 0xd2}], 0x7}, 0x89d}, {{&(0x7f0000003000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000003080)=""/42, 0x2a}], 0x1, &(0x7f0000003100)=""/196, 0xc4}, 0x4}, {{&(0x7f0000003200)=@rc={0x1f, @none}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003280)=""/98, 0x62}, {&(0x7f0000003300)=""/56, 0x38}, {&(0x7f0000003340)=""/105, 0x69}, {&(0x7f00000033c0)=""/234, 0xea}], 0x4, &(0x7f0000003500)=""/177, 0xb1}, 0x67e}], 0x5, 0x0, 0x0) 10:50:44 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:44 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:44 executing program 5: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:44 executing program 2: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (fail_nth: 3) 10:50:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) recvmmsg(r2, &(0x7f00000035c0)=[{{&(0x7f0000000140)=@rc={0x1f, @none}, 0x80, &(0x7f0000002600)=[{&(0x7f0000000240)=""/132, 0x84}, {&(0x7f0000000040)}, {&(0x7f00000000c0)=""/62, 0x3e}, {&(0x7f0000000300)=""/230, 0xe6}, {&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000000400)=""/107, 0x6b}, {&(0x7f0000000480)=""/153, 0x99}, {&(0x7f0000000540)=""/150, 0x96}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/4096, 0x1000}], 0xa, &(0x7f0000003700)=""/160, 0xa0}, 0xfffffffc}, {{&(0x7f0000002780)=@nl, 0x80, &(0x7f0000002880)=[{&(0x7f0000002800)=""/83, 0x53}], 0x1, &(0x7f00000028c0)=""/250, 0xfa}, 0x53}, {{&(0x7f00000029c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002a40)=""/27, 0x1b}, {&(0x7f0000002a80)=""/229, 0xe5}, {&(0x7f0000002b80)=""/243, 0xf3}, {&(0x7f0000002c80)=""/32, 0x20}, {&(0x7f0000002cc0)=""/214, 0xd6}, {&(0x7f0000002dc0)=""/189, 0xbd}, {&(0x7f0000002e80)=""/210, 0xd2}], 0x7}, 0x89d}, {{&(0x7f0000003000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000003080)=""/42, 0x2a}], 0x1, &(0x7f0000003100)=""/196, 0xc4}, 0x4}, {{&(0x7f0000003200)=@rc={0x1f, @none}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003280)=""/98, 0x62}, {&(0x7f0000003300)=""/56, 0x38}, {&(0x7f0000003340)=""/105, 0x69}, {&(0x7f00000033c0)=""/234, 0xea}], 0x4, &(0x7f0000003500)=""/177, 0xb1}, 0x67e}], 0x5, 0x0, 0x0) 10:50:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:44 executing program 2: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:44 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:44 executing program 2: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 217.096993][ T8279] FAULT_INJECTION: forcing a failure. [ 217.096993][ T8279] name failslab, interval 1, probability 0, space 0, times 0 [ 217.159249][ T25] audit: type=1804 audit(1645786244.989:104): pid=8274 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/118/memory.events" dev="sda1" ino=1181 res=1 errno=0 [ 217.168328][ T8279] CPU: 0 PID: 8279 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 217.195691][ T8279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.205746][ T8279] Call Trace: [ 217.209022][ T8279] [ 217.211948][ T8279] dump_stack_lvl+0xcd/0x134 [ 217.216542][ T8279] should_fail.cold+0x5/0xa [ 217.221045][ T8279] ? __alloc_file+0x21/0x280 [ 217.225643][ T8279] should_failslab+0x5/0x10 [ 217.230147][ T8279] kmem_cache_alloc+0x5e/0x4b0 [ 217.234915][ T8279] ? stack_trace_save+0x8c/0xc0 [ 217.239769][ T8279] __alloc_file+0x21/0x280 [ 217.244188][ T8279] alloc_empty_file+0x6d/0x170 [ 217.248956][ T8279] path_openat+0xe4/0x2940 [ 217.253378][ T8279] ? lock_chain_count+0x20/0x20 [ 217.258232][ T8279] ? path_lookupat+0x860/0x860 [ 217.262996][ T8279] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 217.268991][ T8279] do_filp_open+0x1aa/0x400 [ 217.273494][ T8279] ? may_open_dev+0xf0/0xf0 [ 217.277998][ T8279] ? alloc_fd+0x2f0/0x670 [ 217.282331][ T8279] ? lock_downgrade+0x6e0/0x6e0 [ 217.287187][ T8279] ? rwlock_bug.part.0+0x90/0x90 [ 217.292131][ T8279] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 217.298380][ T8279] ? _find_next_bit+0x1e3/0x260 [ 217.303232][ T8279] ? _raw_spin_unlock+0x24/0x40 [ 217.308080][ T8279] ? alloc_fd+0x2f0/0x670 [ 217.312418][ T8279] do_sys_openat2+0x16d/0x4d0 [ 217.317095][ T8279] ? find_held_lock+0x2d/0x110 [ 217.321865][ T8279] ? build_open_flags+0x6f0/0x6f0 [ 217.326893][ T8279] ? lock_downgrade+0x6e0/0x6e0 [ 217.331751][ T8279] __x64_sys_openat+0x13f/0x1f0 [ 217.336603][ T8279] ? __ia32_sys_open+0x1c0/0x1c0 [ 217.341552][ T8279] ? syscall_enter_from_user_mode+0x21/0x70 [ 217.347454][ T8279] do_syscall_64+0x35/0xb0 [ 217.351873][ T8279] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 217.357762][ T8279] RIP: 0033:0x7f92796d4059 [ 217.362173][ T8279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 217.381774][ T8279] RSP: 002b:00007f9278007168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 217.390179][ T8279] RAX: ffffffffffffffda RBX: 00007f92797e7100 RCX: 00007f92796d4059 [ 217.398145][ T8279] RDX: 000000000000275a RSI: 0000000020000040 RDI: ffffffffffffff9c 10:50:45 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 217.406106][ T8279] RBP: 00007f92780071d0 R08: 0000000000000000 R09: 0000000000000000 [ 217.414066][ T8279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.422027][ T8279] R13: 00007fff831519ef R14: 00007f9278007300 R15: 0000000000022000 [ 217.430001][ T8279] 10:50:45 executing program 2: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) shutdown(r2, 0x1) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) (async) recvmmsg(r2, &(0x7f00000035c0)=[{{&(0x7f0000000140)=@rc={0x1f, @none}, 0x80, &(0x7f0000002600)=[{&(0x7f0000000240)=""/132, 0x84}, {&(0x7f0000000040)}, {&(0x7f00000000c0)=""/62, 0x3e}, {&(0x7f0000000300)=""/230, 0xe6}, {&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000000400)=""/107, 0x6b}, {&(0x7f0000000480)=""/153, 0x99}, {&(0x7f0000000540)=""/150, 0x96}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/4096, 0x1000}], 0xa, &(0x7f0000003700)=""/160, 0xa0}, 0xfffffffc}, {{&(0x7f0000002780)=@nl, 0x80, &(0x7f0000002880)=[{&(0x7f0000002800)=""/83, 0x53}], 0x1, &(0x7f00000028c0)=""/250, 0xfa}, 0x53}, {{&(0x7f00000029c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002a40)=""/27, 0x1b}, {&(0x7f0000002a80)=""/229, 0xe5}, {&(0x7f0000002b80)=""/243, 0xf3}, {&(0x7f0000002c80)=""/32, 0x20}, {&(0x7f0000002cc0)=""/214, 0xd6}, {&(0x7f0000002dc0)=""/189, 0xbd}, {&(0x7f0000002e80)=""/210, 0xd2}], 0x7}, 0x89d}, {{&(0x7f0000003000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000003080)=""/42, 0x2a}], 0x1, &(0x7f0000003100)=""/196, 0xc4}, 0x4}, {{&(0x7f0000003200)=@rc={0x1f, @none}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003280)=""/98, 0x62}, {&(0x7f0000003300)=""/56, 0x38}, {&(0x7f0000003340)=""/105, 0x69}, {&(0x7f00000033c0)=""/234, 0xea}], 0x4, &(0x7f0000003500)=""/177, 0xb1}, 0x67e}], 0x5, 0x0, 0x0) 10:50:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:45 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (fail_nth: 4) 10:50:45 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{0x0}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:45 executing program 2: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:45 executing program 5: sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x7d8ff074f51a1d30}, 0x40089) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1007, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 10:50:45 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{0x0}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 217.994443][ T8313] FAULT_INJECTION: forcing a failure. [ 217.994443][ T8313] name failslab, interval 1, probability 0, space 0, times 0 10:50:45 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 218.110692][ T8313] CPU: 0 PID: 8313 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 218.121152][ T8313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.131225][ T8313] Call Trace: [ 218.134512][ T8313] [ 218.137456][ T8313] dump_stack_lvl+0xcd/0x134 [ 218.142068][ T8313] should_fail.cold+0x5/0xa [ 218.146593][ T8313] ? security_file_alloc+0x34/0x170 [ 218.151801][ T8313] should_failslab+0x5/0x10 [ 218.156319][ T8313] kmem_cache_alloc+0x5e/0x4b0 10:50:46 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{0x0}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:46 executing program 5: sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x7d8ff074f51a1d30}, 0x40089) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1007, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 218.161111][ T8313] security_file_alloc+0x34/0x170 [ 218.166161][ T8313] __alloc_file+0xd8/0x280 [ 218.170604][ T8313] alloc_empty_file+0x6d/0x170 [ 218.175399][ T8313] path_openat+0xe4/0x2940 [ 218.179844][ T8313] ? local_lock_release+0x1d/0x60 [ 218.184889][ T8313] ? path_lookupat+0x860/0x860 [ 218.189675][ T8313] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 218.195702][ T8313] do_filp_open+0x1aa/0x400 [ 218.200233][ T8313] ? may_open_dev+0xf0/0xf0 [ 218.204759][ T8313] ? alloc_fd+0x2f0/0x670 [ 218.209110][ T8313] ? lock_downgrade+0x6e0/0x6e0 [ 218.213984][ T8313] ? rwlock_bug.part.0+0x90/0x90 [ 218.218945][ T8313] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 218.225210][ T8313] ? _find_next_bit+0x1e3/0x260 [ 218.230083][ T8313] ? _raw_spin_unlock+0x24/0x40 [ 218.234946][ T8313] ? alloc_fd+0x2f0/0x670 [ 218.239302][ T8313] do_sys_openat2+0x16d/0x4d0 [ 218.243994][ T8313] ? find_held_lock+0x2d/0x110 [ 218.248777][ T8313] ? build_open_flags+0x6f0/0x6f0 10:50:46 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 218.253168][ T25] audit: type=1804 audit(1645786245.939:105): pid=8306 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/119/memory.events" dev="sda1" ino=1176 res=1 errno=0 [ 218.253819][ T8313] ? lock_downgrade+0x6e0/0x6e0 [ 218.253859][ T8313] __x64_sys_openat+0x13f/0x1f0 [ 218.289367][ T8313] ? __ia32_sys_open+0x1c0/0x1c0 [ 218.294331][ T8313] ? syscall_enter_from_user_mode+0x21/0x70 [ 218.300251][ T8313] do_syscall_64+0x35/0xb0 [ 218.304691][ T8313] entry_SYSCALL_64_after_hwframe+0x44/0xae 10:50:46 executing program 5: sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x7d8ff074f51a1d30}, 0x40089) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1007, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 218.310607][ T8313] RIP: 0033:0x7f92796d4059 [ 218.315034][ T8313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 218.334659][ T8313] RSP: 002b:00007f9278007168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 218.343093][ T8313] RAX: ffffffffffffffda RBX: 00007f92797e7100 RCX: 00007f92796d4059 [ 218.351082][ T8313] RDX: 000000000000275a RSI: 0000000020000040 RDI: ffffffffffffff9c [ 218.359071][ T8313] RBP: 00007f92780071d0 R08: 0000000000000000 R09: 0000000000000000 [ 218.367058][ T8313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.375042][ T8313] R13: 00007fff831519ef R14: 00007f9278007300 R15: 0000000000022000 [ 218.383045][ T8313] 10:50:46 executing program 0: r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}]}, 0x38}}, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000380)=0x1f, 0x4) sendto$packet(r0, &(0x7f0000000080)="480a838543a9914b8c53fd111e5d", 0xe, 0x0, &(0x7f00000002c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) 10:50:46 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000003a001901000000000000000002000000040000000800018004000080040008"], 0x28}, 0x1, 0x2000}, 0x0) read(r1, &(0x7f0000000200)=""/216, 0xd8) sendfile(r3, r2, 0x0, 0x200100000002) 10:50:46 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:46 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (fail_nth: 5) 10:50:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 218.836544][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:50:46 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 218.901541][ T25] audit: type=1804 audit(1645786246.729:106): pid=8348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1380880114/syzkaller.P6AUVX/144/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 218.919248][ T8352] FAULT_INJECTION: forcing a failure. [ 218.919248][ T8352] name failslab, interval 1, probability 0, space 0, times 0 10:50:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 218.952529][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:50:46 executing program 0: r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}]}, 0x38}}, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000380)=0x1f, 0x4) sendto$packet(r0, &(0x7f0000000080)="480a838543a9914b8c53fd111e5d", 0xe, 0x0, &(0x7f00000002c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) socket(0x200000100000011, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}]}, 0x38}}, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000380)=0x1f, 0x4) (async) sendto$packet(r0, &(0x7f0000000080)="480a838543a9914b8c53fd111e5d", 0xe, 0x0, &(0x7f00000002c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) 10:50:46 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:46 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x0) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 219.097901][ T8361] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 219.112240][ T8352] CPU: 1 PID: 8352 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 219.122690][ T8352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.132759][ T8352] Call Trace: [ 219.136050][ T8352] [ 219.138989][ T8352] dump_stack_lvl+0xcd/0x134 [ 219.143607][ T8352] should_fail.cold+0x5/0xa [ 219.148138][ T8352] ? tomoyo_realpath_from_path+0xc3/0x620 [ 219.153875][ T8352] should_failslab+0x5/0x10 [ 219.158403][ T8352] __kmalloc+0x72/0x450 [ 219.162585][ T8352] tomoyo_realpath_from_path+0xc3/0x620 [ 219.168152][ T8352] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 219.174422][ T8352] tomoyo_check_open_permission+0x272/0x380 [ 219.180335][ T8352] ? tomoyo_path_number_perm+0x590/0x590 [ 219.185989][ T8352] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 219.191730][ T8352] ? map_id_up+0x178/0x2f0 [ 219.196190][ T8352] ? path_get+0x5d/0x80 [ 219.200367][ T8352] ? lock_downgrade+0x6e0/0x6e0 [ 219.205242][ T8352] ? do_raw_spin_lock+0x120/0x2b0 [ 219.210289][ T8352] ? rwlock_bug.part.0+0x90/0x90 [ 219.215267][ T8352] tomoyo_file_open+0xa3/0xd0 [ 219.219969][ T8352] security_file_open+0x45/0xb0 [ 219.224843][ T8352] do_dentry_open+0x358/0x1250 [ 219.229634][ T8352] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 219.235900][ T8352] ? may_open+0x1f6/0x420 [ 219.240258][ T8352] path_openat+0x1c9e/0x2940 [ 219.244877][ T8352] ? lock_chain_count+0x20/0x20 [ 219.249748][ T8352] ? path_lookupat+0x860/0x860 [ 219.254529][ T8352] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 219.260548][ T8352] do_filp_open+0x1aa/0x400 [ 219.265071][ T8352] ? may_open_dev+0xf0/0xf0 [ 219.269602][ T8352] ? alloc_fd+0x2f0/0x670 [ 219.273958][ T8352] ? rwlock_bug.part.0+0x90/0x90 [ 219.278920][ T8352] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 219.285195][ T8352] ? _find_next_bit+0x1e3/0x260 [ 219.290075][ T8352] ? _raw_spin_unlock+0x24/0x40 [ 219.294949][ T8352] ? alloc_fd+0x2f0/0x670 [ 219.299304][ T8352] do_sys_openat2+0x16d/0x4d0 [ 219.303995][ T8352] ? find_held_lock+0x2d/0x110 [ 219.308782][ T8352] ? build_open_flags+0x6f0/0x6f0 [ 219.313835][ T8352] ? lock_downgrade+0x6e0/0x6e0 [ 219.318714][ T8352] __x64_sys_openat+0x13f/0x1f0 [ 219.323585][ T8352] ? __ia32_sys_open+0x1c0/0x1c0 [ 219.324881][ T25] audit: type=1804 audit(1645786247.049:107): pid=8349 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/120/memory.events" dev="sda1" ino=1175 res=1 errno=0 [ 219.328542][ T8352] ? syscall_enter_from_user_mode+0x21/0x70 [ 219.328578][ T8352] do_syscall_64+0x35/0xb0 [ 219.328606][ T8352] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 219.328634][ T8352] RIP: 0033:0x7f92796d4059 [ 219.328656][ T8352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 10:50:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 219.328680][ T8352] RSP: 002b:00007f9278007168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 219.328707][ T8352] RAX: ffffffffffffffda RBX: 00007f92797e7100 RCX: 00007f92796d4059 [ 219.328725][ T8352] RDX: 000000000000275a RSI: 0000000020000040 RDI: ffffffffffffff9c [ 219.328741][ T8352] RBP: 00007f92780071d0 R08: 0000000000000000 R09: 0000000000000000 [ 219.328757][ T8352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.328773][ T8352] R13: 00007fff831519ef R14: 00007f9278007300 R15: 0000000000022000 [ 219.328803][ T8352] [ 219.456013][ T8352] ERROR: Out of memory at tomoyo_realpath_from_path. [ 219.481204][ T25] audit: type=1804 audit(1645786247.309:108): pid=8352 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/120/memory.events" dev="sda1" ino=1175 res=1 errno=0 10:50:47 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 219.512588][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:50:47 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000003a001901000000000000000002000000040000000800018004000080040008"], 0x28}, 0x1, 0x2000}, 0x0) (async) read(r1, &(0x7f0000000200)=""/216, 0xd8) sendfile(r3, r2, 0x0, 0x200100000002) 10:50:47 executing program 0: r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) (async, rerun: 32) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}]}, 0x38}}, 0x0) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000380)=0x1f, 0x4) (async, rerun: 32) sendto$packet(r0, &(0x7f0000000080)="480a838543a9914b8c53fd111e5d", 0xe, 0x0, &(0x7f00000002c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) 10:50:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (fail_nth: 6) 10:50:47 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 219.651008][ T8389] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:50:47 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 219.740669][ T25] audit: type=1804 audit(1645786247.569:109): pid=8397 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1380880114/syzkaller.P6AUVX/145/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 10:50:47 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x4d07c2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="65727370616e3000000000000000020068da7061aa50a4849621813db37c8d75f1340aa927af75fac82a40941718761ecf3c9c9192d6f94de1ac663bde40c348b1d67129fbd489012a136a03d114eda43070016e5b197a13d8a837cf81fd386190d191e3c3b3240f53525422e88354df0cd985baa986b761563957d20dff2b15b1e25ab6f12ca9a8952b395411dc798bcef1639bac0fe7f5", @ANYRES32=r1, @ANYBLOB="004000400000000400000cd0e91e0018006400004f2f9078ac0001000000000000000000"]}) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f00000000c0)=0x80000003) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000440)="07fd", 0x2}], 0x1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100470c9c018e38615ecb0011abe663c2c44c4ab9bfd52680c7db88db642f31b060f552b447224030d4853fe84ba66a2a42b477e4", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000005a40)={0x0, 0x0, &(0x7f0000005980)=[{&(0x7f0000005380)={0x18, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, r3, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) 10:50:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000040) 10:50:47 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000003a001901000000000000000002000000040000000800018004000080040008"], 0x28}, 0x1, 0x2000}, 0x0) read(r1, &(0x7f0000000200)=""/216, 0xd8) (async) sendfile(r3, r2, 0x0, 0x200100000002) [ 219.926161][ T8412] FAULT_INJECTION: forcing a failure. [ 219.926161][ T8412] name failslab, interval 1, probability 0, space 0, times 0 [ 220.007313][ T8412] CPU: 0 PID: 8412 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 220.017925][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.028005][ T8412] Call Trace: [ 220.031293][ T8412] [ 220.034225][ T8412] dump_stack_lvl+0xcd/0x134 [ 220.038826][ T8412] should_fail.cold+0x5/0xa [ 220.043331][ T8412] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 220.048706][ T8412] should_failslab+0x5/0x10 [ 220.053212][ T8412] __kmalloc+0x72/0x450 [ 220.057371][ T8412] tomoyo_encode2.part.0+0xe9/0x3a0 [ 220.062572][ T8412] tomoyo_encode+0x28/0x50 [ 220.066985][ T8412] tomoyo_realpath_from_path+0x186/0x620 [ 220.072622][ T8412] tomoyo_check_open_permission+0x272/0x380 [ 220.078519][ T8412] ? tomoyo_path_number_perm+0x590/0x590 [ 220.084150][ T8412] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 220.089868][ T8412] ? map_id_up+0x178/0x2f0 [ 220.094305][ T8412] ? path_get+0x5d/0x80 [ 220.098462][ T8412] ? lock_downgrade+0x6e0/0x6e0 [ 220.103313][ T8412] ? do_raw_spin_lock+0x120/0x2b0 [ 220.108352][ T8412] ? rwlock_bug.part.0+0x90/0x90 [ 220.113305][ T8412] tomoyo_file_open+0xa3/0xd0 [ 220.117989][ T8412] security_file_open+0x45/0xb0 [ 220.122849][ T8412] do_dentry_open+0x358/0x1250 [ 220.127622][ T8412] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 220.133869][ T8412] ? may_open+0x1f6/0x420 [ 220.138203][ T8412] path_openat+0x1c9e/0x2940 [ 220.142794][ T8412] ? local_lock_release+0x1d/0x60 [ 220.147816][ T8412] ? path_lookupat+0x860/0x860 [ 220.152573][ T8412] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 220.158566][ T8412] do_filp_open+0x1aa/0x400 [ 220.163060][ T8412] ? may_open_dev+0xf0/0xf0 [ 220.167557][ T8412] ? alloc_fd+0x2f0/0x670 [ 220.171988][ T8412] ? rwlock_bug.part.0+0x90/0x90 [ 220.176945][ T8412] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 220.183198][ T8412] ? _find_next_bit+0x1e3/0x260 [ 220.188062][ T8412] ? _raw_spin_unlock+0x24/0x40 [ 220.192914][ T8412] ? alloc_fd+0x2f0/0x670 [ 220.197249][ T8412] do_sys_openat2+0x16d/0x4d0 [ 220.201933][ T8412] ? find_held_lock+0x2d/0x110 [ 220.206723][ T8412] ? build_open_flags+0x6f0/0x6f0 [ 220.211767][ T8412] ? lock_downgrade+0x6e0/0x6e0 [ 220.216629][ T8412] __x64_sys_openat+0x13f/0x1f0 [ 220.221482][ T8412] ? __ia32_sys_open+0x1c0/0x1c0 [ 220.226422][ T8412] ? syscall_enter_from_user_mode+0x21/0x70 [ 220.232316][ T8412] do_syscall_64+0x35/0xb0 [ 220.236727][ T8412] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 220.242618][ T8412] RIP: 0033:0x7f92796d4059 [ 220.247028][ T8412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 220.266628][ T8412] RSP: 002b:00007f9278007168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 220.275036][ T8412] RAX: ffffffffffffffda RBX: 00007f92797e7100 RCX: 00007f92796d4059 [ 220.283006][ T8412] RDX: 000000000000275a RSI: 0000000020000040 RDI: ffffffffffffff9c [ 220.290973][ T8412] RBP: 00007f92780071d0 R08: 0000000000000000 R09: 0000000000000000 [ 220.298941][ T8412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.306902][ T8412] R13: 00007fff831519ef R14: 00007f9278007300 R15: 0000000000022000 [ 220.314879][ T8412] 10:50:48 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x0) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000040) 10:50:48 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x4d07c2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="65727370616e3000000000000000020068da7061aa50a4849621813db37c8d75f1340aa927af75fac82a40941718761ecf3c9c9192d6f94de1ac663bde40c348b1d67129fbd489012a136a03d114eda43070016e5b197a13d8a837cf81fd386190d191e3c3b3240f53525422e88354df0cd985baa986b761563957d20dff2b15b1e25ab6f12ca9a8952b395411dc798bcef1639bac0fe7f5", @ANYRES32=r1, @ANYBLOB="004000400000000400000cd0e91e0018006400004f2f9078ac0001000000000000000000"]}) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f00000000c0)=0x80000003) (async) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000440)="07fd", 0x2}], 0x1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100470c9c018e38615ecb0011abe663c2c44c4ab9bfd52680c7db88db642f31b060f552b447224030d4853fe84ba66a2a42b477e4", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000005a40)={0x0, 0x0, &(0x7f0000005980)=[{&(0x7f0000005380)={0x18, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, r3, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) 10:50:48 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 220.385960][ T8412] ERROR: Out of memory at tomoyo_realpath_from_path. 10:50:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000040) [ 220.456729][ T25] audit: type=1804 audit(1645786248.289:110): pid=8426 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1380880114/syzkaller.P6AUVX/146/cgroup.controllers" dev="sda1" ino=1158 res=1 errno=0 [ 220.586026][ T25] audit: type=1804 audit(1645786248.419:111): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/121/memory.events" dev="sda1" ino=1175 res=1 errno=0 10:50:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 10:50:48 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0), 0x4) sendfile(r1, r0, &(0x7f0000000240)=0x1, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0xfffffffe) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xa0a9c401aff1b831, 0x95, 0x9, 0x3, 0x80000001, 0x10001, 0x77, 0x7, 0x8, 0xfffffff9, 0x40, 0x794a994b, 0x1, 0xe4b, 0xa5, 0x1ff, 0x7, 0x1, 0xda, 0x8001, 0xd967, 0x5, 0x7ff}}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) r5 = openat$cgroup_ro(r2, &(0x7f0000000140)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) accept4$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0xffffd8ef, @hyper}, 0x10, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000200), 0x8) 10:50:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}], 0x1, 0x4000040) 10:50:48 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x4d07c2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000780)) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="65727370616e3000000000000000020068da7061aa50a4849621813db37c8d75f1340aa927af75fac82a40941718761ecf3c9c9192d6f94de1ac663bde40c348b1d67129fbd489012a136a03d114eda43070016e5b197a13d8a837cf81fd386190d191e3c3b3240f53525422e88354df0cd985baa986b761563957d20dff2b15b1e25ab6f12ca9a8952b395411dc798bcef1639bac0fe7f5", @ANYRES32=r1, @ANYBLOB="004000400000000400000cd0e91e0018006400004f2f9078ac0001000000000000000000"]}) (async) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f00000000c0)=0x80000003) (async) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000440)="07fd", 0x2}], 0x1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100470c9c018e38615ecb0011abe663c2c44c4ab9bfd52680c7db88db642f31b060f552b447224030d4853fe84ba66a2a42b477e4", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000005a40)={0x0, 0x0, &(0x7f0000005980)=[{&(0x7f0000005380)={0x18, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, r3, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) [ 220.623370][ T25] audit: type=1804 audit(1645786248.449:112): pid=8412 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/121/memory.events" dev="sda1" ino=1175 res=1 errno=0 10:50:48 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}], 0x1, 0x4000040) 10:50:49 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x0) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000027c0)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x1000000}, @TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltclass={0x2c, 0x29, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff, 0xd}, {0x3, 0x7}, {0xe, 0x4}}, [@tclass_kind_options=@c_sfb={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004050}, 0x1) 10:50:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000040) 10:50:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}], 0x1, 0x4000040) 10:50:49 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x2759, 0x0) 10:50:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0), 0x4) sendfile(r1, r0, &(0x7f0000000240)=0x1, 0x8) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0xfffffffe) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xa0a9c401aff1b831, 0x95, 0x9, 0x3, 0x80000001, 0x10001, 0x77, 0x7, 0x8, 0xfffffff9, 0x40, 0x794a994b, 0x1, 0xe4b, 0xa5, 0x1ff, 0x7, 0x1, 0xda, 0x8001, 0xd967, 0x5, 0x7ff}}) (async, rerun: 32) r4 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) (async) r5 = openat$cgroup_ro(r2, &(0x7f0000000140)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) accept4$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0xffffd8ef, @hyper}, 0x10, 0x800) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000200), 0x8) 10:50:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000040) 10:50:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 221.408474][ T8463] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 221.476809][ T25] kauditd_printk_skb: 3 callbacks suppressed [ 221.476826][ T25] audit: type=1804 audit(1645786249.309:116): pid=8474 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1380880114/syzkaller.P6AUVX/148/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 10:50:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000040) 10:50:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000027c0)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x1000000}, @TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltclass={0x2c, 0x29, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff, 0xd}, {0x3, 0x7}, {0xe, 0x4}}, [@tclass_kind_options=@c_sfb={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004050}, 0x1) 10:50:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}], 0x1, 0x4000040) [ 221.689507][ T25] audit: type=1804 audit(1645786249.519:117): pid=8470 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/123/memory.events" dev="sda1" ino=1178 res=1 errno=0 [ 221.788351][ T25] audit: type=1804 audit(1645786249.549:118): pid=8481 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/123/memory.events" dev="sda1" ino=1178 res=1 errno=0 [ 221.835249][ T25] audit: type=1800 audit(1645786249.549:119): pid=8470 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=1178 res=0 errno=0 10:50:50 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(0xffffffffffffffff, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:50 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000027c0)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x1000000}, @TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltclass={0x2c, 0x29, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff, 0xd}, {0x3, 0x7}, {0xe, 0x4}}, [@tclass_kind_options=@c_sfb={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004050}, 0x1) 10:50:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}], 0x1, 0x4000040) 10:50:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275b, 0x0) 10:50:50 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async, rerun: 64) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0), 0x4) (rerun: 64) sendfile(r1, r0, &(0x7f0000000240)=0x1, 0x8) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0xfffffffe) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xa0a9c401aff1b831, 0x95, 0x9, 0x3, 0x80000001, 0x10001, 0x77, 0x7, 0x8, 0xfffffff9, 0x40, 0x794a994b, 0x1, 0xe4b, 0xa5, 0x1ff, 0x7, 0x1, 0xda, 0x8001, 0xd967, 0x5, 0x7ff}}) (async, rerun: 64) r4 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) (async) r5 = openat$cgroup_ro(r2, &(0x7f0000000140)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) accept4$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0xffffd8ef, @hyper}, 0x10, 0x800) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000200), 0x8) 10:50:50 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, 0x0}}], 0x2, 0x4000040) 10:50:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @multicast2}, 0x10) 10:50:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}], 0x1, 0x4000040) [ 222.419051][ T25] audit: type=1804 audit(1645786250.249:120): pid=8512 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1380880114/syzkaller.P6AUVX/149/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 10:50:50 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(0xffffffffffffffff, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @multicast2}, 0x10) 10:50:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:50 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, 0x0}}], 0x2, 0x4000040) 10:50:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @multicast2}, 0x10) [ 222.681543][ T25] audit: type=1804 audit(1645786250.509:121): pid=8513 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/124/memory.events" dev="sda1" ino=1167 res=1 errno=0 10:50:50 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, 0x0}}], 0x2, 0x4000040) 10:50:50 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(0xffffffffffffffff, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 222.791469][ T25] audit: type=1804 audit(1645786250.559:122): pid=8514 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/124/memory.events" dev="sda1" ino=1167 res=1 errno=0 10:50:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x2) [ 223.057898][ T25] audit: type=1804 audit(1645786250.889:123): pid=8538 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/125/memory.events" dev="sda1" ino=1161 res=1 errno=0 [ 223.110270][ T25] audit: type=1804 audit(1645786250.929:124): pid=8537 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/125/memory.events" dev="sda1" ino=1161 res=1 errno=0 10:50:51 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000005880)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000002c0)={{0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'fo\x00', 0x10, 0x9, 0xc}, {@broadcast, 0x4e23, 0x10000, 0x200, 0x0, 0x3ff}}, 0x44) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$inet_int(r2, 0x0, 0xa, &(0x7f0000000340)=0x7f, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000440)='bic\x00', 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="0db0f4ff000000001968c5ff0000000018400000ffffffff00000000000000006f7680000400000018100000", @ANYRES32=0x1, @ANYBLOB="0000000000000000850000000d00000085200000050000007560e0ff100000007d4e1d07d77594c7a1db79189e47d30edc1e800591b5b4a6ba783f04f90c87067c697eadb3c5fb4fe6184cc18066ab805a080df25a252564033994dd61ec858ec3d575aac999a1aae4091160417481104305"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xffa, &(0x7f000062b000)=""/4090, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff8d}, 0xfffffffffffffc26) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 10:50:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:51 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(0xffffffffffffffff, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:51 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, 0x0, 0x0, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)}}], 0x2, 0x4000040) 10:50:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x3) 10:50:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)}}], 0x2, 0x4000040) 10:50:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000388000/0x2000)=nil, 0x2000, 0x2, 0x80010, r0, 0x3000) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x3e7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x74, &(0x7f0000000140)=[@in6={0xa, 0x4e26, 0x8716b, @loopback, 0x3}, @in6={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x91}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0x2, @empty, 0x200}, @in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f00000000c0)=0x10) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x1000, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x176) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r2}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000003c0)={@empty, 0x1}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 10:50:51 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, 0x0, 0x0, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)}}], 0x2, 0x4000040) 10:50:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, 0x0}}], 0x2, 0x4000040) [ 223.551429][ T8550] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 223.607813][ T8550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 223.643195][ T25] audit: type=1804 audit(1645786251.479:125): pid=8552 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/126/memory.events" dev="sda1" ino=1177 res=1 errno=0 [ 223.643446][ T8550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 10:50:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{0x0}], 0x1}}], 0x2, 0x4000040) 10:50:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000388000/0x2000)=nil, 0x2000, 0x2, 0x80010, r0, 0x3000) (async) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) r2 = socket$inet6(0xa, 0x2, 0x3e7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x74, &(0x7f0000000140)=[@in6={0xa, 0x4e26, 0x8716b, @loopback, 0x3}, @in6={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x91}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0x2, @empty, 0x200}, @in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f00000000c0)=0x10) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x1000, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) (async) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x176) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r2}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000003c0)={@empty, 0x1}) (async) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 10:50:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, 0x0}}], 0x2, 0x4000040) 10:50:52 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, 0x0, 0x0, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:52 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) (async) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000005880)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000002c0)={{0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'fo\x00', 0x10, 0x9, 0xc}, {@broadcast, 0x4e23, 0x10000, 0x200, 0x0, 0x3ff}}, 0x44) (async) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) (async) setsockopt$inet_int(r2, 0x0, 0xa, &(0x7f0000000340)=0x7f, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000440)='bic\x00', 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="0db0f4ff000000001968c5ff0000000018400000ffffffff00000000000000006f7680000400000018100000", @ANYRES32=0x1, @ANYBLOB="0000000000000000850000000d00000085200000050000007560e0ff100000007d4e1d07d77594c7a1db79189e47d30edc1e800591b5b4a6ba783f04f90c87067c697eadb3c5fb4fe6184cc18066ab805a080df25a252564033994dd61ec858ec3d575aac999a1aae4091160417481104305"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xffa, &(0x7f000062b000)=""/4090, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff8d}, 0xfffffffffffffc26) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) (async) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) (async) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 10:50:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x4) 10:50:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{0x0}], 0x1}}], 0x2, 0x4000040) 10:50:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000388000/0x2000)=nil, 0x2000, 0x2, 0x80010, r0, 0x3000) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x3e7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x74, &(0x7f0000000140)=[@in6={0xa, 0x4e26, 0x8716b, @loopback, 0x3}, @in6={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x91}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0x2, @empty, 0x200}, @in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f00000000c0)=0x10) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x1000, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) shutdown(r1, 0x1) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x176) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r2}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000003c0)={@empty, 0x1}) (async) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 10:50:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, 0x0}}], 0x2, 0x4000040) 10:50:52 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x0, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 224.379511][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 224.414616][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 10:50:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)}}], 0x2, 0x4000040) 10:50:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{0x0}], 0x1}}], 0x2, 0x4000040) 10:50:52 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x0, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="00400040f7ffff0300000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x428, 0x3f4, 0x221, 0x70bd29, 0x25dfdbfc, {0x4, 0x1, 0xc, [0x3f, 0xffff, 0x20, 0x101, 0x1, 0x7, 0x2, 0x365, 0x6, 0xb3, 0x5, 0x6, 0xfffffffe, 0x0, 0x6, 0x3, 0x10001, 0x7, 0x0, 0x2, 0x5, 0x4, 0x3, 0x8, 0x2, 0x2, 0x136, 0x79, 0x800, 0xe95, 0x0, 0x139, 0xfff, 0x9, 0x9, 0x4, 0x3ff, 0x6, 0x4, 0x2, 0x0, 0x8, 0x4, 0x101, 0x1, 0x3, 0x20, 0x200, 0x7, 0x2, 0xff, 0x1, 0x28, 0x4, 0x4, 0xd059, 0x1, 0x7e78fc52, 0x1ff, 0x8, 0x7, 0x7ff, 0x9, 0x2b], [0x5, 0x5, 0x9, 0xa8, 0x1, 0x0, 0xd6, 0x7, 0x3, 0x1f, 0x1, 0x7, 0x0, 0x6, 0x7, 0x6, 0x7, 0x6, 0xf37, 0x80000000, 0x3, 0x9, 0xc, 0x0, 0x5, 0x4, 0x10000, 0x1ff, 0xffffffff, 0x1000, 0xc0, 0x8, 0x7, 0xffffff80, 0xffff, 0x5, 0x8, 0x8001, 0x800, 0x0, 0x4, 0xe535, 0x1, 0x0, 0x6, 0x7fffffff, 0x7f, 0x400, 0xfffffff7, 0xffffff96, 0x400, 0x7f, 0x6, 0x7, 0x1de000, 0x6, 0xffffffff, 0x9, 0x6, 0x6, 0x401, 0x6, 0x7, 0x1], [0x9, 0x7, 0x1, 0x4, 0x10000, 0x9, 0x2, 0x5, 0x6, 0x7, 0x0, 0x8, 0x80, 0xfffffffd, 0x82, 0x3, 0x8, 0x1, 0x10001, 0xee3, 0x200, 0x3, 0x101, 0x0, 0xe20, 0x55, 0x1000, 0x4, 0x32d0, 0x7, 0x10, 0x8, 0x4, 0xff, 0x8, 0x64ae, 0x200, 0x7, 0x200, 0xca, 0xffff, 0x665f, 0xfffffff8, 0x1, 0x4, 0xff000000, 0x400, 0x8, 0x5, 0x745c, 0x40a, 0x40, 0x0, 0xffff7158, 0x7b, 0x5, 0x3ff, 0xfffffff7, 0x3d000000, 0x7f, 0x800, 0x4ad9, 0x3, 0x1], [0xfffffffc, 0x2, 0x8001, 0x200, 0x6, 0x5, 0x1, 0x8, 0x3, 0xd25, 0x400, 0xfffffffb, 0x19e, 0x2, 0x2, 0x8, 0x5, 0x4, 0x2, 0x787b, 0x7, 0x2, 0x7fffffff, 0x9, 0x20, 0x2, 0x3, 0x0, 0x400, 0x40, 0x1ff, 0x867a, 0x1, 0x4, 0x8, 0x6, 0x1f, 0x9, 0x0, 0xaa, 0x401, 0x9, 0x4, 0x6, 0xffffffe1, 0xfffffffd, 0x1f, 0x1, 0x2, 0x9, 0x3915, 0x0, 0x3, 0x7ff, 0x5c, 0x200, 0x0, 0x2, 0x57, 0x1efde41f, 0x7ff, 0x9, 0x7, 0xffffff7f], 0x6, ['\x00', '\x00', '{)\x00', '\x00']}, [""]}, 0x428}, 0x1, 0x0, 0x0, 0x800}, 0x8080) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x8010, r0, 0x413bd000) r5 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000240)=0x1) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000080)=0x5, 0xfffffffffffff800) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0xa00000}) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) write$binfmt_elf64(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/1915], 0x77b) [ 224.465678][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 10:50:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)}], 0x1}}], 0x2, 0x4000040) 10:50:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)}}], 0x2, 0x4000040) 10:50:52 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000005880)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000002c0)={{0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'fo\x00', 0x10, 0x9, 0xc}, {@broadcast, 0x4e23, 0x10000, 0x200, 0x0, 0x3ff}}, 0x44) (async) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) (async) setsockopt$inet_int(r2, 0x0, 0xa, &(0x7f0000000340)=0x7f, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000440)='bic\x00', 0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="0db0f4ff000000001968c5ff0000000018400000ffffffff00000000000000006f7680000400000018100000", @ANYRES32=0x1, @ANYBLOB="0000000000000000850000000d00000085200000050000007560e0ff100000007d4e1d07d77594c7a1db79189e47d30edc1e800591b5b4a6ba783f04f90c87067c697eadb3c5fb4fe6184cc18066ab805a080df25a252564033994dd61ec858ec3d575aac999a1aae4091160417481104305"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xffa, &(0x7f000062b000)=""/4090, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff8d}, 0xfffffffffffffc26) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) (async) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) (async) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 10:50:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x5) 10:50:52 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x0, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)}}], 0x2, 0x4000040) 10:50:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)}], 0x1}}], 0x2, 0x4000040) 10:50:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x4) 10:50:52 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, 0x0, 0x0) 10:50:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)}], 0x1}}], 0x2, 0x4000040) 10:50:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{0x0}], 0x1}}], 0x2, 0x4000040) 10:50:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="00400040f7ffff0300000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x428, 0x3f4, 0x221, 0x70bd29, 0x25dfdbfc, {0x4, 0x1, 0xc, [0x3f, 0xffff, 0x20, 0x101, 0x1, 0x7, 0x2, 0x365, 0x6, 0xb3, 0x5, 0x6, 0xfffffffe, 0x0, 0x6, 0x3, 0x10001, 0x7, 0x0, 0x2, 0x5, 0x4, 0x3, 0x8, 0x2, 0x2, 0x136, 0x79, 0x800, 0xe95, 0x0, 0x139, 0xfff, 0x9, 0x9, 0x4, 0x3ff, 0x6, 0x4, 0x2, 0x0, 0x8, 0x4, 0x101, 0x1, 0x3, 0x20, 0x200, 0x7, 0x2, 0xff, 0x1, 0x28, 0x4, 0x4, 0xd059, 0x1, 0x7e78fc52, 0x1ff, 0x8, 0x7, 0x7ff, 0x9, 0x2b], [0x5, 0x5, 0x9, 0xa8, 0x1, 0x0, 0xd6, 0x7, 0x3, 0x1f, 0x1, 0x7, 0x0, 0x6, 0x7, 0x6, 0x7, 0x6, 0xf37, 0x80000000, 0x3, 0x9, 0xc, 0x0, 0x5, 0x4, 0x10000, 0x1ff, 0xffffffff, 0x1000, 0xc0, 0x8, 0x7, 0xffffff80, 0xffff, 0x5, 0x8, 0x8001, 0x800, 0x0, 0x4, 0xe535, 0x1, 0x0, 0x6, 0x7fffffff, 0x7f, 0x400, 0xfffffff7, 0xffffff96, 0x400, 0x7f, 0x6, 0x7, 0x1de000, 0x6, 0xffffffff, 0x9, 0x6, 0x6, 0x401, 0x6, 0x7, 0x1], [0x9, 0x7, 0x1, 0x4, 0x10000, 0x9, 0x2, 0x5, 0x6, 0x7, 0x0, 0x8, 0x80, 0xfffffffd, 0x82, 0x3, 0x8, 0x1, 0x10001, 0xee3, 0x200, 0x3, 0x101, 0x0, 0xe20, 0x55, 0x1000, 0x4, 0x32d0, 0x7, 0x10, 0x8, 0x4, 0xff, 0x8, 0x64ae, 0x200, 0x7, 0x200, 0xca, 0xffff, 0x665f, 0xfffffff8, 0x1, 0x4, 0xff000000, 0x400, 0x8, 0x5, 0x745c, 0x40a, 0x40, 0x0, 0xffff7158, 0x7b, 0x5, 0x3ff, 0xfffffff7, 0x3d000000, 0x7f, 0x800, 0x4ad9, 0x3, 0x1], [0xfffffffc, 0x2, 0x8001, 0x200, 0x6, 0x5, 0x1, 0x8, 0x3, 0xd25, 0x400, 0xfffffffb, 0x19e, 0x2, 0x2, 0x8, 0x5, 0x4, 0x2, 0x787b, 0x7, 0x2, 0x7fffffff, 0x9, 0x20, 0x2, 0x3, 0x0, 0x400, 0x40, 0x1ff, 0x867a, 0x1, 0x4, 0x8, 0x6, 0x1f, 0x9, 0x0, 0xaa, 0x401, 0x9, 0x4, 0x6, 0xffffffe1, 0xfffffffd, 0x1f, 0x1, 0x2, 0x9, 0x3915, 0x0, 0x3, 0x7ff, 0x5c, 0x200, 0x0, 0x2, 0x57, 0x1efde41f, 0x7ff, 0x9, 0x7, 0xffffff7f], 0x6, ['\x00', '\x00', '{)\x00', '\x00']}, [""]}, 0x428}, 0x1, 0x0, 0x0, 0x800}, 0x8080) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x8010, r0, 0x413bd000) r5 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000240)=0x1) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000080)=0x5, 0xfffffffffffff800) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0xa00000}) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) write$binfmt_elf64(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/1915], 0x77b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) (async) pipe(&(0x7f00000027c0)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="00400040f7ffff0300000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) (async) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x428, 0x3f4, 0x221, 0x70bd29, 0x25dfdbfc, {0x4, 0x1, 0xc, [0x3f, 0xffff, 0x20, 0x101, 0x1, 0x7, 0x2, 0x365, 0x6, 0xb3, 0x5, 0x6, 0xfffffffe, 0x0, 0x6, 0x3, 0x10001, 0x7, 0x0, 0x2, 0x5, 0x4, 0x3, 0x8, 0x2, 0x2, 0x136, 0x79, 0x800, 0xe95, 0x0, 0x139, 0xfff, 0x9, 0x9, 0x4, 0x3ff, 0x6, 0x4, 0x2, 0x0, 0x8, 0x4, 0x101, 0x1, 0x3, 0x20, 0x200, 0x7, 0x2, 0xff, 0x1, 0x28, 0x4, 0x4, 0xd059, 0x1, 0x7e78fc52, 0x1ff, 0x8, 0x7, 0x7ff, 0x9, 0x2b], [0x5, 0x5, 0x9, 0xa8, 0x1, 0x0, 0xd6, 0x7, 0x3, 0x1f, 0x1, 0x7, 0x0, 0x6, 0x7, 0x6, 0x7, 0x6, 0xf37, 0x80000000, 0x3, 0x9, 0xc, 0x0, 0x5, 0x4, 0x10000, 0x1ff, 0xffffffff, 0x1000, 0xc0, 0x8, 0x7, 0xffffff80, 0xffff, 0x5, 0x8, 0x8001, 0x800, 0x0, 0x4, 0xe535, 0x1, 0x0, 0x6, 0x7fffffff, 0x7f, 0x400, 0xfffffff7, 0xffffff96, 0x400, 0x7f, 0x6, 0x7, 0x1de000, 0x6, 0xffffffff, 0x9, 0x6, 0x6, 0x401, 0x6, 0x7, 0x1], [0x9, 0x7, 0x1, 0x4, 0x10000, 0x9, 0x2, 0x5, 0x6, 0x7, 0x0, 0x8, 0x80, 0xfffffffd, 0x82, 0x3, 0x8, 0x1, 0x10001, 0xee3, 0x200, 0x3, 0x101, 0x0, 0xe20, 0x55, 0x1000, 0x4, 0x32d0, 0x7, 0x10, 0x8, 0x4, 0xff, 0x8, 0x64ae, 0x200, 0x7, 0x200, 0xca, 0xffff, 0x665f, 0xfffffff8, 0x1, 0x4, 0xff000000, 0x400, 0x8, 0x5, 0x745c, 0x40a, 0x40, 0x0, 0xffff7158, 0x7b, 0x5, 0x3ff, 0xfffffff7, 0x3d000000, 0x7f, 0x800, 0x4ad9, 0x3, 0x1], [0xfffffffc, 0x2, 0x8001, 0x200, 0x6, 0x5, 0x1, 0x8, 0x3, 0xd25, 0x400, 0xfffffffb, 0x19e, 0x2, 0x2, 0x8, 0x5, 0x4, 0x2, 0x787b, 0x7, 0x2, 0x7fffffff, 0x9, 0x20, 0x2, 0x3, 0x0, 0x400, 0x40, 0x1ff, 0x867a, 0x1, 0x4, 0x8, 0x6, 0x1f, 0x9, 0x0, 0xaa, 0x401, 0x9, 0x4, 0x6, 0xffffffe1, 0xfffffffd, 0x1f, 0x1, 0x2, 0x9, 0x3915, 0x0, 0x3, 0x7ff, 0x5c, 0x200, 0x0, 0x2, 0x57, 0x1efde41f, 0x7ff, 0x9, 0x7, 0xffffff7f], 0x6, ['\x00', '\x00', '{)\x00', '\x00']}, [""]}, 0x428}, 0x1, 0x0, 0x0, 0x800}, 0x8080) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x8010, r0, 0x413bd000) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000240)=0x1) (async) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000080)=0x5, 0xfffffffffffff800) (async) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0xa00000}) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) shutdown(r6, 0x1) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) (async) write$binfmt_elf64(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c46810905090000000000000000020003007f0000003d020000000000004000000000000000ae000000000000000002000003003800010003008000000451e57464070000000600000000000000000400000000000004000000000000000400000000000000cde6e85100000000d5030000000000000000007008000000faffffffffffffff979b925600000000d2040000000000000080ffffffffffff00000000000000000300000000000000947c5c16086853baf58c123de18047ce85907b5745c2ad674d65dc03a7fb7e7c9d0e969f21a2c95cc281c83e4644921ba953ca940e08f68656bfff5b3a3161a566799d6ba9b3654dc673966820e9791580b36118b5e5706676157345471f289792393637a79552cc10bfb896646aeb250ff50a7bfbb9948852b559a894da4311fc4102a8b7c36b72663fa8823bc1d8a23cbf365d5b197d8f553bde41c7f6b87ae74b48254eaf2e246854554c8ea7d6f4a56123013100bda829f097e7aba8391d254ea2b2a5c7c233d66b8d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/1915], 0x77b) (async) 10:50:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x1, 0x4000040) 10:50:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{0x0}], 0x1}}], 0x2, 0x4000040) 10:50:52 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, 0x0, 0x0) 10:50:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x6) 10:50:53 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x1, 0x4000040) 10:50:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{0x0}], 0x1}}], 0x2, 0x4000040) 10:50:53 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, 0x0, 0x0) 10:50:53 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x1, 0x4000040) 10:50:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="00400040f7ffff0300000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x428, 0x3f4, 0x221, 0x70bd29, 0x25dfdbfc, {0x4, 0x1, 0xc, [0x3f, 0xffff, 0x20, 0x101, 0x1, 0x7, 0x2, 0x365, 0x6, 0xb3, 0x5, 0x6, 0xfffffffe, 0x0, 0x6, 0x3, 0x10001, 0x7, 0x0, 0x2, 0x5, 0x4, 0x3, 0x8, 0x2, 0x2, 0x136, 0x79, 0x800, 0xe95, 0x0, 0x139, 0xfff, 0x9, 0x9, 0x4, 0x3ff, 0x6, 0x4, 0x2, 0x0, 0x8, 0x4, 0x101, 0x1, 0x3, 0x20, 0x200, 0x7, 0x2, 0xff, 0x1, 0x28, 0x4, 0x4, 0xd059, 0x1, 0x7e78fc52, 0x1ff, 0x8, 0x7, 0x7ff, 0x9, 0x2b], [0x5, 0x5, 0x9, 0xa8, 0x1, 0x0, 0xd6, 0x7, 0x3, 0x1f, 0x1, 0x7, 0x0, 0x6, 0x7, 0x6, 0x7, 0x6, 0xf37, 0x80000000, 0x3, 0x9, 0xc, 0x0, 0x5, 0x4, 0x10000, 0x1ff, 0xffffffff, 0x1000, 0xc0, 0x8, 0x7, 0xffffff80, 0xffff, 0x5, 0x8, 0x8001, 0x800, 0x0, 0x4, 0xe535, 0x1, 0x0, 0x6, 0x7fffffff, 0x7f, 0x400, 0xfffffff7, 0xffffff96, 0x400, 0x7f, 0x6, 0x7, 0x1de000, 0x6, 0xffffffff, 0x9, 0x6, 0x6, 0x401, 0x6, 0x7, 0x1], [0x9, 0x7, 0x1, 0x4, 0x10000, 0x9, 0x2, 0x5, 0x6, 0x7, 0x0, 0x8, 0x80, 0xfffffffd, 0x82, 0x3, 0x8, 0x1, 0x10001, 0xee3, 0x200, 0x3, 0x101, 0x0, 0xe20, 0x55, 0x1000, 0x4, 0x32d0, 0x7, 0x10, 0x8, 0x4, 0xff, 0x8, 0x64ae, 0x200, 0x7, 0x200, 0xca, 0xffff, 0x665f, 0xfffffff8, 0x1, 0x4, 0xff000000, 0x400, 0x8, 0x5, 0x745c, 0x40a, 0x40, 0x0, 0xffff7158, 0x7b, 0x5, 0x3ff, 0xfffffff7, 0x3d000000, 0x7f, 0x800, 0x4ad9, 0x3, 0x1], [0xfffffffc, 0x2, 0x8001, 0x200, 0x6, 0x5, 0x1, 0x8, 0x3, 0xd25, 0x400, 0xfffffffb, 0x19e, 0x2, 0x2, 0x8, 0x5, 0x4, 0x2, 0x787b, 0x7, 0x2, 0x7fffffff, 0x9, 0x20, 0x2, 0x3, 0x0, 0x400, 0x40, 0x1ff, 0x867a, 0x1, 0x4, 0x8, 0x6, 0x1f, 0x9, 0x0, 0xaa, 0x401, 0x9, 0x4, 0x6, 0xffffffe1, 0xfffffffd, 0x1f, 0x1, 0x2, 0x9, 0x3915, 0x0, 0x3, 0x7ff, 0x5c, 0x200, 0x0, 0x2, 0x57, 0x1efde41f, 0x7ff, 0x9, 0x7, 0xffffff7f], 0x6, ['\x00', '\x00', '{)\x00', '\x00']}, [""]}, 0x428}, 0x1, 0x0, 0x0, 0x800}, 0x8080) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x8010, r0, 0x413bd000) r5 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000240)=0x1) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000080)=0x5, 0xfffffffffffff800) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0xa00000}) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) write$binfmt_elf64(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c46810905090000000000000000020003007f0000003d020000000000004000000000000000ae000000000000000002000003003800010003008000000451e57464070000000600000000000000000400000000000004000000000000000400000000000000cde6e85100000000d5030000000000000000007008000000faffffffffffffff979b925600000000d2040000000000000080ffffffffffff00000000000000000300000000000000947c5c16086853baf58c123de18047ce85907b5745c2ad674d65dc03a7fb7e7c9d0e969f21a2c95cc281c83e4644921ba953ca940e08f68656bfff5b3a3161a566799d6ba9b3654dc673966820e9791580b36118b5e5706676157345471f289792393637a79552cc10bfb896646aeb250ff50a7bfbb9948852b559a894da4311fc4102a8b7c36b72663fa8823bc1d8a23cbf365d5b197d8f553bde41c7f6b87ae74b48254eaf2e246854554c8ea7d6f4a56123013100bda829f097e7aba8391d254ea2b2a5c7c233d66b8d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/1915], 0x77b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) (async) pipe(&(0x7f00000027c0)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="00400040f7ffff0300000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) (async) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x428, 0x3f4, 0x221, 0x70bd29, 0x25dfdbfc, {0x4, 0x1, 0xc, [0x3f, 0xffff, 0x20, 0x101, 0x1, 0x7, 0x2, 0x365, 0x6, 0xb3, 0x5, 0x6, 0xfffffffe, 0x0, 0x6, 0x3, 0x10001, 0x7, 0x0, 0x2, 0x5, 0x4, 0x3, 0x8, 0x2, 0x2, 0x136, 0x79, 0x800, 0xe95, 0x0, 0x139, 0xfff, 0x9, 0x9, 0x4, 0x3ff, 0x6, 0x4, 0x2, 0x0, 0x8, 0x4, 0x101, 0x1, 0x3, 0x20, 0x200, 0x7, 0x2, 0xff, 0x1, 0x28, 0x4, 0x4, 0xd059, 0x1, 0x7e78fc52, 0x1ff, 0x8, 0x7, 0x7ff, 0x9, 0x2b], [0x5, 0x5, 0x9, 0xa8, 0x1, 0x0, 0xd6, 0x7, 0x3, 0x1f, 0x1, 0x7, 0x0, 0x6, 0x7, 0x6, 0x7, 0x6, 0xf37, 0x80000000, 0x3, 0x9, 0xc, 0x0, 0x5, 0x4, 0x10000, 0x1ff, 0xffffffff, 0x1000, 0xc0, 0x8, 0x7, 0xffffff80, 0xffff, 0x5, 0x8, 0x8001, 0x800, 0x0, 0x4, 0xe535, 0x1, 0x0, 0x6, 0x7fffffff, 0x7f, 0x400, 0xfffffff7, 0xffffff96, 0x400, 0x7f, 0x6, 0x7, 0x1de000, 0x6, 0xffffffff, 0x9, 0x6, 0x6, 0x401, 0x6, 0x7, 0x1], [0x9, 0x7, 0x1, 0x4, 0x10000, 0x9, 0x2, 0x5, 0x6, 0x7, 0x0, 0x8, 0x80, 0xfffffffd, 0x82, 0x3, 0x8, 0x1, 0x10001, 0xee3, 0x200, 0x3, 0x101, 0x0, 0xe20, 0x55, 0x1000, 0x4, 0x32d0, 0x7, 0x10, 0x8, 0x4, 0xff, 0x8, 0x64ae, 0x200, 0x7, 0x200, 0xca, 0xffff, 0x665f, 0xfffffff8, 0x1, 0x4, 0xff000000, 0x400, 0x8, 0x5, 0x745c, 0x40a, 0x40, 0x0, 0xffff7158, 0x7b, 0x5, 0x3ff, 0xfffffff7, 0x3d000000, 0x7f, 0x800, 0x4ad9, 0x3, 0x1], [0xfffffffc, 0x2, 0x8001, 0x200, 0x6, 0x5, 0x1, 0x8, 0x3, 0xd25, 0x400, 0xfffffffb, 0x19e, 0x2, 0x2, 0x8, 0x5, 0x4, 0x2, 0x787b, 0x7, 0x2, 0x7fffffff, 0x9, 0x20, 0x2, 0x3, 0x0, 0x400, 0x40, 0x1ff, 0x867a, 0x1, 0x4, 0x8, 0x6, 0x1f, 0x9, 0x0, 0xaa, 0x401, 0x9, 0x4, 0x6, 0xffffffe1, 0xfffffffd, 0x1f, 0x1, 0x2, 0x9, 0x3915, 0x0, 0x3, 0x7ff, 0x5c, 0x200, 0x0, 0x2, 0x57, 0x1efde41f, 0x7ff, 0x9, 0x7, 0xffffff7f], 0x6, ['\x00', '\x00', '{)\x00', '\x00']}, [""]}, 0x428}, 0x1, 0x0, 0x0, 0x800}, 0x8080) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x8010, r0, 0x413bd000) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000240)=0x1) (async) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000080)=0x5, 0xfffffffffffff800) (async) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0xa00000}) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) shutdown(r6, 0x1) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) (async) write$binfmt_elf64(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/1915], 0x77b) (async) 10:50:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)}], 0x1}}], 0x2, 0x4000040) 10:50:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff, 0x7a}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0x4}}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x7, 0x3f, 0x6, 0x800, 0xfffd, 0xfa0, 0x6, 0x1ff, 0x80]}, @NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x80}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xc1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x83}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x53}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001dc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000002f00)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}}, 0x0) 10:50:53 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x0, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:53 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff, 0x7a}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0x4}}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x7, 0x3f, 0x6, 0x800, 0xfffd, 0xfa0, 0x6, 0x1ff, 0x80]}, @NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x80}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xc1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x83}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x53}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001dc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000002f00)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000580)}, 0x10) (async) pipe(&(0x7f00000027c0)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) (async) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff, 0x7a}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0x4}}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x7, 0x3f, 0x6, 0x800, 0xfffd, 0xfa0, 0x6, 0x1ff, 0x80]}, @NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x80}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xc1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x83}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x53}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001dc0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000002f00)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}}, 0x0) (async) 10:50:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)}], 0x1}}], 0x2, 0x4000040) 10:50:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x7) 10:50:53 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x0, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:53 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)}], 0x1}}], 0x2, 0x4000040) 10:50:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff, 0x7a}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0x4}}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x7, 0x3f, 0x6, 0x800, 0xfffd, 0xfa0, 0x6, 0x1ff, 0x80]}, @NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x80}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xc1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x83}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x53}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001dc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000002f00)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}}, 0x0) 10:50:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x12012, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xfdef) ioctl$FITRIM(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x8001, 0x200}) pipe(&(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="0d203ca0673e552b5dd46f0a4c8b4b889a48c585ac447956ac07f22bd57a653ffae458e5a7cc5a9b20d3d2ccec7a05a2d59c0fc13977547c29fdb48595b53041275539ce73a588128baaf3bead0cc755c766d0ff93e9d007c04959df1555874f50d40ed1a0fb8b7f0d2788626c3a8b54c1"], 0x20}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r4, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xffb7, &(0x7f0000000240)}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r10, &(0x7f0000000200)=0x8000, 0x12) 10:50:53 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x1, 0x4000040) 10:50:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x6) [ 225.934660][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 10:50:53 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x0, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x12012, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xfdef) ioctl$FITRIM(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x8001, 0x200}) pipe(&(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="0d203ca0673e552b5dd46f0a4c8b4b889a48c585ac447956ac07f22bd57a653ffae458e5a7cc5a9b20d3d2ccec7a05a2d59c0fc13977547c29fdb48595b53041275539ce73a588128baaf3bead0cc755c766d0ff93e9d007c04959df1555874f50d40ed1a0fb8b7f0d2788626c3a8b54c1"], 0x20}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r4, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xffb7, &(0x7f0000000240)}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r10, &(0x7f0000000200)=0x8000, 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x12012, r1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000200), 0xfdef) (async) ioctl$FITRIM(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x8001, 0x200}) (async) pipe(&(0x7f00000027c0)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r5, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="0d203ca0673e552b5dd46f0a4c8b4b889a48c585ac447956ac07f22bd57a653ffae458e5a7cc5a9b20d3d2ccec7a05a2d59c0fc13977547c29fdb48595b53041275539ce73a588128baaf3bead0cc755c766d0ff93e9d007c04959df1555874f50d40ed1a0fb8b7f0d2788626c3a8b54c1"], 0x20}}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r4, 0x58, &(0x7f0000000580)}, 0x10) (async) pipe(&(0x7f00000027c0)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xffb7, &(0x7f0000000240)}, 0x10) (async) pipe(&(0x7f00000027c0)) (async) write$cgroup_int(r10, &(0x7f0000000200)=0x8000, 0x12) (async) 10:50:53 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 226.189843][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 10:50:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x8) 10:50:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x1, 0x4000040) 10:50:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:54 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x0, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x12012, r1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xfdef) (async) ioctl$FITRIM(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x8001, 0x200}) (async, rerun: 32) pipe(&(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_GET(r5, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="0d203ca0673e552b5dd46f0a4c8b4b889a48c585ac447956ac07f22bd57a653ffae458e5a7cc5a9b20d3d2ccec7a05a2d59c0fc13977547c29fdb48595b53041275539ce73a588128baaf3bead0cc755c766d0ff93e9d007c04959df1555874f50d40ed1a0fb8b7f0d2788626c3a8b54c1"], 0x20}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r4, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 64) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xffb7, &(0x7f0000000240)}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r10, &(0x7f0000000200)=0x8000, 0x12) 10:50:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x1, 0x4000040) 10:50:54 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x0, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 226.477723][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 226.591486][ T25] kauditd_printk_skb: 13 callbacks suppressed [ 226.591503][ T25] audit: type=1804 audit(1645786254.419:139): pid=8762 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/131/memory.events" dev="sda1" ino=1174 res=1 errno=0 10:50:54 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x4, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 10:50:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 226.648317][ T25] audit: type=1804 audit(1645786254.479:140): pid=8763 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/131/memory.events" dev="sda1" ino=1174 res=1 errno=0 10:50:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0xa) 10:50:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:54 executing program 0: unshare(0x40000000) mmap(&(0x7f00003e7000/0x3000)=nil, 0x3000, 0x95e9c7e1d9063b89, 0xfe6272c8e11459db, 0xffffffffffffffff, 0x197fd000) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_x25_SIOCDELRT(r1, 0x890b, &(0x7f0000000100)={@null, 0x3, 'vlan1\x00'}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="20000000bec94e10c98daf776a745bfdd105bcf4f6ca591628fec50e3aecfc87c78c66110f27cee542aee0dbe8ea3fd30c0c124b5c7dfe841fb243e1da5a806a4db80263ec64c6fd270403d891d9798aee214df513c8c3a66d7f56c9407e37d0979206d5509beb95b4f2f1095551fc2e8968b1df4f79db984d90621da6340ca35f858b7afb7941f78f733a515c7b37cb6cdfef03e92622598d5940d6c0d91c548b34d70bad5df1006ec509936290c926fb0fa23b9dd729babced45a8a2b0a56dc4539992559b9f4d7f4bb936a2a49283709ec2b8bf3da8214dcc68647a2605d1b8597b51a0c40f314bab12beac6499f4665a96088743cd55a5ede7067f6e95c32fa18b68071972488a77a6f1", @ANYRES16=0x0, @ANYBLOB="01002cbd7099fbdbdf5e000000f660000c1899002b2600000100"], 0x20}}, 0x20008080) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000440)="dad4a56736672a6189a3ce5bedd1e2041234d8b9b40e20640c8921339c420a3201a1400c805912ff09da16847ac06d14bc2b55aa452844ebd5806d0ea273b3332272bd981157736d37bccbf380204a909cb10a6fa04f95db96e692822c3300551fbe550b2d6b07f89d342ebffe0c2e69face08802a6c938d895c4daec656b658be178ec620f34c1bcfb48465702d66c8dc844a39e13ca7adcaeb109c84f48930c2703a47dc24369f8e18035a8f70e47f6c53e12326d3b45b81a55c1d61e094655fcdd32b151078369a254852b785", &(0x7f00000006c0)=""/160}, 0x20) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000400)) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000640)=@buf) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x98, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)='macvlan0\x00', 0x0, 0x3, 0x1}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0xfffffffd, @mcast1}, {0xa, 0x4e20, 0xfffffffc, @empty, 0x1}, 0x4, [0x6, 0xa, 0x0, 0x1, 0x7ff, 0x8, 0x20000008]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0xc624, 0x0, @mcast1, 0x916d}, {0xa, 0x4e23, 0x8654, @empty, 0x64}, 0x0, [0x1, 0x7fffffff, 0x81, 0x8, 0xfffffffe, 0x1, 0xfffffff9, 0x8000000]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc9, 0x0, 0x0) 10:50:54 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x0, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:54 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x4, 0x4) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 10:50:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:54 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x4, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x4, 0x4) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) 10:50:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:54 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x0, 0x5, 0x7, @broadcast}, 0x10) 10:50:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{0x0}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 227.258985][ T25] audit: type=1804 audit(1645786255.089:141): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/132/memory.events" dev="sda1" ino=1180 res=1 errno=0 10:50:55 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x10) 10:50:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffff800}]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x20008080) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x4008800) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 10:50:55 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:55 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x0, 0x5, 0x7, @broadcast}, 0x10) 10:50:55 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{0x0}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:55 executing program 0: unshare(0x40000000) (async) mmap(&(0x7f00003e7000/0x3000)=nil, 0x3000, 0x95e9c7e1d9063b89, 0xfe6272c8e11459db, 0xffffffffffffffff, 0x197fd000) (async, rerun: 64) pipe(&(0x7f0000000380)={0xffffffffffffffff}) (async, rerun: 64) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) ioctl$sock_x25_SIOCDELRT(r1, 0x890b, &(0x7f0000000100)={@null, 0x3, 'vlan1\x00'}) (rerun: 64) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="01002cbd7099fbdbdf5e000000f660000c1899002b2600000100"], 0x20}}, 0x20008080) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) (async, rerun: 64) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000440)="dad4a56736672a6189a3ce5bedd1e2041234d8b9b40e20640c8921339c420a3201a1400c805912ff09da16847ac06d14bc2b55aa452844ebd5806d0ea273b3332272bd981157736d37bccbf380204a909cb10a6fa04f95db96e692822c3300551fbe550b2d6b07f89d342ebffe0c2e69face08802a6c938d895c4daec656b658be178ec620f34c1bcfb48465702d66c8dc844a39e13ca7adcaeb109c84f48930c2703a47dc24369f8e18035a8f70e47f6c53e12326d3b45b81a55c1d61e094655fcdd32b151078369a254852b785", &(0x7f00000006c0)=""/160}, 0x20) (async, rerun: 64) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000400)) (async) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000640)=@buf) (async) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x98, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)='macvlan0\x00', 0x0, 0x3, 0x1}) (async, rerun: 64) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) (async, rerun: 64) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0xfffffffd, @mcast1}, {0xa, 0x4e20, 0xfffffffc, @empty, 0x1}, 0x4, [0x6, 0xa, 0x0, 0x1, 0x7ff, 0x8, 0x20000008]}, 0x5c) (async) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0xc624, 0x0, @mcast1, 0x916d}, {0xa, 0x4e23, 0x8654, @empty, 0x64}, 0x0, [0x1, 0x7fffffff, 0x81, 0x8, 0xfffffffe, 0x1, 0xfffffff9, 0x8000000]}, 0x5c) (async, rerun: 64) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc9, 0x0, 0x0) (rerun: 64) [ 227.343139][ T25] audit: type=1804 audit(1645786255.119:142): pid=8800 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/132/memory.events" dev="sda1" ino=1180 res=1 errno=0 10:50:55 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{0x0}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:55 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffff800}]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x20008080) (async) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x4008800) (async) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 10:50:55 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x0, 0x5, 0x7, @broadcast}, 0x10) 10:50:55 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:55 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 227.750224][ T25] audit: type=1804 audit(1645786255.579:143): pid=8828 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/133/memory.events" dev="sda1" ino=1181 res=1 errno=0 10:50:55 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x18) 10:50:55 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:55 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:55 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x0, 0x7, @broadcast}, 0x10) 10:50:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffff800}]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x20008080) (async, rerun: 64) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x4008800) (rerun: 64) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) [ 227.819651][ T25] audit: type=1804 audit(1645786255.579:144): pid=8836 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/133/memory.events" dev="sda1" ino=1181 res=1 errno=0 [ 228.072217][ T25] audit: type=1804 audit(1645786255.889:145): pid=8856 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/134/memory.events" dev="sda1" ino=1181 res=1 errno=0 [ 228.098438][ T25] audit: type=1804 audit(1645786255.909:146): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/134/memory.events" dev="sda1" ino=1181 res=1 errno=0 10:50:56 executing program 0: unshare(0x40000000) (async) mmap(&(0x7f00003e7000/0x3000)=nil, 0x3000, 0x95e9c7e1d9063b89, 0xfe6272c8e11459db, 0xffffffffffffffff, 0x197fd000) pipe(&(0x7f0000000380)={0xffffffffffffffff}) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_x25_SIOCDELRT(r1, 0x890b, &(0x7f0000000100)={@null, 0x3, 'vlan1\x00'}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="01002cbd7099fbdbdf5e000000f660000c1899002b2600000100"], 0x20}}, 0x20008080) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000440)="dad4a56736672a6189a3ce5bedd1e2041234d8b9b40e20640c8921339c420a3201a1400c805912ff09da16847ac06d14bc2b55aa452844ebd5806d0ea273b3332272bd981157736d37bccbf380204a909cb10a6fa04f95db96e692822c3300551fbe550b2d6b07f89d342ebffe0c2e69face08802a6c938d895c4daec656b658be178ec620f34c1bcfb48465702d66c8dc844a39e13ca7adcaeb109c84f48930c2703a47dc24369f8e18035a8f70e47f6c53e12326d3b45b81a55c1d61e094655fcdd32b151078369a254852b785", &(0x7f00000006c0)=""/160}, 0x20) (async) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000400)) (async) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000640)=@buf) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x98, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)='macvlan0\x00', 0x0, 0x3, 0x1}) (async) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) (async) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0xfffffffd, @mcast1}, {0xa, 0x4e20, 0xfffffffc, @empty, 0x1}, 0x4, [0x6, 0xa, 0x0, 0x1, 0x7ff, 0x8, 0x20000008]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0xc624, 0x0, @mcast1, 0x916d}, {0xa, 0x4e23, 0x8654, @empty, 0x64}, 0x0, [0x1, 0x7fffffff, 0x81, 0x8, 0xfffffffe, 0x1, 0xfffffff9, 0x8000000]}, 0x5c) (async) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc9, 0x0, 0x0) 10:50:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{0x0}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:56 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:56 executing program 5: unshare(0x40000000) mmap(&(0x7f00003e7000/0x3000)=nil, 0x3000, 0x95e9c7e1d9063b89, 0xfe6272c8e11459db, 0xffffffffffffffff, 0x197fd000) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_x25_SIOCDELRT(r1, 0x890b, &(0x7f0000000100)={@null, 0x3, 'vlan1\x00'}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="01002cbd7099fbdbdf5e000000f660000c1899002b2600000100"], 0x20}}, 0x20008080) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000440)="dad4a56736672a6189a3ce5bedd1e2041234d8b9b40e20640c8921339c420a3201a1400c805912ff09da16847ac06d14bc2b55aa452844ebd5806d0ea273b3332272bd981157736d37bccbf380204a909cb10a6fa04f95db96e692822c3300551fbe550b2d6b07f89d342ebffe0c2e69face08802a6c938d895c4daec656b658be178ec620f34c1bcfb48465702d66c8dc844a39e13ca7adcaeb109c84f48930c2703a47dc24369f8e18035a8f70e47f6c53e12326d3b45b81a55c1d61e094655fcdd32b151078369a254852b785", &(0x7f00000006c0)=""/160}, 0x20) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000400)) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000640)=@buf) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x98, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)='macvlan0\x00', 0x0, 0x3, 0x1}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0xfffffffd, @mcast1}, {0xa, 0x4e20, 0xfffffffc, @empty, 0x1}, 0x4, [0x6, 0xa, 0x0, 0x1, 0x7ff, 0x8, 0x20000008]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0xc624, 0x0, @mcast1, 0x916d}, {0xa, 0x4e23, 0x8654, @empty, 0x64}, 0x0, [0x1, 0x7fffffff, 0x81, 0x8, 0xfffffffe, 0x1, 0xfffffff9, 0x8000000]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc9, 0x0, 0x0) 10:50:56 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x0, 0x7, @broadcast}, 0x10) 10:50:56 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x43) 10:50:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{0x0}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:56 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x0) 10:50:56 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x0, 0x7, @broadcast}, 0x10) 10:50:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{0x0}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:56 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x0, @broadcast}, 0x10) 10:50:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x18) [ 228.672378][ T25] audit: type=1804 audit(1645786256.499:147): pid=8875 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/135/memory.events" dev="sda1" ino=1181 res=1 errno=0 10:50:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="0086eb394d6ad867017b0000002000"], 0x18}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200ecc475e40100", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="75e58fc1d54b"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4084) 10:50:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:50:56 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x0, @broadcast}, 0x10) [ 228.782652][ T25] audit: type=1804 audit(1645786256.499:148): pid=8880 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/135/memory.events" dev="sda1" ino=1181 res=1 errno=0 10:50:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 228.863012][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:50:56 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x48) 10:50:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="0086eb394d6ad867017b0000002000"], 0x18}}, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200ecc475e40100", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="75e58fc1d54b"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4084) 10:50:57 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x0) 10:50:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x0) 10:50:57 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x0, @broadcast}, 0x10) 10:50:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="0086eb394d6ad867017b0000002000"], 0x18}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200ecc475e40100", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="75e58fc1d54b"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4084) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="0086eb394d6ad867017b0000002000"], 0x18}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200ecc475e40100", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="75e58fc1d54b"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4084) (async) 10:50:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x43) 10:50:57 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x4c) 10:50:57 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (fail_nth: 1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 229.430807][ T8920] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 229.484166][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 229.550124][ T8931] FAULT_INJECTION: forcing a failure. [ 229.550124][ T8931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.631293][ T8931] CPU: 0 PID: 8931 Comm: syz-executor.1 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 229.641761][ T8931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.651833][ T8931] Call Trace: [ 229.655123][ T8931] [ 229.658065][ T8931] dump_stack_lvl+0xcd/0x134 [ 229.662685][ T8931] should_fail.cold+0x5/0xa [ 229.667214][ T8931] _copy_from_user+0x2c/0x180 [ 229.671914][ T8931] __copy_msghdr_from_user+0x91/0x4b0 10:50:57 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef000000000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x155}, {&(0x7f0000000140)=""/85, 0x95}, {&(0x7f0000000fc0)=""/4096, 0x29b}, {&(0x7f0000000400)=""/106, 0xcf4}, {&(0x7f0000000740)=""/73, 0x3b3}, {&(0x7f0000000200)=""/77, 0x533}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) pipe(&(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, r5, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000280)="b60b1b4ee5dff8291100dc1d74340613926b2e9b874ae486b33cb3fd7b88a609e12a952a13e0decae0e68c761aa4ca4df31e9874180d8290ae32abf64c1dba3f15592ed76c97de1b908ee0bbba3494de52f8ac0f0ce4bb426b7ea8bdf0faf985aedefd4808392d8ae017bb8b7edea90c097fba841925da91c396c381e090e40a3776ff965c31e8d296ad3b8ecd7ff0e3df82972f437743867e351696f993980c9a55d3c4d10126c10c44baee1beb3711071a4778f3f08f9ef6ca9dd8d3c0e4151bb03204c899e589a82ad23a661c3b4b58677ff514374cf1616ca82adf8d", 0xde}], 0x1, &(0x7f00000001c0)=[@ip_tos_u8={{0x11}}], 0x18}}, {{&(0x7f0000000480)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000540)="66f001b65702f9dcc9dafbda158b6e0eb024c103e0b464e71a5f808e9273d924aba0a0730541e9a489e16a42286b94aea4b170bc501e9d3f8f945f350131c7bd5d5c9fccd9cc8ea0ccfe4f58c3abee0ee15466a68c91fd3e5ea0eed8edb4acdea7407fe075f44fab07ba8949bd", 0x6d}], 0x1, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffb}}], 0x38}}, {{&(0x7f0000000700)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000880)="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", 0xfc}, {&(0x7f0000000980)="cc17bc1a", 0x4}, {&(0x7f00000009c0)="592e2f64fd6370e1863aaf4628cdb133939daa18c783194cdb58cc633e135c97ac0e752d8e139033c8dfaa6c54868c86222547f1e0cd62f4ae85cc82a569dee51a0ebb865f404d047a4b1f68ebdceae0001cd04f155c69738fcebe1255e8a1773599bb19959bfbeb8f35a45ff93590351e00b69f2856c096bcbb8e522d70bc766bd81089cb4c87f9c45a7f6bf779b0cf83918f88d0230665a5402234e620a53633d58e9d5b6e9b72d3a6c065e15ec6d71d", 0xb1}, {&(0x7f0000000a80)="22033135ff3216a844", 0x9}], 0x4, &(0x7f0000000b00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xc8, 0x1, 0x5, [{@remote, 0x1}]}, @rr={0x7, 0x7, 0x58, [@empty]}, @rr={0x7, 0x27, 0x3c, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010100, @multicast1, @loopback, @loopback, @private=0xa010101, @remote, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x54, 0xd4, 0x1, 0x4, [{@empty, 0x498}, {@private=0xa010102, 0x5}, {@loopback, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x76}, {@local, 0x8}, {@remote, 0x9}, {@broadcast, 0x2}, {@loopback, 0xff}, {@multicast2, 0x1f}, {@rand_addr=0x64010101, 0x3}]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @dev={0xac, 0x14, 0x14, 0x1e}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}], 0x138}}, {{&(0x7f0000000c40)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000c80)="0edac8fc0cbb7a3c89e2c047da26b2278f24c754156c488c5c89256cc52bd86bee88826747bf8e21b509904a52c8cb9a5f6cfbf0c088c88d3cc3d26fd0b37bf997226dd03ecc2c33e1956573f3ade35560eae8346b9d52d08406602b725dffbe6d4bbf7127d2d450462304017bc2f891af12c59e17b63f825b8d2f7d7df02c260860d0719b76fdde982d", 0x8a}], 0x1, &(0x7f0000000d80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffeff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast2, @multicast2}}}], 0x38}}], 0x4, 0x4000) [ 229.675091][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 229.677311][ T8931] ? __ia32_sys_shutdown+0x70/0x70 [ 229.677350][ T8931] ? __lock_acquire+0xbc4/0x56c0 [ 229.677389][ T8931] sendmsg_copy_msghdr+0xa1/0x160 [ 229.701585][ T8931] ? do_recvmmsg+0x6d0/0x6d0 [ 229.706193][ T8931] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 229.712212][ T8931] ___sys_sendmsg+0xc6/0x170 [ 229.716827][ T8931] ? sendmsg_copy_msghdr+0x160/0x160 [ 229.722133][ T8931] ? __fget_files+0x26a/0x470 [ 229.726827][ T8931] ? lock_downgrade+0x6e0/0x6e0 [ 229.731699][ T8931] ? lock_chain_count+0x20/0x20 [ 229.736585][ T8931] ? __fget_files+0x28c/0x470 [ 229.741289][ T8931] ? __fget_light+0xea/0x280 [ 229.745911][ T8931] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 229.752181][ T8931] __sys_sendmmsg+0x195/0x470 [ 229.756881][ T8931] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 229.761923][ T8931] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 229.767936][ T8931] ? find_held_lock+0x2d/0x110 [ 229.772720][ T8931] ? __context_tracking_exit+0xb8/0xe0 [ 229.778197][ T8931] ? lock_downgrade+0x6e0/0x6e0 [ 229.783074][ T8931] ? lock_downgrade+0x6e0/0x6e0 [ 229.787966][ T8931] __x64_sys_sendmmsg+0x99/0x100 [ 229.792923][ T8931] ? syscall_enter_from_user_mode+0x21/0x70 [ 229.798835][ T8931] do_syscall_64+0x35/0xb0 [ 229.803271][ T8931] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 229.809180][ T8931] RIP: 0033:0x7f7e7b9e9059 [ 229.813606][ T8931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 229.833230][ T8931] RSP: 002b:00007f7e7a35e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 229.841681][ T8931] RAX: ffffffffffffffda RBX: 00007f7e7bafbf60 RCX: 00007f7e7b9e9059 [ 229.849678][ T8931] RDX: 03fffffffffffeed RSI: 0000000020001380 RDI: 0000000000000013 [ 229.857668][ T8931] RBP: 00007f7e7a35e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 229.865666][ T8931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.873658][ T8931] R13: 00007ffe6bba396f R14: 00007f7e7a35e300 R15: 0000000000022000 10:50:57 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef000000000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x155}, {&(0x7f0000000140)=""/85, 0x95}, {&(0x7f0000000fc0)=""/4096, 0x29b}, {&(0x7f0000000400)=""/106, 0xcf4}, {&(0x7f0000000740)=""/73, 0x3b3}, {&(0x7f0000000200)=""/77, 0x533}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) (async, rerun: 64) pipe(&(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) (async, rerun: 64) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, r5, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000280)="b60b1b4ee5dff8291100dc1d74340613926b2e9b874ae486b33cb3fd7b88a609e12a952a13e0decae0e68c761aa4ca4df31e9874180d8290ae32abf64c1dba3f15592ed76c97de1b908ee0bbba3494de52f8ac0f0ce4bb426b7ea8bdf0faf985aedefd4808392d8ae017bb8b7edea90c097fba841925da91c396c381e090e40a3776ff965c31e8d296ad3b8ecd7ff0e3df82972f437743867e351696f993980c9a55d3c4d10126c10c44baee1beb3711071a4778f3f08f9ef6ca9dd8d3c0e4151bb03204c899e589a82ad23a661c3b4b58677ff514374cf1616ca82adf8d", 0xde}], 0x1, &(0x7f00000001c0)=[@ip_tos_u8={{0x11}}], 0x18}}, {{&(0x7f0000000480)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000540)="66f001b65702f9dcc9dafbda158b6e0eb024c103e0b464e71a5f808e9273d924aba0a0730541e9a489e16a42286b94aea4b170bc501e9d3f8f945f350131c7bd5d5c9fccd9cc8ea0ccfe4f58c3abee0ee15466a68c91fd3e5ea0eed8edb4acdea7407fe075f44fab07ba8949bd", 0x6d}], 0x1, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffb}}], 0x38}}, {{&(0x7f0000000700)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000880)="e97116bd35b37f96918dbf4bc08324ade8e1dbb375074b0ff36553d3c3f418543cb1a2b2fcf2497179b108da61586f4b1b420ece7b495c4021d6571bb10ba726abcb60b91fbfa91a49422093076f7cd4bd4f9d255ae3e0dd300301e4535082051dff0196c36a8777fca85fa40031c296b39366a9159009f01acde8179bf1f33c0c43a93a6f893d6bce055045cc7ec003af110c5126a882c836e1ea344d8cbe937dc5003c58fa90a3c39f933e5d8f63d71d2e1e2412c1c940c5ee73041ef8a64818f290ba5fd69d712fe4139fc426a1c873517a8a908f0946c68acb00553b59f432fdd0744c59044dbf5530336c143a281d6c68f9a172ca361d7499f9", 0xfc}, {&(0x7f0000000980)="cc17bc1a", 0x4}, {&(0x7f00000009c0)="592e2f64fd6370e1863aaf4628cdb133939daa18c783194cdb58cc633e135c97ac0e752d8e139033c8dfaa6c54868c86222547f1e0cd62f4ae85cc82a569dee51a0ebb865f404d047a4b1f68ebdceae0001cd04f155c69738fcebe1255e8a1773599bb19959bfbeb8f35a45ff93590351e00b69f2856c096bcbb8e522d70bc766bd81089cb4c87f9c45a7f6bf779b0cf83918f88d0230665a5402234e620a53633d58e9d5b6e9b72d3a6c065e15ec6d71d", 0xb1}, {&(0x7f0000000a80)="22033135ff3216a844", 0x9}], 0x4, &(0x7f0000000b00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xc8, 0x1, 0x5, [{@remote, 0x1}]}, @rr={0x7, 0x7, 0x58, [@empty]}, @rr={0x7, 0x27, 0x3c, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010100, @multicast1, @loopback, @loopback, @private=0xa010101, @remote, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x54, 0xd4, 0x1, 0x4, [{@empty, 0x498}, {@private=0xa010102, 0x5}, {@loopback, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x76}, {@local, 0x8}, {@remote, 0x9}, {@broadcast, 0x2}, {@loopback, 0xff}, {@multicast2, 0x1f}, {@rand_addr=0x64010101, 0x3}]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @dev={0xac, 0x14, 0x14, 0x1e}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}], 0x138}}, {{&(0x7f0000000c40)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000c80)="0edac8fc0cbb7a3c89e2c047da26b2278f24c754156c488c5c89256cc52bd86bee88826747bf8e21b509904a52c8cb9a5f6cfbf0c088c88d3cc3d26fd0b37bf997226dd03ecc2c33e1956573f3ade35560eae8346b9d52d08406602b725dffbe6d4bbf7127d2d450462304017bc2f891af12c59e17b63f825b8d2f7d7df02c260860d0719b76fdde982d", 0x8a}], 0x1, &(0x7f0000000d80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffeff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast2, @multicast2}}}], 0x38}}], 0x4, 0x4000) 10:50:57 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x68) [ 229.881685][ T8931] 10:50:57 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (fail_nth: 2) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x20, 0x6, @link_local}, 0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000400)={0x0, 0x7, 0xdd, "18c41259cf170025a4f0cb78d4e4bc19951bf47aadd3caf355937d199c601166586d293a73e88a1ba442abe4dd7108d5ca697ca83d3c2f1df153f59b1f4054514f21ee385794294f8cf6d3d0fef093f8b17e0bbbf2a932b4e5946c176833ed378e42c474d30e9724e72c1cdd13d81f1ca6530dfe5f0ce3247a4aa408eeec369637d8a47e24cd92e068941ddeb04f78a59dd2401cdb64806892074559c439cb6985b1090cb2b97ab9a8c537d7895586e735696bd00c07716e4db6e34cb29930e1570aca73825922177cca55acf22d63fdafcc09b400f01d18c0c2ab1da4"}, 0xe5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xc0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310300000000000000000900000008000300f83d32b7bffaa7451c2f0c09fb168e814082522a911707751945781a2b3990739c1bef350b2bb7bd1f89039c97557928c0c50372b05464831c002ab7fe163305e9837966b299eb75fdf1b63cba4eb2", @ANYRES32=r7, @ANYBLOB="08000600", @ANYRES32=r9, @ANYBLOB], 0x24}}, 0x20000000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc81c5cec2f1b0f1e}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, r6, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfd}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040080}, 0x4c040) [ 229.991778][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 230.144565][ T8948] FAULT_INJECTION: forcing a failure. [ 230.144565][ T8948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.171741][ T8948] CPU: 1 PID: 8948 Comm: syz-executor.1 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 230.182201][ T8948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.192278][ T8948] Call Trace: [ 230.195567][ T8948] [ 230.198506][ T8948] dump_stack_lvl+0xcd/0x134 [ 230.203120][ T8948] should_fail.cold+0x5/0xa [ 230.207646][ T8948] _copy_to_user+0x2c/0x150 [ 230.212160][ T8948] simple_read_from_buffer+0xcc/0x160 [ 230.217554][ T8948] proc_fail_nth_read+0x187/0x220 [ 230.222604][ T8948] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 230.228369][ T8948] ? security_file_permission+0xab/0xd0 [ 230.233937][ T8948] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 230.239680][ T8948] vfs_read+0x1b5/0x600 [ 230.243856][ T8948] ksys_read+0x12d/0x250 [ 230.248119][ T8948] ? vfs_write+0xae0/0xae0 [ 230.252552][ T8948] ? syscall_enter_from_user_mode+0x21/0x70 [ 230.258467][ T8948] do_syscall_64+0x35/0xb0 [ 230.262900][ T8948] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 230.268814][ T8948] RIP: 0033:0x7f7e7b99bc0c [ 230.273238][ T8948] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 10:50:58 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x0) 10:50:58 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef000000000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x155}, {&(0x7f0000000140)=""/85, 0x95}, {&(0x7f0000000fc0)=""/4096, 0x29b}, {&(0x7f0000000400)=""/106, 0xcf4}, {&(0x7f0000000740)=""/73, 0x3b3}, {&(0x7f0000000200)=""/77, 0x533}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) pipe(&(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, r5, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000280)="b60b1b4ee5dff8291100dc1d74340613926b2e9b874ae486b33cb3fd7b88a609e12a952a13e0decae0e68c761aa4ca4df31e9874180d8290ae32abf64c1dba3f15592ed76c97de1b908ee0bbba3494de52f8ac0f0ce4bb426b7ea8bdf0faf985aedefd4808392d8ae017bb8b7edea90c097fba841925da91c396c381e090e40a3776ff965c31e8d296ad3b8ecd7ff0e3df82972f437743867e351696f993980c9a55d3c4d10126c10c44baee1beb3711071a4778f3f08f9ef6ca9dd8d3c0e4151bb03204c899e589a82ad23a661c3b4b58677ff514374cf1616ca82adf8d", 0xde}], 0x1, &(0x7f00000001c0)=[@ip_tos_u8={{0x11}}], 0x18}}, {{&(0x7f0000000480)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000540)="66f001b65702f9dcc9dafbda158b6e0eb024c103e0b464e71a5f808e9273d924aba0a0730541e9a489e16a42286b94aea4b170bc501e9d3f8f945f350131c7bd5d5c9fccd9cc8ea0ccfe4f58c3abee0ee15466a68c91fd3e5ea0eed8edb4acdea7407fe075f44fab07ba8949bd", 0x6d}], 0x1, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffb}}], 0x38}}, {{&(0x7f0000000700)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000880)="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", 0xfc}, {&(0x7f0000000980)="cc17bc1a", 0x4}, {&(0x7f00000009c0)="592e2f64fd6370e1863aaf4628cdb133939daa18c783194cdb58cc633e135c97ac0e752d8e139033c8dfaa6c54868c86222547f1e0cd62f4ae85cc82a569dee51a0ebb865f404d047a4b1f68ebdceae0001cd04f155c69738fcebe1255e8a1773599bb19959bfbeb8f35a45ff93590351e00b69f2856c096bcbb8e522d70bc766bd81089cb4c87f9c45a7f6bf779b0cf83918f88d0230665a5402234e620a53633d58e9d5b6e9b72d3a6c065e15ec6d71d", 0xb1}, {&(0x7f0000000a80)="22033135ff3216a844", 0x9}], 0x4, &(0x7f0000000b00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xc8, 0x1, 0x5, [{@remote, 0x1}]}, @rr={0x7, 0x7, 0x58, [@empty]}, @rr={0x7, 0x27, 0x3c, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010100, @multicast1, @loopback, @loopback, @private=0xa010101, @remote, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x54, 0xd4, 0x1, 0x4, [{@empty, 0x498}, {@private=0xa010102, 0x5}, {@loopback, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x76}, {@local, 0x8}, {@remote, 0x9}, {@broadcast, 0x2}, {@loopback, 0xff}, {@multicast2, 0x1f}, {@rand_addr=0x64010101, 0x3}]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @dev={0xac, 0x14, 0x14, 0x1e}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}], 0x138}}, {{&(0x7f0000000c40)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000c80)="0edac8fc0cbb7a3c89e2c047da26b2278f24c754156c488c5c89256cc52bd86bee88826747bf8e21b509904a52c8cb9a5f6cfbf0c088c88d3cc3d26fd0b37bf997226dd03ecc2c33e1956573f3ade35560eae8346b9d52d08406602b725dffbe6d4bbf7127d2d450462304017bc2f891af12c59e17b63f825b8d2f7d7df02c260860d0719b76fdde982d", 0x8a}], 0x1, &(0x7f0000000d80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffeff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast2, @multicast2}}}], 0x38}}], 0x4, 0x4000) socket(0x10, 0x803, 0x0) (async) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef000000000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x155}, {&(0x7f0000000140)=""/85, 0x95}, {&(0x7f0000000fc0)=""/4096, 0x29b}, {&(0x7f0000000400)=""/106, 0xcf4}, {&(0x7f0000000740)=""/73, 0x3b3}, {&(0x7f0000000200)=""/77, 0x533}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) (async) pipe(&(0x7f00000027c0)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0x58, &(0x7f0000000580)}, 0x10) (async) pipe(&(0x7f00000027c0)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) (async) pipe(&(0x7f00000027c0)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, r5, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000280)="b60b1b4ee5dff8291100dc1d74340613926b2e9b874ae486b33cb3fd7b88a609e12a952a13e0decae0e68c761aa4ca4df31e9874180d8290ae32abf64c1dba3f15592ed76c97de1b908ee0bbba3494de52f8ac0f0ce4bb426b7ea8bdf0faf985aedefd4808392d8ae017bb8b7edea90c097fba841925da91c396c381e090e40a3776ff965c31e8d296ad3b8ecd7ff0e3df82972f437743867e351696f993980c9a55d3c4d10126c10c44baee1beb3711071a4778f3f08f9ef6ca9dd8d3c0e4151bb03204c899e589a82ad23a661c3b4b58677ff514374cf1616ca82adf8d", 0xde}], 0x1, &(0x7f00000001c0)=[@ip_tos_u8={{0x11}}], 0x18}}, {{&(0x7f0000000480)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000540)="66f001b65702f9dcc9dafbda158b6e0eb024c103e0b464e71a5f808e9273d924aba0a0730541e9a489e16a42286b94aea4b170bc501e9d3f8f945f350131c7bd5d5c9fccd9cc8ea0ccfe4f58c3abee0ee15466a68c91fd3e5ea0eed8edb4acdea7407fe075f44fab07ba8949bd", 0x6d}], 0x1, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffb}}], 0x38}}, {{&(0x7f0000000700)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000880)="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", 0xfc}, {&(0x7f0000000980)="cc17bc1a", 0x4}, {&(0x7f00000009c0)="592e2f64fd6370e1863aaf4628cdb133939daa18c783194cdb58cc633e135c97ac0e752d8e139033c8dfaa6c54868c86222547f1e0cd62f4ae85cc82a569dee51a0ebb865f404d047a4b1f68ebdceae0001cd04f155c69738fcebe1255e8a1773599bb19959bfbeb8f35a45ff93590351e00b69f2856c096bcbb8e522d70bc766bd81089cb4c87f9c45a7f6bf779b0cf83918f88d0230665a5402234e620a53633d58e9d5b6e9b72d3a6c065e15ec6d71d", 0xb1}, {&(0x7f0000000a80)="22033135ff3216a844", 0x9}], 0x4, &(0x7f0000000b00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xc8, 0x1, 0x5, [{@remote, 0x1}]}, @rr={0x7, 0x7, 0x58, [@empty]}, @rr={0x7, 0x27, 0x3c, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010100, @multicast1, @loopback, @loopback, @private=0xa010101, @remote, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x54, 0xd4, 0x1, 0x4, [{@empty, 0x498}, {@private=0xa010102, 0x5}, {@loopback, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x76}, {@local, 0x8}, {@remote, 0x9}, {@broadcast, 0x2}, {@loopback, 0xff}, {@multicast2, 0x1f}, {@rand_addr=0x64010101, 0x3}]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @dev={0xac, 0x14, 0x14, 0x1e}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}], 0x138}}, {{&(0x7f0000000c40)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000c80)="0edac8fc0cbb7a3c89e2c047da26b2278f24c754156c488c5c89256cc52bd86bee88826747bf8e21b509904a52c8cb9a5f6cfbf0c088c88d3cc3d26fd0b37bf997226dd03ecc2c33e1956573f3ade35560eae8346b9d52d08406602b725dffbe6d4bbf7127d2d450462304017bc2f891af12c59e17b63f825b8d2f7d7df02c260860d0719b76fdde982d", 0x8a}], 0x1, &(0x7f0000000d80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffeff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast2, @multicast2}}}], 0x38}}], 0x4, 0x4000) (async) 10:50:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x0) 10:50:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x6c) [ 230.292870][ T8948] RSP: 002b:00007f7e7a35e160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 230.301307][ T8948] RAX: ffffffffffffffda RBX: 00007f7e7bafbf60 RCX: 00007f7e7b99bc0c [ 230.309296][ T8948] RDX: 000000000000000f RSI: 00007f7e7a35e1e0 RDI: 0000000000000006 [ 230.317291][ T8948] RBP: 00007f7e7a35e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 230.325281][ T8948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.333271][ T8948] R13: 00007ffe6bba396f R14: 00007f7e7a35e300 R15: 0000000000022000 [ 230.341281][ T8948] [ 230.402506][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:50:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) (rerun: 64) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x20, 0x6, @link_local}, 0x14) (async, rerun: 64) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) (async, rerun: 64) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000400)={0x0, 0x7, 0xdd, "18c41259cf170025a4f0cb78d4e4bc19951bf47aadd3caf355937d199c601166586d293a73e88a1ba442abe4dd7108d5ca697ca83d3c2f1df153f59b1f4054514f21ee385794294f8cf6d3d0fef093f8b17e0bbbf2a932b4e5946c176833ed378e42c474d30e9724e72c1cdd13d81f1ca6530dfe5f0ce3247a4aa408eeec369637d8a47e24cd92e068941ddeb04f78a59dd2401cdb64806892074559c439cb6985b1090cb2b97ab9a8c537d7895586e735696bd00c07716e4db6e34cb29930e1570aca73825922177cca55acf22d63fdafcc09b400f01d18c0c2ab1da4"}, 0xe5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xc0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310300000000000000000900000008000300f83d32b7bffaa7451c2f0c09fb168e814082522a911707751945781a2b3990739c1bef350b2bb7bd1f89039c97557928c0c50372b05464831c002ab7fe163305e9837966b299eb75fdf1b63cba4eb2", @ANYRES32=r7, @ANYBLOB="08000600", @ANYRES32=r9, @ANYBLOB], 0x24}}, 0x20000000) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc81c5cec2f1b0f1e}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, r6, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfd}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040080}, 0x4c040) 10:50:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x68) 10:50:58 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x74) 10:50:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) (async) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x20, 0x6, @link_local}, 0x14) (async) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000400)={0x0, 0x7, 0xdd, "18c41259cf170025a4f0cb78d4e4bc19951bf47aadd3caf355937d199c601166586d293a73e88a1ba442abe4dd7108d5ca697ca83d3c2f1df153f59b1f4054514f21ee385794294f8cf6d3d0fef093f8b17e0bbbf2a932b4e5946c176833ed378e42c474d30e9724e72c1cdd13d81f1ca6530dfe5f0ce3247a4aa408eeec369637d8a47e24cd92e068941ddeb04f78a59dd2401cdb64806892074559c439cb6985b1090cb2b97ab9a8c537d7895586e735696bd00c07716e4db6e34cb29930e1570aca73825922177cca55acf22d63fdafcc09b400f01d18c0c2ab1da4"}, 0xe5) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xc0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) (async) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x2343a726) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310300000000000000000900000008000300f83d32b7bffaa7451c2f0c09fb168e814082522a911707751945781a2b3990739c1bef350b2bb7bd1f89039c97557928c0c50372b05464831c002ab7fe163305e9837966b299eb75fdf1b63cba4eb2", @ANYRES32=r7, @ANYBLOB="08000600", @ANYRES32=r9, @ANYBLOB], 0x24}}, 0x20000000) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc81c5cec2f1b0f1e}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, r6, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfd}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040080}, 0x4c040) 10:50:58 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:58 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x7) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:58 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:59 executing program 5: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) pipe(&(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100fef5fbfcb71cbcf6a2dca2781e867054c9f7bde856137d0597d4e8cb1dc05113d9ac7a7f61e3665e802c810f3df7350ee8fd", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="050000000000000000000cd0e9200018006400004f2f9078ac1e000100000000940401c0"]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="48010000", @ANYRES16=r5, @ANYBLOB="100027bd7000fcdbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="2c01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYBLOB="62e4fe768e9f752c3c65fb4e60426bcf2ed75dfd518165b0f67df705f66c61d760bf433c69ad97206ca82660ea8ffdb2c3bad1818233c518cb18688940b8d429c87739ce246495bfe55446934b4964f2744435d94e88b43b825da1213adc25fc07bc8215a58e7733", @ANYBLOB="0800070061477e3d2cd00800000000000000000000380001002400010061637469766570c058a63db40000000000000000", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="380001002458410000000000005f726501f0696e5f696e74617276616c0000000000000000000000050003000300000008000400fbffffff3c0001002400010b05e56673ccfd59088624686c2f00757365725f6c696e6b7570000000000000000000000000000000000000003cc7431abbd7473a153d0000050003000600", @ANYRES32=r10, @ANYBLOB], 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) sendmmsg$unix(r3, &(0x7f0000000800)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000600)="52fd7b9abd34547407075695da65a6a329896dc9fcabee2b70ade4c20e1621def3c1fb90538c6fea45bc77954438a125ea26b6b24226b4d62e22edfc997f5ac78d6369802b8120a75ae1176670e52a71d6427fb8ab06f6f39398a0a6b93b4c0cc75e072d497a65605c0427b03f7fdbeca64399d9a2e92299c39a083824c2b1b4f790e3788239a333798e8b8806e64696e73441fee274ea881f456f5d5ef8b9dbf572309ec66b3696b614f885d5cdc18ab62e84fffeeca487d023d3a2c1c3b1bfae2f8ea706af31a670c947f79ff5aa42244a3f5b9b38f940c5c463bd6ec19e676db2a52f", 0xe4}, {&(0x7f00000008c0)="685ef0b1555dc454113292619117af39a01bdbe7db1bc9910b04444f4e1d7c1ff12b4c10304930d49d2b727f36a624d5ba95134b4dc36a35de316d7e8546a3bcf391b45b98b8a2f4c4d9ff46490f0a9b4dd1b04551de9555e64aad63a63eb29056e6b5e881e894eb144655f2215363148e514971", 0x74}, {&(0x7f0000000700)="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", 0xfe}], 0x3, 0x0, 0x0, 0x4800}}], 0x1, 0x20008000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r11, &(0x7f0000000080)=[{}], 0x1, 0xff, 0x0, 0x0) 10:50:59 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:59 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x700) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x7a) 10:50:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x0) 10:50:59 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 1) [ 231.282637][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 231.321915][ T9016] FAULT_INJECTION: forcing a failure. 10:50:59 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0xff03) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 231.321915][ T9016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.371561][ T9016] CPU: 0 PID: 9016 Comm: syz-executor.3 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 231.382022][ T9016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.392089][ T9016] Call Trace: [ 231.395378][ T9016] [ 231.398318][ T9016] dump_stack_lvl+0xcd/0x134 [ 231.402934][ T9016] should_fail.cold+0x5/0xa [ 231.407467][ T9016] _copy_from_user+0x2c/0x180 [ 231.412196][ T9016] __copy_msghdr_from_user+0x91/0x4b0 [ 231.417593][ T9016] ? __ia32_sys_shutdown+0x70/0x70 [ 231.422734][ T9016] ? __lock_acquire+0xbc4/0x56c0 [ 231.427705][ T9016] sendmsg_copy_msghdr+0xa1/0x160 [ 231.432762][ T9016] ? do_recvmmsg+0x6d0/0x6d0 [ 231.437366][ T9016] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 231.443389][ T9016] ___sys_sendmsg+0xc6/0x170 [ 231.448001][ T9016] ? sendmsg_copy_msghdr+0x160/0x160 [ 231.453310][ T9016] ? __fget_files+0x26a/0x470 [ 231.458009][ T9016] ? lock_downgrade+0x6e0/0x6e0 [ 231.462881][ T9016] ? lock_chain_count+0x20/0x20 [ 231.467778][ T9016] ? __fget_files+0x28c/0x470 [ 231.472495][ T9016] ? __fget_light+0xea/0x280 [ 231.477114][ T9016] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 231.483392][ T9016] __sys_sendmmsg+0x195/0x470 [ 231.488114][ T9016] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 231.493165][ T9016] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 231.499187][ T9016] ? find_held_lock+0x2d/0x110 [ 231.504008][ T9016] ? __context_tracking_exit+0xb8/0xe0 [ 231.509493][ T9016] ? lock_downgrade+0x6e0/0x6e0 [ 231.514377][ T9016] ? lock_downgrade+0x6e0/0x6e0 [ 231.519274][ T9016] __x64_sys_sendmmsg+0x99/0x100 [ 231.524241][ T9016] ? syscall_enter_from_user_mode+0x21/0x70 [ 231.530164][ T9016] do_syscall_64+0x35/0xb0 [ 231.534607][ T9016] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 231.540526][ T9016] RIP: 0033:0x7fd4f9c5f059 [ 231.544962][ T9016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 10:50:59 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000ece65fbcee5586dd6001010000161100fe8000000022000000000000000000bbfe8000000000000000000000000000aa00000e2200169078020300000000000030b00afe4e70"], 0x0) 10:50:59 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) (async) syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000ece65fbcee5586dd6001010000161100fe8000000022000000000000000000bbfe8000000000000000000000000000aa00000e2200169078020300000000000030b00afe4e70"], 0x0) 10:50:59 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x40000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:59 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000ece65fbcee5586dd6001010000161100fe8000000022000000000000000000bbfe8000000000000000000000000000aa00000e2200169078020300000000000030b00afe4e70"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) (async) syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000ece65fbcee5586dd6001010000161100fe8000000022000000000000000000bbfe8000000000000000000000000000aa00000e2200169078020300000000000030b00afe4e70"], 0x0) (async) 10:50:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x38, r2, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x81, 0x7}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x171}]]}, 0x38}, 0x1, 0x0, 0x0, 0xc884}, 0x80) [ 231.564592][ T9016] RSP: 002b:00007fd4f85d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 231.573029][ T9016] RAX: ffffffffffffffda RBX: 00007fd4f9d71f60 RCX: 00007fd4f9c5f059 [ 231.581021][ T9016] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 231.589011][ T9016] RBP: 00007fd4f85d41d0 R08: 0000000000000000 R09: 0000000000000000 [ 231.597001][ T9016] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000001 [ 231.604993][ T9016] R13: 00007ffced8949cf R14: 00007fd4f85d4300 R15: 0000000000022000 [ 231.613130][ T9016] [ 231.692269][ T25] kauditd_printk_skb: 16 callbacks suppressed [ 231.692286][ T25] audit: type=1804 audit(1645786259.519:165): pid=9017 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/141/memory.events" dev="sda1" ino=1176 res=1 errno=0 [ 231.799607][ T25] audit: type=1804 audit(1645786259.559:166): pid=9036 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/141/memory.events" dev="sda1" ino=1176 res=1 errno=0 10:50:59 executing program 5: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) pipe(&(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100fef5fbfcb71cbcf6a2dca2781e867054c9f7bde856137d0597d4e8cb1dc05113d9ac7a7f61e3665e802c810f3df7350ee8fd", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="050000000000000000000cd0e9200018006400004f2f9078ac1e000100000000940401c0"]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="48010000", @ANYRES16=r5, @ANYBLOB="100027bd7000fcdbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="2c01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYBLOB="62e4fe768e9f752c3c65fb4e60426bcf2ed75dfd518165b0f67df705f66c61d760bf433c69ad97206ca82660ea8ffdb2c3bad1818233c518cb18688940b8d429c87739ce246495bfe55446934b4964f2744435d94e88b43b825da1213adc25fc07bc8215a58e7733", @ANYBLOB="0800070061477e3d2cd00800000000000000000000380001002400010061637469766570c058a63db40000000000000000", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="380001002458410000000000005f726501f0696e5f696e74617276616c0000000000000000000000050003000300000008000400fbffffff3c0001002400010b05e56673ccfd59088624686c2f00757365725f6c696e6b7570000000000000000000000000000000000000003cc7431abbd7473a153d0000050003000600", @ANYRES32=r10, @ANYBLOB], 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) sendmmsg$unix(r3, &(0x7f0000000800)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000600)="52fd7b9abd34547407075695da65a6a329896dc9fcabee2b70ade4c20e1621def3c1fb90538c6fea45bc77954438a125ea26b6b24226b4d62e22edfc997f5ac78d6369802b8120a75ae1176670e52a71d6427fb8ab06f6f39398a0a6b93b4c0cc75e072d497a65605c0427b03f7fdbeca64399d9a2e92299c39a083824c2b1b4f790e3788239a333798e8b8806e64696e73441fee274ea881f456f5d5ef8b9dbf572309ec66b3696b614f885d5cdc18ab62e84fffeeca487d023d3a2c1c3b1bfae2f8ea706af31a670c947f79ff5aa42244a3f5b9b38f940c5c463bd6ec19e676db2a52f", 0xe4}, {&(0x7f00000008c0)="685ef0b1555dc454113292619117af39a01bdbe7db1bc9910b04444f4e1d7c1ff12b4c10304930d49d2b727f36a624d5ba95134b4dc36a35de316d7e8546a3bcf391b45b98b8a2f4c4d9ff46490f0a9b4dd1b04551de9555e64aad63a63eb29056e6b5e881e894eb144655f2215363148e514971", 0x74}, {&(0x7f0000000700)="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", 0xfe}], 0x3, 0x0, 0x0, 0x4800}}], 0x1, 0x20008000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r11, &(0x7f0000000080)=[{}], 0x1, 0xff, 0x0, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)) (async) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) (async) pipe(&(0x7f00000027c0)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100fef5fbfcb71cbcf6a2dca2781e867054c9f7bde856137d0597d4e8cb1dc05113d9ac7a7f61e3665e802c810f3df7350ee8fd", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0x58, &(0x7f0000000580)}, 0x10) (async) pipe(&(0x7f00000027c0)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="050000000000000000000cd0e9200018006400004f2f9078ac1e000100000000940401c0"]}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) (async) pipe(&(0x7f00000027c0)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="48010000", @ANYRES16=r5, @ANYBLOB="100027bd7000fcdbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="2c01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYBLOB="62e4fe768e9f752c3c65fb4e60426bcf2ed75dfd518165b0f67df705f66c61d760bf433c69ad97206ca82660ea8ffdb2c3bad1818233c518cb18688940b8d429c87739ce246495bfe55446934b4964f2744435d94e88b43b825da1213adc25fc07bc8215a58e7733", @ANYBLOB="0800070061477e3d2cd00800000000000000000000380001002400010061637469766570c058a63db40000000000000000", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="380001002458410000000000005f726501f0696e5f696e74617276616c0000000000000000000000050003000300000008000400fbffffff3c0001002400010b05e56673ccfd59088624686c2f00757365725f6c696e6b7570000000000000000000000000000000000000003cc7431abbd7473a153d0000050003000600", @ANYRES32=r10, @ANYBLOB], 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) (async) sendmmsg$unix(r3, &(0x7f0000000800)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000600)="52fd7b9abd34547407075695da65a6a329896dc9fcabee2b70ade4c20e1621def3c1fb90538c6fea45bc77954438a125ea26b6b24226b4d62e22edfc997f5ac78d6369802b8120a75ae1176670e52a71d6427fb8ab06f6f39398a0a6b93b4c0cc75e072d497a65605c0427b03f7fdbeca64399d9a2e92299c39a083824c2b1b4f790e3788239a333798e8b8806e64696e73441fee274ea881f456f5d5ef8b9dbf572309ec66b3696b614f885d5cdc18ab62e84fffeeca487d023d3a2c1c3b1bfae2f8ea706af31a670c947f79ff5aa42244a3f5b9b38f940c5c463bd6ec19e676db2a52f", 0xe4}, {&(0x7f00000008c0)="685ef0b1555dc454113292619117af39a01bdbe7db1bc9910b04444f4e1d7c1ff12b4c10304930d49d2b727f36a624d5ba95134b4dc36a35de316d7e8546a3bcf391b45b98b8a2f4c4d9ff46490f0a9b4dd1b04551de9555e64aad63a63eb29056e6b5e881e894eb144655f2215363148e514971", 0x74}, {&(0x7f0000000700)="193f56491259ff419339e5926c41e943e64aacf177d4e6728c439e5bb9983a45005be82ff3577787952fc01a49411b8d0faa0f76b35cff64a3cda69419ed17690577a55ca7d0c791d58963d105d4714c90bdf692df9104a35d1b6a0c48d359f7d9056c475b5b30b6771df4509513d55e0132964f162d8b4d3a607cd969c167df6b2d2023dbd9586b6bc262e3beb7b096fb9562257bdaef08e1a45b1014d8cadad5962ee2eeaaf7a32d76e30be243031e8acd2f0655801b3f7880c23bc371f57ceb4bd3c7b7e430a9b7d2f53a98bbe868b12cc0e7edfaa5fb71b71ad2df47662872b35e8ce91bd86f17d6e4179853339fff7c0c6b222a4d0dc6ac0535c9db", 0xfe}], 0x3, 0x0, 0x0, 0x4800}}], 0x1, 0x20008000) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r1, &(0x7f0000000040)={0x20000004}) (async) epoll_pwait(r11, &(0x7f0000000080)=[{}], 0x1, 0xff, 0x0, 0x0) (async) 10:50:59 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x7000000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:50:59 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 2) 10:50:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x38, r2, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x81, 0x7}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x171}]]}, 0x38}, 0x1, 0x0, 0x0, 0xc884}, 0x80) 10:51:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x300) 10:51:00 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) pipe(&(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100fef5fbfcb71cbcf6a2dca2781e867054c9f7bde856137d0597d4e8cb1dc05113d9ac7a7f61e3665e802c810f3df7350ee8fd", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="050000000000000000000cd0e9200018006400004f2f9078ac1e000100000000940401c0"]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="48010000", @ANYRES16=r5, @ANYBLOB="100027bd7000fcdbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="2c01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYBLOB="62e4fe768e9f752c3c65fb4e60426bcf2ed75dfd518165b0f67df705f66c61d760bf433c69ad97206ca82660ea8ffdb2c3bad1818233c518cb18688940b8d429c87739ce246495bfe55446934b4964f2744435d94e88b43b825da1213adc25fc07bc8215a58e7733", @ANYBLOB="0800070061477e3d2cd00800000000000000000000380001002400010061637469766570c058a63db40000000000000000", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="380001002458410000000000005f726501f0696e5f696e74617276616c0000000000000000000000050003000300000008000400fbffffff3c0001002400010b05e56673ccfd59088624686c2f00757365725f6c696e6b7570000000000000000000000000000000000000003cc7431abbd7473a153d0000050003000600", @ANYRES32=r10, @ANYBLOB], 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) sendmmsg$unix(r3, &(0x7f0000000800)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000600)="52fd7b9abd34547407075695da65a6a329896dc9fcabee2b70ade4c20e1621def3c1fb90538c6fea45bc77954438a125ea26b6b24226b4d62e22edfc997f5ac78d6369802b8120a75ae1176670e52a71d6427fb8ab06f6f39398a0a6b93b4c0cc75e072d497a65605c0427b03f7fdbeca64399d9a2e92299c39a083824c2b1b4f790e3788239a333798e8b8806e64696e73441fee274ea881f456f5d5ef8b9dbf572309ec66b3696b614f885d5cdc18ab62e84fffeeca487d023d3a2c1c3b1bfae2f8ea706af31a670c947f79ff5aa42244a3f5b9b38f940c5c463bd6ec19e676db2a52f", 0xe4}, {&(0x7f00000008c0)="685ef0b1555dc454113292619117af39a01bdbe7db1bc9910b04444f4e1d7c1ff12b4c10304930d49d2b727f36a624d5ba95134b4dc36a35de316d7e8546a3bcf391b45b98b8a2f4c4d9ff46490f0a9b4dd1b04551de9555e64aad63a63eb29056e6b5e881e894eb144655f2215363148e514971", 0x74}, {&(0x7f0000000700)="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", 0xfe}], 0x3, 0x0, 0x0, 0x4800}}], 0x1, 0x20008000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r11, &(0x7f0000000080)=[{}], 0x1, 0xff, 0x0, 0x0) 10:51:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x38, r2, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x81, 0x7}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x171}]]}, 0x38}, 0x1, 0x0, 0x0, 0xc884}, 0x80) [ 232.177924][ T9040] FAULT_INJECTION: forcing a failure. [ 232.177924][ T9040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.185246][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:51:00 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x10000000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 232.263337][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 232.270419][ T9040] CPU: 1 PID: 9040 Comm: syz-executor.3 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 232.282979][ T9040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.293055][ T9040] Call Trace: [ 232.296345][ T9040] [ 232.299287][ T9040] dump_stack_lvl+0xcd/0x134 [ 232.303906][ T9040] should_fail.cold+0x5/0xa [ 232.308438][ T9040] _copy_from_user+0x2c/0x180 [ 232.313145][ T9040] move_addr_to_kernel.part.0+0x31/0x110 [ 232.318809][ T9040] __copy_msghdr_from_user+0x3da/0x4b0 [ 232.324294][ T9040] ? __ia32_sys_shutdown+0x70/0x70 [ 232.329434][ T9040] ? __lock_acquire+0xbc4/0x56c0 [ 232.334407][ T9040] sendmsg_copy_msghdr+0xa1/0x160 [ 232.339457][ T9040] ? do_recvmmsg+0x6d0/0x6d0 [ 232.344067][ T9040] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 232.350094][ T9040] ___sys_sendmsg+0xc6/0x170 [ 232.354709][ T9040] ? sendmsg_copy_msghdr+0x160/0x160 [ 232.360022][ T9040] ? __fget_files+0x26a/0x470 [ 232.364728][ T9040] ? lock_downgrade+0x6e0/0x6e0 [ 232.369602][ T9040] ? lock_chain_count+0x20/0x20 [ 232.374500][ T9040] ? __fget_files+0x28c/0x470 [ 232.379244][ T9040] ? __fget_light+0xea/0x280 [ 232.383859][ T9040] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 232.390132][ T9040] __sys_sendmmsg+0x195/0x470 [ 232.394837][ T9040] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 232.399879][ T9040] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 232.405902][ T9040] ? __context_tracking_exit+0xb8/0xe0 [ 232.411379][ T9040] ? lock_downgrade+0x6e0/0x6e0 [ 232.416257][ T9040] ? lock_downgrade+0x6e0/0x6e0 [ 232.421141][ T9040] __x64_sys_sendmmsg+0x99/0x100 [ 232.426098][ T9040] ? syscall_enter_from_user_mode+0x21/0x70 [ 232.432014][ T9040] do_syscall_64+0x35/0xb0 [ 232.436451][ T9040] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 232.442362][ T9040] RIP: 0033:0x7fd4f9c5f059 [ 232.446788][ T9040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 232.466415][ T9040] RSP: 002b:00007fd4f85d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 232.474851][ T9040] RAX: ffffffffffffffda RBX: 00007fd4f9d71f60 RCX: 00007fd4f9c5f059 [ 232.482842][ T9040] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 10:51:00 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0xff030000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:51:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x500) [ 232.482906][ T25] audit: type=1804 audit(1645786260.229:167): pid=9049 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/142/memory.events" dev="sda1" ino=1177 res=1 errno=0 [ 232.490821][ T9040] RBP: 00007fd4f85d41d0 R08: 0000000000000000 R09: 0000000000000000 [ 232.490837][ T9040] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000001 [ 232.490852][ T9040] R13: 00007ffced8949cf R14: 00007fd4f85d4300 R15: 0000000000022000 [ 232.490886][ T9040] 10:51:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x300) 10:51:00 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 3) 10:51:00 executing program 5: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) pipe(&(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100fef5fbfcb71cbcf6a2dca2781e867054c9f7bde856137d0597d4e8cb1dc05113d9ac7a7f61e3665e802c810f3df7350ee8fd", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="050000000000000000000cd0e9200018006400004f2f9078ac1e000100000000940401c0"]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="48010000", @ANYRES16=r5, @ANYBLOB="100027bd7000fcdbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="2c01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYBLOB="62e4fe768e9f752c3c65fb4e60426bcf2ed75dfd518165b0f67df705f66c61d760bf433c69ad97206ca82660ea8ffdb2c3bad1818233c518cb18688940b8d429c87739ce246495bfe55446934b4964f2744435d94e88b43b825da1213adc25fc07bc8215a58e7733", @ANYBLOB="0800070061477e3d2cd00800000000000000000000380001002400010061637469766570c058a63db40000000000000000", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="380001002458410000000000005f726501f0696e5f696e74617276616c0000000000000000000000050003000300000008000400fbffffff3c0001002400010b05e56673ccfd59088624686c2f00757365725f6c696e6b7570000000000000000000000000000000000000003cc7431abbd7473a153d0000050003000600", @ANYRES32=r10, @ANYBLOB], 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) sendmmsg$unix(r3, &(0x7f0000000800)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000600)="52fd7b9abd34547407075695da65a6a329896dc9fcabee2b70ade4c20e1621def3c1fb90538c6fea45bc77954438a125ea26b6b24226b4d62e22edfc997f5ac78d6369802b8120a75ae1176670e52a71d6427fb8ab06f6f39398a0a6b93b4c0cc75e072d497a65605c0427b03f7fdbeca64399d9a2e92299c39a083824c2b1b4f790e3788239a333798e8b8806e64696e73441fee274ea881f456f5d5ef8b9dbf572309ec66b3696b614f885d5cdc18ab62e84fffeeca487d023d3a2c1c3b1bfae2f8ea706af31a670c947f79ff5aa42244a3f5b9b38f940c5c463bd6ec19e676db2a52f", 0xe4}, {&(0x7f00000008c0)="685ef0b1555dc454113292619117af39a01bdbe7db1bc9910b04444f4e1d7c1ff12b4c10304930d49d2b727f36a624d5ba95134b4dc36a35de316d7e8546a3bcf391b45b98b8a2f4c4d9ff46490f0a9b4dd1b04551de9555e64aad63a63eb29056e6b5e881e894eb144655f2215363148e514971", 0x74}, {&(0x7f0000000700)="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", 0xfe}], 0x3, 0x0, 0x0, 0x4800}}], 0x1, 0x20008000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r11, &(0x7f0000000080)=[{}], 0x1, 0xff, 0x0, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)) (async) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) (async) pipe(&(0x7f00000027c0)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100fef5fbfcb71cbcf6a2dca2781e867054c9f7bde856137d0597d4e8cb1dc05113d9ac7a7f61e3665e802c810f3df7350ee8fd", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0x58, &(0x7f0000000580)}, 0x10) (async) pipe(&(0x7f00000027c0)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="050000000000000000000cd0e9200018006400004f2f9078ac1e000100000000940401c0"]}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) (async) pipe(&(0x7f00000027c0)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="48010000", @ANYRES16=r5, @ANYBLOB="100027bd7000fcdbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="2c01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYBLOB="62e4fe768e9f752c3c65fb4e60426bcf2ed75dfd518165b0f67df705f66c61d760bf433c69ad97206ca82660ea8ffdb2c3bad1818233c518cb18688940b8d429c87739ce246495bfe55446934b4964f2744435d94e88b43b825da1213adc25fc07bc8215a58e7733", @ANYBLOB="0800070061477e3d2cd00800000000000000000000380001002400010061637469766570c058a63db40000000000000000", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="380001002458410000000000005f726501f0696e5f696e74617276616c0000000000000000000000050003000300000008000400fbffffff3c0001002400010b05e56673ccfd59088624686c2f00757365725f6c696e6b7570000000000000000000000000000000000000003cc7431abbd7473a153d0000050003000600", @ANYRES32=r10, @ANYBLOB], 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) (async) sendmmsg$unix(r3, &(0x7f0000000800)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000600)="52fd7b9abd34547407075695da65a6a329896dc9fcabee2b70ade4c20e1621def3c1fb90538c6fea45bc77954438a125ea26b6b24226b4d62e22edfc997f5ac78d6369802b8120a75ae1176670e52a71d6427fb8ab06f6f39398a0a6b93b4c0cc75e072d497a65605c0427b03f7fdbeca64399d9a2e92299c39a083824c2b1b4f790e3788239a333798e8b8806e64696e73441fee274ea881f456f5d5ef8b9dbf572309ec66b3696b614f885d5cdc18ab62e84fffeeca487d023d3a2c1c3b1bfae2f8ea706af31a670c947f79ff5aa42244a3f5b9b38f940c5c463bd6ec19e676db2a52f", 0xe4}, {&(0x7f00000008c0)="685ef0b1555dc454113292619117af39a01bdbe7db1bc9910b04444f4e1d7c1ff12b4c10304930d49d2b727f36a624d5ba95134b4dc36a35de316d7e8546a3bcf391b45b98b8a2f4c4d9ff46490f0a9b4dd1b04551de9555e64aad63a63eb29056e6b5e881e894eb144655f2215363148e514971", 0x74}, {&(0x7f0000000700)="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", 0xfe}], 0x3, 0x0, 0x0, 0x4800}}], 0x1, 0x20008000) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r1, &(0x7f0000000040)={0x20000004}) (async) epoll_pwait(r11, &(0x7f0000000080)=[{}], 0x1, 0xff, 0x0, 0x0) (async) 10:51:00 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0xffffff7f) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 232.698041][ T9080] FAULT_INJECTION: forcing a failure. [ 232.698041][ T9080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.724018][ T9083] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 232.760325][ T9080] CPU: 1 PID: 9080 Comm: syz-executor.3 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 232.770782][ T9080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.780949][ T9080] Call Trace: [ 232.784229][ T9080] [ 232.787158][ T9080] dump_stack_lvl+0xcd/0x134 [ 232.791761][ T9080] should_fail.cold+0x5/0xa [ 232.796270][ T9080] _copy_from_user+0x2c/0x180 [ 232.800951][ T9080] iovec_from_user+0x23e/0x3c0 [ 232.805717][ T9080] __import_iovec+0x65/0x590 [ 232.810310][ T9080] import_iovec+0x10c/0x150 [ 232.814812][ T9080] sendmsg_copy_msghdr+0x12d/0x160 [ 232.819921][ T9080] ? do_recvmmsg+0x6d0/0x6d0 [ 232.824508][ T9080] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 232.830500][ T9080] ___sys_sendmsg+0xc6/0x170 [ 232.835085][ T9080] ? sendmsg_copy_msghdr+0x160/0x160 [ 232.840364][ T9080] ? __fget_files+0x26a/0x470 [ 232.845039][ T9080] ? lock_downgrade+0x6e0/0x6e0 [ 232.849887][ T9080] ? lock_chain_count+0x20/0x20 [ 232.854755][ T9080] ? __fget_light+0xea/0x280 [ 232.859346][ T9080] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 232.865590][ T9080] __sys_sendmmsg+0x195/0x470 [ 232.870269][ T9080] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 232.875290][ T9080] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 232.881286][ T9080] ? __context_tracking_exit+0xb8/0xe0 [ 232.886746][ T9080] ? lock_downgrade+0x6e0/0x6e0 [ 232.891628][ T9080] ? lock_downgrade+0x6e0/0x6e0 [ 232.896509][ T9080] __x64_sys_sendmmsg+0x99/0x100 [ 232.901459][ T9080] ? syscall_enter_from_user_mode+0x21/0x70 [ 232.907380][ T9080] do_syscall_64+0x35/0xb0 [ 232.911800][ T9080] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 232.917692][ T9080] RIP: 0033:0x7fd4f9c5f059 [ 232.922099][ T9080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 232.941704][ T9080] RSP: 002b:00007fd4f85d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 232.950109][ T9080] RAX: ffffffffffffffda RBX: 00007fd4f9d71f60 RCX: 00007fd4f9c5f059 [ 232.958071][ T9080] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 232.966030][ T9080] RBP: 00007fd4f85d41d0 R08: 0000000000000000 R09: 0000000000000000 [ 232.974001][ T9080] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000001 [ 232.982002][ T9080] R13: 00007ffced8949cf R14: 00007fd4f85d4300 R15: 0000000000022000 [ 232.989986][ T9080] [ 233.000321][ T25] audit: type=1804 audit(1645786260.229:168): pid=9056 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/142/memory.events" dev="sda1" ino=1177 res=1 errno=0 10:51:00 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 1) 10:51:00 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 4) [ 233.110040][ T25] audit: type=1804 audit(1645786260.939:169): pid=9082 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/143/memory.events" dev="sda1" ino=1177 res=1 errno=0 10:51:01 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x4000000000000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 233.185019][ T9099] FAULT_INJECTION: forcing a failure. [ 233.185019][ T9099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.221573][ T9101] FAULT_INJECTION: forcing a failure. [ 233.221573][ T9101] name failslab, interval 1, probability 0, space 0, times 0 10:51:01 executing program 5: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000180)=0x14) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4a}) r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'bridge0\x00', 0x1000}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x5, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xfffff008}, {0x6}, {0x9, 0x81, 0x5, 0x200}, {0x3a, 0xfa, 0x0, 0x1}, {0x1000, 0x3, 0xfd}]}) pipe(&(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r1, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000100)={0x144, r4, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x4, 0x2, 0x4, 0x1, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x700, 0x7, 0x40}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0c75f00001800809", @ANYRES32=r9, @ANYBLOB="05001a00010000000c00090005000001", @ANYRES32=0x0, @ANYBLOB], 0x170}, 0x1, 0x0, 0x0, 0x4040090}, 0x4000000) [ 233.234636][ T9101] CPU: 0 PID: 9101 Comm: syz-executor.3 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 233.245068][ T9101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 233.255146][ T9101] Call Trace: [ 233.258437][ T9101] [ 233.261375][ T9101] dump_stack_lvl+0xcd/0x134 [ 233.266009][ T9101] should_fail.cold+0x5/0xa [ 233.270543][ T9101] ? sctp_get_port_local+0x3e5/0x14c0 [ 233.275939][ T9101] should_failslab+0x5/0x10 [ 233.280470][ T9101] kmem_cache_alloc+0x5e/0x4b0 [ 233.285247][ T9101] sctp_get_port_local+0x3e5/0x14c0 [ 233.290456][ T9101] ? sctp_skb_pull+0x300/0x300 [ 233.295217][ T9101] ? __ipv6_addr_type+0x20d/0x330 [ 233.300247][ T9101] ? sctp_bind_addr_match+0x1a3/0x2d0 [ 233.305708][ T9101] sctp_do_bind+0x28d/0x6e0 [ 233.310213][ T9101] ? memset+0x20/0x40 [ 233.314192][ T9101] sctp_connect_new_asoc+0x59e/0x770 [ 233.319485][ T9101] ? sctp_bind+0x110/0x110 [ 233.323902][ T9101] ? __local_bh_enable_ip+0xa0/0x120 [ 233.329203][ T9101] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 233.335445][ T9101] ? security_sctp_bind_connect+0x8f/0xc0 [ 233.341163][ T9101] sctp_sendmsg+0x13ce/0x1d40 [ 233.345844][ T9101] ? sctp_setsockopt+0xa9b0/0xa9b0 [ 233.350970][ T9101] ? aa_af_perm+0x230/0x230 [ 233.355477][ T9101] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 233.361718][ T9101] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 233.367967][ T9101] inet_sendmsg+0x99/0xe0 [ 233.372294][ T9101] ? inet_send_prepare+0x4e0/0x4e0 [ 233.377402][ T9101] sock_sendmsg+0xcf/0x120 [ 233.381818][ T9101] ____sys_sendmsg+0x331/0x810 [ 233.386590][ T9101] ? kernel_sendmsg+0x50/0x50 [ 233.391262][ T9101] ? do_recvmmsg+0x6d0/0x6d0 [ 233.395844][ T9101] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 233.401837][ T9101] ___sys_sendmsg+0xf3/0x170 [ 233.406420][ T9101] ? sendmsg_copy_msghdr+0x160/0x160 [ 233.411703][ T9101] ? lock_downgrade+0x6e0/0x6e0 [ 233.416552][ T9101] ? lock_chain_count+0x20/0x20 [ 233.421419][ T9101] ? __fget_light+0xea/0x280 [ 233.426018][ T9101] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 233.432263][ T9101] __sys_sendmmsg+0x195/0x470 [ 233.436943][ T9101] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 233.441963][ T9101] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 233.447957][ T9101] ? __context_tracking_exit+0xb8/0xe0 [ 233.453413][ T9101] ? lock_downgrade+0x6e0/0x6e0 [ 233.458263][ T9101] ? lock_downgrade+0x6e0/0x6e0 [ 233.463125][ T9101] __x64_sys_sendmmsg+0x99/0x100 [ 233.468056][ T9101] ? syscall_enter_from_user_mode+0x21/0x70 [ 233.473952][ T9101] do_syscall_64+0x35/0xb0 [ 233.478368][ T9101] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 233.484257][ T9101] RIP: 0033:0x7fd4f9c5f059 [ 233.488668][ T9101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 233.508272][ T9101] RSP: 002b:00007fd4f85d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 233.516678][ T9101] RAX: ffffffffffffffda RBX: 00007fd4f9d71f60 RCX: 00007fd4f9c5f059 [ 233.524641][ T9101] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 233.532603][ T9101] RBP: 00007fd4f85d41d0 R08: 0000000000000000 R09: 0000000000000000 [ 233.540569][ T9101] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000001 [ 233.548532][ T9101] R13: 00007ffced8949cf R14: 00007fd4f85d4300 R15: 0000000000022000 [ 233.556511][ T9101] [ 233.586553][ T25] audit: type=1804 audit(1645786260.969:170): pid=9085 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/143/memory.events" dev="sda1" ino=1177 res=1 errno=0 [ 233.606752][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 233.621766][ T9099] CPU: 0 PID: 9099 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 10:51:01 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x700000000000000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 233.632207][ T9099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 233.642278][ T9099] Call Trace: [ 233.645569][ T9099] [ 233.648511][ T9099] dump_stack_lvl+0xcd/0x134 [ 233.653123][ T9099] should_fail.cold+0x5/0xa [ 233.657652][ T9099] _copy_from_user+0x2c/0x180 [ 233.662350][ T9099] __copy_msghdr_from_user+0x91/0x4b0 [ 233.667747][ T9099] ? __ia32_sys_shutdown+0x70/0x70 [ 233.672883][ T9099] ? __lock_acquire+0xbc4/0x56c0 [ 233.677856][ T9099] sendmsg_copy_msghdr+0xa1/0x160 10:51:01 executing program 5: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000180)=0x14) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4a}) r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'bridge0\x00', 0x1000}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x5, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xfffff008}, {0x6}, {0x9, 0x81, 0x5, 0x200}, {0x3a, 0xfa, 0x0, 0x1}, {0x1000, 0x3, 0xfd}]}) pipe(&(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r1, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000100)={0x144, r4, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x4, 0x2, 0x4, 0x1, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x700, 0x7, 0x40}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0c75f00001800809", @ANYRES32=r9, @ANYBLOB="05001a00010000000c00090005000001", @ANYRES32=0x0, @ANYBLOB], 0x170}, 0x1, 0x0, 0x0, 0x4040090}, 0x4000000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000180)=0x14) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4a}) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'bridge0\x00', 0x1000}) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x5, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xfffff008}, {0x6}, {0x9, 0x81, 0x5, 0x200}, {0x3a, 0xfa, 0x0, 0x1}, {0x1000, 0x3, 0xfd}]}) (async) pipe(&(0x7f00000027c0)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r1, 0x58, &(0x7f0000000580)}, 0x10) (async) pipe(&(0x7f00000027c0)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) (async) pipe(&(0x7f00000027c0)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000100)={0x144, r4, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) (async) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x4, 0x2, 0x4, 0x1, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x700, 0x7, 0x40}}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0c75f00001800809", @ANYRES32=r9, @ANYBLOB="05001a00010000000c00090005000001", @ANYRES32=0x0, @ANYBLOB], 0x170}, 0x1, 0x0, 0x0, 0x4040090}, 0x4000000) (async) [ 233.682904][ T9099] ? do_recvmmsg+0x6d0/0x6d0 [ 233.687511][ T9099] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 233.693578][ T9099] ___sys_sendmsg+0xc6/0x170 [ 233.698200][ T9099] ? sendmsg_copy_msghdr+0x160/0x160 [ 233.703511][ T9099] ? __fget_files+0x26a/0x470 [ 233.708206][ T9099] ? lock_downgrade+0x6e0/0x6e0 [ 233.713075][ T9099] ? lock_chain_count+0x20/0x20 [ 233.717960][ T9099] ? __fget_files+0x28c/0x470 [ 233.722666][ T9099] ? __fget_light+0xea/0x280 [ 233.727275][ T9099] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 10:51:01 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x1000000000000000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 233.727683][ T9110] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 233.733537][ T9099] __sys_sendmmsg+0x195/0x470 [ 233.733574][ T9099] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 233.733596][ T9099] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 233.758432][ T9099] ? find_held_lock+0x2d/0x110 [ 233.763219][ T9099] ? __context_tracking_exit+0xb8/0xe0 [ 233.768697][ T9099] ? lock_downgrade+0x6e0/0x6e0 [ 233.773577][ T9099] ? lock_downgrade+0x6e0/0x6e0 [ 233.778465][ T9099] __x64_sys_sendmmsg+0x99/0x100 [ 233.783420][ T9099] ? syscall_enter_from_user_mode+0x21/0x70 [ 233.789337][ T9099] do_syscall_64+0x35/0xb0 [ 233.790617][ T9109] warn_alloc: 1 callbacks suppressed [ 233.790631][ T9109] syz-executor.5: vmalloc error: size 8192, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 233.793783][ T9099] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 233.793819][ T9099] RIP: 0033:0x7f418ec2c059 [ 233.793839][ T9099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 233.793863][ T9099] RSP: 002b:00007f418d5a1168 EFLAGS: 00000246 [ 233.799580][ T9109] ,cpuset= [ 233.812891][ T9099] ORIG_RAX: 0000000000000133 [ 233.812903][ T9099] RAX: ffffffffffffffda RBX: 00007f418ed3ef60 RCX: 00007f418ec2c059 [ 233.812920][ T9099] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 233.812935][ T9099] RBP: 00007f418d5a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 233.812951][ T9099] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000001 [ 233.812965][ T9099] R13: 00007fffc27f099f R14: 00007f418d5a1300 R15: 0000000000022000 [ 233.812997][ T9099] [ 233.825184][ T9109] syz5 [ 233.941473][ T25] audit: type=1804 audit(1645786261.039:171): pid=9084 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3056829688/syzkaller.0VW25A/178/memory.events" dev="sda1" ino=1175 res=1 errno=0 [ 233.969091][ T9109] ,mems_allowed=0-1 [ 233.984134][ T9109] CPU: 1 PID: 9109 Comm: syz-executor.5 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 233.994576][ T9109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.004640][ T9109] Call Trace: [ 234.007921][ T9109] [ 234.010859][ T9109] dump_stack_lvl+0xcd/0x134 [ 234.015470][ T9109] warn_alloc.cold+0x9b/0x189 [ 234.020173][ T9109] ? zone_watermark_ok_safe+0x290/0x290 [ 234.025757][ T9109] ? __vmalloc_node_range+0x9fe/0x1310 [ 234.028906][ T25] audit: type=1804 audit(1645786261.039:172): pid=9087 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3056829688/syzkaller.0VW25A/178/memory.events" dev="sda1" ino=1175 res=1 errno=0 [ 234.031236][ T9109] __vmalloc_node_range+0xfb4/0x1310 [ 234.061926][ T9109] ? kernel_clone+0xe7/0xab0 [ 234.066545][ T9109] ? vfree_atomic+0xe0/0xe0 [ 234.071062][ T9109] ? rcu_read_lock_sched_held+0x3a/0x70 [ 234.076617][ T9109] ? kernel_clone+0xe7/0xab0 [ 234.081203][ T9109] copy_process+0x92f/0x7310 [ 234.085782][ T9109] ? kernel_clone+0xe7/0xab0 [ 234.090371][ T9109] ? find_held_lock+0x2d/0x110 [ 234.095132][ T9109] ? __cleanup_sighand+0xb0/0xb0 [ 234.100059][ T9109] ? __lock_acquire+0x1666/0x56c0 [ 234.105083][ T9109] ? kernel_clone+0x314/0xab0 [ 234.109755][ T9109] kernel_clone+0xe7/0xab0 [ 234.114163][ T9109] ? create_io_thread+0xf0/0xf0 [ 234.119009][ T9109] ? find_held_lock+0x2d/0x110 [ 234.123773][ T9109] __do_sys_clone+0xc8/0x110 [ 234.128352][ T9109] ? kernel_clone+0xab0/0xab0 [ 234.133032][ T9109] ? syscall_enter_from_user_mode+0x21/0x70 [ 234.138923][ T9109] do_syscall_64+0x35/0xb0 [ 234.143335][ T9109] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 234.149219][ T9109] RIP: 0033:0x7efebe6b3481 [ 234.153626][ T9109] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 234.173227][ T9109] RSP: 002b:00007fff0c993738 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 234.181634][ T9109] RAX: ffffffffffffffda RBX: 00007efebce59700 RCX: 00007efebe6b3481 10:51:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x600) 10:51:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x300) 10:51:01 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0xff03000000000000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:51:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 2) [ 234.189600][ T9109] RDX: 00007efebce599d0 RSI: 00007efebce592f0 RDI: 00000000003d0f00 [ 234.197565][ T9109] RBP: 00007fff0c993980 R08: 00007efebce59700 R09: 00007efebce59700 [ 234.205529][ T9109] R10: 00007efebce599d0 R11: 0000000000000206 R12: 00007fff0c9937ee [ 234.213491][ T9109] R13: 00007fff0c9937ef R14: 00007efebce59300 R15: 0000000000022000 [ 234.221470][ T9109] 10:51:02 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:02 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0xffffff7f00000000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 234.354942][ T9135] FAULT_INJECTION: forcing a failure. [ 234.354942][ T9135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.411075][ T9135] CPU: 1 PID: 9135 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 234.421533][ T9135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.431603][ T9135] Call Trace: [ 234.434981][ T9135] [ 234.437923][ T9135] dump_stack_lvl+0xcd/0x134 [ 234.442546][ T9135] should_fail.cold+0x5/0xa [ 234.447071][ T9135] _copy_from_user+0x2c/0x180 [ 234.451768][ T9135] move_addr_to_kernel.part.0+0x31/0x110 [ 234.457429][ T9135] __copy_msghdr_from_user+0x3da/0x4b0 [ 234.462908][ T9135] ? __ia32_sys_shutdown+0x70/0x70 [ 234.468036][ T9135] ? __lock_acquire+0xbc4/0x56c0 [ 234.472987][ T9135] sendmsg_copy_msghdr+0xa1/0x160 [ 234.478010][ T9135] ? do_recvmmsg+0x6d0/0x6d0 [ 234.482596][ T9135] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 234.488592][ T9135] ___sys_sendmsg+0xc6/0x170 [ 234.493180][ T9135] ? sendmsg_copy_msghdr+0x160/0x160 [ 234.498464][ T9135] ? __fget_files+0x26a/0x470 [ 234.503144][ T9135] ? lock_downgrade+0x6e0/0x6e0 [ 234.507994][ T9135] ? lock_chain_count+0x20/0x20 [ 234.512853][ T9135] ? __fget_files+0x28c/0x470 [ 234.517534][ T9135] ? __fget_light+0xea/0x280 [ 234.522121][ T9135] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 234.528370][ T9135] __sys_sendmmsg+0x195/0x470 [ 234.533048][ T9135] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 234.538070][ T9135] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 234.544060][ T9135] ? __context_tracking_exit+0xb8/0xe0 [ 234.549526][ T9135] ? lock_downgrade+0x6e0/0x6e0 [ 234.554399][ T9135] ? lock_downgrade+0x6e0/0x6e0 [ 234.559259][ T9135] __x64_sys_sendmmsg+0x99/0x100 [ 234.564202][ T9135] ? syscall_enter_from_user_mode+0x21/0x70 [ 234.570093][ T9135] do_syscall_64+0x35/0xb0 [ 234.574514][ T9135] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 234.580406][ T9135] RIP: 0033:0x7f418ec2c059 [ 234.584820][ T9135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 10:51:02 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0x2, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 234.604423][ T9135] RSP: 002b:00007f418d5a1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 234.612836][ T9135] RAX: ffffffffffffffda RBX: 00007f418ed3ef60 RCX: 00007f418ec2c059 [ 234.620800][ T9135] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 234.628763][ T9135] RBP: 00007f418d5a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 234.636726][ T9135] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000001 [ 234.644689][ T9135] R13: 00007fffc27f099f R14: 00007f418d5a1300 R15: 0000000000022000 [ 234.652668][ T9135] [ 234.661687][ T25] audit: type=1804 audit(1645786262.489:173): pid=9132 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/144/memory.events" dev="sda1" ino=1177 res=1 errno=0 [ 234.698122][ T9109] Mem-Info: 10:51:02 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000cfa0100000002000000000000", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac0002001000010027bd70000200002500000000", @ANYRES32=0x0, @ANYBLOB="000000000005000008000f0000000000050021000300000019002200490b1f28d1e6243bc527cd591ceeb71443346a35c400000008000f00cc8600001d0022001bad14be66f5add02c336868c6379aac226904a0bd6a3fc41a00000024000e0081000000000000000100010000000000020000000000000002000107000000000b002200cc63fdf018343e000800250002000000"], 0xac}, 0x1, 0x0, 0x0, 0x2}, 0x4040) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000003, 0x4000010, r4, 0xacbcc000) write(r3, &(0x7f0000000440)="61d8068836a209b94cd9097ef96e5ebdb051a3056633c4ac360158f76228e17d425b5678cbca3de221e5ce5ad312cf409b4cf4a7da8211663b18a2f298a9edfa4ed7108090b83b9b249d5828087d8475eb6403be286b79b1f62d9780ce64af2d81dbeda36013bce1704956212ed1a9ffdca520c1584e388e7114f52ea6554902276ae1291840d6240bfb621e6f8e494ced04e45ebd8a753905cf613e032dd765db493391a561434fe0", 0xa9) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80012000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @remote}, 0x10) [ 234.716878][ T9109] active_anon:916 inactive_anon:77923 isolated_anon:0 [ 234.716878][ T9109] active_file:4566 inactive_file:8365 isolated_file:0 [ 234.716878][ T9109] unevictable:768 dirty:819 writeback:0 [ 234.716878][ T9109] slab_reclaimable:20385 slab_unreclaimable:97286 [ 234.716878][ T9109] mapped:27770 shmem:2008 pagetables:827 bounce:0 [ 234.716878][ T9109] kernel_misc_reclaimable:0 [ 234.716878][ T9109] free:1391162 free_pcp:9330 free_cma:0 10:51:02 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0x3, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 234.780980][ T25] audit: type=1804 audit(1645786262.489:174): pid=9138 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/144/memory.events" dev="sda1" ino=1177 res=1 errno=0 [ 234.814919][ T9109] Node 0 active_anon:3664kB inactive_anon:311692kB active_file:18192kB inactive_file:32360kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111080kB dirty:2072kB writeback:0kB shmem:6496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB kernel_stack:11148kB pagetables:3304kB all_unreclaimable? no 10:51:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x700) [ 234.854680][ T9109] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 234.893054][ T9109] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 235.079624][ T9109] lowmem_reserve[]: 0 2647 2648 2648 2648 [ 235.102102][ T9109] Node 0 DMA32 free:1612644kB boost:0kB min:35688kB low:44608kB high:53528kB reserved_highatomic:0KB active_anon:3664kB inactive_anon:311492kB active_file:18192kB inactive_file:32060kB unevictable:1536kB writepending:1872kB present:3129332kB managed:2716784kB mlocked:0kB bounce:0kB free_pcp:30796kB local_pcp:8536kB free_cma:0kB [ 235.140412][ T9109] lowmem_reserve[]: 0 0 0 0 0 [ 235.145378][ T9109] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:656kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 235.172007][ T9109] lowmem_reserve[]: 0 0 0 0 0 [ 235.177275][ T9109] Node 1 Normal free:3936644kB boost:0kB min:54208kB low:67760kB high:81312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:7904kB local_pcp:4288kB free_cma:0kB [ 235.219566][ T9109] lowmem_reserve[]: 0 0 0 0 0 [ 235.226997][ T9109] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 235.240070][ T9109] Node 0 DMA32: 1240*4kB (UME) 533*8kB (UME) 179*16kB (UME) 431*32kB (UME) 88*64kB (UME) 149*128kB (UME) 70*256kB (UME) 22*512kB (UM) 13*1024kB (UM) 3*2048kB (UME) 370*4096kB (M) = 1614744kB [ 235.259292][ T9109] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 235.275099][ T9109] Node 1 Normal: 94*4kB (UME) 42*8kB (UME) 23*16kB (UE) 133*32kB (UME) 51*64kB (UE) 16*128kB (UE) 8*256kB (U) 2*512kB (U) 1*1024kB (M) 1*2048kB (U) 957*4096kB (UM) = 3936664kB [ 235.292858][ T9109] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 235.303038][ T9109] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 235.312412][ T9109] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 10:51:03 executing program 5: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000180)=0x14) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4a}) r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'bridge0\x00', 0x1000}) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x5, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xfffff008}, {0x6}, {0x9, 0x81, 0x5, 0x200}, {0x3a, 0xfa, 0x0, 0x1}, {0x1000, 0x3, 0xfd}]}) (async) pipe(&(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r1, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 64) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) (async, rerun: 64) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async, rerun: 64) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000100)={0x144, r4, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) (async) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x4, 0x2, 0x4, 0x1, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x700, 0x7, 0x40}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="70010000180015062bbd7000ffdbdf251c1000050004c8020010000005001a0009000000080001000000000084001300000000000000000000000000000000000000010000000000000000000000090000000000000002000000010000000000000000000000000000000000000f0f0000000000000c0800000000000000000000000000000000000000000000000000000000000000010000000f00000000000000000000000c00000000000000000084001300000000000000070000000000000000000000080000000000000000000000000000000000000000000000010000000000000f0f000000000000000000000004000000040000000a00000000000000000000000000000000000000010000000000000000000000000000080000000000000000000000000c0000000000000b0e00140012001a003fcbe005ec461df0d2c47b32bf3908000400", @ANYRES32=r7, @ANYBLOB="0c75f00001800809", @ANYRES32=r9, @ANYBLOB="05001a00010000000c00090005000001", @ANYRES32=0x0, @ANYBLOB], 0x170}, 0x1, 0x0, 0x0, 0x4040090}, 0x4000000) 10:51:03 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000cfa0100000002000000000000", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) (async, rerun: 32) socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac0002001000010027bd70000200002500000000", @ANYRES32=0x0, @ANYBLOB="000000000005000008000f0000000000050021000300000019002200490b1f28d1e6243bc527cd591ceeb71443346a35c400000008000f00cc8600001d0022001bad14be66f5add02c336868c6379aac226904a0bd6a3fc41a00000024000e0081000000000000000100010000000000020000000000000002000107000000000b002200cc63fdf018343e000800250002000000"], 0xac}, 0x1, 0x0, 0x0, 0x2}, 0x4040) (async, rerun: 64) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 64) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) (async, rerun: 32) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async, rerun: 64) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000003, 0x4000010, r4, 0xacbcc000) (async, rerun: 64) write(r3, &(0x7f0000000440)="61d8068836a209b94cd9097ef96e5ebdb051a3056633c4ac360158f76228e17d425b5678cbca3de221e5ce5ad312cf409b4cf4a7da8211663b18a2f298a9edfa4ed7108090b83b9b249d5828087d8475eb6403be286b79b1f62d9780ce64af2d81dbeda36013bce1704956212ed1a9ffdca520c1584e388e7114f52ea6554902276ae1291840d6240bfb621e6f8e494ced04e45ebd8a753905cf613e032dd765db493391a561434fe0", 0xa9) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80012000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @remote}, 0x10) 10:51:03 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0x4, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 3) 10:51:03 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000180)="cb6a1397fd4114753894accef60ca8c39395688f5b0dccc82319e925d1612c693949499dd7ca8142b487978d5f8a9381be4b3af01f0361cf1270b0b0c4ae34ad1a12402c447625a2e9704d95525883ab41475439b5d7838e0b2b3fd3da24b7c362e760d36a1ce541c0d074", 0x6b}], 0x2}, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x98, r2, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "01231383e21e24e65a36740640828e1e94b21a3821594b56"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fe089e74fafb9024b675f7e046688a14ff170834535633b0"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9e733bef709dc0569ce9883457f21401da59c821f487a385"}]]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x8008040) 10:51:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0xa00) [ 235.321952][ T9109] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 235.331928][ T9109] 14227 total pagecache pages [ 235.336998][ T9109] 0 pages in swap cache [ 235.342648][ T9109] Swap cache stats: add 0, delete 0, find 0/0 [ 235.348721][ T9109] Free swap = 0kB [ 235.352842][ T9109] Total swap = 0kB [ 235.356740][ T9109] 2097051 pages RAM [ 235.360528][ T9109] 0 pages HighMem/MovableOnly [ 235.365720][ T9109] 384446 pages reserved [ 235.369876][ T9109] 0 pages cma reserved 10:51:03 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0x5, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 235.415731][ T9155] FAULT_INJECTION: forcing a failure. [ 235.415731][ T9155] name fail_usercopy, interval 1, probability 0, space 0, times 0 10:51:03 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000180)="cb6a1397fd4114753894accef60ca8c39395688f5b0dccc82319e925d1612c693949499dd7ca8142b487978d5f8a9381be4b3af01f0361cf1270b0b0c4ae34ad1a12402c447625a2e9704d95525883ab41475439b5d7838e0b2b3fd3da24b7c362e760d36a1ce541c0d074", 0x6b}], 0x2}, 0x0) (async) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00'}) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x98, r2, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "01231383e21e24e65a36740640828e1e94b21a3821594b56"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fe089e74fafb9024b675f7e046688a14ff170834535633b0"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9e733bef709dc0569ce9883457f21401da59c821f487a385"}]]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x8008040) (rerun: 32) [ 235.476656][ T9155] CPU: 0 PID: 9155 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 235.487117][ T9155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.497188][ T9155] Call Trace: [ 235.500485][ T9155] [ 235.502545][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 235.503514][ T9155] dump_stack_lvl+0xcd/0x134 [ 235.517286][ T9155] should_fail.cold+0x5/0xa [ 235.521824][ T9155] _copy_from_user+0x2c/0x180 [ 235.526524][ T9155] iovec_from_user+0x23e/0x3c0 [ 235.531314][ T9155] __import_iovec+0x65/0x590 [ 235.535928][ T9155] import_iovec+0x10c/0x150 [ 235.540456][ T9155] sendmsg_copy_msghdr+0x12d/0x160 [ 235.545588][ T9155] ? do_recvmmsg+0x6d0/0x6d0 [ 235.550196][ T9155] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 235.556210][ T9155] ___sys_sendmsg+0xc6/0x170 [ 235.560823][ T9155] ? sendmsg_copy_msghdr+0x160/0x160 [ 235.566128][ T9155] ? __fget_files+0x26a/0x470 [ 235.570826][ T9155] ? lock_downgrade+0x6e0/0x6e0 10:51:03 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0x6, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 235.575699][ T9155] ? lock_chain_count+0x20/0x20 [ 235.580598][ T9155] ? __fget_light+0xea/0x280 [ 235.585210][ T9155] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 235.591480][ T9155] __sys_sendmmsg+0x195/0x470 [ 235.596179][ T9155] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 235.601222][ T9155] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 235.607262][ T9155] ? __context_tracking_exit+0xb8/0xe0 [ 235.612739][ T9155] ? lock_downgrade+0x6e0/0x6e0 [ 235.617627][ T9155] ? lock_downgrade+0x6e0/0x6e0 [ 235.622513][ T9155] __x64_sys_sendmmsg+0x99/0x100 [ 235.627470][ T9155] ? syscall_enter_from_user_mode+0x21/0x70 [ 235.633388][ T9155] do_syscall_64+0x35/0xb0 [ 235.637827][ T9155] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 235.643745][ T9155] RIP: 0033:0x7f418ec2c059 [ 235.648180][ T9155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 235.667811][ T9155] RSP: 002b:00007f418d5a1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 10:51:03 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000180)="cb6a1397fd4114753894accef60ca8c39395688f5b0dccc82319e925d1612c693949499dd7ca8142b487978d5f8a9381be4b3af01f0361cf1270b0b0c4ae34ad1a12402c447625a2e9704d95525883ab41475439b5d7838e0b2b3fd3da24b7c362e760d36a1ce541c0d074", 0x6b}], 0x2}, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x98, r2, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "01231383e21e24e65a36740640828e1e94b21a3821594b56"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fe089e74fafb9024b675f7e046688a14ff170834535633b0"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9e733bef709dc0569ce9883457f21401da59c821f487a385"}]]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x8008040) 10:51:03 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x700) [ 235.676248][ T9155] RAX: ffffffffffffffda RBX: 00007f418ed3ef60 RCX: 00007f418ec2c059 [ 235.684236][ T9155] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 235.692223][ T9155] RBP: 00007f418d5a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 235.700212][ T9155] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000001 [ 235.708197][ T9155] R13: 00007fffc27f099f R14: 00007f418d5a1300 R15: 0000000000022000 [ 235.716203][ T9155] 10:51:03 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0x7, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:03 executing program 0: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x20000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'filter\x00', 0x0, [0x0, 0x0, 0x0, 0x40]}, &(0x7f0000000140)=0x54) 10:51:03 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000cfa0100000002000000000000", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac0002001000010027bd70000200002500000000", @ANYRES32=0x0, @ANYBLOB="000000000005000008000f0000000000050021000300000019002200490b1f28d1e6243bc527cd591ceeb71443346a35c400000008000f00cc8600001d0022001bad14be66f5add02c336868c6379aac226904a0bd6a3fc41a00000024000e0081000000000000000100010000000000020000000000000002000107000000000b002200cc63fdf018343e000800250002000000"], 0xac}, 0x1, 0x0, 0x0, 0x2}, 0x4040) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000003, 0x4000010, r4, 0xacbcc000) write(r3, &(0x7f0000000440)="61d8068836a209b94cd9097ef96e5ebdb051a3056633c4ac360158f76228e17d425b5678cbca3de221e5ce5ad312cf409b4cf4a7da8211663b18a2f298a9edfa4ed7108090b83b9b249d5828087d8475eb6403be286b79b1f62d9780ce64af2d81dbeda36013bce1704956212ed1a9ffdca520c1584e388e7114f52ea6554902276ae1291840d6240bfb621e6f8e494ced04e45ebd8a753905cf613e032dd765db493391a561434fe0", 0xa9) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80012000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @remote}, 0x10) 10:51:03 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0x8, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 4) 10:51:04 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0x9, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 236.253096][ T9207] FAULT_INJECTION: forcing a failure. [ 236.253096][ T9207] name failslab, interval 1, probability 0, space 0, times 0 [ 236.265810][ T9207] CPU: 1 PID: 9207 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 236.276241][ T9207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.286310][ T9207] Call Trace: [ 236.289601][ T9207] [ 236.292539][ T9207] dump_stack_lvl+0xcd/0x134 [ 236.297151][ T9207] should_fail.cold+0x5/0xa [ 236.301667][ T9207] ? sctp_get_port_local+0x3e5/0x14c0 [ 236.307040][ T9207] should_failslab+0x5/0x10 [ 236.311542][ T9207] kmem_cache_alloc+0x5e/0x4b0 [ 236.316339][ T9207] sctp_get_port_local+0x3e5/0x14c0 [ 236.321547][ T9207] ? sctp_skb_pull+0x300/0x300 [ 236.326312][ T9207] ? __ipv6_addr_type+0x20d/0x330 [ 236.331355][ T9207] ? sctp_bind_addr_match+0x1a3/0x2d0 [ 236.336750][ T9207] sctp_do_bind+0x28d/0x6e0 [ 236.341272][ T9207] ? memset+0x20/0x40 [ 236.345260][ T9207] sctp_connect_new_asoc+0x59e/0x770 [ 236.350552][ T9207] ? sctp_bind+0x110/0x110 [ 236.354974][ T9207] ? __local_bh_enable_ip+0xa0/0x120 [ 236.360264][ T9207] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 236.366516][ T9207] ? security_sctp_bind_connect+0x8f/0xc0 [ 236.372238][ T9207] sctp_sendmsg+0x13ce/0x1d40 [ 236.376926][ T9207] ? sctp_setsockopt+0xa9b0/0xa9b0 [ 236.382051][ T9207] ? aa_af_perm+0x230/0x230 [ 236.386643][ T9207] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 236.392890][ T9207] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 236.399140][ T9207] inet_sendmsg+0x99/0xe0 [ 236.403470][ T9207] ? inet_send_prepare+0x4e0/0x4e0 [ 236.408581][ T9207] sock_sendmsg+0xcf/0x120 [ 236.413002][ T9207] ____sys_sendmsg+0x331/0x810 [ 236.417772][ T9207] ? kernel_sendmsg+0x50/0x50 [ 236.422446][ T9207] ? do_recvmmsg+0x6d0/0x6d0 [ 236.427032][ T9207] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 236.433027][ T9207] ___sys_sendmsg+0xf3/0x170 [ 236.437616][ T9207] ? sendmsg_copy_msghdr+0x160/0x160 [ 236.442899][ T9207] ? lock_downgrade+0x6e0/0x6e0 [ 236.447746][ T9207] ? lock_chain_count+0x20/0x20 [ 236.452618][ T9207] ? __fget_light+0xea/0x280 [ 236.457207][ T9207] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 236.463455][ T9207] __sys_sendmmsg+0x195/0x470 [ 236.468132][ T9207] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 236.473151][ T9207] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 236.479147][ T9207] ? __context_tracking_exit+0xb8/0xe0 [ 236.484602][ T9207] ? lock_downgrade+0x6e0/0x6e0 [ 236.489458][ T9207] ? lock_downgrade+0x6e0/0x6e0 [ 236.494325][ T9207] __x64_sys_sendmmsg+0x99/0x100 [ 236.499259][ T9207] ? syscall_enter_from_user_mode+0x21/0x70 [ 236.505149][ T9207] do_syscall_64+0x35/0xb0 [ 236.509566][ T9207] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 236.515459][ T9207] RIP: 0033:0x7f418ec2c059 [ 236.519871][ T9207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 236.539478][ T9207] RSP: 002b:00007f418d5a1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 10:51:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1800) 10:51:04 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) r4 = accept4$x25(r3, &(0x7f0000000080), &(0x7f0000000280)=0x12, 0x0) accept(r4, 0x0, &(0x7f00000002c0)) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r5, &(0x7f0000000300)=""/72, 0x48, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:51:04 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xb, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 236.548724][ T9207] RAX: ffffffffffffffda RBX: 00007f418ed3ef60 RCX: 00007f418ec2c059 [ 236.556690][ T9207] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 236.564650][ T9207] RBP: 00007f418d5a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 236.572616][ T9207] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000001 [ 236.580579][ T9207] R13: 00007fffc27f099f R14: 00007f418d5a1300 R15: 0000000000022000 [ 236.588571][ T9207] 10:51:04 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xc, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 5) 10:51:04 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)) accept4$alg(r0, 0x0, 0x0, 0x80000) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 10:51:04 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) (async, rerun: 32) socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) (async, rerun: 32) r4 = accept4$x25(r3, &(0x7f0000000080), &(0x7f0000000280)=0x12, 0x0) (rerun: 32) accept(r4, 0x0, &(0x7f00000002c0)) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r5, &(0x7f0000000300)=""/72, 0x48, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x1c) (async, rerun: 32) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) sendmmsg$inet6(r6, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 236.785789][ T9217] FAULT_INJECTION: forcing a failure. [ 236.785789][ T9217] name failslab, interval 1, probability 0, space 0, times 0 [ 236.869819][ T9217] CPU: 0 PID: 9217 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 236.880275][ T9217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.890349][ T9217] Call Trace: [ 236.893641][ T9217] [ 236.896587][ T9217] dump_stack_lvl+0xcd/0x134 [ 236.901229][ T9217] should_fail.cold+0x5/0xa [ 236.905763][ T9217] ? sctp_add_bind_addr+0x93/0x3d0 [ 236.910896][ T9217] should_failslab+0x5/0x10 [ 236.915420][ T9217] kmem_cache_alloc_trace+0x55/0x3d0 [ 236.920737][ T9217] sctp_add_bind_addr+0x93/0x3d0 [ 236.925706][ T9217] sctp_do_bind+0x33a/0x6e0 [ 236.930289][ T9217] ? memset+0x20/0x40 [ 236.934298][ T9217] sctp_connect_new_asoc+0x59e/0x770 [ 236.939609][ T9217] ? sctp_bind+0x110/0x110 [ 236.944054][ T9217] ? __local_bh_enable_ip+0xa0/0x120 [ 236.949359][ T9217] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 236.955625][ T9217] ? security_sctp_bind_connect+0x8f/0xc0 [ 236.961369][ T9217] sctp_sendmsg+0x13ce/0x1d40 [ 236.966079][ T9217] ? sctp_setsockopt+0xa9b0/0xa9b0 [ 236.971242][ T9217] ? aa_af_perm+0x230/0x230 [ 236.975771][ T9217] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 236.982036][ T9217] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 236.988309][ T9217] inet_sendmsg+0x99/0xe0 [ 236.992659][ T9217] ? inet_send_prepare+0x4e0/0x4e0 [ 236.997789][ T9217] sock_sendmsg+0xcf/0x120 [ 237.002235][ T9217] ____sys_sendmsg+0x331/0x810 [ 237.007029][ T9217] ? kernel_sendmsg+0x50/0x50 [ 237.011729][ T9217] ? do_recvmmsg+0x6d0/0x6d0 [ 237.016427][ T9217] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 237.022448][ T9217] ___sys_sendmsg+0xf3/0x170 [ 237.027058][ T9217] ? sendmsg_copy_msghdr+0x160/0x160 [ 237.032363][ T9217] ? lock_downgrade+0x6e0/0x6e0 [ 237.037235][ T9217] ? lock_chain_count+0x20/0x20 [ 237.042134][ T9217] ? __fget_light+0xea/0x280 [ 237.046747][ T9217] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 237.053017][ T9217] __sys_sendmmsg+0x195/0x470 [ 237.057718][ T9217] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 237.062759][ T9217] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 237.068788][ T9217] ? __context_tracking_exit+0xb8/0xe0 [ 237.074275][ T9217] ? lock_downgrade+0x6e0/0x6e0 [ 237.079153][ T9217] ? lock_downgrade+0x6e0/0x6e0 [ 237.084047][ T9217] __x64_sys_sendmmsg+0x99/0x100 [ 237.086584][ T25] kauditd_printk_skb: 8 callbacks suppressed [ 237.086598][ T25] audit: type=1804 audit(1645786264.699:183): pid=9218 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/147/memory.events" dev="sda1" ino=1169 res=1 errno=0 [ 237.089000][ T9217] ? syscall_enter_from_user_mode+0x21/0x70 [ 237.100277][ T25] audit: type=1804 audit(1645786264.699:184): pid=9224 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/147/memory.events" dev="sda1" ino=1169 res=1 errno=0 [ 237.120873][ T9217] do_syscall_64+0x35/0xb0 [ 237.120913][ T9217] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 237.120943][ T9217] RIP: 0033:0x7f418ec2c059 [ 237.120964][ T9217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 237.120987][ T9217] RSP: 002b:00007f418d5a1168 EFLAGS: 00000246 [ 237.130662][ T9225] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 0 (only 8 groups) [ 237.152180][ T9217] ORIG_RAX: 0000000000000133 [ 237.152198][ T9217] RAX: ffffffffffffffda RBX: 00007f418ed3ef60 RCX: 00007f418ec2c059 [ 237.152214][ T9217] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 237.152227][ T9217] RBP: 00007f418d5a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 237.152241][ T9217] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000001 [ 237.152255][ T9217] R13: 00007fffc27f099f R14: 00007f418d5a1300 R15: 0000000000022000 [ 237.152288][ T9217] 10:51:05 executing program 0: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x20000) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'filter\x00', 0x0, [0x0, 0x0, 0x0, 0x40]}, &(0x7f0000000140)=0x54) 10:51:05 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0x10, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:05 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) r4 = accept4$x25(r3, &(0x7f0000000080), &(0x7f0000000280)=0x12, 0x0) accept(r4, 0x0, &(0x7f00000002c0)) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) recvfrom$inet6(r5, &(0x7f0000000300)=""/72, 0x48, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x1c) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async, rerun: 64) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) (rerun: 64) 10:51:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x2000) 10:51:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 6) 10:51:05 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)) accept4$alg(r0, 0x0, 0x0, 0x80000) (async) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 10:51:05 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0x14, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 237.422510][ T9239] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 0 (only 8 groups) [ 237.430095][ T9241] FAULT_INJECTION: forcing a failure. [ 237.430095][ T9241] name failslab, interval 1, probability 0, space 0, times 0 [ 237.523863][ T9241] CPU: 1 PID: 9241 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 237.534325][ T9241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.544401][ T9241] Call Trace: [ 237.547695][ T9241] [ 237.550627][ T9241] dump_stack_lvl+0xcd/0x134 [ 237.555241][ T9241] should_fail.cold+0x5/0xa [ 237.559771][ T9241] ? sctp_association_new+0x93/0x2340 [ 237.565173][ T9241] should_failslab+0x5/0x10 [ 237.569708][ T9241] kmem_cache_alloc_trace+0x55/0x3d0 [ 237.575019][ T9241] ? sctp_add_bind_addr+0x2b5/0x3d0 [ 237.580228][ T9241] sctp_association_new+0x93/0x2340 [ 237.585429][ T9241] ? sctp_v6_scope+0x5a/0x70 [ 237.590025][ T9241] sctp_connect_new_asoc+0x1ac/0x770 [ 237.595310][ T9241] ? sctp_bind+0x110/0x110 [ 237.599725][ T9241] ? __local_bh_enable_ip+0xa0/0x120 [ 237.605010][ T9241] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 237.611263][ T9241] ? security_sctp_bind_connect+0x8f/0xc0 [ 237.616998][ T9241] sctp_sendmsg+0x13ce/0x1d40 [ 237.621693][ T9241] ? sctp_setsockopt+0xa9b0/0xa9b0 [ 237.626826][ T9241] ? aa_af_perm+0x230/0x230 [ 237.631330][ T9241] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 237.637572][ T9241] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 237.643815][ T9241] inet_sendmsg+0x99/0xe0 [ 237.648145][ T9241] ? inet_send_prepare+0x4e0/0x4e0 [ 237.653252][ T9241] sock_sendmsg+0xcf/0x120 [ 237.657677][ T9241] ____sys_sendmsg+0x331/0x810 [ 237.662443][ T9241] ? kernel_sendmsg+0x50/0x50 [ 237.667117][ T9241] ? do_recvmmsg+0x6d0/0x6d0 [ 237.671700][ T9241] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 237.677693][ T9241] ___sys_sendmsg+0xf3/0x170 [ 237.682285][ T9241] ? sendmsg_copy_msghdr+0x160/0x160 [ 237.687573][ T9241] ? lock_downgrade+0x6e0/0x6e0 [ 237.692422][ T9241] ? lock_chain_count+0x20/0x20 [ 237.697292][ T9241] ? __fget_light+0xea/0x280 [ 237.701880][ T9241] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 237.708126][ T9241] __sys_sendmmsg+0x195/0x470 [ 237.712802][ T9241] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 237.717817][ T9241] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 237.723808][ T9241] ? __context_tracking_exit+0xb8/0xe0 [ 237.729263][ T9241] ? lock_downgrade+0x6e0/0x6e0 [ 237.734118][ T9241] ? lock_downgrade+0x6e0/0x6e0 [ 237.738977][ T9241] __x64_sys_sendmmsg+0x99/0x100 [ 237.743908][ T9241] ? syscall_enter_from_user_mode+0x21/0x70 [ 237.749796][ T9241] do_syscall_64+0x35/0xb0 [ 237.754211][ T9241] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 237.760097][ T9241] RIP: 0033:0x7f418ec2c059 [ 237.764506][ T9241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 237.784111][ T9241] RSP: 002b:00007f418d5a1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 237.792519][ T9241] RAX: ffffffffffffffda RBX: 00007f418ed3ef60 RCX: 00007f418ec2c059 [ 237.801290][ T9241] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 237.809262][ T9241] RBP: 00007f418d5a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 237.817231][ T9241] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000001 10:51:05 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 237.825201][ T9241] R13: 00007fffc27f099f R14: 00007f418d5a1300 R15: 0000000000022000 [ 237.833187][ T9241] 10:51:05 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)) accept4$alg(r0, 0x0, 0x0, 0x80000) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)) (async) accept4$alg(r0, 0x0, 0x0, 0x80000) (async) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (async) 10:51:05 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x2, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:05 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="85d39148ec1aca1700010000026bea576122c7edab12d427dcd9001300000000d5f72b54fffd6f93a505ea05dea9a20000", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x4, 0x8d, 0x2, 0x6, 0x6, @private1, @local, 0x8000, 0x80a1, 0x860a, 0xff}}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@newchain={0x34, 0x64, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xc, 0x782c2acf1a300816}, {0xfff1, 0xfff2}, {0xffe0, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x1f, 0x2}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20008044) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "1c86c7af888038cc", "8770591af0f17afb1bb8441a0447adc091fcd97be7044e732f407d454a4472f1", "5a38e2d3", "d683d229320289c8"}, 0xffffffffffffffb4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000480)='lp\x00', 0x3) connect$inet6(r5, &(0x7f00000004c0)={0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fff}, 0x1c) [ 237.966667][ T9255] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 0 (only 8 groups) [ 238.041074][ T9259] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 0 (only 8 groups) [ 238.060873][ T25] audit: type=1804 audit(1645786265.889:185): pid=9244 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/148/memory.events" dev="sda1" ino=1177 res=1 errno=0 10:51:05 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x3, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 238.106096][ T25] audit: type=1804 audit(1645786265.889:186): pid=9250 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/148/memory.events" dev="sda1" ino=1177 res=1 errno=0 10:51:06 executing program 0: unshare(0x40000400) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) unshare(0x20000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'filter\x00', 0x0, [0x0, 0x0, 0x0, 0x40]}, &(0x7f0000000140)=0x54) 10:51:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1800) 10:51:06 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 7) 10:51:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x3f00) 10:51:06 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x4, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:06 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x5, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:06 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x6, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:06 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x7, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 238.702381][ T25] audit: type=1804 audit(1645786266.519:187): pid=9281 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/149/memory.events" dev="sda1" ino=1162 res=1 errno=0 [ 238.807684][ T25] audit: type=1804 audit(1645786266.559:188): pid=9283 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/149/memory.events" dev="sda1" ino=1162 res=1 errno=0 [ 238.815841][ T9287] FAULT_INJECTION: forcing a failure. [ 238.815841][ T9287] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 238.860935][ T9287] CPU: 1 PID: 9287 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 238.871387][ T9287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.881440][ T9287] Call Trace: [ 238.884712][ T9287] [ 238.887635][ T9287] dump_stack_lvl+0xcd/0x134 [ 238.892233][ T9287] should_fail.cold+0x5/0xa [ 238.896740][ T9287] prepare_alloc_pages+0x17b/0x570 [ 238.901852][ T9287] __alloc_pages+0x12f/0x500 [ 238.906437][ T9287] ? __alloc_pages_slowpath.constprop.0+0x20d0/0x20d0 [ 238.913199][ T9287] ? mark_held_locks+0x9f/0xe0 [ 238.917964][ T9287] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 238.923764][ T9287] ? lockdep_hardirqs_on+0x79/0x100 [ 238.928962][ T9287] alloc_pages+0x1aa/0x310 [ 238.933391][ T9287] __get_free_pages+0x8/0x40 [ 238.937984][ T9287] __genradix_ptr_alloc+0x162/0x3c0 [ 238.943186][ T9287] __genradix_prealloc+0x56/0x90 [ 238.948146][ T9287] sctp_stream_init+0x392/0x5f0 [ 238.953006][ T9287] sctp_association_new+0x144a/0x2340 [ 238.958378][ T9287] ? sctp_v6_scope+0x5a/0x70 [ 238.962966][ T9287] sctp_connect_new_asoc+0x1ac/0x770 [ 238.968248][ T9287] ? sctp_bind+0x110/0x110 [ 238.972660][ T9287] ? __local_bh_enable_ip+0xa0/0x120 [ 238.977944][ T9287] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 238.984195][ T9287] ? security_sctp_bind_connect+0x8f/0xc0 [ 238.990042][ T9287] sctp_sendmsg+0x13ce/0x1d40 [ 238.994738][ T9287] ? sctp_setsockopt+0xa9b0/0xa9b0 [ 238.999869][ T9287] ? aa_af_perm+0x230/0x230 [ 239.004376][ T9287] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 239.010622][ T9287] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 239.016866][ T9287] inet_sendmsg+0x99/0xe0 [ 239.021194][ T9287] ? inet_send_prepare+0x4e0/0x4e0 [ 239.026308][ T9287] sock_sendmsg+0xcf/0x120 [ 239.030724][ T9287] ____sys_sendmsg+0x331/0x810 [ 239.035487][ T9287] ? kernel_sendmsg+0x50/0x50 [ 239.040159][ T9287] ? do_recvmmsg+0x6d0/0x6d0 [ 239.045095][ T9287] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 239.051082][ T9287] ___sys_sendmsg+0xf3/0x170 [ 239.055667][ T9287] ? sendmsg_copy_msghdr+0x160/0x160 [ 239.060948][ T9287] ? lock_downgrade+0x6e0/0x6e0 [ 239.065790][ T9287] ? lock_chain_count+0x20/0x20 [ 239.070656][ T9287] ? __fget_light+0xea/0x280 [ 239.075241][ T9287] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 239.081484][ T9287] __sys_sendmmsg+0x195/0x470 [ 239.086167][ T9287] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 239.091185][ T9287] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 239.097178][ T9287] ? __context_tracking_exit+0xb8/0xe0 [ 239.102647][ T9287] ? lock_downgrade+0x6e0/0x6e0 [ 239.107495][ T9287] ? lock_downgrade+0x6e0/0x6e0 [ 239.112387][ T9287] __x64_sys_sendmmsg+0x99/0x100 [ 239.117350][ T9287] ? syscall_enter_from_user_mode+0x21/0x70 [ 239.123259][ T9287] do_syscall_64+0x35/0xb0 [ 239.127682][ T9287] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 239.133573][ T9287] RIP: 0033:0x7f418ec2c059 [ 239.137994][ T9287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 10:51:07 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x8, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 239.157619][ T9287] RSP: 002b:00007f418d5a1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 239.166128][ T9287] RAX: ffffffffffffffda RBX: 00007f418ed3ef60 RCX: 00007f418ec2c059 [ 239.174100][ T9287] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 239.182085][ T9287] RBP: 00007f418d5a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 239.190061][ T9287] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000001 [ 239.198031][ T9287] R13: 00007fffc27f099f R14: 00007f418d5a1300 R15: 0000000000022000 [ 239.206016][ T9287] 10:51:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x4000) 10:51:07 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="85d39148ec1aca1700010000026bea576122c7edab12d427dcd9001300000000d5f72b54fffd6f93a505ea05dea9a20000", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x4, 0x8d, 0x2, 0x6, 0x6, @private1, @local, 0x8000, 0x80a1, 0x860a, 0xff}}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@newchain={0x34, 0x64, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xc, 0x782c2acf1a300816}, {0xfff1, 0xfff2}, {0xffe0, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x1f, 0x2}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20008044) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "1c86c7af888038cc", "8770591af0f17afb1bb8441a0447adc091fcd97be7044e732f407d454a4472f1", "5a38e2d3", "d683d229320289c8"}, 0xffffffffffffffb4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000480)='lp\x00', 0x3) connect$inet6(r5, &(0x7f00000004c0)={0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fff}, 0x1c) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="85d39148ec1aca1700010000026bea576122c7edab12d427dcd9001300000000d5f72b54fffd6f93a505ea05dea9a20000", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x4, 0x8d, 0x2, 0x6, 0x6, @private1, @local, 0x8000, 0x80a1, 0x860a, 0xff}}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@newchain={0x34, 0x64, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xc, 0x782c2acf1a300816}, {0xfff1, 0xfff2}, {0xffe0, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x1f, 0x2}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20008044) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "1c86c7af888038cc", "8770591af0f17afb1bb8441a0447adc091fcd97be7044e732f407d454a4472f1", "5a38e2d3", "d683d229320289c8"}, 0xffffffffffffffb4) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmmsg$inet6(r6, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000480)='lp\x00', 0x3) (async) connect$inet6(r5, &(0x7f00000004c0)={0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fff}, 0x1c) (async) 10:51:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 8) [ 239.344618][ T25] audit: type=1804 audit(1645786266.629:189): pid=9276 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1380880114/syzkaller.P6AUVX/182/memory.events" dev="sda1" ino=1161 res=1 errno=0 [ 239.371969][ T9293] FAULT_INJECTION: forcing a failure. [ 239.371969][ T9293] name failslab, interval 1, probability 0, space 0, times 0 [ 239.394427][ T9293] CPU: 0 PID: 9293 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 239.404883][ T9293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.414950][ T9293] Call Trace: [ 239.418239][ T9293] [ 239.421177][ T9293] dump_stack_lvl+0xcd/0x134 [ 239.425796][ T9293] should_fail.cold+0x5/0xa [ 239.430325][ T9293] ? sctp_auth_shkey_create+0x85/0x1f0 [ 239.435838][ T9293] should_failslab+0x5/0x10 [ 239.440367][ T9293] kmem_cache_alloc_trace+0x55/0x3d0 [ 239.445685][ T9293] sctp_auth_shkey_create+0x85/0x1f0 [ 239.451000][ T9293] sctp_auth_asoc_copy_shkeys+0x1e8/0x350 [ 239.456749][ T9293] sctp_association_new+0x189e/0x2340 [ 239.462147][ T9293] ? sctp_v6_scope+0x5a/0x70 [ 239.466769][ T9293] sctp_connect_new_asoc+0x1ac/0x770 [ 239.472088][ T9293] ? sctp_bind+0x110/0x110 [ 239.476532][ T9293] ? __local_bh_enable_ip+0xa0/0x120 [ 239.481847][ T9293] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 239.482725][ T25] audit: type=1804 audit(1645786266.639:190): pid=9282 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir1380880114/syzkaller.P6AUVX/182/memory.events" dev="sda1" ino=1161 res=1 errno=0 [ 239.488120][ T9293] ? security_sctp_bind_connect+0x8f/0xc0 [ 239.488157][ T9293] sctp_sendmsg+0x13ce/0x1d40 [ 239.523959][ T9293] ? sctp_setsockopt+0xa9b0/0xa9b0 [ 239.529116][ T9293] ? aa_af_perm+0x230/0x230 [ 239.533652][ T9293] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 239.539917][ T9293] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 239.546275][ T9293] inet_sendmsg+0x99/0xe0 [ 239.550891][ T9293] ? inet_send_prepare+0x4e0/0x4e0 [ 239.556023][ T9293] sock_sendmsg+0xcf/0x120 [ 239.560466][ T9293] ____sys_sendmsg+0x331/0x810 [ 239.562027][ T25] audit: type=1804 audit(1645786267.229:191): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/150/memory.events" dev="sda1" ino=1178 res=1 errno=0 [ 239.565251][ T9293] ? kernel_sendmsg+0x50/0x50 [ 239.565284][ T9293] ? do_recvmmsg+0x6d0/0x6d0 [ 239.565310][ T9293] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 239.606395][ T9293] ___sys_sendmsg+0xf3/0x170 [ 239.611010][ T9293] ? sendmsg_copy_msghdr+0x160/0x160 [ 239.616321][ T9293] ? lock_downgrade+0x6e0/0x6e0 [ 239.621193][ T9293] ? lock_chain_count+0x20/0x20 [ 239.626093][ T9293] ? __fget_light+0xea/0x280 [ 239.630704][ T9293] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 239.636968][ T25] audit: type=1804 audit(1645786267.229:192): pid=9297 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/150/memory.events" dev="sda1" ino=1178 res=1 errno=0 [ 239.636977][ T9293] __sys_sendmmsg+0x195/0x470 [ 239.637015][ T9293] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 239.672007][ T9293] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 239.678032][ T9293] ? __context_tracking_exit+0xb8/0xe0 [ 239.683513][ T9293] ? lock_downgrade+0x6e0/0x6e0 [ 239.688389][ T9293] ? lock_downgrade+0x6e0/0x6e0 [ 239.693283][ T9293] __x64_sys_sendmmsg+0x99/0x100 [ 239.698239][ T9293] ? syscall_enter_from_user_mode+0x21/0x70 [ 239.704155][ T9293] do_syscall_64+0x35/0xb0 [ 239.708596][ T9293] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 239.714514][ T9293] RIP: 0033:0x7f418ec2c059 [ 239.718939][ T9293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 239.738559][ T9293] RSP: 002b:00007f418d5a1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 239.746993][ T9293] RAX: ffffffffffffffda RBX: 00007f418ed3ef60 RCX: 00007f418ec2c059 [ 239.754974][ T9293] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 239.762958][ T9293] RBP: 00007f418d5a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 239.770940][ T9293] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000001 [ 239.778918][ T9293] R13: 00007fffc27f099f R14: 00007f418d5a1300 R15: 0000000000022000 [ 239.786919][ T9293] 10:51:07 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r1, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) openat$cgroup_ro(r4, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x5c}}, 0x0) 10:51:07 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x9, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x4300) 10:51:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x4000) 10:51:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 9) 10:51:07 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="85d39148ec1aca1700010000026bea576122c7edab12d427dcd9001300000000d5f72b54fffd6f93a505ea05dea9a20000", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 64) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x4, 0x8d, 0x2, 0x6, 0x6, @private1, @local, 0x8000, 0x80a1, 0x860a, 0xff}}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@newchain={0x34, 0x64, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xc, 0x782c2acf1a300816}, {0xfff1, 0xfff2}, {0xffe0, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x1f, 0x2}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20008044) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "1c86c7af888038cc", "8770591af0f17afb1bb8441a0447adc091fcd97be7044e732f407d454a4472f1", "5a38e2d3", "d683d229320289c8"}, 0xffffffffffffffb4) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000480)='lp\x00', 0x3) (async) connect$inet6(r5, &(0x7f00000004c0)={0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fff}, 0x1c) [ 239.988927][ T9312] FAULT_INJECTION: forcing a failure. [ 239.988927][ T9312] name failslab, interval 1, probability 0, space 0, times 0 [ 240.041701][ T9312] CPU: 0 PID: 9312 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 240.052161][ T9312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.062232][ T9312] Call Trace: [ 240.065521][ T9312] [ 240.068463][ T9312] dump_stack_lvl+0xcd/0x134 [ 240.073088][ T9312] should_fail.cold+0x5/0xa [ 240.077623][ T9312] ? sctp_add_bind_addr+0x93/0x3d0 [ 240.082761][ T9312] should_failslab+0x5/0x10 [ 240.087291][ T9312] kmem_cache_alloc_trace+0x55/0x3d0 [ 240.092610][ T9312] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 240.098543][ T9312] sctp_add_bind_addr+0x93/0x3d0 [ 240.103513][ T9312] sctp_copy_local_addr_list+0x325/0x4f0 [ 240.109181][ T9312] ? sctp_v4_get_dst+0x11d0/0x11d0 [ 240.114316][ T9312] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 240.120587][ T9312] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 240.126516][ T9312] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 240.132450][ T9312] sctp_bind_addr_copy+0xde/0x460 [ 240.137516][ T9312] sctp_connect_new_asoc+0x1cd/0x770 [ 240.142845][ T9312] ? sctp_bind+0x110/0x110 [ 240.147298][ T9312] ? __local_bh_enable_ip+0xa0/0x120 [ 240.152610][ T9312] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 240.158883][ T9312] ? security_sctp_bind_connect+0x8f/0xc0 [ 240.164631][ T9312] sctp_sendmsg+0x13ce/0x1d40 [ 240.169345][ T9312] ? sctp_setsockopt+0xa9b0/0xa9b0 [ 240.174504][ T9312] ? aa_af_perm+0x230/0x230 [ 240.179034][ T9312] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 240.185300][ T9312] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 240.191574][ T9312] inet_sendmsg+0x99/0xe0 [ 240.195927][ T9312] ? inet_send_prepare+0x4e0/0x4e0 [ 240.201062][ T9312] sock_sendmsg+0xcf/0x120 [ 240.205506][ T9312] ____sys_sendmsg+0x331/0x810 [ 240.210306][ T9312] ? kernel_sendmsg+0x50/0x50 [ 240.215014][ T9312] ? do_recvmmsg+0x6d0/0x6d0 [ 240.219627][ T9312] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 240.225655][ T9312] ___sys_sendmsg+0xf3/0x170 [ 240.230274][ T9312] ? sendmsg_copy_msghdr+0x160/0x160 [ 240.235587][ T9312] ? lock_downgrade+0x6e0/0x6e0 [ 240.240576][ T9312] ? lock_chain_count+0x20/0x20 [ 240.245482][ T9312] ? __fget_light+0xea/0x280 [ 240.250102][ T9312] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 240.256460][ T9312] __sys_sendmmsg+0x195/0x470 [ 240.261167][ T9312] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 240.266212][ T9312] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 240.272238][ T9312] ? __context_tracking_exit+0xb8/0xe0 [ 240.277721][ T9312] ? lock_downgrade+0x6e0/0x6e0 [ 240.282605][ T9312] ? lock_downgrade+0x6e0/0x6e0 [ 240.287501][ T9312] __x64_sys_sendmmsg+0x99/0x100 [ 240.292467][ T9312] ? syscall_enter_from_user_mode+0x21/0x70 [ 240.298386][ T9312] do_syscall_64+0x35/0xb0 [ 240.302829][ T9312] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 240.308752][ T9312] RIP: 0033:0x7f418ec2c059 [ 240.313189][ T9312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 240.332817][ T9312] RSP: 002b:00007f418d5a1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 10:51:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x4800) 10:51:08 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0xa, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 240.341254][ T9312] RAX: ffffffffffffffda RBX: 00007f418ed3ef60 RCX: 00007f418ec2c059 [ 240.349244][ T9312] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 240.357249][ T9312] RBP: 00007f418d5a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 240.365242][ T9312] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000001 [ 240.373234][ T9312] R13: 00007fffc27f099f R14: 00007f418d5a1300 R15: 0000000000022000 [ 240.381249][ T9312] 10:51:08 executing program 5: r0 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r1}) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x20000000) 10:51:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 10) 10:51:08 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0xf, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 240.477825][ T9318] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 49474 - 0 [ 240.511198][ T9318] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 49474 - 0 [ 240.552369][ T9318] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 49474 - 0 10:51:08 executing program 5: r0 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r1}) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x20000000) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r1}) (async) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x20000000) (async) [ 240.596814][ T9331] FAULT_INJECTION: forcing a failure. [ 240.596814][ T9331] name failslab, interval 1, probability 0, space 0, times 0 [ 240.603060][ T9318] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 49474 - 0 [ 240.650353][ T9331] CPU: 1 PID: 9331 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 240.660814][ T9331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.670885][ T9331] Call Trace: [ 240.674175][ T9331] [ 240.677113][ T9331] dump_stack_lvl+0xcd/0x134 [ 240.681730][ T9331] should_fail.cold+0x5/0xa [ 240.686259][ T9331] ? sctp_add_bind_addr+0x93/0x3d0 [ 240.691388][ T9331] should_failslab+0x5/0x10 [ 240.695913][ T9331] kmem_cache_alloc_trace+0x55/0x3d0 [ 240.701229][ T9331] sctp_add_bind_addr+0x93/0x3d0 [ 240.706192][ T9331] sctp_copy_local_addr_list+0x325/0x4f0 [ 240.711854][ T9331] ? sctp_v4_get_dst+0x11d0/0x11d0 [ 240.716989][ T9331] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 240.723259][ T9331] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 240.729180][ T9331] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 240.735109][ T9331] sctp_bind_addr_copy+0xde/0x460 [ 240.740172][ T9331] sctp_connect_new_asoc+0x1cd/0x770 [ 240.745480][ T9331] ? sctp_bind+0x110/0x110 [ 240.749922][ T9331] ? __local_bh_enable_ip+0xa0/0x120 [ 240.755233][ T9331] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 240.761501][ T9331] ? security_sctp_bind_connect+0x8f/0xc0 [ 240.767247][ T9331] sctp_sendmsg+0x13ce/0x1d40 [ 240.771956][ T9331] ? sctp_setsockopt+0xa9b0/0xa9b0 [ 240.777102][ T9331] ? aa_af_perm+0x230/0x230 [ 240.781627][ T9331] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 240.787893][ T9331] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 240.794169][ T9331] inet_sendmsg+0x99/0xe0 [ 240.798520][ T9331] ? inet_send_prepare+0x4e0/0x4e0 [ 240.803629][ T9331] sock_sendmsg+0xcf/0x120 [ 240.808061][ T9331] ____sys_sendmsg+0x331/0x810 [ 240.812823][ T9331] ? kernel_sendmsg+0x50/0x50 [ 240.817523][ T9331] ? do_recvmmsg+0x6d0/0x6d0 [ 240.822103][ T9331] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 240.828116][ T9331] ___sys_sendmsg+0xf3/0x170 [ 240.832732][ T9331] ? sendmsg_copy_msghdr+0x160/0x160 [ 240.838032][ T9331] ? lock_downgrade+0x6e0/0x6e0 [ 240.842880][ T9331] ? lock_chain_count+0x20/0x20 [ 240.847782][ T9331] ? __fget_light+0xea/0x280 [ 240.852389][ T9331] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 240.858650][ T9331] __sys_sendmmsg+0x195/0x470 [ 240.863329][ T9331] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 240.868360][ T9331] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 240.874356][ T9331] ? __context_tracking_exit+0xb8/0xe0 [ 240.879830][ T9331] ? lock_downgrade+0x6e0/0x6e0 [ 240.884685][ T9331] ? lock_downgrade+0x6e0/0x6e0 [ 240.889563][ T9331] __x64_sys_sendmmsg+0x99/0x100 [ 240.894497][ T9331] ? syscall_enter_from_user_mode+0x21/0x70 [ 240.900414][ T9331] do_syscall_64+0x35/0xb0 [ 240.904841][ T9331] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 240.910762][ T9331] RIP: 0033:0x7f418ec2c059 [ 240.915171][ T9331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 240.934796][ T9331] RSP: 002b:00007f418d5a1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 240.943230][ T9331] RAX: ffffffffffffffda RBX: 00007f418ed3ef60 RCX: 00007f418ec2c059 [ 240.951210][ T9331] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 240.959178][ T9331] RBP: 00007f418d5a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 240.967167][ T9331] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000002 [ 240.975159][ T9331] R13: 00007fffc27f099f R14: 00007f418d5a1300 R15: 0000000000022000 [ 240.983172][ T9331] [ 240.997258][ T9318] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 49474 - 0 [ 241.037466][ T9318] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 49474 - 0 [ 241.056461][ T9318] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 49474 - 0 [ 241.071002][ T9318] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 49474 - 0 10:51:09 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r1, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000140)=0x1) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) openat$cgroup_ro(r4, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r1, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000140)=0x1) (async) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) (async) openat$cgroup_ro(r4, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x5c}}, 0x0) (async) 10:51:09 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x10, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x4c00) 10:51:09 executing program 5: r0 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r1}) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x20000000) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r1}) (async) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x20000000) (async) 10:51:09 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x6, 0x0, 0x40, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0xffffffffffffffe5) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:51:09 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 11) 10:51:09 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x60, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 241.222936][ T9343] FAULT_INJECTION: forcing a failure. [ 241.222936][ T9343] name failslab, interval 1, probability 0, space 0, times 0 10:51:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x4800) [ 241.278368][ T9355] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 58793 - 0 [ 241.298157][ T9343] CPU: 1 PID: 9343 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 241.308613][ T9343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.318684][ T9343] Call Trace: [ 241.321972][ T9343] [ 241.324911][ T9343] dump_stack_lvl+0xcd/0x134 [ 241.329530][ T9343] should_fail.cold+0x5/0xa [ 241.334068][ T9343] ? sctp_add_bind_addr+0x93/0x3d0 [ 241.339196][ T9343] should_failslab+0x5/0x10 [ 241.343805][ T9343] kmem_cache_alloc_trace+0x55/0x3d0 [ 241.349127][ T9343] sctp_add_bind_addr+0x93/0x3d0 [ 241.354098][ T9343] sctp_copy_local_addr_list+0x325/0x4f0 [ 241.357570][ T9355] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 58793 - 0 [ 241.359762][ T9343] ? sctp_v4_get_dst+0x11d0/0x11d0 [ 241.373676][ T9343] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 241.379950][ T9343] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 241.385871][ T9343] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 241.391796][ T9343] sctp_bind_addr_copy+0xde/0x460 [ 241.396851][ T9343] sctp_connect_new_asoc+0x1cd/0x770 [ 241.402158][ T9343] ? sctp_bind+0x110/0x110 [ 241.406596][ T9343] ? __local_bh_enable_ip+0xa0/0x120 [ 241.411905][ T9343] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 241.418168][ T9343] ? security_sctp_bind_connect+0x8f/0xc0 [ 241.423913][ T9343] sctp_sendmsg+0x13ce/0x1d40 [ 241.427448][ T9355] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 58793 - 0 [ 241.428620][ T9343] ? sctp_setsockopt+0xa9b0/0xa9b0 [ 241.428677][ T9343] ? aa_af_perm+0x230/0x230 [ 241.447011][ T9343] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 241.453283][ T9343] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 241.459562][ T9343] inet_sendmsg+0x99/0xe0 [ 241.460637][ T9355] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 58793 - 0 [ 241.463920][ T9343] ? inet_send_prepare+0x4e0/0x4e0 [ 241.463954][ T9343] sock_sendmsg+0xcf/0x120 [ 241.463989][ T9343] ____sys_sendmsg+0x331/0x810 [ 241.464020][ T9343] ? kernel_sendmsg+0x50/0x50 [ 241.464046][ T9343] ? do_recvmmsg+0x6d0/0x6d0 [ 241.464069][ T9343] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 241.464115][ T9343] ___sys_sendmsg+0xf3/0x170 [ 241.464142][ T9343] ? sendmsg_copy_msghdr+0x160/0x160 [ 241.464174][ T9343] ? lock_downgrade+0x6e0/0x6e0 [ 241.517010][ T9343] ? lock_chain_count+0x20/0x20 [ 241.521920][ T9343] ? __fget_light+0xea/0x280 [ 241.526542][ T9343] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 241.532827][ T9343] __sys_sendmmsg+0x195/0x470 [ 241.537534][ T9343] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 241.542586][ T9343] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 241.548613][ T9343] ? __context_tracking_exit+0xb8/0xe0 [ 241.554096][ T9343] ? lock_downgrade+0x6e0/0x6e0 [ 241.558979][ T9343] ? lock_downgrade+0x6e0/0x6e0 [ 241.563871][ T9343] __x64_sys_sendmmsg+0x99/0x100 [ 241.568825][ T9343] ? syscall_enter_from_user_mode+0x21/0x70 [ 241.574742][ T9343] do_syscall_64+0x35/0xb0 [ 241.579182][ T9343] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 241.585099][ T9343] RIP: 0033:0x7f418ec2c059 [ 241.589526][ T9343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 241.609154][ T9343] RSP: 002b:00007f418d5a1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 241.617594][ T9343] RAX: ffffffffffffffda RBX: 00007f418ed3ef60 RCX: 00007f418ec2c059 10:51:09 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) (async, rerun: 64) socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 64) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (rerun: 64) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x6, 0x0, 0x40, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0xffffffffffffffe5) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:51:09 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0xfc, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 241.625587][ T9343] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 241.633575][ T9343] RBP: 00007f418d5a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 241.641567][ T9343] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000002 [ 241.649563][ T9343] R13: 00007fffc27f099f R14: 00007f418d5a1300 R15: 0000000000022000 [ 241.657578][ T9343] 10:51:09 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x12c, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:09 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x1fc, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 242.038757][ T9355] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 58793 - 0 [ 242.048319][ T9355] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 58793 - 0 [ 242.057632][ T9355] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 58793 - 0 [ 242.067122][ T9355] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 58793 - 0 10:51:09 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x40000000}, 0x10, 0xffffffffffffffff}, 0x78) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 64) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES32=r1, @ANYRES64, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000dc0)='GPL\x00', 0xf3fffffe, 0x46, &(0x7f0000000380)=""/70, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x10, 0x5, 0x7ff}, 0x10, 0x0, r0}, 0x78) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000140)=0x1) (async) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x881}, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) openat$cgroup_ro(r4, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0x1f, 0x81, 0x80, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xd}, 0xf04f, 0x1, 0x3ff, 0xffff}}) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x3, 0x9, 0x7, 0xe5, 0x9, 0x6}, 0x9c) (rerun: 32) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x5c}}, 0x0) 10:51:09 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0xfc, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x6800) 10:51:09 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x6, 0x0, 0x40, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0xffffffffffffffe5) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (rerun: 32) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async, rerun: 64) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:51:09 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x300, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:09 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 12) 10:51:10 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x500, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 242.193828][ T9399] FAULT_INJECTION: forcing a failure. [ 242.193828][ T9399] name failslab, interval 1, probability 0, space 0, times 0 [ 242.252417][ T9399] CPU: 0 PID: 9399 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 242.262877][ T9399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.272949][ T9399] Call Trace: [ 242.276241][ T9399] [ 242.279179][ T9399] dump_stack_lvl+0xcd/0x134 [ 242.283803][ T9399] should_fail.cold+0x5/0xa [ 242.288332][ T9399] ? sctp_add_bind_addr+0x93/0x3d0 [ 242.293461][ T9399] should_failslab+0x5/0x10 [ 242.297988][ T9399] kmem_cache_alloc_trace+0x55/0x3d0 [ 242.303312][ T9399] sctp_add_bind_addr+0x93/0x3d0 [ 242.308279][ T9399] sctp_copy_local_addr_list+0x325/0x4f0 [ 242.313948][ T9399] ? sctp_v4_get_dst+0x11d0/0x11d0 [ 242.319095][ T9399] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 242.325364][ T9399] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 242.331288][ T9399] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 242.337210][ T9399] sctp_bind_addr_copy+0xde/0x460 [ 242.342268][ T9399] sctp_connect_new_asoc+0x1cd/0x770 [ 242.344538][ T9401] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 41948 - 0 [ 242.347575][ T9399] ? sctp_bind+0x110/0x110 [ 242.347615][ T9399] ? __local_bh_enable_ip+0xa0/0x120 [ 242.366034][ T9399] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 242.372301][ T9399] ? security_sctp_bind_connect+0x8f/0xc0 [ 242.378044][ T9399] sctp_sendmsg+0x13ce/0x1d40 [ 242.382754][ T9399] ? sctp_setsockopt+0xa9b0/0xa9b0 [ 242.387908][ T9399] ? aa_af_perm+0x230/0x230 [ 242.392435][ T9399] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 242.398713][ T9399] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 242.404018][ T9410] Bluetooth: hci1: expected 1617 bytes, got 2 bytes [ 242.405010][ T9399] inet_sendmsg+0x99/0xe0 [ 242.405048][ T9399] ? inet_send_prepare+0x4e0/0x4e0 [ 242.405076][ T9399] sock_sendmsg+0xcf/0x120 [ 242.425664][ T9399] ____sys_sendmsg+0x331/0x810 [ 242.430461][ T9399] ? kernel_sendmsg+0x50/0x50 [ 242.435164][ T9399] ? do_recvmmsg+0x6d0/0x6d0 [ 242.439776][ T9399] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 242.445798][ T9399] ___sys_sendmsg+0xf3/0x170 [ 242.450411][ T9399] ? sendmsg_copy_msghdr+0x160/0x160 [ 242.455724][ T9399] ? lock_downgrade+0x6e0/0x6e0 [ 242.460599][ T9399] ? lock_chain_count+0x20/0x20 [ 242.461754][ T9401] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 41948 - 0 [ 242.465490][ T9399] ? __fget_light+0xea/0x280 [ 242.465522][ T9399] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 242.465563][ T9399] __sys_sendmmsg+0x195/0x470 [ 242.489872][ T9399] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 242.494933][ T9399] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 242.500962][ T9399] ? __context_tracking_exit+0xb8/0xe0 [ 242.506446][ T9399] ? lock_downgrade+0x6e0/0x6e0 [ 242.511330][ T9399] ? lock_downgrade+0x6e0/0x6e0 [ 242.516220][ T9399] __x64_sys_sendmmsg+0x99/0x100 [ 242.521194][ T9399] ? syscall_enter_from_user_mode+0x21/0x70 [ 242.527113][ T9399] do_syscall_64+0x35/0xb0 [ 242.531556][ T9399] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 242.537476][ T9399] RIP: 0033:0x7f418ec2c059 [ 242.541907][ T9399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 242.555361][ T9401] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 41948 - 0 [ 242.561530][ T9399] RSP: 002b:00007f418d5a1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 242.561562][ T9399] RAX: ffffffffffffffda RBX: 00007f418ed3ef60 RCX: 00007f418ec2c059 [ 242.561581][ T9399] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 242.561597][ T9399] RBP: 00007f418d5a11d0 R08: 0000000000000000 R09: 0000000000000000 10:51:10 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f", 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) writev(r1, &(0x7f0000000880)=[{&(0x7f00000004c0)="fabb0825be2046398b8411ceffc9a41bbf01cbc3bb79cd9dc94d9b44b36fecce63756ab5884f9c4ce14d614b9335099002a5ae152a986d70bcb3ec93004c267095cc88b7be3eb21d37cc56e02f5fddabbd24b3b19b79980fd2c906672a01d351ebd2bc5b515f30f170224efd83d5da432488f7b0172799f762decaaea94790cd5e449a884fd6a33f154d950649f051b5dbc49d80fb43dccbf67a91ad6828e7b72eaf", 0xa2}, {&(0x7f0000000580)="98b8b6", 0x3}, {&(0x7f00000005c0)="7199a3012f99c890e7e97967abaa5e0c17b688ab09465c90c69343ef3252e1e355d8084a7afffd54592afb94c528b07c7545287ad4361a23e074cd43ed79d66f8d59d1d3d554a5087d2ad0977b8711d4ee29b7e10ccbe90829c6e5c0bafd4839a7ca6f4fee0822b3d7445e3544784fdf7332ffb837fe182eff30deef0d778b182f21abb464955a8c484059a6169f1d8f3c4508634e31d4d08cea755cfa53f8d7ed364306a6ccc0382a411443e26de4909a8bc7e893530be430ac9667392251dad825d49bfaf4143551d82ca7d04a2e0ebb7fb9476cacd955d1eb8a2835f4b9f9ba2ecbb466c8ab3802597b5ae06b", 0xee}, {&(0x7f00000006c0)="e1a96d1060176e8f3432ffad773c5e4e7f262463cc195d22ed5e20022c072341bd6056fedd47b640d00974a7b00417a4b9610b48020ad0f2a742fe6c81bfaaafbe8500906012eaa34bc91e6f567923", 0x4f}, {&(0x7f0000000740)="22c9e8fd7f0aa6b5b8b5d2abe946cc6d87cc7f5f2559e3879de84fcf05e1452f92d4036db894b181bcb2", 0x2a}, {&(0x7f0000000780)="4c78eeaf46a38235bbbdff0cbf4f732460fc419085b681c54f6a9968e23da1cce61b6f86aefd71f9d219fb50ecd1f0e7a6c4e564d005b7ed6f896093e3391ef80cd3f4e50061d5e5f64b884dce677eb390642fe2a8941ecfa0a979333087be958e4712a3fe705fc9bea07479881dab7aa1f089494a125bef7f6959fbe5e8e14cf907543b4a325163f7400b9892adc14c2eaebe542a3413c80a09cc41d1767ea38950537810358874ae811e5090257b05a71797a47b86d5f7cd676900d7867ab3c1eb492e6a8d9c931fc94a8214ba16c5f3a00f3a", 0xd4}], 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="4600010002"], 0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000100)=0x10, 0x80000) sendmmsg(r2, &(0x7f0000000480)=[{{&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x4, 0x0, {0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffff02}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)="8efc4a3ff1710343fb4ec9388c7e30f5178c7a61ea6b75ca41e5f420a7d0b9e0b743545168b8a68903b0fe6bc08b421b32ce654566626fa979d0fbba7d4af87c3fc176be9426bc5251cb29a1c64c8285c5d44a89d53157ce8adcbcdaeb29cf99c792139c1e7841a06143cb9ddf3470311050ce55f3c36d6d9e19c792a8ac4ff3d1cff276c7d1a49c965619b7a221098554fdd0060c3da169f7e876c8fc7768d1f5615a7b97bac83ed63224e4f22a32c508ee3e1a78f99c1f76f1de318b83bc53ee12cc1e4e3faa670594f03426d5fab08dc03441b01e5b8b42d8d05fc4429701802a636ea47cd8d74a8381571647bf", 0xef}], 0x1, &(0x7f0000000300)=[{0xd8, 0x10b, 0x3, "be1f87a62918b38ac6c8db26d323d2856bbf915aefb554ff0b8ed913c2add9b350f6bca3e3c02de21d8e57c9e11bb8be90dae230b2b584c89844bd2e75022bd66664ec4a55ebd0b3448cd9c65d82d4e9dedeabc44b874008cb324c23514aad459ec763073abb546f2705c1c3818e88d651ccc4b1db6255a2d8d12a1c7efc7efc5cd7d6653e74e13e0b77c4b41bd2c6a35b253623c5ed0e092f68eb4ad2e1e686781b2c754017b3230d4df115d67e472bbccea62c1a0e05c0e6ae8ace099404ca423f"}, {0x78, 0x108, 0x2d, "31ee85c83d17ffcde86e86d231469aefe6b5d0b7ff3973d3604075ef8973699fc6e8a9e4b1b031dca1902987a7a3341255d4dbed72d4ec5e0a0749be925983e125cf124cde90f722dba9bb23b01a11f590ad3540d9feb2852029dc15c813880ef0e03654bf3d"}], 0x150}}], 0x1, 0x4) 10:51:10 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x5dc, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:10 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f", 0x7) (async, rerun: 32) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) (rerun: 64) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async, rerun: 32) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) (rerun: 32) shutdown(r1, 0x1) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) writev(r1, &(0x7f0000000880)=[{&(0x7f00000004c0)="fabb0825be2046398b8411ceffc9a41bbf01cbc3bb79cd9dc94d9b44b36fecce63756ab5884f9c4ce14d614b9335099002a5ae152a986d70bcb3ec93004c267095cc88b7be3eb21d37cc56e02f5fddabbd24b3b19b79980fd2c906672a01d351ebd2bc5b515f30f170224efd83d5da432488f7b0172799f762decaaea94790cd5e449a884fd6a33f154d950649f051b5dbc49d80fb43dccbf67a91ad6828e7b72eaf", 0xa2}, {&(0x7f0000000580)="98b8b6", 0x3}, {&(0x7f00000005c0)="7199a3012f99c890e7e97967abaa5e0c17b688ab09465c90c69343ef3252e1e355d8084a7afffd54592afb94c528b07c7545287ad4361a23e074cd43ed79d66f8d59d1d3d554a5087d2ad0977b8711d4ee29b7e10ccbe90829c6e5c0bafd4839a7ca6f4fee0822b3d7445e3544784fdf7332ffb837fe182eff30deef0d778b182f21abb464955a8c484059a6169f1d8f3c4508634e31d4d08cea755cfa53f8d7ed364306a6ccc0382a411443e26de4909a8bc7e893530be430ac9667392251dad825d49bfaf4143551d82ca7d04a2e0ebb7fb9476cacd955d1eb8a2835f4b9f9ba2ecbb466c8ab3802597b5ae06b", 0xee}, {&(0x7f00000006c0)="e1a96d1060176e8f3432ffad773c5e4e7f262463cc195d22ed5e20022c072341bd6056fedd47b640d00974a7b00417a4b9610b48020ad0f2a742fe6c81bfaaafbe8500906012eaa34bc91e6f567923", 0x4f}, {&(0x7f0000000740)="22c9e8fd7f0aa6b5b8b5d2abe946cc6d87cc7f5f2559e3879de84fcf05e1452f92d4036db894b181bcb2", 0x2a}, {&(0x7f0000000780)="4c78eeaf46a38235bbbdff0cbf4f732460fc419085b681c54f6a9968e23da1cce61b6f86aefd71f9d219fb50ecd1f0e7a6c4e564d005b7ed6f896093e3391ef80cd3f4e50061d5e5f64b884dce677eb390642fe2a8941ecfa0a979333087be958e4712a3fe705fc9bea07479881dab7aa1f089494a125bef7f6959fbe5e8e14cf907543b4a325163f7400b9892adc14c2eaebe542a3413c80a09cc41d1767ea38950537810358874ae811e5090257b05a71797a47b86d5f7cd676900d7867ab3c1eb492e6a8d9c931fc94a8214ba16c5f3a00f3a", 0xd4}], 0x6) (async) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="4600010002"], 0x8) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) (async) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000100)=0x10, 0x80000) sendmmsg(r2, &(0x7f0000000480)=[{{&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x4, 0x0, {0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffff02}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)="8efc4a3ff1710343fb4ec9388c7e30f5178c7a61ea6b75ca41e5f420a7d0b9e0b743545168b8a68903b0fe6bc08b421b32ce654566626fa979d0fbba7d4af87c3fc176be9426bc5251cb29a1c64c8285c5d44a89d53157ce8adcbcdaeb29cf99c792139c1e7841a06143cb9ddf3470311050ce55f3c36d6d9e19c792a8ac4ff3d1cff276c7d1a49c965619b7a221098554fdd0060c3da169f7e876c8fc7768d1f5615a7b97bac83ed63224e4f22a32c508ee3e1a78f99c1f76f1de318b83bc53ee12cc1e4e3faa670594f03426d5fab08dc03441b01e5b8b42d8d05fc4429701802a636ea47cd8d74a8381571647bf", 0xef}], 0x1, &(0x7f0000000300)=[{0xd8, 0x10b, 0x3, "be1f87a62918b38ac6c8db26d323d2856bbf915aefb554ff0b8ed913c2add9b350f6bca3e3c02de21d8e57c9e11bb8be90dae230b2b584c89844bd2e75022bd66664ec4a55ebd0b3448cd9c65d82d4e9dedeabc44b874008cb324c23514aad459ec763073abb546f2705c1c3818e88d651ccc4b1db6255a2d8d12a1c7efc7efc5cd7d6653e74e13e0b77c4b41bd2c6a35b253623c5ed0e092f68eb4ad2e1e686781b2c754017b3230d4df115d67e472bbccea62c1a0e05c0e6ae8ace099404ca423f"}, {0x78, 0x108, 0x2d, "31ee85c83d17ffcde86e86d231469aefe6b5d0b7ff3973d3604075ef8973699fc6e8a9e4b1b031dca1902987a7a3341255d4dbed72d4ec5e0a0749be925983e125cf124cde90f722dba9bb23b01a11f590ad3540d9feb2852029dc15c813880ef0e03654bf3d"}], 0x150}}], 0x1, 0x4) 10:51:10 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x600, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:10 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00*\x00'/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000080)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x20}, 0x4}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000380)="eb7fab1e593d95803b75b1dbefd300bd9dbf5c8c24526af53b21b531b844b46c807f24f23ea5764d8645d7852a160db4044bef00bf91d900b5888d17516148c93695d825e0f79f0f8d13d1828d6f29d3e3c4410ee7be6cee8312d5166c41734f31b0096538ca6ad7ac52e0be45839c9494d21c592c45179e836ac381138dac86820d3fd4034c4940ec354c527c6e067036a4074b2de7ec3418c5c211e2b409725f2a8ba1f4488401cc9b9d1d48e008224ba5c38d6a59d75ab3a277393974294136c9f4da0e7e393693d805ede9d8c2d0d9a4a82b786ff96594", 0xd9}, {&(0x7f0000000480)="9f000fb9929fc60eab792ae26d7c0b85e0045af1c59d5daf64a9f403e8edf0d07be43b558a149a55c38633e3e11c09b46c9e39a2c5fa4a1160e45926c72700aa5799a591cef443e850a53a2571f0799a095750ddf0654b001818a6bac6fc20bccec731d41effee6c40456a65c3578027b61beaacbe264853c8cf5087cc270bb66aa5d9b3568c85f7d22895d0a3c28b82cab3fe5f95c6f79df36be8c2dc4c8ecc38c117253585cc447d286841f318cfada20260b6eb0814a7fe2ea8de", 0xbc}, {&(0x7f0000000540)="ab87e84ad71a68fac5a4b75f00f786e149d0348f6645f515ec218c826a51d34aa693b79017d7a2601de8eacfa272a6a9b4f6892787d72645ae0736a4e93f2c1f706dfbb126f89ea4b7e1a48b3f6eed67ad5aed177662dac5c3ac1fd558b56a7e403b81e9c75130b42cf552609c42cd83adce292c20fd9725b9585725fbb565bd9791f68693421c7dd96487f4362479c1f490b9533f5a384b4ac81d900720988a4d74996cc50debd80669dd0ce3642610cdf21748c0bb27458b5013ffe76cdf8e", 0xc0}, {&(0x7f0000000700)="f5d62c6944a1905e4f8bfc7e02fa896b637673b319a94a3d1dd1f159f343c67e207fdebab9354269b86e07b4d2b9e246751b7125858bd556281eca812f200eebcb974cc42ef49e9e3e36f2886d4d1ab1bb2d9c5c76e18411a5e312cd9d4e8b4383c0164f5a4db68c632fbd31918f2a304b25e9f4fb8d63ff88520c3628bd41a210a99416fb48fa5076901f8b7f9cdf746be7caffead19fcdd8a40431fe4a62645f77a1ee7bb90c3121a2f35288c62044a3356d14be1e85cdac143fba07bd22f86b62e9f1723338928db9d3bb53a7", 0xce}, {&(0x7f0000000800)="6037eb48f6485eec8959613561f4a072e6df2146f7c4f200fe842c1d6b52ce8a32626a9a3caf5de1f4d054f78cb12e6cd2d4557d081183f6e1047693fa05d171bad0767ba586ea8517b3fd285a942efc316bb69b694f84638ec26bf3fd9b175b10e529bbd24de9237f6b2770a080141a931b5f92c6d140bcec754aa9e53cf99789bd9417f6c3ef250b5dfe3fd7f3f36412ba225349091ae149a59e4f67018aa219870eec4db89e4e407b4bfdca51415581aab53878b5cb417c6bdce3cbbfa159fbb1a9bdfa77a2", 0xc7}, {&(0x7f0000000280)="df360684294c864fc5c48f89fecdd02ae57acf7ff2caa46cb6db9c468e9c72753df91b7db05b7bd7ce31a609556f1fbae86efd46497f42892e9f7969dc7bcce5f32bc1a32079bfffdba2299ad39d5b76c10f904e0c16d5c0a4e5f317994ab568026c59ed3c96db621796908e10f924c25302c6b6de4f6969f90ed5", 0x7b}], 0x6, &(0x7f0000000680)}, 0x14050) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 242.561613][ T9399] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000002 [ 242.610600][ T9399] R13: 00007fffc27f099f R14: 00007f418d5a1300 R15: 0000000000022000 [ 242.618617][ T9399] [ 242.713660][ T9401] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 41948 - 0 [ 242.810067][ T25] kauditd_printk_skb: 10 callbacks suppressed [ 242.810083][ T25] audit: type=1804 audit(1645786270.639:203): pid=9403 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/154/memory.events" dev="sda1" ino=1164 res=1 errno=0 [ 242.855240][ T25] audit: type=1804 audit(1645786270.649:204): pid=9422 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/154/memory.events" dev="sda1" ino=1164 res=1 errno=0 10:51:10 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00*\x00'/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000080)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x20}, 0x4}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000380)="eb7fab1e593d95803b75b1dbefd300bd9dbf5c8c24526af53b21b531b844b46c807f24f23ea5764d8645d7852a160db4044bef00bf91d900b5888d17516148c93695d825e0f79f0f8d13d1828d6f29d3e3c4410ee7be6cee8312d5166c41734f31b0096538ca6ad7ac52e0be45839c9494d21c592c45179e836ac381138dac86820d3fd4034c4940ec354c527c6e067036a4074b2de7ec3418c5c211e2b409725f2a8ba1f4488401cc9b9d1d48e008224ba5c38d6a59d75ab3a277393974294136c9f4da0e7e393693d805ede9d8c2d0d9a4a82b786ff96594", 0xd9}, {&(0x7f0000000480)="9f000fb9929fc60eab792ae26d7c0b85e0045af1c59d5daf64a9f403e8edf0d07be43b558a149a55c38633e3e11c09b46c9e39a2c5fa4a1160e45926c72700aa5799a591cef443e850a53a2571f0799a095750ddf0654b001818a6bac6fc20bccec731d41effee6c40456a65c3578027b61beaacbe264853c8cf5087cc270bb66aa5d9b3568c85f7d22895d0a3c28b82cab3fe5f95c6f79df36be8c2dc4c8ecc38c117253585cc447d286841f318cfada20260b6eb0814a7fe2ea8de", 0xbc}, {&(0x7f0000000540)="ab87e84ad71a68fac5a4b75f00f786e149d0348f6645f515ec218c826a51d34aa693b79017d7a2601de8eacfa272a6a9b4f6892787d72645ae0736a4e93f2c1f706dfbb126f89ea4b7e1a48b3f6eed67ad5aed177662dac5c3ac1fd558b56a7e403b81e9c75130b42cf552609c42cd83adce292c20fd9725b9585725fbb565bd9791f68693421c7dd96487f4362479c1f490b9533f5a384b4ac81d900720988a4d74996cc50debd80669dd0ce3642610cdf21748c0bb27458b5013ffe76cdf8e", 0xc0}, {&(0x7f0000000700)="f5d62c6944a1905e4f8bfc7e02fa896b637673b319a94a3d1dd1f159f343c67e207fdebab9354269b86e07b4d2b9e246751b7125858bd556281eca812f200eebcb974cc42ef49e9e3e36f2886d4d1ab1bb2d9c5c76e18411a5e312cd9d4e8b4383c0164f5a4db68c632fbd31918f2a304b25e9f4fb8d63ff88520c3628bd41a210a99416fb48fa5076901f8b7f9cdf746be7caffead19fcdd8a40431fe4a62645f77a1ee7bb90c3121a2f35288c62044a3356d14be1e85cdac143fba07bd22f86b62e9f1723338928db9d3bb53a7", 0xce}, {&(0x7f0000000800)="6037eb48f6485eec8959613561f4a072e6df2146f7c4f200fe842c1d6b52ce8a32626a9a3caf5de1f4d054f78cb12e6cd2d4557d081183f6e1047693fa05d171bad0767ba586ea8517b3fd285a942efc316bb69b694f84638ec26bf3fd9b175b10e529bbd24de9237f6b2770a080141a931b5f92c6d140bcec754aa9e53cf99789bd9417f6c3ef250b5dfe3fd7f3f36412ba225349091ae149a59e4f67018aa219870eec4db89e4e407b4bfdca51415581aab53878b5cb417c6bdce3cbbfa159fbb1a9bdfa77a2", 0xc7}, {&(0x7f0000000280)="df360684294c864fc5c48f89fecdd02ae57acf7ff2caa46cb6db9c468e9c72753df91b7db05b7bd7ce31a609556f1fbae86efd46497f42892e9f7969dc7bcce5f32bc1a32079bfffdba2299ad39d5b76c10f904e0c16d5c0a4e5f317994ab568026c59ed3c96db621796908e10f924c25302c6b6de4f6969f90ed5", 0x7b}], 0x6, &(0x7f0000000680)}, 0x14050) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00*\x00'/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) shutdown(0xffffffffffffffff, 0x1) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) (async) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000080)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x20}, 0x4}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000380)="eb7fab1e593d95803b75b1dbefd300bd9dbf5c8c24526af53b21b531b844b46c807f24f23ea5764d8645d7852a160db4044bef00bf91d900b5888d17516148c93695d825e0f79f0f8d13d1828d6f29d3e3c4410ee7be6cee8312d5166c41734f31b0096538ca6ad7ac52e0be45839c9494d21c592c45179e836ac381138dac86820d3fd4034c4940ec354c527c6e067036a4074b2de7ec3418c5c211e2b409725f2a8ba1f4488401cc9b9d1d48e008224ba5c38d6a59d75ab3a277393974294136c9f4da0e7e393693d805ede9d8c2d0d9a4a82b786ff96594", 0xd9}, {&(0x7f0000000480)="9f000fb9929fc60eab792ae26d7c0b85e0045af1c59d5daf64a9f403e8edf0d07be43b558a149a55c38633e3e11c09b46c9e39a2c5fa4a1160e45926c72700aa5799a591cef443e850a53a2571f0799a095750ddf0654b001818a6bac6fc20bccec731d41effee6c40456a65c3578027b61beaacbe264853c8cf5087cc270bb66aa5d9b3568c85f7d22895d0a3c28b82cab3fe5f95c6f79df36be8c2dc4c8ecc38c117253585cc447d286841f318cfada20260b6eb0814a7fe2ea8de", 0xbc}, {&(0x7f0000000540)="ab87e84ad71a68fac5a4b75f00f786e149d0348f6645f515ec218c826a51d34aa693b79017d7a2601de8eacfa272a6a9b4f6892787d72645ae0736a4e93f2c1f706dfbb126f89ea4b7e1a48b3f6eed67ad5aed177662dac5c3ac1fd558b56a7e403b81e9c75130b42cf552609c42cd83adce292c20fd9725b9585725fbb565bd9791f68693421c7dd96487f4362479c1f490b9533f5a384b4ac81d900720988a4d74996cc50debd80669dd0ce3642610cdf21748c0bb27458b5013ffe76cdf8e", 0xc0}, {&(0x7f0000000700)="f5d62c6944a1905e4f8bfc7e02fa896b637673b319a94a3d1dd1f159f343c67e207fdebab9354269b86e07b4d2b9e246751b7125858bd556281eca812f200eebcb974cc42ef49e9e3e36f2886d4d1ab1bb2d9c5c76e18411a5e312cd9d4e8b4383c0164f5a4db68c632fbd31918f2a304b25e9f4fb8d63ff88520c3628bd41a210a99416fb48fa5076901f8b7f9cdf746be7caffead19fcdd8a40431fe4a62645f77a1ee7bb90c3121a2f35288c62044a3356d14be1e85cdac143fba07bd22f86b62e9f1723338928db9d3bb53a7", 0xce}, {&(0x7f0000000800)="6037eb48f6485eec8959613561f4a072e6df2146f7c4f200fe842c1d6b52ce8a32626a9a3caf5de1f4d054f78cb12e6cd2d4557d081183f6e1047693fa05d171bad0767ba586ea8517b3fd285a942efc316bb69b694f84638ec26bf3fd9b175b10e529bbd24de9237f6b2770a080141a931b5f92c6d140bcec754aa9e53cf99789bd9417f6c3ef250b5dfe3fd7f3f36412ba225349091ae149a59e4f67018aa219870eec4db89e4e407b4bfdca51415581aab53878b5cb417c6bdce3cbbfa159fbb1a9bdfa77a2", 0xc7}, {&(0x7f0000000280)="df360684294c864fc5c48f89fecdd02ae57acf7ff2caa46cb6db9c468e9c72753df91b7db05b7bd7ce31a609556f1fbae86efd46497f42892e9f7969dc7bcce5f32bc1a32079bfffdba2299ad39d5b76c10f904e0c16d5c0a4e5f317994ab568026c59ed3c96db621796908e10f924c25302c6b6de4f6969f90ed5", 0x7b}], 0x6, &(0x7f0000000680)}, 0x14050) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) (async) 10:51:10 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x700, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x6c00) 10:51:10 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 13) 10:51:10 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f", 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) shutdown(r1, 0x1) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) (async) writev(r1, &(0x7f0000000880)=[{&(0x7f00000004c0)="fabb0825be2046398b8411ceffc9a41bbf01cbc3bb79cd9dc94d9b44b36fecce63756ab5884f9c4ce14d614b9335099002a5ae152a986d70bcb3ec93004c267095cc88b7be3eb21d37cc56e02f5fddabbd24b3b19b79980fd2c906672a01d351ebd2bc5b515f30f170224efd83d5da432488f7b0172799f762decaaea94790cd5e449a884fd6a33f154d950649f051b5dbc49d80fb43dccbf67a91ad6828e7b72eaf", 0xa2}, {&(0x7f0000000580)="98b8b6", 0x3}, {&(0x7f00000005c0)="7199a3012f99c890e7e97967abaa5e0c17b688ab09465c90c69343ef3252e1e355d8084a7afffd54592afb94c528b07c7545287ad4361a23e074cd43ed79d66f8d59d1d3d554a5087d2ad0977b8711d4ee29b7e10ccbe90829c6e5c0bafd4839a7ca6f4fee0822b3d7445e3544784fdf7332ffb837fe182eff30deef0d778b182f21abb464955a8c484059a6169f1d8f3c4508634e31d4d08cea755cfa53f8d7ed364306a6ccc0382a411443e26de4909a8bc7e893530be430ac9667392251dad825d49bfaf4143551d82ca7d04a2e0ebb7fb9476cacd955d1eb8a2835f4b9f9ba2ecbb466c8ab3802597b5ae06b", 0xee}, {&(0x7f00000006c0)="e1a96d1060176e8f3432ffad773c5e4e7f262463cc195d22ed5e20022c072341bd6056fedd47b640d00974a7b00417a4b9610b48020ad0f2a742fe6c81bfaaafbe8500906012eaa34bc91e6f567923", 0x4f}, {&(0x7f0000000740)="22c9e8fd7f0aa6b5b8b5d2abe946cc6d87cc7f5f2559e3879de84fcf05e1452f92d4036db894b181bcb2", 0x2a}, {&(0x7f0000000780)="4c78eeaf46a38235bbbdff0cbf4f732460fc419085b681c54f6a9968e23da1cce61b6f86aefd71f9d219fb50ecd1f0e7a6c4e564d005b7ed6f896093e3391ef80cd3f4e50061d5e5f64b884dce677eb390642fe2a8941ecfa0a979333087be958e4712a3fe705fc9bea07479881dab7aa1f089494a125bef7f6959fbe5e8e14cf907543b4a325163f7400b9892adc14c2eaebe542a3413c80a09cc41d1767ea38950537810358874ae811e5090257b05a71797a47b86d5f7cd676900d7867ab3c1eb492e6a8d9c931fc94a8214ba16c5f3a00f3a", 0xd4}], 0x6) (async) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="4600010002"], 0x8) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000100)=0x10, 0x80000) sendmmsg(r2, &(0x7f0000000480)=[{{&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x4, 0x0, {0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffff02}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)="8efc4a3ff1710343fb4ec9388c7e30f5178c7a61ea6b75ca41e5f420a7d0b9e0b743545168b8a68903b0fe6bc08b421b32ce654566626fa979d0fbba7d4af87c3fc176be9426bc5251cb29a1c64c8285c5d44a89d53157ce8adcbcdaeb29cf99c792139c1e7841a06143cb9ddf3470311050ce55f3c36d6d9e19c792a8ac4ff3d1cff276c7d1a49c965619b7a221098554fdd0060c3da169f7e876c8fc7768d1f5615a7b97bac83ed63224e4f22a32c508ee3e1a78f99c1f76f1de318b83bc53ee12cc1e4e3faa670594f03426d5fab08dc03441b01e5b8b42d8d05fc4429701802a636ea47cd8d74a8381571647bf", 0xef}], 0x1, &(0x7f0000000300)=[{0xd8, 0x10b, 0x3, "be1f87a62918b38ac6c8db26d323d2856bbf915aefb554ff0b8ed913c2add9b350f6bca3e3c02de21d8e57c9e11bb8be90dae230b2b584c89844bd2e75022bd66664ec4a55ebd0b3448cd9c65d82d4e9dedeabc44b874008cb324c23514aad459ec763073abb546f2705c1c3818e88d651ccc4b1db6255a2d8d12a1c7efc7efc5cd7d6653e74e13e0b77c4b41bd2c6a35b253623c5ed0e092f68eb4ad2e1e686781b2c754017b3230d4df115d67e472bbccea62c1a0e05c0e6ae8ace099404ca423f"}, {0x78, 0x108, 0x2d, "31ee85c83d17ffcde86e86d231469aefe6b5d0b7ff3973d3604075ef8973699fc6e8a9e4b1b031dca1902987a7a3341255d4dbed72d4ec5e0a0749be925983e125cf124cde90f722dba9bb23b01a11f590ad3540d9feb2852029dc15c813880ef0e03654bf3d"}], 0x150}}], 0x1, 0x4) [ 242.978407][ T9431] FAULT_INJECTION: forcing a failure. [ 242.978407][ T9431] name failslab, interval 1, probability 0, space 0, times 0 [ 243.018468][ T9436] Bluetooth: hci1: expected 1617 bytes, got 2 bytes [ 243.035190][ T9431] CPU: 1 PID: 9431 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 243.045643][ T9431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.055717][ T9431] Call Trace: [ 243.059008][ T9431] [ 243.061945][ T9431] dump_stack_lvl+0xcd/0x134 [ 243.066558][ T9431] should_fail.cold+0x5/0xa [ 243.071094][ T9431] ? sctp_add_bind_addr+0x93/0x3d0 [ 243.076223][ T9431] should_failslab+0x5/0x10 10:51:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000400000000000000140002006e657464657673696d300000000000004afff91c65a4fdc46a22654edb5dd719544b0b45d60d9efb191afca8bf84f41e39dd7c71ffee6b3cdb7bf7553898e8bca53f3428b6298e0000008000000000df3d8e6e5be09f4b68f503630fb17ec1485eaef5a5be5b9c046bfed3791335fc2a47f507db5f8f879832538c74730970a97e1ee01e9b6287265867d4de9d26bbca5f470ae5401f676d5d201b611219023252084031126439728bead15c9773050ea175a9b0ac2f03915d6c2de78bd898cd231c779722ba9c0a61fdaeed53faf0e537a5f36eeafdce8f0e"], 0x2c}}, 0x0) pipe(&(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='\x00'/16, @ANYRES32=r6, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="65727370616e30000c00040000000000f31ef98a265c276b0ce46192bf9640576afab6ae1d34d1f3dd0f6c8c7dde95c1c1429690678aae9e0baeb39df0880c140857f66222ed2d336d3d87e1341ebe8f787db3e86a84d6b61a5ebff1598fb9a971516edaae6f3c288175a57cadefec3b04d35d764f41ca721ab7ed30af0a85b28fe9c2424618762f88b804aba01844f1cab84f9f018be0f888024a4d2919c673a086207addc5269ccf0aa6239cecc96f010af2f61054fd3fadb83e25c0d0bf52359ca3fc486141b1b83c256974851124d896a3", @ANYRES32=r7, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="48010000", @ANYRES16=r2, @ANYBLOB="100027bd7000fcdbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="2c01028040000100240001006c625f74785f686173685f746f5f706f050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="00000000b2c100f1ec00000000000000000005000200060000000400040008000600000000000000000000191f06c975237a", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400fbffffff3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRESOCT=r0, @ANYBLOB="3a7f0f5386a9b0edf2867f1d979e317d9797892566799cf3a67aea21d967fd5d3303f626a1358b1de9c34bbd3ce2fbe9d2f278853c667a1933b21aacbb9cefda1a5752c7ca58df9edc01d4bc08c6272b18aaa3270f2a8df27fe1665ee699f1d0f8ec04d7fb8519965b5bf3270d72b9305ebc47ec742918349c0f5c7e44864c1a77dce3210791ae8adacb126c293908cbb33f0794d5f2d4a6cf02f3747ffba322b8ac91fe70aad6e17c87058f8080b1ffc3fc49aa0b1c5c1ede4a3dab1a1e1b7a55ed55f028"], 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e0000000", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fbdbdf250300000005000300080000000500020006000000500001801400020076657468315f766972745f77696669001400020074756e6c30000000000000000000000008000300030000001400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="0500030040000000440001801400020077673200000000000000000000000000080003000200000008000300000000001400020073797a6b616c6c65723100000000000008000100", @ANYRES32=r6, @ANYBLOB="05000200bd000000050002000800000005000500790000000500030005000000957aedcba539aa9757c5232d611f2a446699965566e65a16839ab0af970b8b545006367749d5e63e3309788f1228b0c6c60d6c"], 0xe0}, 0x1, 0x0, 0x0, 0x4081}, 0x2000054) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100697036767469000018000280148004002001000000000000000000000000000208000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000180)=0x1, 0x4) 10:51:10 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00*\x00'/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async, rerun: 32) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) shutdown(0xffffffffffffffff, 0x1) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) (async, rerun: 32) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000080)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x20}, 0x4}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000380)="eb7fab1e593d95803b75b1dbefd300bd9dbf5c8c24526af53b21b531b844b46c807f24f23ea5764d8645d7852a160db4044bef00bf91d900b5888d17516148c93695d825e0f79f0f8d13d1828d6f29d3e3c4410ee7be6cee8312d5166c41734f31b0096538ca6ad7ac52e0be45839c9494d21c592c45179e836ac381138dac86820d3fd4034c4940ec354c527c6e067036a4074b2de7ec3418c5c211e2b409725f2a8ba1f4488401cc9b9d1d48e008224ba5c38d6a59d75ab3a277393974294136c9f4da0e7e393693d805ede9d8c2d0d9a4a82b786ff96594", 0xd9}, {&(0x7f0000000480)="9f000fb9929fc60eab792ae26d7c0b85e0045af1c59d5daf64a9f403e8edf0d07be43b558a149a55c38633e3e11c09b46c9e39a2c5fa4a1160e45926c72700aa5799a591cef443e850a53a2571f0799a095750ddf0654b001818a6bac6fc20bccec731d41effee6c40456a65c3578027b61beaacbe264853c8cf5087cc270bb66aa5d9b3568c85f7d22895d0a3c28b82cab3fe5f95c6f79df36be8c2dc4c8ecc38c117253585cc447d286841f318cfada20260b6eb0814a7fe2ea8de", 0xbc}, {&(0x7f0000000540)="ab87e84ad71a68fac5a4b75f00f786e149d0348f6645f515ec218c826a51d34aa693b79017d7a2601de8eacfa272a6a9b4f6892787d72645ae0736a4e93f2c1f706dfbb126f89ea4b7e1a48b3f6eed67ad5aed177662dac5c3ac1fd558b56a7e403b81e9c75130b42cf552609c42cd83adce292c20fd9725b9585725fbb565bd9791f68693421c7dd96487f4362479c1f490b9533f5a384b4ac81d900720988a4d74996cc50debd80669dd0ce3642610cdf21748c0bb27458b5013ffe76cdf8e", 0xc0}, {&(0x7f0000000700)="f5d62c6944a1905e4f8bfc7e02fa896b637673b319a94a3d1dd1f159f343c67e207fdebab9354269b86e07b4d2b9e246751b7125858bd556281eca812f200eebcb974cc42ef49e9e3e36f2886d4d1ab1bb2d9c5c76e18411a5e312cd9d4e8b4383c0164f5a4db68c632fbd31918f2a304b25e9f4fb8d63ff88520c3628bd41a210a99416fb48fa5076901f8b7f9cdf746be7caffead19fcdd8a40431fe4a62645f77a1ee7bb90c3121a2f35288c62044a3356d14be1e85cdac143fba07bd22f86b62e9f1723338928db9d3bb53a7", 0xce}, {&(0x7f0000000800)="6037eb48f6485eec8959613561f4a072e6df2146f7c4f200fe842c1d6b52ce8a32626a9a3caf5de1f4d054f78cb12e6cd2d4557d081183f6e1047693fa05d171bad0767ba586ea8517b3fd285a942efc316bb69b694f84638ec26bf3fd9b175b10e529bbd24de9237f6b2770a080141a931b5f92c6d140bcec754aa9e53cf99789bd9417f6c3ef250b5dfe3fd7f3f36412ba225349091ae149a59e4f67018aa219870eec4db89e4e407b4bfdca51415581aab53878b5cb417c6bdce3cbbfa159fbb1a9bdfa77a2", 0xc7}, {&(0x7f0000000280)="df360684294c864fc5c48f89fecdd02ae57acf7ff2caa46cb6db9c468e9c72753df91b7db05b7bd7ce31a609556f1fbae86efd46497f42892e9f7969dc7bcce5f32bc1a32079bfffdba2299ad39d5b76c10f904e0c16d5c0a4e5f317994ab568026c59ed3c96db621796908e10f924c25302c6b6de4f6969f90ed5", 0x7b}], 0x6, &(0x7f0000000680)}, 0x14050) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 243.080756][ T9431] kmem_cache_alloc_trace+0x55/0x3d0 [ 243.086090][ T9431] sctp_add_bind_addr+0x93/0x3d0 [ 243.091054][ T9431] sctp_copy_local_addr_list+0x325/0x4f0 [ 243.096713][ T9431] ? sctp_v4_get_dst+0x11d0/0x11d0 [ 243.101848][ T9431] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 243.108116][ T9431] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 243.114037][ T9431] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 243.119973][ T9431] sctp_bind_addr_copy+0xde/0x460 [ 243.125028][ T9431] sctp_connect_new_asoc+0x1cd/0x770 [ 243.130344][ T9431] ? sctp_bind+0x110/0x110 [ 243.134791][ T9431] ? __local_bh_enable_ip+0xa0/0x120 [ 243.140097][ T9431] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 243.146362][ T9431] ? security_sctp_bind_connect+0x8f/0xc0 [ 243.152114][ T9431] sctp_sendmsg+0x13ce/0x1d40 [ 243.156828][ T9431] ? sctp_setsockopt+0xa9b0/0xa9b0 [ 243.161983][ T9431] ? aa_af_perm+0x230/0x230 [ 243.166508][ T9431] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 243.172772][ T9431] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 243.179045][ T9431] inet_sendmsg+0x99/0xe0 [ 243.183403][ T9431] ? inet_send_prepare+0x4e0/0x4e0 [ 243.188531][ T9431] sock_sendmsg+0xcf/0x120 [ 243.192972][ T9431] ____sys_sendmsg+0x331/0x810 [ 243.197762][ T9431] ? kernel_sendmsg+0x50/0x50 [ 243.202630][ T9431] ? do_recvmmsg+0x6d0/0x6d0 [ 243.207236][ T9431] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 243.213256][ T9431] ___sys_sendmsg+0xf3/0x170 [ 243.217867][ T9431] ? sendmsg_copy_msghdr+0x160/0x160 [ 243.223174][ T9431] ? lock_downgrade+0x6e0/0x6e0 [ 243.228042][ T9431] ? lock_chain_count+0x20/0x20 10:51:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0xfffffffffffffd6b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) [ 243.232943][ T9431] ? __fget_light+0xea/0x280 [ 243.237550][ T9431] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 243.244082][ T9431] __sys_sendmmsg+0x195/0x470 [ 243.248784][ T9431] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 243.253825][ T9431] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 243.259846][ T9431] ? __context_tracking_exit+0xb8/0xe0 [ 243.265323][ T9431] ? lock_downgrade+0x6e0/0x6e0 [ 243.270201][ T9431] ? lock_downgrade+0x6e0/0x6e0 [ 243.275095][ T9431] __x64_sys_sendmmsg+0x99/0x100 [ 243.280054][ T9431] ? syscall_enter_from_user_mode+0x21/0x70 [ 243.285975][ T9431] do_syscall_64+0x35/0xb0 [ 243.290413][ T9431] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 243.296338][ T9431] RIP: 0033:0x7f418ec2c059 [ 243.300768][ T9431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 243.320413][ T9431] RSP: 002b:00007f418d5a1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 243.328846][ T9431] RAX: ffffffffffffffda RBX: 00007f418ed3ef60 RCX: 00007f418ec2c059 [ 243.336837][ T9431] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 243.344825][ T9431] RBP: 00007f418d5a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 243.352806][ T9431] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000002 [ 243.360812][ T9431] R13: 00007fffc27f099f R14: 00007f418d5a1300 R15: 0000000000022000 [ 243.368819][ T9431] 10:51:11 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x900, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 243.375423][ T25] audit: type=1804 audit(1645786271.179:205): pid=9448 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/155/memory.events" dev="sda1" ino=1177 res=1 errno=0 [ 243.406539][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 10:51:11 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 14) 10:51:11 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0xa00, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 243.479840][ T25] audit: type=1804 audit(1645786271.249:206): pid=9458 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/155/memory.events" dev="sda1" ino=1177 res=1 errno=0 10:51:11 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt(r5, 0x1, 0x9c, &(0x7f0000000380)="d3cc9e8627ebd3a299e116e6210981d341432fb6710d55f44d05e010c75dc6a730410ecfdee90bfe9afdf2b68a38a5bfdf9d5c98b5d922b7e92d50b74057e8e2c6a749a02ee1e09dc833061202b3e1f3c6039228a9bd5aa407cd244cc9d64570d25b94a592a87c56e3a5b09f57f3145885779acae06c9a58658f0b360e0844bfe9ad41f77377a18c750b71f4ad83b7c43b5ef125383b3e08f0c98c9e917104f020361c5e3b2438dec91125be2141385bdc2d4668edf053679b697c78b8ec9b9e1f43983e19", 0xc5) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:51:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) (rerun: 32) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000400000000000000140002006e657464657673696d300000000000004afff91c65a4fdc46a22654edb5dd719544b0b45d60d9efb191afca8bf84f41e39dd7c71ffee6b3cdb7bf7553898e8bca53f3428b6298e0000008000000000df3d8e6e5be09f4b68f503630fb17ec1485eaef5a5be5b9c046bfed3791335fc2a47f507db5f8f879832538c74730970a97e1ee01e9b6287265867d4de9d26bbca5f470ae5401f676d5d201b611219023252084031126439728bead15c9773050ea175a9b0ac2f03915d6c2de78bd898cd231c779722ba9c0a61fdaeed53faf0e537a5f36eeafdce8f0e"], 0x2c}}, 0x0) (async) pipe(&(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='\x00'/16, @ANYRES32=r6, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 32) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="65727370616e30000c00040000000000f31ef98a265c276b0ce46192bf9640576afab6ae1d34d1f3dd0f6c8c7dde95c1c1429690678aae9e0baeb39df0880c140857f66222ed2d336d3d87e1341ebe8f787db3e86a84d6b61a5ebff1598fb9a971516edaae6f3c288175a57cadefec3b04d35d764f41ca721ab7ed30af0a85b28fe9c2424618762f88b804aba01844f1cab84f9f018be0f888024a4d2919c673a086207addc5269ccf0aa6239cecc96f010af2f61054fd3fadb83e25c0d0bf52359ca3fc486141b1b83c256974851124d896a3", @ANYRES32=r7, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="48010000", @ANYRES16=r2, @ANYBLOB="100027bd7000fcdbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="2c01028040000100240001006c625f74785f686173685f746f5f706f050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="00000000b2c100f1ec00000000000000000005000200060000000400040008000600000000000000000000191f06c975237a", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400fbffffff3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRESOCT=r0, @ANYBLOB="3a7f0f5386a9b0edf2867f1d979e317d9797892566799cf3a67aea21d967fd5d3303f626a1358b1de9c34bbd3ce2fbe9d2f278853c667a1933b21aacbb9cefda1a5752c7ca58df9edc01d4bc08c6272b18aaa3270f2a8df27fe1665ee699f1d0f8ec04d7fb8519965b5bf3270d72b9305ebc47ec742918349c0f5c7e44864c1a77dce3210791ae8adacb126c293908cbb33f0794d5f2d4a6cf02f3747ffba322b8ac91fe70aad6e17c87058f8080b1ffc3fc49aa0b1c5c1ede4a3dab1a1e1b7a55ed55f028"], 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e0000000", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fbdbdf250300000005000300080000000500020006000000500001801400020076657468315f766972745f77696669001400020074756e6c30000000000000000000000008000300030000001400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="0500030040000000440001801400020077673200000000000000000000000000080003000200000008000300000000001400020073797a6b616c6c65723100000000000008000100", @ANYRES32=r6, @ANYBLOB="05000200bd000000050002000800000005000500790000000500030005000000957aedcba539aa9757c5232d611f2a446699965566e65a16839ab0af970b8b545006367749d5e63e3309788f1228b0c6c60d6c"], 0xe0}, 0x1, 0x0, 0x0, 0x4081}, 0x2000054) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100697036767469000018000280148004002001000000000000000000000000000208000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000180)=0x1, 0x4) 10:51:11 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0xf00, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x7400) 10:51:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socket(0x0, 0x0, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async, rerun: 32) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) (async, rerun: 32) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0xfffffffffffffd6b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) (async) sendmmsg(0xffffffffffffffff, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) (async) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 10:51:11 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x1f00, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 243.637914][ T9472] FAULT_INJECTION: forcing a failure. [ 243.637914][ T9472] name failslab, interval 1, probability 0, space 0, times 0 [ 243.683092][ T9472] CPU: 1 PID: 9472 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 243.693548][ T9472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.703618][ T9472] Call Trace: [ 243.706919][ T9472] [ 243.709848][ T9472] dump_stack_lvl+0xcd/0x134 [ 243.714460][ T9472] should_fail.cold+0x5/0xa [ 243.718993][ T9472] ? sctp_add_bind_addr+0x93/0x3d0 [ 243.724124][ T9472] should_failslab+0x5/0x10 [ 243.728650][ T9472] kmem_cache_alloc_trace+0x55/0x3d0 [ 243.733966][ T9472] sctp_add_bind_addr+0x93/0x3d0 [ 243.738933][ T9472] sctp_copy_local_addr_list+0x325/0x4f0 [ 243.744599][ T9472] ? sctp_v4_get_dst+0x11d0/0x11d0 [ 243.749738][ T9472] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 243.756006][ T9472] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 243.761932][ T9472] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 243.767864][ T9472] sctp_bind_addr_copy+0xde/0x460 [ 243.772923][ T9472] sctp_connect_new_asoc+0x1cd/0x770 [ 243.778234][ T9472] ? sctp_bind+0x110/0x110 [ 243.782675][ T9472] ? __local_bh_enable_ip+0xa0/0x120 [ 243.787985][ T9472] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 243.794253][ T9472] ? security_sctp_bind_connect+0x8f/0xc0 [ 243.799993][ T9472] sctp_sendmsg+0x13ce/0x1d40 [ 243.804703][ T9472] ? sctp_setsockopt+0xa9b0/0xa9b0 [ 243.809861][ T9472] ? aa_af_perm+0x230/0x230 [ 243.814389][ T9472] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 243.820660][ T9472] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 243.826936][ T9472] inet_sendmsg+0x99/0xe0 [ 243.831293][ T9472] ? inet_send_prepare+0x4e0/0x4e0 [ 243.836431][ T9472] sock_sendmsg+0xcf/0x120 [ 243.841207][ T9472] ____sys_sendmsg+0x331/0x810 [ 243.845973][ T9472] ? kernel_sendmsg+0x50/0x50 [ 243.850649][ T9472] ? do_recvmmsg+0x6d0/0x6d0 [ 243.855237][ T9472] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 243.861232][ T9472] ___sys_sendmsg+0xf3/0x170 [ 243.865820][ T9472] ? sendmsg_copy_msghdr+0x160/0x160 [ 243.871106][ T9472] ? lock_downgrade+0x6e0/0x6e0 [ 243.875955][ T9472] ? lock_chain_count+0x20/0x20 [ 243.880825][ T9472] ? __fget_light+0xea/0x280 [ 243.885415][ T9472] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 243.891662][ T9472] __sys_sendmmsg+0x195/0x470 [ 243.896343][ T9472] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 243.901368][ T9472] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 243.907367][ T9472] ? __context_tracking_exit+0xb8/0xe0 [ 243.912824][ T9472] ? lock_downgrade+0x6e0/0x6e0 [ 243.917681][ T9472] ? lock_downgrade+0x6e0/0x6e0 [ 243.922547][ T9472] __x64_sys_sendmmsg+0x99/0x100 [ 243.927481][ T9472] ? syscall_enter_from_user_mode+0x21/0x70 [ 243.933462][ T9472] do_syscall_64+0x35/0xb0 [ 243.937886][ T9472] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 243.943782][ T9472] RIP: 0033:0x7f418ec2c059 [ 243.948195][ T9472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 243.967798][ T9472] RSP: 002b:00007f418d5a1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 243.976218][ T9472] RAX: ffffffffffffffda RBX: 00007f418ed3ef60 RCX: 00007f418ec2c059 10:51:11 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) (async, rerun: 32) socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt(r5, 0x1, 0x9c, &(0x7f0000000380)="d3cc9e8627ebd3a299e116e6210981d341432fb6710d55f44d05e010c75dc6a730410ecfdee90bfe9afdf2b68a38a5bfdf9d5c98b5d922b7e92d50b74057e8e2c6a749a02ee1e09dc833061202b3e1f3c6039228a9bd5aa407cd244cc9d64570d25b94a592a87c56e3a5b09f57f3145885779acae06c9a58658f0b360e0844bfe9ad41f77377a18c750b71f4ad83b7c43b5ef125383b3e08f0c98c9e917104f020361c5e3b2438dec91125be2141385bdc2d4668edf053679b697c78b8ec9b9e1f43983e19", 0xc5) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 243.984191][ T9472] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 243.992166][ T9472] RBP: 00007f418d5a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 244.000143][ T9472] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000002 [ 244.008116][ T9472] R13: 00007fffc27f099f R14: 00007f418d5a1300 R15: 0000000000022000 [ 244.016100][ T9472] 10:51:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) (rerun: 64) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000400000000000000140002006e657464657673696d300000000000004afff91c65a4fdc46a22654edb5dd719544b0b45d60d9efb191afca8bf84f41e39dd7c71ffee6b3cdb7bf7553898e8bca53f3428b6298e0000008000000000df3d8e6e5be09f4b68f503630fb17ec1485eaef5a5be5b9c046bfed3791335fc2a47f507db5f8f879832538c74730970a97e1ee01e9b6287265867d4de9d26bbca5f470ae5401f676d5d201b611219023252084031126439728bead15c9773050ea175a9b0ac2f03915d6c2de78bd898cd231c779722ba9c0a61fdaeed53faf0e537a5f36eeafdce8f0e"], 0x2c}}, 0x0) (async) pipe(&(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='\x00'/16, @ANYRES32=r6, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="65727370616e30000c00040000000000f31ef98a265c276b0ce46192bf9640576afab6ae1d34d1f3dd0f6c8c7dde95c1c1429690678aae9e0baeb39df0880c140857f66222ed2d336d3d87e1341ebe8f787db3e86a84d6b61a5ebff1598fb9a971516edaae6f3c288175a57cadefec3b04d35d764f41ca721ab7ed30af0a85b28fe9c2424618762f88b804aba01844f1cab84f9f018be0f888024a4d2919c673a086207addc5269ccf0aa6239cecc96f010af2f61054fd3fadb83e25c0d0bf52359ca3fc486141b1b83c256974851124d896a3", @ANYRES32=r7, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="48010000", @ANYRES16=r2, @ANYBLOB="100027bd7000fcdbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="2c01028040000100240001006c625f74785f686173685f746f5f706f050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="00000000b2c100f1ec00000000000000000005000200060000000400040008000600000000000000000000191f06c975237a", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400fbffffff3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRESOCT=r0, @ANYBLOB="3a7f0f5386a9b0edf2867f1d979e317d9797892566799cf3a67aea21d967fd5d3303f626a1358b1de9c34bbd3ce2fbe9d2f278853c667a1933b21aacbb9cefda1a5752c7ca58df9edc01d4bc08c6272b18aaa3270f2a8df27fe1665ee699f1d0f8ec04d7fb8519965b5bf3270d72b9305ebc47ec742918349c0f5c7e44864c1a77dce3210791ae8adacb126c293908cbb33f0794d5f2d4a6cf02f3747ffba322b8ac91fe70aad6e17c87058f8080b1ffc3fc49aa0b1c5c1ede4a3dab1a1e1b7a55ed55f028"], 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e0000000", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fbdbdf250300000005000300080000000500020006000000500001801400020076657468315f766972745f77696669001400020074756e6c30000000000000000000000008000300030000001400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="0500030040000000440001801400020077673200000000000000000000000000080003000200000008000300000000001400020073797a6b616c6c65723100000000000008000100", @ANYRES32=r6, @ANYBLOB="05000200bd000000050002000800000005000500790000000500030005000000957aedcba539aa9757c5232d611f2a446699965566e65a16839ab0af970b8b545006367749d5e63e3309788f1228b0c6c60d6c"], 0xe0}, 0x1, 0x0, 0x0, 0x4081}, 0x2000054) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100697036767469000018000280148004002001000000000000000000000000000208000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000180)=0x1, 0x4) 10:51:12 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x2000, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:12 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 15) 10:51:12 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x2c01, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:12 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt(r5, 0x1, 0x9c, &(0x7f0000000380)="d3cc9e8627ebd3a299e116e6210981d341432fb6710d55f44d05e010c75dc6a730410ecfdee90bfe9afdf2b68a38a5bfdf9d5c98b5d922b7e92d50b74057e8e2c6a749a02ee1e09dc833061202b3e1f3c6039228a9bd5aa407cd244cc9d64570d25b94a592a87c56e3a5b09f57f3145885779acae06c9a58658f0b360e0844bfe9ad41f77377a18c750b71f4ad83b7c43b5ef125383b3e08f0c98c9e917104f020361c5e3b2438dec91125be2141385bdc2d4668edf053679b697c78b8ec9b9e1f43983e19", 0xc5) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 244.270721][ T9511] FAULT_INJECTION: forcing a failure. [ 244.270721][ T9511] name failslab, interval 1, probability 0, space 0, times 0 [ 244.277707][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.347545][ T9511] CPU: 0 PID: 9511 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 244.358002][ T9511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.368075][ T9511] Call Trace: [ 244.371363][ T9511] [ 244.374307][ T9511] dump_stack_lvl+0xcd/0x134 [ 244.378931][ T9511] should_fail.cold+0x5/0xa [ 244.383466][ T9511] ? sctp_add_bind_addr+0x93/0x3d0 [ 244.388592][ T9511] should_failslab+0x5/0x10 [ 244.393123][ T9511] kmem_cache_alloc_trace+0x55/0x3d0 [ 244.398439][ T9511] sctp_add_bind_addr+0x93/0x3d0 [ 244.403412][ T9511] sctp_copy_local_addr_list+0x325/0x4f0 [ 244.409073][ T9511] ? sctp_v4_get_dst+0x11d0/0x11d0 [ 244.414212][ T9511] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 244.420480][ T9511] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 244.426405][ T9511] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 244.432334][ T9511] sctp_bind_addr_copy+0xde/0x460 [ 244.437403][ T9511] sctp_connect_new_asoc+0x1cd/0x770 [ 244.442718][ T9511] ? sctp_bind+0x110/0x110 [ 244.447491][ T9511] ? __local_bh_enable_ip+0xa0/0x120 [ 244.452808][ T9511] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 244.459079][ T9511] ? security_sctp_bind_connect+0x8f/0xc0 [ 244.464827][ T9511] sctp_sendmsg+0x13ce/0x1d40 [ 244.469544][ T9511] ? sctp_setsockopt+0xa9b0/0xa9b0 [ 244.474702][ T9511] ? aa_af_perm+0x230/0x230 [ 244.479233][ T9511] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 244.485504][ T9511] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 244.491783][ T9511] inet_sendmsg+0x99/0xe0 [ 244.496137][ T9511] ? inet_send_prepare+0x4e0/0x4e0 [ 244.501272][ T9511] sock_sendmsg+0xcf/0x120 [ 244.505715][ T9511] ____sys_sendmsg+0x331/0x810 [ 244.510509][ T9511] ? kernel_sendmsg+0x50/0x50 [ 244.515208][ T9511] ? do_recvmmsg+0x6d0/0x6d0 [ 244.519817][ T9511] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 244.525842][ T9511] ___sys_sendmsg+0xf3/0x170 [ 244.530459][ T9511] ? sendmsg_copy_msghdr+0x160/0x160 [ 244.535770][ T9511] ? lock_downgrade+0x6e0/0x6e0 [ 244.540644][ T9511] ? lock_chain_count+0x20/0x20 [ 244.545564][ T9511] ? __fget_light+0xea/0x280 [ 244.550179][ T9511] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 244.556456][ T9511] __sys_sendmmsg+0x195/0x470 [ 244.561160][ T9511] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 244.566207][ T9511] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 244.572234][ T9511] ? __context_tracking_exit+0xb8/0xe0 [ 244.577719][ T9511] ? lock_downgrade+0x6e0/0x6e0 [ 244.582603][ T9511] ? lock_downgrade+0x6e0/0x6e0 [ 244.587501][ T9511] __x64_sys_sendmmsg+0x99/0x100 [ 244.592462][ T9511] ? syscall_enter_from_user_mode+0x21/0x70 [ 244.598381][ T9511] do_syscall_64+0x35/0xb0 [ 244.602829][ T9511] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 244.608746][ T9511] RIP: 0033:0x7f418ec2c059 [ 244.613176][ T9511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 244.632806][ T9511] RSP: 002b:00007f418d5a1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 10:51:12 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000000000000d000100000000000000000000480cf73cb6125d0d76cecface967905d2d6e22eb6ce54be60bfefd021b7b34c43a3c0ab56de872d2fc40d139d9e8ccacd902d11accd136b3d8ee11952d213d59d45b6790561140a510a7479392ef582477599e80afcf1e34aa0f6d0564e4f0a0c66cea2e42abe76ce2b48e0ad3903381d1c6149c6d15aa00b0e2350e4ff1b8090595000400000000000000000000000000000000970d75b332da1ae4c1cbb0af22216cc5e5e1b1bbb8285a2c5011e10fd2b40a7c36a40164395680a93eba5db8dd", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) close(0xffffffffffffffff) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 244.641242][ T9511] RAX: ffffffffffffffda RBX: 00007f418ed3ef60 RCX: 00007f418ec2c059 [ 244.649232][ T9511] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 244.657218][ T9511] RBP: 00007f418d5a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 244.665208][ T9511] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000002 [ 244.673195][ T9511] R13: 00007fffc27f099f R14: 00007f418d5a1300 R15: 0000000000022000 [ 244.681202][ T9511] 10:51:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socket(0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0xfffffffffffffd6b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) (async) sendmmsg(0xffffffffffffffff, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) (async) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 10:51:12 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 16) [ 244.729540][ T25] audit: type=1804 audit(1645786272.559:207): pid=9500 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/156/memory.events" dev="sda1" ino=1173 res=1 errno=0 10:51:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x7a00) [ 244.867882][ T25] audit: type=1800 audit(1645786272.559:208): pid=9500 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=1173 res=0 errno=0 10:51:12 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x3f00, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:12 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x2c01, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x6c00) [ 244.898217][ T25] audit: type=1804 audit(1645786272.589:209): pid=9501 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/156/memory.events" dev="sda1" ino=1173 res=1 errno=0 [ 244.917882][ T9544] FAULT_INJECTION: forcing a failure. [ 244.917882][ T9544] name failslab, interval 1, probability 0, space 0, times 0 10:51:12 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000000000000d000100000000000000000000480cf73cb6125d0d76cecface967905d2d6e22eb6ce54be60bfefd021b7b34c43a3c0ab56de872d2fc40d139d9e8ccacd902d11accd136b3d8ee11952d213d59d45b6790561140a510a7479392ef582477599e80afcf1e34aa0f6d0564e4f0a0c66cea2e42abe76ce2b48e0ad3903381d1c6149c6d15aa00b0e2350e4ff1b8090595000400000000000000000000000000000000970d75b332da1ae4c1cbb0af22216cc5e5e1b1bbb8285a2c5011e10fd2b40a7c36a40164395680a93eba5db8dd", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) (async, rerun: 32) shutdown(0xffffffffffffffff, 0x1) (rerun: 32) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) (async) close(0xffffffffffffffff) (async, rerun: 64) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async, rerun: 64) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) (rerun: 64) 10:51:12 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x4000, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 245.016880][ T25] audit: type=1800 audit(1645786272.589:210): pid=9501 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=1173 res=0 errno=0 [ 245.046810][ T9544] CPU: 0 PID: 9544 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 245.057274][ T9544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.067350][ T9544] Call Trace: [ 245.070639][ T9544] [ 245.073581][ T9544] dump_stack_lvl+0xcd/0x134 [ 245.078198][ T9544] should_fail.cold+0x5/0xa [ 245.082740][ T9544] ? sctp_add_bind_addr+0x93/0x3d0 [ 245.087874][ T9544] should_failslab+0x5/0x10 [ 245.092397][ T9544] kmem_cache_alloc_trace+0x55/0x3d0 [ 245.097720][ T9544] sctp_add_bind_addr+0x93/0x3d0 [ 245.102688][ T9544] sctp_copy_local_addr_list+0x325/0x4f0 [ 245.108343][ T9544] ? sctp_v4_get_dst+0x11d0/0x11d0 [ 245.113478][ T9544] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 245.119743][ T9544] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 245.125664][ T9544] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 245.131588][ T9544] sctp_bind_addr_copy+0xde/0x460 [ 245.136641][ T9544] sctp_connect_new_asoc+0x1cd/0x770 [ 245.142298][ T9544] ? sctp_bind+0x110/0x110 [ 245.146743][ T9544] ? __local_bh_enable_ip+0xa0/0x120 [ 245.152059][ T9544] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 245.158333][ T9544] ? security_sctp_bind_connect+0x8f/0xc0 [ 245.164079][ T9544] sctp_sendmsg+0x13ce/0x1d40 [ 245.168798][ T9544] ? sctp_setsockopt+0xa9b0/0xa9b0 [ 245.173946][ T9544] ? aa_af_perm+0x230/0x230 [ 245.178474][ T9544] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 245.184744][ T9544] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 245.191021][ T9544] inet_sendmsg+0x99/0xe0 [ 245.195379][ T9544] ? inet_send_prepare+0x4e0/0x4e0 [ 245.200512][ T9544] sock_sendmsg+0xcf/0x120 [ 245.204952][ T9544] ____sys_sendmsg+0x331/0x810 [ 245.209743][ T9544] ? kernel_sendmsg+0x50/0x50 [ 245.214437][ T9544] ? do_recvmmsg+0x6d0/0x6d0 [ 245.219044][ T9544] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 245.225065][ T9544] ___sys_sendmsg+0xf3/0x170 [ 245.229679][ T9544] ? sendmsg_copy_msghdr+0x160/0x160 [ 245.231764][ T25] audit: type=1804 audit(1645786272.879:211): pid=9563 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3056829688/syzkaller.0VW25A/192/memory.events" dev="sda1" ino=1182 res=1 errno=0 [ 245.234986][ T9544] ? lock_downgrade+0x6e0/0x6e0 [ 245.235017][ T9544] ? lock_chain_count+0x20/0x20 [ 245.235076][ T9544] ? __fget_light+0xea/0x280 [ 245.235104][ T9544] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 245.235139][ T9544] __sys_sendmmsg+0x195/0x470 [ 245.235169][ T9544] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 245.235194][ T9544] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 245.235244][ T9544] ? __context_tracking_exit+0xb8/0xe0 [ 245.235271][ T9544] ? lock_downgrade+0x6e0/0x6e0 [ 245.235305][ T9544] ? lock_downgrade+0x6e0/0x6e0 [ 245.235353][ T9544] __x64_sys_sendmmsg+0x99/0x100 [ 245.235378][ T9544] ? syscall_enter_from_user_mode+0x21/0x70 [ 245.235406][ T9544] do_syscall_64+0x35/0xb0 [ 245.235437][ T9544] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 245.235466][ T9544] RIP: 0033:0x7f418ec2c059 [ 245.235488][ T9544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 245.235513][ T9544] RSP: 002b:00007f418d5a1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 245.235540][ T9544] RAX: ffffffffffffffda RBX: 00007f418ed3ef60 RCX: 00007f418ec2c059 [ 245.235557][ T9544] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 245.322420][ T25] audit: type=1804 audit(1645786272.879:212): pid=9562 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3056829688/syzkaller.0VW25A/192/memory.events" dev="sda1" ino=1182 res=1 errno=0 [ 245.323550][ T9544] RBP: 00007f418d5a11d0 R08: 0000000000000000 R09: 0000000000000000 10:51:13 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 17) 10:51:13 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x6000, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 245.323570][ T9544] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000002 [ 245.323587][ T9544] R13: 00007fffc27f099f R14: 00007f418d5a1300 R15: 0000000000022000 [ 245.323625][ T9544] 10:51:13 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000000000000d000100000000000000000000480cf73cb6125d0d76cecface967905d2d6e22eb6ce54be60bfefd021b7b34c43a3c0ab56de872d2fc40d139d9e8ccacd902d11accd136b3d8ee11952d213d59d45b6790561140a510a7479392ef582477599e80afcf1e34aa0f6d0564e4f0a0c66cea2e42abe76ce2b48e0ad3903381d1c6149c6d15aa00b0e2350e4ff1b8090595000400000000000000000000000000000000970d75b332da1ae4c1cbb0af22216cc5e5e1b1bbb8285a2c5011e10fd2b40a7c36a40164395680a93eba5db8dd", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) close(0xffffffffffffffff) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000000000000d000100000000000000000000480cf73cb6125d0d76cecface967905d2d6e22eb6ce54be60bfefd021b7b34c43a3c0ab56de872d2fc40d139d9e8ccacd902d11accd136b3d8ee11952d213d59d45b6790561140a510a7479392ef582477599e80afcf1e34aa0f6d0564e4f0a0c66cea2e42abe76ce2b48e0ad3903381d1c6149c6d15aa00b0e2350e4ff1b8090595000400000000000000000000000000000000970d75b332da1ae4c1cbb0af22216cc5e5e1b1bbb8285a2c5011e10fd2b40a7c36a40164395680a93eba5db8dd", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) shutdown(0xffffffffffffffff, 0x1) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) (async) close(0xffffffffffffffff) (async) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) (async) 10:51:13 executing program 5: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)={0x20000000}) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {0xffffffffffffffff, 0x4b57, 0x64}], 0x5, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 10:51:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002200000000000000000000000a00000600000000000000006d5e454c4db922876484531badde605e5c1b1ec58baa14ae2e59a26553a804cbcedfa23d64fe5770da58723645251aeac68c510417c49468b35d963370c09fed1746c62dfeb47e32fb31d3693416ed52fff38a7139bb1ee32678628ce1b7bf90f293bcb50572d0fee6b4b70bf318d35ab6ab19806ecfb331c7"], 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newlink={0x38, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10}]}]}]}, 0x38}}, 0x0) r6 = accept(r4, &(0x7f0000000240)=@generic, &(0x7f00000000c0)=0x80) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x108, r7, 0xd583798da5464e37, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8001}, {0xc, 0x90, 0x7f}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x80000000}, {0xc, 0x90, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0xfffffffffffffffb}, {0xc}}]}, 0x108}, 0x1, 0x0, 0x0, 0x89}, 0x6048005) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r6) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r9, 0x400, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x800) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 245.521306][ T9566] FAULT_INJECTION: forcing a failure. [ 245.521306][ T9566] name failslab, interval 1, probability 0, space 0, times 0 [ 245.587184][ T9566] CPU: 1 PID: 9566 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 245.597759][ T9566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.607831][ T9566] Call Trace: [ 245.611119][ T9566] [ 245.614062][ T9566] dump_stack_lvl+0xcd/0x134 [ 245.618682][ T9566] should_fail.cold+0x5/0xa [ 245.623211][ T9566] ? sctp_add_bind_addr+0x93/0x3d0 [ 245.628346][ T9566] should_failslab+0x5/0x10 10:51:13 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x80fe, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 245.632867][ T9566] kmem_cache_alloc_trace+0x55/0x3d0 [ 245.638786][ T9566] sctp_add_bind_addr+0x93/0x3d0 [ 245.643751][ T9566] sctp_copy_local_addr_list+0x325/0x4f0 [ 245.649412][ T9566] ? sctp_v4_get_dst+0x11d0/0x11d0 [ 245.654550][ T9566] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 245.660840][ T9566] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 245.666760][ T9566] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 245.672685][ T9566] sctp_bind_addr_copy+0xde/0x460 [ 245.677744][ T9566] sctp_connect_new_asoc+0x1cd/0x770 [ 245.683055][ T9566] ? sctp_bind+0x110/0x110 [ 245.683804][ T9574] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 245.687489][ T9566] ? __local_bh_enable_ip+0xa0/0x120 [ 245.702026][ T9566] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 245.708295][ T9566] ? security_sctp_bind_connect+0x8f/0xc0 [ 245.714040][ T9566] sctp_sendmsg+0x13ce/0x1d40 [ 245.718744][ T9566] ? sctp_setsockopt+0xa9b0/0xa9b0 [ 245.723890][ T9566] ? aa_af_perm+0x230/0x230 [ 245.728415][ T9566] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 10:51:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0xff00) [ 245.734682][ T9566] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 245.740953][ T9566] inet_sendmsg+0x99/0xe0 [ 245.745303][ T9566] ? inet_send_prepare+0x4e0/0x4e0 [ 245.750447][ T9566] sock_sendmsg+0xcf/0x120 [ 245.754888][ T9566] ____sys_sendmsg+0x331/0x810 [ 245.759680][ T9566] ? kernel_sendmsg+0x50/0x50 [ 245.764382][ T9566] ? do_recvmmsg+0x6d0/0x6d0 [ 245.768993][ T9566] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 245.775020][ T9566] ___sys_sendmsg+0xf3/0x170 [ 245.779637][ T9566] ? sendmsg_copy_msghdr+0x160/0x160 [ 245.784951][ T9566] ? lock_downgrade+0x6e0/0x6e0 [ 245.789824][ T9566] ? lock_chain_count+0x20/0x20 [ 245.794731][ T9566] ? __fget_light+0xea/0x280 [ 245.799351][ T9566] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 245.805625][ T9566] __sys_sendmmsg+0x195/0x470 [ 245.810336][ T9566] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 245.815379][ T9566] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 245.821405][ T9566] ? __context_tracking_exit+0xb8/0xe0 [ 245.826885][ T9566] ? lock_downgrade+0x6e0/0x6e0 [ 245.831762][ T9566] ? lock_downgrade+0x6e0/0x6e0 [ 245.836653][ T9566] __x64_sys_sendmmsg+0x99/0x100 [ 245.841610][ T9566] ? syscall_enter_from_user_mode+0x21/0x70 [ 245.847517][ T9566] do_syscall_64+0x35/0xb0 [ 245.851957][ T9566] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 245.857871][ T9566] RIP: 0033:0x7f418ec2c059 [ 245.862296][ T9566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 10:51:13 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, &(0x7f0000000080)=0x27a, 0x4) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) connect$llc(0xffffffffffffffff, &(0x7f0000000280)={0x1a, 0x118, 0xaa, 0x6, 0xff, 0x80, @random="2506228b59c3"}, 0x10) [ 245.881921][ T9566] RSP: 002b:00007f418d5a1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 245.890356][ T9566] RAX: ffffffffffffffda RBX: 00007f418ed3ef60 RCX: 00007f418ec2c059 [ 245.898347][ T9566] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 245.906336][ T9566] RBP: 00007f418d5a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 245.914328][ T9566] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000002 [ 245.922314][ T9566] R13: 00007fffc27f099f R14: 00007f418d5a1300 R15: 0000000000022000 [ 245.930325][ T9566] 10:51:13 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0xc0fe, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:13 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 18) 10:51:13 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, &(0x7f0000000080)=0x27a, 0x4) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) connect$llc(0xffffffffffffffff, &(0x7f0000000280)={0x1a, 0x118, 0xaa, 0x6, 0xff, 0x80, @random="2506228b59c3"}, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, &(0x7f0000000080)=0x27a, 0x4) (async) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) (async) connect$llc(0xffffffffffffffff, &(0x7f0000000280)={0x1a, 0x118, 0xaa, 0x6, 0xff, 0x80, @random="2506228b59c3"}, 0x10) (async) 10:51:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002200000000000000000000000a00000600000000000000006d5e454c4db922876484531badde605e5c1b1ec58baa14ae2e59a26553a804cbcedfa23d64fe5770da58723645251aeac68c510417c49468b35d963370c09fed1746c62dfeb47e32fb31d3693416ed52fff38a7139bb1ee32678628ce1b7bf90f293bcb50572d0fee6b4b70bf318d35ab6ab19806ecfb331c7"], 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newlink={0x38, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10}]}]}]}, 0x38}}, 0x0) r6 = accept(r4, &(0x7f0000000240)=@generic, &(0x7f00000000c0)=0x80) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x108, r7, 0xd583798da5464e37, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8001}, {0xc, 0x90, 0x7f}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x80000000}, {0xc, 0x90, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0xfffffffffffffffb}, {0xc}}]}, 0x108}, 0x1, 0x0, 0x0, 0x89}, 0x6048005) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r6) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r9, 0x400, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x800) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002200000000000000000000000a00000600000000000000006d5e454c4db922876484531badde605e5c1b1ec58baa14ae2e59a26553a804cbcedfa23d64fe5770da58723645251aeac68c510417c49468b35d963370c09fed1746c62dfeb47e32fb31d3693416ed52fff38a7139bb1ee32678628ce1b7bf90f293bcb50572d0fee6b4b70bf318d35ab6ab19806ecfb331c7"], 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newlink={0x38, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10}]}]}]}, 0x38}}, 0x0) (async) accept(r4, &(0x7f0000000240)=@generic, &(0x7f00000000c0)=0x80) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r3) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x108, r7, 0xd583798da5464e37, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8001}, {0xc, 0x90, 0x7f}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x80000000}, {0xc, 0x90, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0xfffffffffffffffb}, {0xc}}]}, 0x108}, 0x1, 0x0, 0x0, 0x89}, 0x6048005) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) socket$packet(0x11, 0x0, 0x300) (async) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r6) (async) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r9, 0x400, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x800) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) [ 246.155013][ T9604] FAULT_INJECTION: forcing a failure. [ 246.155013][ T9604] name failslab, interval 1, probability 0, space 0, times 0 10:51:14 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0xdc05, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1517f) [ 246.244439][ T9604] CPU: 1 PID: 9604 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 246.254894][ T9604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.264951][ T9604] Call Trace: [ 246.268225][ T9604] [ 246.271149][ T9604] dump_stack_lvl+0xcd/0x134 [ 246.275748][ T9604] should_fail.cold+0x5/0xa [ 246.280251][ T9604] ? sctp_add_bind_addr+0x93/0x3d0 [ 246.285358][ T9604] should_failslab+0x5/0x10 [ 246.289860][ T9604] kmem_cache_alloc_trace+0x55/0x3d0 [ 246.295148][ T9604] sctp_add_bind_addr+0x93/0x3d0 [ 246.300088][ T9604] sctp_copy_local_addr_list+0x325/0x4f0 [ 246.305723][ T9604] ? sctp_v4_get_dst+0x11d0/0x11d0 [ 246.310832][ T9604] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 246.317074][ T9604] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 246.322966][ T9604] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 246.328861][ T9604] sctp_bind_addr_copy+0xde/0x460 [ 246.333885][ T9604] sctp_connect_new_asoc+0x1cd/0x770 [ 246.339174][ T9604] ? sctp_bind+0x110/0x110 [ 246.343592][ T9604] ? __local_bh_enable_ip+0xa0/0x120 [ 246.348875][ T9604] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 246.355128][ T9604] ? security_sctp_bind_connect+0x8f/0xc0 [ 246.360851][ T9604] sctp_sendmsg+0x13ce/0x1d40 [ 246.365532][ T9604] ? sctp_setsockopt+0xa9b0/0xa9b0 [ 246.370654][ T9604] ? aa_af_perm+0x230/0x230 [ 246.375157][ T9604] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 246.381488][ T9604] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 246.387736][ T9604] inet_sendmsg+0x99/0xe0 [ 246.392067][ T9604] ? inet_send_prepare+0x4e0/0x4e0 [ 246.397177][ T9604] sock_sendmsg+0xcf/0x120 [ 246.401594][ T9604] ____sys_sendmsg+0x331/0x810 [ 246.406356][ T9604] ? kernel_sendmsg+0x50/0x50 [ 246.411030][ T9604] ? do_recvmmsg+0x6d0/0x6d0 [ 246.415618][ T9604] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 246.421608][ T9604] ___sys_sendmsg+0xf3/0x170 [ 246.426194][ T9604] ? sendmsg_copy_msghdr+0x160/0x160 [ 246.431477][ T9604] ? lock_downgrade+0x6e0/0x6e0 [ 246.436325][ T9604] ? lock_chain_count+0x20/0x20 [ 246.441198][ T9604] ? __fget_light+0xea/0x280 [ 246.445784][ T9604] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 246.452029][ T9604] __sys_sendmmsg+0x195/0x470 [ 246.456708][ T9604] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 246.461725][ T9604] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 246.467722][ T9604] ? __context_tracking_exit+0xb8/0xe0 [ 246.473182][ T9604] ? lock_downgrade+0x6e0/0x6e0 [ 246.478034][ T9604] ? lock_downgrade+0x6e0/0x6e0 [ 246.482897][ T9604] __x64_sys_sendmmsg+0x99/0x100 [ 246.487828][ T9604] ? syscall_enter_from_user_mode+0x21/0x70 [ 246.493716][ T9604] do_syscall_64+0x35/0xb0 [ 246.498130][ T9604] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 246.504024][ T9604] RIP: 0033:0x7f418ec2c059 [ 246.508461][ T9604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 246.528066][ T9604] RSP: 002b:00007f418d5a1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 246.536490][ T9604] RAX: ffffffffffffffda RBX: 00007f418ed3ef60 RCX: 00007f418ec2c059 [ 246.544455][ T9604] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 246.552432][ T9604] RBP: 00007f418d5a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 246.560394][ T9604] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000002 [ 246.568356][ T9604] R13: 00007fffc27f099f R14: 00007f418d5a1300 R15: 0000000000022000 [ 246.576336][ T9604] 10:51:14 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async, rerun: 32) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, &(0x7f0000000080)=0x27a, 0x4) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) (async) connect$llc(0xffffffffffffffff, &(0x7f0000000280)={0x1a, 0x118, 0xaa, 0x6, 0xff, 0x80, @random="2506228b59c3"}, 0x10) [ 246.588557][ T9616] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:51:14 executing program 5: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x20000004}) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)={0x20000000}) (async, rerun: 32) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {0xffffffffffffffff, 0x4b57, 0x64}], 0x5, 0x0, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 10:51:14 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0xfc00, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 246.677355][ T9624] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:51:14 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 19) 10:51:14 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0xfc01, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 246.806435][ T9650] FAULT_INJECTION: forcing a failure. [ 246.806435][ T9650] name failslab, interval 1, probability 0, space 0, times 0 [ 246.839927][ T9650] CPU: 1 PID: 9650 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 246.850385][ T9650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.860458][ T9650] Call Trace: [ 246.863746][ T9650] [ 246.866686][ T9650] dump_stack_lvl+0xcd/0x134 [ 246.871301][ T9650] should_fail.cold+0x5/0xa [ 246.875830][ T9650] ? sctp_add_bind_addr+0x93/0x3d0 [ 246.880960][ T9650] should_failslab+0x5/0x10 [ 246.885484][ T9650] kmem_cache_alloc_trace+0x55/0x3d0 [ 246.890805][ T9650] sctp_add_bind_addr+0x93/0x3d0 [ 246.895767][ T9650] sctp_copy_local_addr_list+0x325/0x4f0 [ 246.901439][ T9650] ? sctp_v4_get_dst+0x11d0/0x11d0 [ 246.906571][ T9650] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 246.912841][ T9650] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 246.918762][ T9650] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 246.924774][ T9650] sctp_bind_addr_copy+0xde/0x460 [ 246.929823][ T9650] sctp_connect_new_asoc+0x1cd/0x770 [ 246.935160][ T9650] ? sctp_bind+0x110/0x110 [ 246.939609][ T9650] ? __local_bh_enable_ip+0xa0/0x120 [ 246.944918][ T9650] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 246.951190][ T9650] ? security_sctp_bind_connect+0x8f/0xc0 10:51:14 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0xfe80, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x40000) [ 246.956934][ T9650] sctp_sendmsg+0x13ce/0x1d40 [ 246.961646][ T9650] ? sctp_setsockopt+0xa9b0/0xa9b0 [ 246.966805][ T9650] ? aa_af_perm+0x230/0x230 [ 246.971329][ T9650] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 246.977600][ T9650] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 246.983873][ T9650] inet_sendmsg+0x99/0xe0 [ 246.988227][ T9650] ? inet_send_prepare+0x4e0/0x4e0 [ 246.993362][ T9650] sock_sendmsg+0xcf/0x120 [ 246.997806][ T9650] ____sys_sendmsg+0x331/0x810 [ 247.002597][ T9650] ? kernel_sendmsg+0x50/0x50 [ 247.007293][ T9650] ? do_recvmmsg+0x6d0/0x6d0 [ 247.011903][ T9650] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 247.017923][ T9650] ___sys_sendmsg+0xf3/0x170 [ 247.022536][ T9650] ? sendmsg_copy_msghdr+0x160/0x160 [ 247.027846][ T9650] ? lock_downgrade+0x6e0/0x6e0 [ 247.032715][ T9650] ? lock_chain_count+0x20/0x20 [ 247.037617][ T9650] ? __fget_light+0xea/0x280 [ 247.042225][ T9650] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 247.048492][ T9650] __sys_sendmmsg+0x195/0x470 [ 247.053196][ T9650] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 247.058235][ T9650] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 247.064255][ T9650] ? __context_tracking_exit+0xb8/0xe0 [ 247.069735][ T9650] ? lock_downgrade+0x6e0/0x6e0 [ 247.074610][ T9650] ? lock_downgrade+0x6e0/0x6e0 [ 247.079498][ T9650] __x64_sys_sendmmsg+0x99/0x100 [ 247.084454][ T9650] ? syscall_enter_from_user_mode+0x21/0x70 [ 247.090367][ T9650] do_syscall_64+0x35/0xb0 [ 247.094804][ T9650] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 247.100713][ T9650] RIP: 0033:0x7f418ec2c059 10:51:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x100000) [ 247.105141][ T9650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 247.124773][ T9650] RSP: 002b:00007f418d5a1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 247.133209][ T9650] RAX: ffffffffffffffda RBX: 00007f418ed3ef60 RCX: 00007f418ec2c059 [ 247.141201][ T9650] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 247.149186][ T9650] RBP: 00007f418d5a11d0 R08: 0000000000000000 R09: 0000000000000000 10:51:15 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0xfec0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002200000000000000000000000a00000600000000000000006d5e454c4db922876484531badde605e5c1b1ec58baa14ae2e59a26553a804cbcedfa23d64fe5770da58723645251aeac68c510417c49468b35d963370c09fed1746c62dfeb47e32fb31d3693416ed52fff38a7139bb1ee32678628ce1b7bf90f293bcb50572d0fee6b4b70bf318d35ab6ab19806ecfb331c7"], 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newlink={0x38, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10}]}]}]}, 0x38}}, 0x0) r6 = accept(r4, &(0x7f0000000240)=@generic, &(0x7f00000000c0)=0x80) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x108, r7, 0xd583798da5464e37, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8001}, {0xc, 0x90, 0x7f}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x80000000}, {0xc, 0x90, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0xfffffffffffffffb}, {0xc}}]}, 0x108}, 0x1, 0x0, 0x0, 0x89}, 0x6048005) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) socket$packet(0x11, 0x0, 0x300) (async) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x20}}, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r6) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r9, 0x400, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x800) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) 10:51:15 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="48e19f2b8bb6ca757400f18b244a017e53da76ee", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 247.157167][ T9650] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000002 [ 247.165154][ T9650] R13: 00007fffc27f099f R14: 00007f418d5a1300 R15: 0000000000022000 [ 247.173162][ T9650] 10:51:15 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 20) [ 247.254271][ T9663] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:51:15 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0xff00, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 247.316918][ T9671] FAULT_INJECTION: forcing a failure. [ 247.316918][ T9671] name failslab, interval 1, probability 0, space 0, times 0 [ 247.369198][ T9671] CPU: 0 PID: 9671 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 247.379658][ T9671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.389729][ T9671] Call Trace: [ 247.393023][ T9671] [ 247.395961][ T9671] dump_stack_lvl+0xcd/0x134 [ 247.400580][ T9671] should_fail.cold+0x5/0xa [ 247.405120][ T9671] ? sctp_add_bind_addr+0x93/0x3d0 [ 247.410247][ T9671] should_failslab+0x5/0x10 [ 247.414779][ T9671] kmem_cache_alloc_trace+0x55/0x3d0 [ 247.420104][ T9671] sctp_add_bind_addr+0x93/0x3d0 [ 247.425071][ T9671] sctp_copy_local_addr_list+0x325/0x4f0 [ 247.430734][ T9671] ? sctp_v4_get_dst+0x11d0/0x11d0 [ 247.435871][ T9671] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 247.442140][ T9671] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 247.448061][ T9671] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 247.453988][ T9671] sctp_bind_addr_copy+0xde/0x460 [ 247.459041][ T9671] sctp_connect_new_asoc+0x1cd/0x770 [ 247.464352][ T9671] ? sctp_bind+0x110/0x110 [ 247.468799][ T9671] ? __local_bh_enable_ip+0xa0/0x120 [ 247.474112][ T9671] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 247.480375][ T9671] ? security_sctp_bind_connect+0x8f/0xc0 [ 247.486123][ T9671] sctp_sendmsg+0x13ce/0x1d40 [ 247.490834][ T9671] ? sctp_setsockopt+0xa9b0/0xa9b0 [ 247.495980][ T9671] ? aa_af_perm+0x230/0x230 [ 247.500480][ T9671] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 247.506728][ T9671] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 247.512966][ T9671] inet_sendmsg+0x99/0xe0 [ 247.517285][ T9671] ? inet_send_prepare+0x4e0/0x4e0 [ 247.522381][ T9671] sock_sendmsg+0xcf/0x120 [ 247.526789][ T9671] ____sys_sendmsg+0x331/0x810 [ 247.531550][ T9671] ? kernel_sendmsg+0x50/0x50 [ 247.536244][ T9671] ? do_recvmmsg+0x6d0/0x6d0 [ 247.540829][ T9671] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 247.546807][ T9671] ___sys_sendmsg+0xf3/0x170 [ 247.551383][ T9671] ? sendmsg_copy_msghdr+0x160/0x160 [ 247.556655][ T9671] ? lock_downgrade+0x6e0/0x6e0 [ 247.561495][ T9671] ? lock_chain_count+0x20/0x20 [ 247.566351][ T9671] ? __fget_light+0xea/0x280 [ 247.570931][ T9671] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 247.577167][ T9671] __sys_sendmmsg+0x195/0x470 [ 247.581843][ T9671] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 247.586872][ T9671] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 247.592857][ T9671] ? __context_tracking_exit+0xb8/0xe0 [ 247.598311][ T9671] ? lock_downgrade+0x6e0/0x6e0 [ 247.603162][ T9671] ? lock_downgrade+0x6e0/0x6e0 [ 247.608031][ T9671] __x64_sys_sendmmsg+0x99/0x100 [ 247.612957][ T9671] ? syscall_enter_from_user_mode+0x21/0x70 [ 247.618843][ T9671] do_syscall_64+0x35/0xb0 [ 247.623269][ T9671] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 247.629172][ T9671] RIP: 0033:0x7f418ec2c059 [ 247.633573][ T9671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 247.653166][ T9671] RSP: 002b:00007f418d5a1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 247.661612][ T9671] RAX: ffffffffffffffda RBX: 00007f418ed3ef60 RCX: 00007f418ec2c059 [ 247.669574][ T9671] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 247.677534][ T9671] RBP: 00007f418d5a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 247.685494][ T9671] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000002 [ 247.693452][ T9671] R13: 00007fffc27f099f R14: 00007f418d5a1300 R15: 0000000000022000 [ 247.701424][ T9671] 10:51:15 executing program 5: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x20000004}) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)={0x20000000}) (async) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {0xffffffffffffffff, 0x4b57, 0x64}], 0x5, 0x0, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 10:51:15 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="48e19f2b8bb6ca757400f18b244a017e53da76ee", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="48e19f2b8bb6ca757400f18b244a017e53da76ee", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) (async) 10:51:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1a6de4) 10:51:15 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x7a00) 10:51:15 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 21) 10:51:15 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x2, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 247.846510][ T9703] FAULT_INJECTION: forcing a failure. [ 247.846510][ T9703] name failslab, interval 1, probability 0, space 0, times 0 [ 247.895847][ T9703] CPU: 1 PID: 9703 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 247.906312][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.916385][ T9703] Call Trace: [ 247.919672][ T9703] [ 247.922613][ T9703] dump_stack_lvl+0xcd/0x134 [ 247.927235][ T9703] should_fail.cold+0x5/0xa [ 247.931764][ T9703] ? sctp_add_bind_addr+0x93/0x3d0 [ 247.936896][ T9703] should_failslab+0x5/0x10 10:51:15 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x3, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 247.941423][ T9703] kmem_cache_alloc_trace+0x55/0x3d0 [ 247.946745][ T9703] sctp_add_bind_addr+0x93/0x3d0 [ 247.951709][ T9703] sctp_copy_local_addr_list+0x325/0x4f0 [ 247.957371][ T9703] ? sctp_v4_get_dst+0x11d0/0x11d0 [ 247.962504][ T9703] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 247.968763][ T9703] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 247.974681][ T9703] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 247.980610][ T9703] sctp_bind_addr_copy+0xde/0x460 [ 247.985685][ T9703] sctp_connect_new_asoc+0x1cd/0x770 [ 247.991007][ T9703] ? sctp_bind+0x110/0x110 [ 247.995454][ T9703] ? __local_bh_enable_ip+0xa0/0x120 [ 248.000763][ T9703] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 248.007030][ T9703] ? security_sctp_bind_connect+0x8f/0xc0 [ 248.012778][ T9703] sctp_sendmsg+0x13ce/0x1d40 [ 248.017487][ T9703] ? sctp_setsockopt+0xa9b0/0xa9b0 [ 248.022635][ T9703] ? aa_af_perm+0x230/0x230 [ 248.027161][ T9703] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 248.033426][ T9703] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 248.039801][ T9703] inet_sendmsg+0x99/0xe0 10:51:15 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x4, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 248.044159][ T9703] ? inet_send_prepare+0x4e0/0x4e0 [ 248.049296][ T9703] sock_sendmsg+0xcf/0x120 [ 248.053737][ T9703] ____sys_sendmsg+0x331/0x810 [ 248.058531][ T9703] ? kernel_sendmsg+0x50/0x50 [ 248.063229][ T9703] ? do_recvmmsg+0x6d0/0x6d0 [ 248.067834][ T9703] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 248.073854][ T9703] ___sys_sendmsg+0xf3/0x170 [ 248.078468][ T9703] ? sendmsg_copy_msghdr+0x160/0x160 [ 248.083778][ T9703] ? lock_downgrade+0x6e0/0x6e0 [ 248.088650][ T9703] ? lock_chain_count+0x20/0x20 [ 248.093552][ T9703] ? __fget_light+0xea/0x280 [ 248.098162][ T9703] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 248.104430][ T9703] __sys_sendmmsg+0x195/0x470 [ 248.109130][ T9703] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 248.114169][ T9703] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 248.120194][ T9703] ? __context_tracking_exit+0xb8/0xe0 [ 248.125668][ T9703] ? lock_downgrade+0x6e0/0x6e0 [ 248.130545][ T9703] ? lock_downgrade+0x6e0/0x6e0 [ 248.135439][ T9703] __x64_sys_sendmmsg+0x99/0x100 [ 248.140394][ T9703] ? syscall_enter_from_user_mode+0x21/0x70 10:51:16 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x5, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 248.146304][ T9703] do_syscall_64+0x35/0xb0 [ 248.150742][ T9703] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 248.156656][ T9703] RIP: 0033:0x7f418ec2c059 [ 248.161085][ T9703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 248.180712][ T9703] RSP: 002b:00007f418d5a1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 248.189147][ T9703] RAX: ffffffffffffffda RBX: 00007f418ed3ef60 RCX: 00007f418ec2c059 [ 248.197134][ T9703] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 248.205119][ T9703] RBP: 00007f418d5a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 248.213108][ T9703] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000002 [ 248.221090][ T9703] R13: 00007fffc27f099f R14: 00007f418d5a1300 R15: 0000000000022000 [ 248.229094][ T9703] [ 248.233271][ T25] kauditd_printk_skb: 10 callbacks suppressed 10:51:16 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="48e19f2b8bb6ca757400f18b244a017e53da76ee", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 248.233287][ T25] audit: type=1804 audit(1645786276.019:223): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3056829688/syzkaller.0VW25A/196/memory.events" dev="sda1" ino=1174 res=1 errno=0 10:51:16 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x6, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 248.300623][ T25] audit: type=1804 audit(1645786276.059:224): pid=9701 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/162/memory.events" dev="sda1" ino=1165 res=1 errno=0 [ 248.365057][ T25] audit: type=1804 audit(1645786276.109:225): pid=9710 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/162/memory.events" dev="sda1" ino=1165 res=1 errno=0 [ 248.422391][ T25] audit: type=1804 audit(1645786276.199:226): pid=9683 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3056829688/syzkaller.0VW25A/196/memory.events" dev="sda1" ino=1174 res=1 errno=0 10:51:16 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x7, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:16 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, &(0x7f0000001680), 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000002d00)="92", 0x1}], 0x57}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:51:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:51:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000240)={0x0, 0x1, 0x100, 0x6}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b2a00) sendfile(r1, r0, 0x0, 0x8000000000004) ioctl$int_out(r0, 0x5460, &(0x7f0000000180)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r3, 0x0, 0x10000051c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000000c0)=0x1ff, 0x4) openat$cgroup_ro(r3, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x7a05, 0x1700) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000), 0x4) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000540)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040)) sendmmsg(r5, &(0x7f0000005980)=[{{0x0, 0x3f00, &(0x7f0000000500)=[{&(0x7f00000007c0)='6', 0x1}], 0x1, 0x0, 0x0, 0xc304}, 0xe}], 0x300, 0x0) 10:51:16 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 22) 10:51:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = accept4$alg(r1, 0x0, 0x0, 0x80800) sendfile(r3, r2, 0x0, 0xfffffffffffffe00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) openat$cgroup_ro(r6, &(0x7f0000000280)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000180)) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x8}, 0x10) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x114000, 0x800, 0x0, 0x1}, 0x20) 10:51:16 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, &(0x7f0000001680), 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000002d00)="92", 0x1}], 0x57}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, &(0x7f0000001680), 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000002d00)="92", 0x1}], 0x57}}], 0x2, 0x4000040) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) (async) 10:51:16 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x8, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 248.763075][ T9732] FAULT_INJECTION: forcing a failure. [ 248.763075][ T9732] name failslab, interval 1, probability 0, space 0, times 0 [ 248.794223][ T9732] CPU: 0 PID: 9732 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 248.804681][ T9732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.814751][ T9732] Call Trace: [ 248.818042][ T9732] [ 248.820980][ T9732] dump_stack_lvl+0xcd/0x134 [ 248.825602][ T9732] should_fail.cold+0x5/0xa [ 248.830135][ T9732] ? sctp_add_bind_addr+0x93/0x3d0 [ 248.835263][ T9732] should_failslab+0x5/0x10 [ 248.839788][ T9732] kmem_cache_alloc_trace+0x55/0x3d0 [ 248.845102][ T9732] sctp_add_bind_addr+0x93/0x3d0 [ 248.850063][ T9732] sctp_copy_local_addr_list+0x325/0x4f0 [ 248.855728][ T9732] ? sctp_v4_get_dst+0x11d0/0x11d0 [ 248.860865][ T9732] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 248.867129][ T9732] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 248.873055][ T9732] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 248.878979][ T9732] sctp_bind_addr_copy+0xde/0x460 [ 248.884044][ T9732] sctp_connect_new_asoc+0x1cd/0x770 [ 248.889352][ T9732] ? sctp_bind+0x110/0x110 [ 248.890695][ T25] audit: type=1804 audit(1645786276.629:227): pid=9733 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/163/memory.events" dev="sda1" ino=1173 res=1 errno=0 [ 248.893790][ T9732] ? __local_bh_enable_ip+0xa0/0x120 [ 248.893827][ T9732] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 248.893858][ T9732] ? security_sctp_bind_connect+0x8f/0xc0 [ 248.936913][ T9732] sctp_sendmsg+0x13ce/0x1d40 [ 248.940469][ T25] audit: type=1804 audit(1645786276.629:228): pid=9736 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/163/memory.events" dev="sda1" ino=1173 res=1 errno=0 [ 248.941619][ T9732] ? sctp_setsockopt+0xa9b0/0xa9b0 [ 248.972082][ T9732] ? aa_af_perm+0x230/0x230 [ 248.976622][ T9732] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 248.982891][ T9732] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 248.989166][ T9732] inet_sendmsg+0x99/0xe0 [ 248.993527][ T9732] ? inet_send_prepare+0x4e0/0x4e0 [ 248.998660][ T9732] sock_sendmsg+0xcf/0x120 [ 249.003102][ T9732] ____sys_sendmsg+0x331/0x810 [ 249.007892][ T9732] ? kernel_sendmsg+0x50/0x50 [ 249.012595][ T9732] ? do_recvmmsg+0x6d0/0x6d0 [ 249.017206][ T9732] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 249.023224][ T9732] ___sys_sendmsg+0xf3/0x170 [ 249.027836][ T9732] ? sendmsg_copy_msghdr+0x160/0x160 [ 249.033149][ T9732] ? lock_downgrade+0x6e0/0x6e0 [ 249.038024][ T9732] ? lock_chain_count+0x20/0x20 [ 249.042926][ T9732] ? __fget_light+0xea/0x280 [ 249.046025][ T9738] syz-executor.1: vmalloc error: size 24576, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 249.047529][ T9732] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 249.047580][ T9732] __sys_sendmmsg+0x195/0x470 [ 249.067530][ T9738] ,cpuset= [ 249.067668][ T9732] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 249.067699][ T9732] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 249.074195][ T9738] syz1 [ 249.075373][ T9732] ? __context_tracking_exit+0xb8/0xe0 [ 249.080507][ T9738] ,mems_allowed=0-1 [ 249.086324][ T9732] ? lock_downgrade+0x6e0/0x6e0 [ 249.086361][ T9732] ? lock_downgrade+0x6e0/0x6e0 [ 249.086405][ T9732] __x64_sys_sendmmsg+0x99/0x100 [ 249.089763][ T9738] [ 249.094493][ T9732] ? syscall_enter_from_user_mode+0x21/0x70 [ 249.094527][ T9732] do_syscall_64+0x35/0xb0 [ 249.094563][ T9732] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 249.131362][ T9732] RIP: 0033:0x7f418ec2c059 [ 249.135785][ T9732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 249.155400][ T9732] RSP: 002b:00007f418d5a1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 249.163907][ T9732] RAX: ffffffffffffffda RBX: 00007f418ed3ef60 RCX: 00007f418ec2c059 [ 249.171885][ T9732] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 249.179862][ T9732] RBP: 00007f418d5a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 249.187833][ T9732] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000002 [ 249.195801][ T9732] R13: 00007fffc27f099f R14: 00007f418d5a1300 R15: 0000000000022000 [ 249.203788][ T9732] 10:51:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x2000000) 10:51:17 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x9, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:17 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 23) [ 249.206805][ T9738] CPU: 1 PID: 9738 Comm: syz-executor.1 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 249.217229][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.227299][ T9738] Call Trace: [ 249.230584][ T9738] [ 249.233519][ T9738] dump_stack_lvl+0xcd/0x134 [ 249.238134][ T9738] warn_alloc.cold+0x9b/0x189 [ 249.242835][ T9738] ? zone_watermark_ok_safe+0x290/0x290 [ 249.248397][ T9738] ? __kmalloc_node+0x62/0x4a0 [ 249.253198][ T9738] ? __vmalloc_node_range+0x9fe/0x1310 [ 249.258674][ T9738] __vmalloc_node_range+0xfb4/0x1310 [ 249.263983][ T9738] ? kernel_clone+0xe7/0xab0 [ 249.268597][ T9738] ? vfree_atomic+0xe0/0xe0 [ 249.273128][ T9738] ? rcu_read_lock_sched_held+0x3a/0x70 [ 249.278694][ T9738] ? kernel_clone+0xe7/0xab0 [ 249.283295][ T9738] copy_process+0x92f/0x7310 [ 249.287897][ T9738] ? kernel_clone+0xe7/0xab0 [ 249.292505][ T9738] ? find_held_lock+0x2d/0x110 [ 249.293677][ T9758] FAULT_INJECTION: forcing a failure. [ 249.293677][ T9758] name failslab, interval 1, probability 0, space 0, times 0 [ 249.297286][ T9738] ? __cleanup_sighand+0xb0/0xb0 [ 249.297316][ T9738] ? __lock_acquire+0x1666/0x56c0 [ 249.297352][ T9738] ? kernel_clone+0x314/0xab0 [ 249.324499][ T9738] kernel_clone+0xe7/0xab0 [ 249.328932][ T9738] ? create_io_thread+0xf0/0xf0 [ 249.333806][ T9738] ? find_held_lock+0x2d/0x110 [ 249.338589][ T9738] __do_sys_clone+0xc8/0x110 [ 249.343194][ T9738] ? kernel_clone+0xab0/0xab0 [ 249.347893][ T9738] ? syscall_enter_from_user_mode+0x21/0x70 [ 249.353800][ T9738] do_syscall_64+0x35/0xb0 [ 249.358230][ T9738] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 249.364125][ T9738] RIP: 0033:0x7f7e7b9ea481 [ 249.368540][ T9738] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 249.388156][ T9738] RSP: 002b:00007ffe6bba38b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 249.396584][ T9738] RAX: ffffffffffffffda RBX: 00007f7e7a1b1700 RCX: 00007f7e7b9ea481 [ 249.404559][ T9738] RDX: 00007f7e7a1b19d0 RSI: 00007f7e7a1b12f0 RDI: 00000000003d0f00 [ 249.412540][ T9738] RBP: 00007ffe6bba3b00 R08: 00007f7e7a1b1700 R09: 00007f7e7a1b1700 [ 249.420525][ T9738] R10: 00007f7e7a1b19d0 R11: 0000000000000206 R12: 00007ffe6bba396e [ 249.428503][ T9738] R13: 00007ffe6bba396f R14: 00007f7e7a1b1300 R15: 0000000000022000 [ 249.436506][ T9738] [ 249.439555][ T9758] CPU: 0 PID: 9758 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 249.449994][ T9758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.460059][ T9758] Call Trace: [ 249.463346][ T9758] [ 249.466285][ T9758] dump_stack_lvl+0xcd/0x134 [ 249.470899][ T9758] should_fail.cold+0x5/0xa [ 249.473977][ T9738] Mem-Info: [ 249.475419][ T9758] ? sctp_transport_new+0x91/0x720 [ 249.475453][ T9758] should_failslab+0x5/0x10 [ 249.475483][ T9758] kmem_cache_alloc_trace+0x55/0x3d0 [ 249.475518][ T9758] sctp_transport_new+0x91/0x720 [ 249.478912][ T9738] active_anon:899 inactive_anon:77924 isolated_anon:0 [ 249.478912][ T9738] active_file:4638 inactive_file:7674 isolated_file:0 [ 249.478912][ T9738] unevictable:768 dirty:68 writeback:0 [ 249.478912][ T9738] slab_reclaimable:20803 slab_unreclaimable:97566 [ 249.478912][ T9738] mapped:27770 shmem:1992 pagetables:854 bounce:0 [ 249.478912][ T9738] kernel_misc_reclaimable:0 [ 249.478912][ T9738] free:1391677 free_pcp:9895 free_cma:0 [ 249.483717][ T9758] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 249.483758][ T9758] sctp_assoc_add_peer+0x28f/0x14a0 [ 249.483794][ T9758] sctp_connect_new_asoc+0x1fc/0x770 [ 249.488354][ T9738] Node 0 active_anon:3596kB inactive_anon:311696kB active_file:18480kB inactive_file:30696kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111080kB dirty:268kB writeback:0kB shmem:6432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB kernel_stack:11212kB pagetables:3412kB all_unreclaimable? no [ 249.493554][ T9758] ? sctp_bind+0x110/0x110 [ 249.493595][ T9758] ? __local_bh_enable_ip+0xa0/0x120 [ 249.500018][ T9738] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 249.539900][ T9758] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 249.539940][ T9758] ? security_sctp_bind_connect+0x8f/0xc0 [ 249.539970][ T9758] sctp_sendmsg+0x13ce/0x1d40 [ 249.540005][ T9758] ? sctp_setsockopt+0xa9b0/0xa9b0 [ 249.540046][ T9758] ? aa_af_perm+0x230/0x230 [ 249.540073][ T9758] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 249.540104][ T9758] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 10:51:17 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0xa, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 249.540140][ T9758] inet_sendmsg+0x99/0xe0 [ 249.540170][ T9758] ? inet_send_prepare+0x4e0/0x4e0 [ 249.540198][ T9758] sock_sendmsg+0xcf/0x120 [ 249.540230][ T9758] ____sys_sendmsg+0x331/0x810 [ 249.540266][ T9758] ? kernel_sendmsg+0x50/0x50 [ 249.540294][ T9758] ? do_recvmmsg+0x6d0/0x6d0 [ 249.540319][ T9758] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 249.540366][ T9758] ___sys_sendmsg+0xf3/0x170 [ 249.540408][ T9758] ? sendmsg_copy_msghdr+0x160/0x160 [ 249.540440][ T9758] ? lock_downgrade+0x6e0/0x6e0 [ 249.540468][ T9758] ? lock_chain_count+0x20/0x20 [ 249.540524][ T9758] ? __fget_light+0xea/0x280 [ 249.540550][ T9758] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 249.547450][ T9738] Node 0 [ 249.551607][ T9758] __sys_sendmmsg+0x195/0x470 [ 249.551644][ T9758] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 249.551668][ T9758] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 249.551714][ T9758] ? __context_tracking_exit+0xb8/0xe0 [ 249.551740][ T9758] ? lock_downgrade+0x6e0/0x6e0 10:51:17 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0xf, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = accept4$alg(r1, 0x0, 0x0, 0x80800) sendfile(r3, r2, 0x0, 0xfffffffffffffe00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) openat$cgroup_ro(r6, &(0x7f0000000280)='blkio.bfq.empty_time\x00', 0x0, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000180)) (async) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r5, 0x0, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x8}, 0x10) (async) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x114000, 0x800, 0x0, 0x1}, 0x20) [ 249.561408][ T9738] DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 249.588421][ T9758] ? lock_downgrade+0x6e0/0x6e0 [ 249.588473][ T9758] __x64_sys_sendmmsg+0x99/0x100 [ 249.588500][ T9758] ? syscall_enter_from_user_mode+0x21/0x70 [ 249.588525][ T9758] do_syscall_64+0x35/0xb0 [ 249.588553][ T9758] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 249.588584][ T9758] RIP: 0033:0x7f418ec2c059 10:51:17 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 24) [ 249.588606][ T9758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 249.588628][ T9758] RSP: 002b:00007f418d5a1168 EFLAGS: 00000246 [ 249.593678][ T9738] lowmem_reserve[]: [ 249.598311][ T9758] ORIG_RAX: 0000000000000133 [ 249.598323][ T9758] RAX: ffffffffffffffda RBX: 00007f418ed3ef60 RCX: 00007f418ec2c059 [ 249.598341][ T9758] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 249.598357][ T9758] RBP: 00007f418d5a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 249.598372][ T9758] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000002 [ 249.598386][ T9758] R13: 00007fffc27f099f R14: 00007f418d5a1300 R15: 0000000000022000 [ 249.598418][ T9758] [ 249.900280][ T9738] 0 2647 2648 2648 2648 [ 249.904658][ T9738] Node 0 DMA32 free:1614348kB boost:0kB min:35688kB low:44608kB high:53528kB reserved_highatomic:0KB active_anon:3608kB inactive_anon:311548kB active_file:18428kB inactive_file:30828kB unevictable:1536kB writepending:116kB present:3129332kB managed:2716784kB mlocked:0kB bounce:0kB free_pcp:32840kB local_pcp:10572kB free_cma:0kB [ 249.938846][ T9738] lowmem_reserve[]: 0 0 0 0 0 10:51:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3}) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000240)={0x0, 0x1, 0x100, 0x6}) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) (async) sendfile(r1, r2, 0x0, 0xf03b2a00) (async) sendfile(r1, r0, 0x0, 0x8000000000004) (async) ioctl$int_out(r0, 0x5460, &(0x7f0000000180)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r3, 0x0, 0x10000051c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000000c0)=0x1ff, 0x4) openat$cgroup_ro(r3, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x7a05, 0x1700) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000), 0x4) (async) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000540)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040)) (async) sendmmsg(r5, &(0x7f0000005980)=[{{0x0, 0x3f00, &(0x7f0000000500)=[{&(0x7f00000007c0)='6', 0x1}], 0x1, 0x0, 0x0, 0xc304}, 0xe}], 0x300, 0x0) 10:51:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x3000000) [ 249.943639][ T9738] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:656kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 249.995482][ T9768] FAULT_INJECTION: forcing a failure. [ 249.995482][ T9768] name failslab, interval 1, probability 0, space 0, times 0 [ 250.044570][ T9768] CPU: 1 PID: 9768 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 250.055028][ T9768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.065118][ T9768] Call Trace: [ 250.068403][ T9768] [ 250.071338][ T9768] dump_stack_lvl+0xcd/0x134 [ 250.075950][ T9768] should_fail.cold+0x5/0xa [ 250.080463][ T9768] ? sctp_stream_init_ext+0x4b/0x1b0 [ 250.085753][ T9768] should_failslab+0x5/0x10 [ 250.090258][ T9768] kmem_cache_alloc_trace+0x55/0x3d0 [ 250.095551][ T9768] sctp_stream_init_ext+0x4b/0x1b0 [ 250.100669][ T9768] sctp_sendmsg_to_asoc+0x1d65/0x2390 [ 250.106041][ T9768] ? sctp_assoc_set_primary+0x173/0x300 [ 250.111590][ T9768] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 250.117831][ T9768] ? sctp_assoc_add_peer+0x249/0x14a0 [ 250.123227][ T9768] ? sctp_set_owner_w+0x4d0/0x4d0 [ 250.128266][ T9768] ? sctp_connect_new_asoc+0x3f1/0x770 [ 250.133730][ T9768] ? sctp_bind+0x110/0x110 [ 250.138157][ T9768] ? __local_bh_enable_ip+0xa0/0x120 [ 250.143451][ T9768] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 250.149702][ T9768] ? security_sctp_bind_connect+0x8f/0xc0 [ 250.155428][ T9768] sctp_sendmsg+0x104d/0x1d40 [ 250.160109][ T9768] ? sctp_setsockopt+0xa9b0/0xa9b0 [ 250.165232][ T9768] ? aa_af_perm+0x230/0x230 [ 250.169733][ T9768] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 250.175973][ T9768] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 250.182220][ T9768] inet_sendmsg+0x99/0xe0 [ 250.186549][ T9768] ? inet_send_prepare+0x4e0/0x4e0 [ 250.191656][ T9768] sock_sendmsg+0xcf/0x120 [ 250.196071][ T9768] ____sys_sendmsg+0x331/0x810 [ 250.200836][ T9768] ? kernel_sendmsg+0x50/0x50 [ 250.205508][ T9768] ? do_recvmmsg+0x6d0/0x6d0 [ 250.210091][ T9768] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 250.216080][ T9768] ___sys_sendmsg+0xf3/0x170 [ 250.220668][ T9768] ? sendmsg_copy_msghdr+0x160/0x160 [ 250.225949][ T9768] ? lock_downgrade+0x6e0/0x6e0 [ 250.230797][ T9768] ? lock_chain_count+0x20/0x20 [ 250.235665][ T9768] ? __fget_light+0xea/0x280 [ 250.240253][ T9768] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 250.246518][ T9768] __sys_sendmmsg+0x195/0x470 [ 250.251197][ T9768] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 250.256217][ T9768] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 250.262209][ T9768] ? __context_tracking_exit+0xb8/0xe0 [ 250.267664][ T9768] ? lock_downgrade+0x6e0/0x6e0 [ 250.272516][ T9768] ? lock_downgrade+0x6e0/0x6e0 [ 250.277378][ T9768] __x64_sys_sendmmsg+0x99/0x100 [ 250.282314][ T9768] ? syscall_enter_from_user_mode+0x21/0x70 [ 250.288219][ T9768] do_syscall_64+0x35/0xb0 [ 250.292633][ T9768] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 250.298526][ T9768] RIP: 0033:0x7f418ec2c059 [ 250.302934][ T9768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 250.322540][ T9768] RSP: 002b:00007f418d5a1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 250.330954][ T9768] RAX: ffffffffffffffda RBX: 00007f418ed3ef60 RCX: 00007f418ec2c059 10:51:18 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x10, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 250.338920][ T9768] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 250.346881][ T9768] RBP: 00007f418d5a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 250.354847][ T9768] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000002 [ 250.362812][ T9768] R13: 00007fffc27f099f R14: 00007f418d5a1300 R15: 0000000000022000 [ 250.370797][ T9768] [ 250.416552][ T9738] lowmem_reserve[]: 0 0 0 0 0 [ 250.421688][ T9738] Node 1 Normal free:3937928kB boost:0kB min:54208kB low:67760kB high:81312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:6640kB local_pcp:2608kB free_cma:0kB [ 250.497775][ T25] audit: type=1804 audit(1645786278.319:229): pid=9779 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/165/memory.events" dev="sda1" ino=1177 res=1 errno=0 [ 250.552282][ T9738] lowmem_reserve[]: 0 0 0 0 0 [ 250.567874][ T25] audit: type=1804 audit(1645786278.369:230): pid=9780 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/165/memory.events" dev="sda1" ino=1177 res=1 errno=0 [ 250.568568][ T9738] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 250.673881][ T9738] Node 0 DMA32: 1375*4kB (UME) 734*8kB (UME) 371*16kB (UME) 306*32kB (UME) 98*64kB (UME) 151*128kB (UME) 69*256kB (UM) 23*512kB (UME) 13*1024kB (UM) 2*2048kB (UM) 370*4096kB (M) = 1615068kB [ 250.693683][ T9738] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 250.705943][ T9738] Node 1 Normal: 111*4kB (UE) 43*8kB (UE) 23*16kB (UE) 158*32kB (UE) 59*64kB (UME) 15*128kB (UE) 9*256kB (U) 2*512kB (U) 1*1024kB (M) 1*2048kB (U) 957*4096kB (UM) = 3938180kB [ 250.724226][ T9738] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.734409][ T9738] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.744559][ T9738] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.755629][ T9738] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.767945][ T9738] 14309 total pagecache pages [ 250.773194][ T9738] 0 pages in swap cache [ 250.777484][ T9738] Swap cache stats: add 0, delete 0, find 0/0 [ 250.784196][ T9738] Free swap = 0kB [ 250.788099][ T9738] Total swap = 0kB [ 250.791963][ T9738] 2097051 pages RAM [ 250.796465][ T9738] 0 pages HighMem/MovableOnly [ 250.801367][ T9738] 384446 pages reserved 10:51:18 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 32) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) (async) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, &(0x7f0000001680), 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000002d00)="92", 0x1}], 0x57}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:51:18 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (fail_nth: 25) 10:51:18 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x60, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = accept4$alg(r1, 0x0, 0x0, 0x80800) sendfile(r3, r2, 0x0, 0xfffffffffffffe00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) openat$cgroup_ro(r6, &(0x7f0000000280)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000180)) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x8}, 0x10) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x114000, 0x800, 0x0, 0x1}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) accept4$alg(r1, 0x0, 0x0, 0x80800) (async) sendfile(r3, r2, 0x0, 0xfffffffffffffe00) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) (async) openat$cgroup_ro(r6, &(0x7f0000000280)='blkio.bfq.empty_time\x00', 0x0, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000180)) (async) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) (async) write$cgroup_int(r5, 0x0, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x8}, 0x10) (async) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x114000, 0x800, 0x0, 0x1}, 0x20) (async) 10:51:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x4000000) [ 250.806037][ T9738] 0 pages cma reserved 10:51:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3}) (async, rerun: 32) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000240)={0x0, 0x1, 0x100, 0x6}) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) (rerun: 64) sendfile(r1, r2, 0x0, 0xf03b2a00) sendfile(r1, r0, 0x0, 0x8000000000004) (async) ioctl$int_out(r0, 0x5460, &(0x7f0000000180)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendfile(r4, r3, 0x0, 0x10000051c) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000000c0)=0x1ff, 0x4) (async, rerun: 32) openat$cgroup_ro(r3, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x7a05, 0x1700) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000), 0x4) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000540)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040)) sendmmsg(r5, &(0x7f0000005980)=[{{0x0, 0x3f00, &(0x7f0000000500)=[{&(0x7f00000007c0)='6', 0x1}], 0x1, 0x0, 0x0, 0xc304}, 0xe}], 0x300, 0x0) 10:51:18 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0xfc, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 251.037348][ T25] audit: type=1804 audit(1645786278.869:231): pid=9797 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/166/memory.events" dev="sda1" ino=1165 res=1 errno=0 10:51:18 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x12c, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x1f, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x28, 0x14, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x18, 0x18, 0xfe}, [@IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7fffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x4, 0x2}}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_getnetconf={0x54, 0x52, 0xfe8515f2b5d6b15b, 0x70bd2d, 0x25dfdbfe, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3}, @NETCONFA_FORWARDING={0x8, 0x2, 0x4}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_FORWARDING={0x8, 0x2, 0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x10001}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3f}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x20048005) [ 251.088714][ T9823] FAULT_INJECTION: forcing a failure. [ 251.088714][ T9823] name failslab, interval 1, probability 0, space 0, times 0 [ 251.151291][ T25] audit: type=1804 audit(1645786278.909:232): pid=9800 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/166/memory.events" dev="sda1" ino=1165 res=1 errno=0 [ 251.182209][ T9823] CPU: 1 PID: 9823 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 251.192666][ T9823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.202724][ T9823] Call Trace: [ 251.206000][ T9823] [ 251.208934][ T9823] dump_stack_lvl+0xcd/0x134 [ 251.213541][ T9823] should_fail.cold+0x5/0xa [ 251.218058][ T9823] ? sctp_bind_addrs_to_raw+0x109/0x320 [ 251.223614][ T9823] should_failslab+0x5/0x10 [ 251.228126][ T9823] __kmalloc+0x72/0x450 [ 251.232291][ T9823] sctp_bind_addrs_to_raw+0x109/0x320 [ 251.237682][ T9823] ? sctp_del_bind_addr+0x280/0x280 [ 251.242900][ T9823] ? find_held_lock+0x2d/0x110 [ 251.247673][ T9823] sctp_make_init+0xdb/0xd70 [ 251.252275][ T9823] ? mark_lock.part.0+0xee/0x1910 [ 251.257310][ T9823] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 251.263388][ T9823] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 251.269117][ T9823] ? sctp_init_cause+0x220/0x220 [ 251.274072][ T9823] ? is_bpf_text_address+0x99/0x170 [ 251.279292][ T9823] ? kernel_text_address+0x39/0x80 [ 251.284414][ T9823] ? __kernel_text_address+0x9/0x30 [ 251.289614][ T9823] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 251.295510][ T9823] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 251.301753][ T9823] ? sctp_sm_lookup_event+0x109/0x510 [ 251.307124][ T9823] ? dccp_diag_dump+0x30/0x30 [ 251.311805][ T9823] sctp_sf_do_prm_asoc+0xbb/0x340 [ 251.316828][ T9823] ? sctp_cname+0x1c0/0x1c0 [ 251.321333][ T9823] sctp_do_sm+0x179/0x4f00 [ 251.325759][ T9823] ? sctp_do_8_2_transport_strike.constprop.0+0xad0/0xad0 [ 251.332869][ T9823] ? mem_cgroup_oom_trylock+0x220/0x220 [ 251.338412][ T9823] ? sock_sendmsg+0xcf/0x120 [ 251.343000][ T9823] ? ____sys_sendmsg+0x331/0x810 [ 251.347933][ T9823] ? ___sys_sendmsg+0xf3/0x170 [ 251.352689][ T9823] ? __sys_sendmmsg+0x195/0x470 [ 251.357528][ T9823] ? __x64_sys_sendmmsg+0x99/0x100 [ 251.362636][ T9823] ? do_syscall_64+0x35/0xb0 [ 251.367231][ T9823] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 251.373305][ T9823] ? mark_held_locks+0x9f/0xe0 [ 251.378076][ T9823] ? mem_cgroup_charge_skmem+0x192/0x1d0 [ 251.383722][ T9823] ? lockdep_hardirqs_on+0x79/0x100 [ 251.388920][ T9823] ? mem_cgroup_sk_free+0x80/0x80 [ 251.393952][ T9823] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 251.400195][ T9823] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 251.406441][ T9823] ? __sk_mem_raise_allocated+0x554/0x1640 [ 251.412255][ T9823] sctp_primitive_ASSOCIATE+0x98/0xc0 [ 251.417633][ T9823] sctp_sendmsg_to_asoc+0xb84/0x2390 [ 251.422917][ T9823] ? sctp_assoc_set_primary+0x173/0x300 [ 251.428466][ T9823] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 251.434716][ T9823] ? sctp_set_owner_w+0x4d0/0x4d0 [ 251.439737][ T9823] ? sctp_connect_new_asoc+0x3f1/0x770 [ 251.445200][ T9823] ? sctp_bind+0x110/0x110 [ 251.449616][ T9823] ? __local_bh_enable_ip+0xa0/0x120 [ 251.454898][ T9823] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 251.461142][ T9823] ? security_sctp_bind_connect+0x8f/0xc0 [ 251.466865][ T9823] sctp_sendmsg+0x104d/0x1d40 [ 251.471547][ T9823] ? sctp_setsockopt+0xa9b0/0xa9b0 [ 251.476670][ T9823] ? aa_af_perm+0x230/0x230 [ 251.481173][ T9823] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 251.487417][ T9823] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 251.493660][ T9823] inet_sendmsg+0x99/0xe0 [ 251.497991][ T9823] ? inet_send_prepare+0x4e0/0x4e0 [ 251.503099][ T9823] sock_sendmsg+0xcf/0x120 [ 251.507513][ T9823] ____sys_sendmsg+0x331/0x810 [ 251.512279][ T9823] ? kernel_sendmsg+0x50/0x50 [ 251.516981][ T9823] ? do_recvmmsg+0x6d0/0x6d0 [ 251.521563][ T9823] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 251.527552][ T9823] ___sys_sendmsg+0xf3/0x170 [ 251.532140][ T9823] ? sendmsg_copy_msghdr+0x160/0x160 [ 251.537429][ T9823] ? lock_downgrade+0x6e0/0x6e0 [ 251.542277][ T9823] ? lock_chain_count+0x20/0x20 [ 251.547144][ T9823] ? __fget_light+0xea/0x280 [ 251.551736][ T9823] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 251.557982][ T9823] __sys_sendmmsg+0x195/0x470 [ 251.562662][ T9823] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 251.567685][ T9823] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 251.573765][ T9823] ? __context_tracking_exit+0xb8/0xe0 [ 251.579218][ T9823] ? lock_downgrade+0x6e0/0x6e0 [ 251.584068][ T9823] ? lock_downgrade+0x6e0/0x6e0 [ 251.588929][ T9823] __x64_sys_sendmmsg+0x99/0x100 [ 251.593861][ T9823] ? syscall_enter_from_user_mode+0x21/0x70 [ 251.599750][ T9823] do_syscall_64+0x35/0xb0 [ 251.604167][ T9823] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 251.610054][ T9823] RIP: 0033:0x7f418ec2c059 [ 251.614461][ T9823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 251.634500][ T9823] RSP: 002b:00007f418d5a1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 251.642909][ T9823] RAX: ffffffffffffffda RBX: 00007f418ed3ef60 RCX: 00007f418ec2c059 10:51:19 executing program 1: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20208000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[], 0x48}}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r0, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r1, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 251.650878][ T9823] RDX: 0000000000000002 RSI: 0000000020005900 RDI: 0000000000000003 [ 251.658845][ T9823] RBP: 00007f418d5a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 251.666816][ T9823] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000002 [ 251.674783][ T9823] R13: 00007fffc27f099f R14: 00007f418d5a1300 R15: 0000000000022000 [ 251.682762][ T9823] 10:51:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x1f, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x28, 0x14, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x18, 0x18, 0xfe}, [@IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7fffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x4, 0x2}}]}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_getnetconf={0x54, 0x52, 0xfe8515f2b5d6b15b, 0x70bd2d, 0x25dfdbfe, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3}, @NETCONFA_FORWARDING={0x8, 0x2, 0x4}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_FORWARDING={0x8, 0x2, 0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x10001}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3f}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x20048005) 10:51:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x5000000) 10:51:19 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x1fc, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:19 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:19 executing program 1: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20208000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[], 0x48}}, 0x10) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) (async) recvfrom$inet6(r0, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) recvfrom$llc(r1, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:51:19 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x300, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r0}) accept4$alg(r4, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) 10:51:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x1f, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x28, 0x14, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x18, 0x18, 0xfe}, [@IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7fffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x4, 0x2}}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_getnetconf={0x54, 0x52, 0xfe8515f2b5d6b15b, 0x70bd2d, 0x25dfdbfe, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3}, @NETCONFA_FORWARDING={0x8, 0x2, 0x4}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_FORWARDING={0x8, 0x2, 0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x10001}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3f}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x20048005) 10:51:19 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x500, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:19 executing program 1: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20208000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[], 0x48}}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) (async) recvfrom$inet6(r0, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) recvfrom$llc(r1, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:51:19 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000005440), 0xfb93a852dd518c, 0x0) sendmmsg(r1, &(0x7f0000000840)=[{{&(0x7f0000000180)=@qipcrtr, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="11c6b4b1600227f336f11cea4191d424a04fe0ae9cab18bb026a1308d23ebf8a0cdddd736404902a3cd1a8728b59df13250331e2e192a77d68ce3888bb64e1ee9db76ada820cf7dc7a3584936b32b95799ffe4cb7bb86781a7100603f52ac6e1abac5856a132d9f46e7444891fcf31a3e95c9d01d431e963d68e81fa6c5695d8d4001cadd93f864211e079518c18c870b8723f4e7aa34f67f7298464545bcfec5b749c622d33e89eb8a910f344b1f783d45d633f5cb1ddf93a104f4f5d394bb237ceb7fec2", 0xc5}, {&(0x7f0000000300)="9beb8f0646205f7d1550583fd77407b73ac357055fe1519e5184a6b58ca0658c8b5783562885b1ccd873cf50aa586772ee115aa8cdc36d922dd9b87cb66c481862cd6c6db6f798eb6064656b39a53e46c4cf21e43424a591fdab2d1d1d", 0x5d}], 0x2}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)="1796e2246dceb8422b9933cda67ab9a23c4eabca7ae0aa178e08df0414e4dba9d83ce4dbfb154408ca38968d943c5f0f58b68dba285d8d2f509859bdb0c4a33b2effe7cf5a304596a0ed4bf377dc8981243fb1d8c30375503b8874cafc3bc9a99b351804f33f0529b996b333e2ba53bdf288a82b5ac806c5511975f0155b38075f959131e06e90b5de2b8b4caa956a963e77795985a37c6c0ff711601a860728b289f62880ecb0f56c15a63c5758f0f6202eed5653115c26", 0xb8}, {&(0x7f0000000440)='L', 0x1}, {&(0x7f0000000480)="cca0a4f8db6303d348aa90db6559c9b4ca0032da383bbe5b6529f8b7b7715cb6034a0954b5c38c917ee013e609cbf30efe8e029df7506bb92f6a75ad32421574ebde37a6390a399bcfa13f31904678d8f10fc3acb820e899b7eb20aa89da0b5bd11edfe178c7e80e868a8f47ddd68c402d5d8401f6a2afc6a50af22bcd7eb027a0a02dda2e09080c2ada68535c28c3cd7679ed89f3ad37a4aa9b311787c51f4f15da0352d6dcf5e557e3e206dd9835c4840d7d23b5bb5d198736b0722e69674dbeefabe0422a3e94827eb89b1c001b5e2e3125773cdd39c532e8b820fac1ef1e8a65701a63b522a5509df9", 0xeb}, {&(0x7f0000000580)="9b80737f4761ca299c998a34f258b71cd1a97d0ee99fa5c8935fd6cab448f87589a63f286f90544f0066017c922e940f6abcf87bf8b6af959ffeb71706f2f2c7c0ab133d95bb8c837b8b54260e7182f45afa551fed80b347a8aa91a3722de8f6991ad4cc30d5f7bdb1ee277006ccbde8c9ce0176c190842bf039440f5293989a34b328958b710f527f64c4f3d2a8aaab42f9f725f56f625a081b004a4938f09c9f945bc546bfd8d936262ab91c820302b97ce50d5b12f7c2657acf44cefebd017fc28b6485cecdb7860d745fc2e61ac274de9cc0f2591ecaff66e4bfcc3e076ac876a5757c6509a0b86de41ad876", 0xee}, {&(0x7f0000000680)="578c2e19f4d16d2301041f33ac97d64a7043c91749de672b73e0d911c35723b8450ca8974b540a2ec65320e8253b71708e9b05b714f96ecf59b1f03fa47d53ae9005d5b9a171c2ca03e2fb08dfd9297900fb74f5e73d5399cc4d06b224b6fc0493513b52110b0eaf28670c78cfe95d9c33be3c783370f76acc4bc8dae5511b840c43d4c4a3cf0f72a5be322ae166ba78c40b39fb91fa98b84c6c26869d93cf3351f9cb43", 0xa4}], 0x5, &(0x7f00000007c0)=[{0x58, 0x110, 0x8, "88f9c3ecbfcd13378676f87c7a05118b72936b7fc9117406c869eaadc87bdbab8ba9b91433df5b1c65efef57d9c95d50e06a45fd95b5c50d9704a79fbca702a13c"}], 0x58}}], 0x2, 0x8080) ppoll(&(0x7f0000001b80)=[{r0, 0x3280}], 0x1, &(0x7f0000000140)={0x77359400}, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "342a09bd087884993d494b1819836e143c9b1fe1a6201a19b339b343e099643b27a1c9c16f1a6b040d0cbc74ad9fa87243a0fc9063e90f9386039ed1a0ae630f82fa403562f4121c197cfe58640cddc1854b33c86101ce1e08d09a5f83204bf6d9632bbcddcdb4e23d6d52fe0df9bc05671ae8ccf7d5fb0cce25098c444d0728749b441689c5b24fa1f4033a00cc3d5c46a909"}, 0x97) 10:51:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0x2, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:20 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x13, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:51:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x6000000) 10:51:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x5dc, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0x3, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r0}) accept4$alg(r4, 0x0, 0x0, 0x80800) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) (async) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000100)) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) shutdown(0xffffffffffffffff, 0x1) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) 10:51:20 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) (async) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x13, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:51:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0x4, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x600, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 252.442504][ T3672] Bluetooth: hci4: command 0x0406 tx timeout [ 252.442504][ T3729] Bluetooth: hci2: command 0x0406 tx timeout [ 252.442557][ T3729] Bluetooth: hci3: command 0x0406 tx timeout 10:51:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x700, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r0}) accept4$alg(r4, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r0}) (async) accept4$alg(r4, 0x0, 0x0, 0x80800) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) (async) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000100)) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendfile(r6, r5, 0x0, 0x10000a006) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) shutdown(0xffffffffffffffff, 0x1) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) (async) [ 252.497441][ T3729] Bluetooth: hci1: command 0x0406 tx timeout [ 252.522817][ T3729] Bluetooth: hci0: command 0x0406 tx timeout 10:51:20 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000005440), 0xfb93a852dd518c, 0x0) (async, rerun: 32) sendmmsg(r1, &(0x7f0000000840)=[{{&(0x7f0000000180)=@qipcrtr, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="11c6b4b1600227f336f11cea4191d424a04fe0ae9cab18bb026a1308d23ebf8a0cdddd736404902a3cd1a8728b59df13250331e2e192a77d68ce3888bb64e1ee9db76ada820cf7dc7a3584936b32b95799ffe4cb7bb86781a7100603f52ac6e1abac5856a132d9f46e7444891fcf31a3e95c9d01d431e963d68e81fa6c5695d8d4001cadd93f864211e079518c18c870b8723f4e7aa34f67f7298464545bcfec5b749c622d33e89eb8a910f344b1f783d45d633f5cb1ddf93a104f4f5d394bb237ceb7fec2", 0xc5}, {&(0x7f0000000300)="9beb8f0646205f7d1550583fd77407b73ac357055fe1519e5184a6b58ca0658c8b5783562885b1ccd873cf50aa586772ee115aa8cdc36d922dd9b87cb66c481862cd6c6db6f798eb6064656b39a53e46c4cf21e43424a591fdab2d1d1d", 0x5d}], 0x2}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)="1796e2246dceb8422b9933cda67ab9a23c4eabca7ae0aa178e08df0414e4dba9d83ce4dbfb154408ca38968d943c5f0f58b68dba285d8d2f509859bdb0c4a33b2effe7cf5a304596a0ed4bf377dc8981243fb1d8c30375503b8874cafc3bc9a99b351804f33f0529b996b333e2ba53bdf288a82b5ac806c5511975f0155b38075f959131e06e90b5de2b8b4caa956a963e77795985a37c6c0ff711601a860728b289f62880ecb0f56c15a63c5758f0f6202eed5653115c26", 0xb8}, {&(0x7f0000000440)='L', 0x1}, {&(0x7f0000000480)="cca0a4f8db6303d348aa90db6559c9b4ca0032da383bbe5b6529f8b7b7715cb6034a0954b5c38c917ee013e609cbf30efe8e029df7506bb92f6a75ad32421574ebde37a6390a399bcfa13f31904678d8f10fc3acb820e899b7eb20aa89da0b5bd11edfe178c7e80e868a8f47ddd68c402d5d8401f6a2afc6a50af22bcd7eb027a0a02dda2e09080c2ada68535c28c3cd7679ed89f3ad37a4aa9b311787c51f4f15da0352d6dcf5e557e3e206dd9835c4840d7d23b5bb5d198736b0722e69674dbeefabe0422a3e94827eb89b1c001b5e2e3125773cdd39c532e8b820fac1ef1e8a65701a63b522a5509df9", 0xeb}, {&(0x7f0000000580)="9b80737f4761ca299c998a34f258b71cd1a97d0ee99fa5c8935fd6cab448f87589a63f286f90544f0066017c922e940f6abcf87bf8b6af959ffeb71706f2f2c7c0ab133d95bb8c837b8b54260e7182f45afa551fed80b347a8aa91a3722de8f6991ad4cc30d5f7bdb1ee277006ccbde8c9ce0176c190842bf039440f5293989a34b328958b710f527f64c4f3d2a8aaab42f9f725f56f625a081b004a4938f09c9f945bc546bfd8d936262ab91c820302b97ce50d5b12f7c2657acf44cefebd017fc28b6485cecdb7860d745fc2e61ac274de9cc0f2591ecaff66e4bfcc3e076ac876a5757c6509a0b86de41ad876", 0xee}, {&(0x7f0000000680)="578c2e19f4d16d2301041f33ac97d64a7043c91749de672b73e0d911c35723b8450ca8974b540a2ec65320e8253b71708e9b05b714f96ecf59b1f03fa47d53ae9005d5b9a171c2ca03e2fb08dfd9297900fb74f5e73d5399cc4d06b224b6fc0493513b52110b0eaf28670c78cfe95d9c33be3c783370f76acc4bc8dae5511b840c43d4c4a3cf0f72a5be322ae166ba78c40b39fb91fa98b84c6c26869d93cf3351f9cb43", 0xa4}], 0x5, &(0x7f00000007c0)=[{0x58, 0x110, 0x8, "88f9c3ecbfcd13378676f87c7a05118b72936b7fc9117406c869eaadc87bdbab8ba9b91433df5b1c65efef57d9c95d50e06a45fd95b5c50d9704a79fbca702a13c"}], 0x58}}], 0x2, 0x8080) (async, rerun: 32) ppoll(&(0x7f0000001b80)=[{r0, 0x3280}], 0x1, &(0x7f0000000140)={0x77359400}, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "342a09bd087884993d494b1819836e143c9b1fe1a6201a19b339b343e099643b27a1c9c16f1a6b040d0cbc74ad9fa87243a0fc9063e90f9386039ed1a0ae630f82fa403562f4121c197cfe58640cddc1854b33c86101ce1e08d09a5f83204bf6d9632bbcddcdb4e23d6d52fe0df9bc05671ae8ccf7d5fb0cce25098c444d0728749b441689c5b24fa1f4033a00cc3d5c46a909"}, 0x97) 10:51:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0x5, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x900, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:20 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x13, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) (async, rerun: 64) socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:51:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x7000000) 10:51:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r0}) accept4$alg(r4, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) 10:51:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0x6, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0xa00, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:21 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x30f, 0x0, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:51:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0x7, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0xf00, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0x8, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 253.268530][ T25] kauditd_printk_skb: 8 callbacks suppressed [ 253.268546][ T25] audit: type=1804 audit(1645786281.099:241): pid=9918 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3056829688/syzkaller.0VW25A/203/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 253.402985][ T25] audit: type=1804 audit(1645786281.239:242): pid=9921 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/169/memory.events" dev="sda1" ino=1173 res=1 errno=0 [ 253.483063][ T25] audit: type=1804 audit(1645786281.269:243): pid=9926 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/169/memory.events" dev="sda1" ino=1173 res=1 errno=0 10:51:21 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000005440), 0xfb93a852dd518c, 0x0) sendmmsg(r1, &(0x7f0000000840)=[{{&(0x7f0000000180)=@qipcrtr, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="11c6b4b1600227f336f11cea4191d424a04fe0ae9cab18bb026a1308d23ebf8a0cdddd736404902a3cd1a8728b59df13250331e2e192a77d68ce3888bb64e1ee9db76ada820cf7dc7a3584936b32b95799ffe4cb7bb86781a7100603f52ac6e1abac5856a132d9f46e7444891fcf31a3e95c9d01d431e963d68e81fa6c5695d8d4001cadd93f864211e079518c18c870b8723f4e7aa34f67f7298464545bcfec5b749c622d33e89eb8a910f344b1f783d45d633f5cb1ddf93a104f4f5d394bb237ceb7fec2", 0xc5}, {&(0x7f0000000300)="9beb8f0646205f7d1550583fd77407b73ac357055fe1519e5184a6b58ca0658c8b5783562885b1ccd873cf50aa586772ee115aa8cdc36d922dd9b87cb66c481862cd6c6db6f798eb6064656b39a53e46c4cf21e43424a591fdab2d1d1d", 0x5d}], 0x2}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)="1796e2246dceb8422b9933cda67ab9a23c4eabca7ae0aa178e08df0414e4dba9d83ce4dbfb154408ca38968d943c5f0f58b68dba285d8d2f509859bdb0c4a33b2effe7cf5a304596a0ed4bf377dc8981243fb1d8c30375503b8874cafc3bc9a99b351804f33f0529b996b333e2ba53bdf288a82b5ac806c5511975f0155b38075f959131e06e90b5de2b8b4caa956a963e77795985a37c6c0ff711601a860728b289f62880ecb0f56c15a63c5758f0f6202eed5653115c26", 0xb8}, {&(0x7f0000000440)='L', 0x1}, {&(0x7f0000000480)="cca0a4f8db6303d348aa90db6559c9b4ca0032da383bbe5b6529f8b7b7715cb6034a0954b5c38c917ee013e609cbf30efe8e029df7506bb92f6a75ad32421574ebde37a6390a399bcfa13f31904678d8f10fc3acb820e899b7eb20aa89da0b5bd11edfe178c7e80e868a8f47ddd68c402d5d8401f6a2afc6a50af22bcd7eb027a0a02dda2e09080c2ada68535c28c3cd7679ed89f3ad37a4aa9b311787c51f4f15da0352d6dcf5e557e3e206dd9835c4840d7d23b5bb5d198736b0722e69674dbeefabe0422a3e94827eb89b1c001b5e2e3125773cdd39c532e8b820fac1ef1e8a65701a63b522a5509df9", 0xeb}, {&(0x7f0000000580)="9b80737f4761ca299c998a34f258b71cd1a97d0ee99fa5c8935fd6cab448f87589a63f286f90544f0066017c922e940f6abcf87bf8b6af959ffeb71706f2f2c7c0ab133d95bb8c837b8b54260e7182f45afa551fed80b347a8aa91a3722de8f6991ad4cc30d5f7bdb1ee277006ccbde8c9ce0176c190842bf039440f5293989a34b328958b710f527f64c4f3d2a8aaab42f9f725f56f625a081b004a4938f09c9f945bc546bfd8d936262ab91c820302b97ce50d5b12f7c2657acf44cefebd017fc28b6485cecdb7860d745fc2e61ac274de9cc0f2591ecaff66e4bfcc3e076ac876a5757c6509a0b86de41ad876", 0xee}, {&(0x7f0000000680)="578c2e19f4d16d2301041f33ac97d64a7043c91749de672b73e0d911c35723b8450ca8974b540a2ec65320e8253b71708e9b05b714f96ecf59b1f03fa47d53ae9005d5b9a171c2ca03e2fb08dfd9297900fb74f5e73d5399cc4d06b224b6fc0493513b52110b0eaf28670c78cfe95d9c33be3c783370f76acc4bc8dae5511b840c43d4c4a3cf0f72a5be322ae166ba78c40b39fb91fa98b84c6c26869d93cf3351f9cb43", 0xa4}], 0x5, &(0x7f00000007c0)=[{0x58, 0x110, 0x8, "88f9c3ecbfcd13378676f87c7a05118b72936b7fc9117406c869eaadc87bdbab8ba9b91433df5b1c65efef57d9c95d50e06a45fd95b5c50d9704a79fbca702a13c"}], 0x58}}], 0x2, 0x8080) ppoll(&(0x7f0000001b80)=[{r0, 0x3280}], 0x1, &(0x7f0000000140)={0x77359400}, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "342a09bd087884993d494b1819836e143c9b1fe1a6201a19b339b343e099643b27a1c9c16f1a6b040d0cbc74ad9fa87243a0fc9063e90f9386039ed1a0ae630f82fa403562f4121c197cfe58640cddc1854b33c86101ce1e08d09a5f83204bf6d9632bbcddcdb4e23d6d52fe0df9bc05671ae8ccf7d5fb0cce25098c444d0728749b441689c5b24fa1f4033a00cc3d5c46a909"}, 0x97) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001980)) (async) sendmmsg(r0, &(0x7f0000005440), 0xfb93a852dd518c, 0x0) (async) sendmmsg(r1, &(0x7f0000000840)=[{{&(0x7f0000000180)=@qipcrtr, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="11c6b4b1600227f336f11cea4191d424a04fe0ae9cab18bb026a1308d23ebf8a0cdddd736404902a3cd1a8728b59df13250331e2e192a77d68ce3888bb64e1ee9db76ada820cf7dc7a3584936b32b95799ffe4cb7bb86781a7100603f52ac6e1abac5856a132d9f46e7444891fcf31a3e95c9d01d431e963d68e81fa6c5695d8d4001cadd93f864211e079518c18c870b8723f4e7aa34f67f7298464545bcfec5b749c622d33e89eb8a910f344b1f783d45d633f5cb1ddf93a104f4f5d394bb237ceb7fec2", 0xc5}, {&(0x7f0000000300)="9beb8f0646205f7d1550583fd77407b73ac357055fe1519e5184a6b58ca0658c8b5783562885b1ccd873cf50aa586772ee115aa8cdc36d922dd9b87cb66c481862cd6c6db6f798eb6064656b39a53e46c4cf21e43424a591fdab2d1d1d", 0x5d}], 0x2}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)="1796e2246dceb8422b9933cda67ab9a23c4eabca7ae0aa178e08df0414e4dba9d83ce4dbfb154408ca38968d943c5f0f58b68dba285d8d2f509859bdb0c4a33b2effe7cf5a304596a0ed4bf377dc8981243fb1d8c30375503b8874cafc3bc9a99b351804f33f0529b996b333e2ba53bdf288a82b5ac806c5511975f0155b38075f959131e06e90b5de2b8b4caa956a963e77795985a37c6c0ff711601a860728b289f62880ecb0f56c15a63c5758f0f6202eed5653115c26", 0xb8}, {&(0x7f0000000440)='L', 0x1}, {&(0x7f0000000480)="cca0a4f8db6303d348aa90db6559c9b4ca0032da383bbe5b6529f8b7b7715cb6034a0954b5c38c917ee013e609cbf30efe8e029df7506bb92f6a75ad32421574ebde37a6390a399bcfa13f31904678d8f10fc3acb820e899b7eb20aa89da0b5bd11edfe178c7e80e868a8f47ddd68c402d5d8401f6a2afc6a50af22bcd7eb027a0a02dda2e09080c2ada68535c28c3cd7679ed89f3ad37a4aa9b311787c51f4f15da0352d6dcf5e557e3e206dd9835c4840d7d23b5bb5d198736b0722e69674dbeefabe0422a3e94827eb89b1c001b5e2e3125773cdd39c532e8b820fac1ef1e8a65701a63b522a5509df9", 0xeb}, {&(0x7f0000000580)="9b80737f4761ca299c998a34f258b71cd1a97d0ee99fa5c8935fd6cab448f87589a63f286f90544f0066017c922e940f6abcf87bf8b6af959ffeb71706f2f2c7c0ab133d95bb8c837b8b54260e7182f45afa551fed80b347a8aa91a3722de8f6991ad4cc30d5f7bdb1ee277006ccbde8c9ce0176c190842bf039440f5293989a34b328958b710f527f64c4f3d2a8aaab42f9f725f56f625a081b004a4938f09c9f945bc546bfd8d936262ab91c820302b97ce50d5b12f7c2657acf44cefebd017fc28b6485cecdb7860d745fc2e61ac274de9cc0f2591ecaff66e4bfcc3e076ac876a5757c6509a0b86de41ad876", 0xee}, {&(0x7f0000000680)="578c2e19f4d16d2301041f33ac97d64a7043c91749de672b73e0d911c35723b8450ca8974b540a2ec65320e8253b71708e9b05b714f96ecf59b1f03fa47d53ae9005d5b9a171c2ca03e2fb08dfd9297900fb74f5e73d5399cc4d06b224b6fc0493513b52110b0eaf28670c78cfe95d9c33be3c783370f76acc4bc8dae5511b840c43d4c4a3cf0f72a5be322ae166ba78c40b39fb91fa98b84c6c26869d93cf3351f9cb43", 0xa4}], 0x5, &(0x7f00000007c0)=[{0x58, 0x110, 0x8, "88f9c3ecbfcd13378676f87c7a05118b72936b7fc9117406c869eaadc87bdbab8ba9b91433df5b1c65efef57d9c95d50e06a45fd95b5c50d9704a79fbca702a13c"}], 0x58}}], 0x2, 0x8080) (async) ppoll(&(0x7f0000001b80)=[{r0, 0x3280}], 0x1, &(0x7f0000000140)={0x77359400}, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "342a09bd087884993d494b1819836e143c9b1fe1a6201a19b339b343e099643b27a1c9c16f1a6b040d0cbc74ad9fa87243a0fc9063e90f9386039ed1a0ae630f82fa403562f4121c197cfe58640cddc1854b33c86101ce1e08d09a5f83204bf6d9632bbcddcdb4e23d6d52fe0df9bc05671ae8ccf7d5fb0cce25098c444d0728749b441689c5b24fa1f4033a00cc3d5c46a909"}, 0x97) (async) 10:51:21 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x30f, 0x0, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x30f, 0x0, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}}, 0x10) (async) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) (async) 10:51:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0x9, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x1f00, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x8000000) 10:51:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x1000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f00000001c0)=0x40, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000300)=@tipc=@name, 0x80, &(0x7f0000000000)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000380)=""/169, 0xa9}, {&(0x7f0000001600)=""/244, 0xf4}], 0x3, &(0x7f0000001700)=""/222, 0xde}, 0x3c25}], 0x1, 0x120, &(0x7f0000000440)={0x0, 0x989680}) connect$inet(r1, &(0x7f0000000140)={0x2, 0x2, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000020000000058000b4c24ca945f64009400ff0325010ebc000000000000008000f0ff080000000000000000dd00000010000100030c10000000020000000000", 0x58}], 0x1) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r3, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0xc0000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}, 0x0, 0x0, 0x14, 0x0, "3b52053bf13b1fd3c66e38a85810408bead84bef78b25fe6b15b8ee055cd68d901331c0f2403ed5a7362fff73c887cda7a3a05bc85fc8b4a52348dc98282f5d0e12a37cac117692ce763dae5a84fb2bd"}, 0xd8) 10:51:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x2000, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xb, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:21 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x30f, 0x0, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}}, 0x10) (async) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:51:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x1000) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f00000001c0)=0x40, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000300)=@tipc=@name, 0x80, &(0x7f0000000000)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000380)=""/169, 0xa9}, {&(0x7f0000001600)=""/244, 0xf4}], 0x3, &(0x7f0000001700)=""/222, 0xde}, 0x3c25}], 0x1, 0x120, &(0x7f0000000440)={0x0, 0x989680}) (async) connect$inet(r1, &(0x7f0000000140)={0x2, 0x2, @local}, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000020000000058000b4c24ca945f64009400ff0325010ebc000000000000008000f0ff080000000000000000dd00000010000100030c10000000020000000000", 0x58}], 0x1) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r3, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) (async) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0xc0000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}, 0x0, 0x0, 0x14, 0x0, "3b52053bf13b1fd3c66e38a85810408bead84bef78b25fe6b15b8ee055cd68d901331c0f2403ed5a7362fff73c887cda7a3a05bc85fc8b4a52348dc98282f5d0e12a37cac117692ce763dae5a84fb2bd"}, 0xd8) 10:51:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x2c01, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xc, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x1000) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f00000001c0)=0x40, 0x4) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000300)=@tipc=@name, 0x80, &(0x7f0000000000)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000380)=""/169, 0xa9}, {&(0x7f0000001600)=""/244, 0xf4}], 0x3, &(0x7f0000001700)=""/222, 0xde}, 0x3c25}], 0x1, 0x120, &(0x7f0000000440)={0x0, 0x989680}) (async) connect$inet(r1, &(0x7f0000000140)={0x2, 0x2, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000020000000058000b4c24ca945f64009400ff0325010ebc000000000000008000f0ff080000000000000000dd00000010000100030c10000000020000000000", 0x58}], 0x1) (async) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r3, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010000000094040100"]}) (async) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0xc0000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}, 0x0, 0x0, 0x14, 0x0, "3b52053bf13b1fd3c66e38a85810408bead84bef78b25fe6b15b8ee055cd68d901331c0f2403ed5a7362fff73c887cda7a3a05bc85fc8b4a52348dc98282f5d0e12a37cac117692ce763dae5a84fb2bd"}, 0xd8) 10:51:22 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0xfffffffffffffd7a) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="2c01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000480", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400fbffffff3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB], 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@empty}, 0x14) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:51:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0x10, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 254.349647][ T25] audit: type=1804 audit(1645786282.179:244): pid=9956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/170/memory.events" dev="sda1" ino=1169 res=1 errno=0 10:51:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x3f00, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 254.436339][ T25] audit: type=1804 audit(1645786282.229:245): pid=9966 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/170/memory.events" dev="sda1" ino=1169 res=1 errno=0 10:51:22 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0xa000000) 10:51:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0x14, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r2, 0x8, 0x70bd2b, 0x5, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8001}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c080}, 0x20040800) 10:51:22 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) (async) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0xfffffffffffffd7a) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="2c01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000480", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400fbffffff3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB], 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) (async) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@empty}, 0x14) (async) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) (async) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:51:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x4000, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r0], 0xa90}, 0x1, 0x0, 0x0, 0x4}, 0x400d014) 10:51:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r0], 0xa90}, 0x1, 0x0, 0x0, 0x4}, 0x400d014) 10:51:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x6000, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r2, 0x8, 0x70bd2b, 0x5, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8001}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c080}, 0x20040800) 10:51:22 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0xfffffffffffffd7a) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="2c01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000480", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400fbffffff3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB], 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@empty}, 0x14) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0xfffffffffffffd7a) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="2c01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000480", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400fbffffff3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB], 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) (async) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@empty}, 0x14) (async) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmmsg$inet6(r5, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) (async) 10:51:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r0], 0xa90}, 0x1, 0x0, 0x0, 0x4}, 0x400d014) [ 255.086424][ T25] audit: type=1804 audit(1645786282.919:246): pid=10012 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/171/memory.events" dev="sda1" ino=1162 res=1 errno=0 [ 255.140014][ T25] audit: type=1804 audit(1645786282.949:247): pid=10021 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/171/memory.events" dev="sda1" ino=1162 res=1 errno=0 10:51:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r2, 0x8, 0x70bd2b, 0x5, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8001}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c080}, 0x20040800) 10:51:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x2, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x10000000) 10:51:23 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x80fe, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:23 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d00010000ff03000000000000", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="2c01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400fbffffff3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB], 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000cc0)=@deltfilter={0x8dc, 0x2d, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0xc, 0xb}, {0x10, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffd}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_rsvp={{0x9}, {0x88c, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xa, 0xfff3}}, @TCA_RSVP_SRC={0x8, 0x3, @multicast2}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xf63, 0x5, 0x3}, {0x6, 0x4, 0x75}, 0x16, 0xd7, 0x89}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x7, 0x10}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xd, 0x2}}, @TCA_RSVP_POLICE={0x848, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xff, 0x1000, 0x9, 0xba, 0x9, 0x80000000, 0x1, 0x7fff, 0x200, 0x84, 0x5, 0x40, 0x1, 0x0, 0x2, 0x7, 0x8, 0x0, 0x25, 0x1, 0x80b723, 0x5c, 0xff, 0x81, 0x80000001, 0x8, 0xc481, 0x7fffffff, 0x10001, 0xffffffff, 0x4, 0x7, 0x7fffffff, 0x4f, 0x5, 0x5, 0x100, 0x0, 0x5, 0xbca5, 0x5, 0x200, 0x64, 0x87db, 0xffffffe6, 0x9, 0x3, 0x69180000, 0x3ff, 0x4, 0xffffffe1, 0x4, 0xffe, 0x9322, 0x4, 0x1, 0x8001, 0x4b4, 0x9, 0x2f97fad2, 0x8, 0xfffffc01, 0x8, 0x200, 0x400, 0x6, 0x6, 0x30000, 0x6, 0x5, 0xfffffe01, 0x80000000, 0x6, 0x401, 0x0, 0x1, 0xff, 0x100, 0x2, 0x1ff, 0x1f, 0x2e57, 0x96c, 0x6931, 0x8, 0x6, 0x3ff, 0x3, 0x7, 0xd52, 0x7, 0x9, 0xff, 0xdde, 0x3, 0x8, 0x7, 0x7d4f, 0x2, 0x401, 0x7f, 0x3, 0x8001, 0xab, 0x101, 0x7, 0x9, 0x2, 0x0, 0x8, 0x7fff, 0x8, 0xd5a, 0x8000, 0x7fffffff, 0x70, 0x2c, 0x3, 0x548c8fa6, 0x7, 0x3, 0x80, 0x7, 0x940, 0x9, 0x0, 0x6, 0x9, 0x5, 0x5, 0x80000000, 0x4, 0x20, 0x1, 0xffff4f65, 0x5, 0xd71, 0x800, 0x8, 0x80000001, 0x2991f23b, 0x5, 0x2, 0x80000000, 0x6, 0x80000001, 0xe101, 0x7, 0x4, 0x0, 0xbff7, 0xff, 0x9, 0x4, 0x2, 0x1, 0x4, 0x1f, 0x0, 0x4, 0x5, 0x6, 0x5, 0x552f, 0x3, 0x3f, 0x5, 0x3, 0x4, 0x800, 0x3, 0x0, 0x81, 0xfffffffe, 0x2, 0x9, 0xffff3bf8, 0x4, 0x9e, 0x1ff, 0x8, 0x3, 0x1, 0x0, 0x1f, 0x1, 0xfffff801, 0x8001, 0x3, 0xcb29, 0x5, 0x1, 0x1, 0x5, 0x3, 0x7, 0x80000001, 0x7fff, 0x1, 0x1, 0x236, 0x7f, 0x5, 0x80000000, 0xa400, 0x2, 0x7, 0x80000000, 0x7, 0xc2, 0x1000, 0x6, 0x3, 0x7fff, 0x3, 0x0, 0x2, 0x7fff, 0x187, 0xf9, 0x0, 0x81, 0x2d, 0x6, 0x5, 0xfffff001, 0x7f, 0x1, 0x9, 0xf76, 0x400, 0x3, 0x9903, 0xfffffffe, 0x3, 0x1ff, 0x7, 0x8, 0x5, 0x5, 0x7, 0x54f, 0x80, 0x0, 0x2, 0x0, 0x2, 0x975, 0x8, 0x3f, 0x6, 0x1, 0x1, 0x3, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6c5, 0x34, 0x100, 0x81, 0xfffffff8, 0x9, 0x2, 0x7, 0x1, 0x7fffffff, 0x3, 0x8, 0x1, 0x8, 0x0, 0x2, 0x8724, 0x10001, 0x3, 0xffffff80, 0x10000, 0x5, 0x5, 0x6, 0xfffffffa, 0x6216, 0x9, 0x8, 0x2, 0xd2a, 0x7, 0x8, 0x5, 0x1, 0x1, 0x40, 0x9, 0x9, 0x4, 0x0, 0x3, 0xb1, 0x1, 0x8, 0xbb2, 0x7fff, 0x1, 0x80000001, 0x2, 0x6, 0x10000000, 0x81, 0x521, 0x0, 0xfffffff7, 0x1, 0xfffffff8, 0x76, 0x2, 0x7, 0x2, 0xfffffff8, 0x401, 0xffffff46, 0x0, 0x2, 0x7, 0x4, 0xfffff800, 0x3, 0x1f, 0x8, 0x1f, 0x6, 0xfff, 0x7f, 0x52, 0x0, 0xac, 0x2a, 0x6, 0x8c, 0xff, 0x1, 0x3, 0x9, 0x1, 0x5d61, 0x8, 0x10000000, 0x9, 0x1000, 0x0, 0x8, 0x5d, 0x7, 0xffffffff, 0x0, 0x6, 0x5, 0x6, 0x80000001, 0x8, 0x80, 0x200, 0x200, 0x1, 0x2, 0xda5, 0x8, 0x1, 0xfb8f, 0x6, 0x401, 0x4, 0x101, 0xbe6, 0x4000, 0x7, 0x6, 0x3f, 0x3ff, 0x8000, 0x3, 0x101, 0x101, 0xfffffc01, 0x2, 0x7fffffff, 0x3, 0x80000000, 0x1, 0x0, 0x3, 0x4, 0x1, 0xfffffff8, 0x5, 0x9, 0xfe, 0x1000, 0x1000, 0x10000, 0x388, 0x1f, 0x4, 0x9, 0xff, 0x10001, 0x0, 0x2, 0x10000, 0x6, 0x7, 0x2, 0x8, 0x70367198, 0x1ff, 0x7, 0x7, 0x354, 0x4e, 0x401, 0x0, 0x0, 0xffff, 0x897, 0x3a9, 0x4, 0x9, 0x7, 0xfc000000, 0x3f, 0x7013, 0x5, 0xff, 0x0, 0x1f, 0x8001, 0xbf, 0x7ff, 0x7, 0x2af, 0x81, 0x20, 0xd091, 0x200, 0x10001, 0xfaf7, 0xffffffe1, 0x2, 0x5, 0x7, 0xd2, 0x5fa, 0x0, 0xb7, 0x400, 0x8, 0x7, 0x409, 0xfffffffa, 0xff, 0x4b05, 0x200, 0xc952, 0x0, 0x6, 0x7ff, 0x8, 0x1, 0x0, 0x69a1, 0x3, 0x401, 0x4, 0x1, 0x19f, 0x5e, 0x17, 0x3, 0x0, 0x0, 0xfffffffd, 0x4, 0x7, 0x7, 0x3, 0xffff7fff, 0xfffffffc, 0x3, 0xfffffff9, 0x6, 0x81, 0x2, 0x20, 0x8, 0x7ff, 0x7f, 0x8, 0x50000000, 0x6, 0x80000000, 0x6, 0x6a, 0x80000000, 0x1, 0x7, 0xe3, 0xfffffffb, 0x2, 0x1f, 0xffffff38, 0x7fffffff, 0xffffffff, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0x200, 0xe3, 0xf38, {0x6f, 0x2, 0x1, 0x1, 0x2, 0x6}, {0x1, 0x2, 0x0, 0x40, 0x1, 0x10000}, 0x5, 0x2, 0x3}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x8dc}, 0x1, 0x0, 0x0, 0x8010}, 0x24044005) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:51:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x8000000) 10:51:23 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0xc0fe, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x3, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:23 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d00010000ff03000000000000", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="2c01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400fbffffff3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB], 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000cc0)=@deltfilter={0x8dc, 0x2d, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0xc, 0xb}, {0x10, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffd}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_rsvp={{0x9}, {0x88c, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xa, 0xfff3}}, @TCA_RSVP_SRC={0x8, 0x3, @multicast2}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xf63, 0x5, 0x3}, {0x6, 0x4, 0x75}, 0x16, 0xd7, 0x89}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x7, 0x10}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xd, 0x2}}, @TCA_RSVP_POLICE={0x848, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xff, 0x1000, 0x9, 0xba, 0x9, 0x80000000, 0x1, 0x7fff, 0x200, 0x84, 0x5, 0x40, 0x1, 0x0, 0x2, 0x7, 0x8, 0x0, 0x25, 0x1, 0x80b723, 0x5c, 0xff, 0x81, 0x80000001, 0x8, 0xc481, 0x7fffffff, 0x10001, 0xffffffff, 0x4, 0x7, 0x7fffffff, 0x4f, 0x5, 0x5, 0x100, 0x0, 0x5, 0xbca5, 0x5, 0x200, 0x64, 0x87db, 0xffffffe6, 0x9, 0x3, 0x69180000, 0x3ff, 0x4, 0xffffffe1, 0x4, 0xffe, 0x9322, 0x4, 0x1, 0x8001, 0x4b4, 0x9, 0x2f97fad2, 0x8, 0xfffffc01, 0x8, 0x200, 0x400, 0x6, 0x6, 0x30000, 0x6, 0x5, 0xfffffe01, 0x80000000, 0x6, 0x401, 0x0, 0x1, 0xff, 0x100, 0x2, 0x1ff, 0x1f, 0x2e57, 0x96c, 0x6931, 0x8, 0x6, 0x3ff, 0x3, 0x7, 0xd52, 0x7, 0x9, 0xff, 0xdde, 0x3, 0x8, 0x7, 0x7d4f, 0x2, 0x401, 0x7f, 0x3, 0x8001, 0xab, 0x101, 0x7, 0x9, 0x2, 0x0, 0x8, 0x7fff, 0x8, 0xd5a, 0x8000, 0x7fffffff, 0x70, 0x2c, 0x3, 0x548c8fa6, 0x7, 0x3, 0x80, 0x7, 0x940, 0x9, 0x0, 0x6, 0x9, 0x5, 0x5, 0x80000000, 0x4, 0x20, 0x1, 0xffff4f65, 0x5, 0xd71, 0x800, 0x8, 0x80000001, 0x2991f23b, 0x5, 0x2, 0x80000000, 0x6, 0x80000001, 0xe101, 0x7, 0x4, 0x0, 0xbff7, 0xff, 0x9, 0x4, 0x2, 0x1, 0x4, 0x1f, 0x0, 0x4, 0x5, 0x6, 0x5, 0x552f, 0x3, 0x3f, 0x5, 0x3, 0x4, 0x800, 0x3, 0x0, 0x81, 0xfffffffe, 0x2, 0x9, 0xffff3bf8, 0x4, 0x9e, 0x1ff, 0x8, 0x3, 0x1, 0x0, 0x1f, 0x1, 0xfffff801, 0x8001, 0x3, 0xcb29, 0x5, 0x1, 0x1, 0x5, 0x3, 0x7, 0x80000001, 0x7fff, 0x1, 0x1, 0x236, 0x7f, 0x5, 0x80000000, 0xa400, 0x2, 0x7, 0x80000000, 0x7, 0xc2, 0x1000, 0x6, 0x3, 0x7fff, 0x3, 0x0, 0x2, 0x7fff, 0x187, 0xf9, 0x0, 0x81, 0x2d, 0x6, 0x5, 0xfffff001, 0x7f, 0x1, 0x9, 0xf76, 0x400, 0x3, 0x9903, 0xfffffffe, 0x3, 0x1ff, 0x7, 0x8, 0x5, 0x5, 0x7, 0x54f, 0x80, 0x0, 0x2, 0x0, 0x2, 0x975, 0x8, 0x3f, 0x6, 0x1, 0x1, 0x3, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6c5, 0x34, 0x100, 0x81, 0xfffffff8, 0x9, 0x2, 0x7, 0x1, 0x7fffffff, 0x3, 0x8, 0x1, 0x8, 0x0, 0x2, 0x8724, 0x10001, 0x3, 0xffffff80, 0x10000, 0x5, 0x5, 0x6, 0xfffffffa, 0x6216, 0x9, 0x8, 0x2, 0xd2a, 0x7, 0x8, 0x5, 0x1, 0x1, 0x40, 0x9, 0x9, 0x4, 0x0, 0x3, 0xb1, 0x1, 0x8, 0xbb2, 0x7fff, 0x1, 0x80000001, 0x2, 0x6, 0x10000000, 0x81, 0x521, 0x0, 0xfffffff7, 0x1, 0xfffffff8, 0x76, 0x2, 0x7, 0x2, 0xfffffff8, 0x401, 0xffffff46, 0x0, 0x2, 0x7, 0x4, 0xfffff800, 0x3, 0x1f, 0x8, 0x1f, 0x6, 0xfff, 0x7f, 0x52, 0x0, 0xac, 0x2a, 0x6, 0x8c, 0xff, 0x1, 0x3, 0x9, 0x1, 0x5d61, 0x8, 0x10000000, 0x9, 0x1000, 0x0, 0x8, 0x5d, 0x7, 0xffffffff, 0x0, 0x6, 0x5, 0x6, 0x80000001, 0x8, 0x80, 0x200, 0x200, 0x1, 0x2, 0xda5, 0x8, 0x1, 0xfb8f, 0x6, 0x401, 0x4, 0x101, 0xbe6, 0x4000, 0x7, 0x6, 0x3f, 0x3ff, 0x8000, 0x3, 0x101, 0x101, 0xfffffc01, 0x2, 0x7fffffff, 0x3, 0x80000000, 0x1, 0x0, 0x3, 0x4, 0x1, 0xfffffff8, 0x5, 0x9, 0xfe, 0x1000, 0x1000, 0x10000, 0x388, 0x1f, 0x4, 0x9, 0xff, 0x10001, 0x0, 0x2, 0x10000, 0x6, 0x7, 0x2, 0x8, 0x70367198, 0x1ff, 0x7, 0x7, 0x354, 0x4e, 0x401, 0x0, 0x0, 0xffff, 0x897, 0x3a9, 0x4, 0x9, 0x7, 0xfc000000, 0x3f, 0x7013, 0x5, 0xff, 0x0, 0x1f, 0x8001, 0xbf, 0x7ff, 0x7, 0x2af, 0x81, 0x20, 0xd091, 0x200, 0x10001, 0xfaf7, 0xffffffe1, 0x2, 0x5, 0x7, 0xd2, 0x5fa, 0x0, 0xb7, 0x400, 0x8, 0x7, 0x409, 0xfffffffa, 0xff, 0x4b05, 0x200, 0xc952, 0x0, 0x6, 0x7ff, 0x8, 0x1, 0x0, 0x69a1, 0x3, 0x401, 0x4, 0x1, 0x19f, 0x5e, 0x17, 0x3, 0x0, 0x0, 0xfffffffd, 0x4, 0x7, 0x7, 0x3, 0xffff7fff, 0xfffffffc, 0x3, 0xfffffff9, 0x6, 0x81, 0x2, 0x20, 0x8, 0x7ff, 0x7f, 0x8, 0x50000000, 0x6, 0x80000000, 0x6, 0x6a, 0x80000000, 0x1, 0x7, 0xe3, 0xfffffffb, 0x2, 0x1f, 0xffffff38, 0x7fffffff, 0xffffffff, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0x200, 0xe3, 0xf38, {0x6f, 0x2, 0x1, 0x1, 0x2, 0x6}, {0x1, 0x2, 0x0, 0x40, 0x1, 0x10000}, 0x5, 0x2, 0x3}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x8dc}, 0x1, 0x0, 0x0, 0x8010}, 0x24044005) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d00010000ff03000000000000", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="2c01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c656400000000000000000000000000050003000600000004000400080006002c5ebaf432d2f4adae2b9479d683c9cf870e445ce9a1aa1c65d15c5da8595fc3428f2d31a90a4bf380acaa0797c93c5bfee15d1e47a631772939e56380b61f2af8e021697a0b790c7d981e8885b47fc256d2e47362578cd72a4414f6355dff70c862c322779535872c126c52c5f4b776639d2d5d890d87dc24b3a3d476164b0b076d20c68cc5094eae377a7b76bf3a5ccc38df28494e00384235a28c5c6a232a6bb202d37d4853180f560cfc78b2637cff04590b217d79a5efba06fb2edda853cc17a19b72b7dec315163bc98fb85220f38a10ac6580d537564e25acc7a76647fb1764b59bfe75aa95ad665781a3d2", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400fbffffff3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB], 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000cc0)=@deltfilter={0x8dc, 0x2d, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0xc, 0xb}, {0x10, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffd}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_rsvp={{0x9}, {0x88c, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xa, 0xfff3}}, @TCA_RSVP_SRC={0x8, 0x3, @multicast2}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xf63, 0x5, 0x3}, {0x6, 0x4, 0x75}, 0x16, 0xd7, 0x89}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x7, 0x10}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xd, 0x2}}, @TCA_RSVP_POLICE={0x848, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xff, 0x1000, 0x9, 0xba, 0x9, 0x80000000, 0x1, 0x7fff, 0x200, 0x84, 0x5, 0x40, 0x1, 0x0, 0x2, 0x7, 0x8, 0x0, 0x25, 0x1, 0x80b723, 0x5c, 0xff, 0x81, 0x80000001, 0x8, 0xc481, 0x7fffffff, 0x10001, 0xffffffff, 0x4, 0x7, 0x7fffffff, 0x4f, 0x5, 0x5, 0x100, 0x0, 0x5, 0xbca5, 0x5, 0x200, 0x64, 0x87db, 0xffffffe6, 0x9, 0x3, 0x69180000, 0x3ff, 0x4, 0xffffffe1, 0x4, 0xffe, 0x9322, 0x4, 0x1, 0x8001, 0x4b4, 0x9, 0x2f97fad2, 0x8, 0xfffffc01, 0x8, 0x200, 0x400, 0x6, 0x6, 0x30000, 0x6, 0x5, 0xfffffe01, 0x80000000, 0x6, 0x401, 0x0, 0x1, 0xff, 0x100, 0x2, 0x1ff, 0x1f, 0x2e57, 0x96c, 0x6931, 0x8, 0x6, 0x3ff, 0x3, 0x7, 0xd52, 0x7, 0x9, 0xff, 0xdde, 0x3, 0x8, 0x7, 0x7d4f, 0x2, 0x401, 0x7f, 0x3, 0x8001, 0xab, 0x101, 0x7, 0x9, 0x2, 0x0, 0x8, 0x7fff, 0x8, 0xd5a, 0x8000, 0x7fffffff, 0x70, 0x2c, 0x3, 0x548c8fa6, 0x7, 0x3, 0x80, 0x7, 0x940, 0x9, 0x0, 0x6, 0x9, 0x5, 0x5, 0x80000000, 0x4, 0x20, 0x1, 0xffff4f65, 0x5, 0xd71, 0x800, 0x8, 0x80000001, 0x2991f23b, 0x5, 0x2, 0x80000000, 0x6, 0x80000001, 0xe101, 0x7, 0x4, 0x0, 0xbff7, 0xff, 0x9, 0x4, 0x2, 0x1, 0x4, 0x1f, 0x0, 0x4, 0x5, 0x6, 0x5, 0x552f, 0x3, 0x3f, 0x5, 0x3, 0x4, 0x800, 0x3, 0x0, 0x81, 0xfffffffe, 0x2, 0x9, 0xffff3bf8, 0x4, 0x9e, 0x1ff, 0x8, 0x3, 0x1, 0x0, 0x1f, 0x1, 0xfffff801, 0x8001, 0x3, 0xcb29, 0x5, 0x1, 0x1, 0x5, 0x3, 0x7, 0x80000001, 0x7fff, 0x1, 0x1, 0x236, 0x7f, 0x5, 0x80000000, 0xa400, 0x2, 0x7, 0x80000000, 0x7, 0xc2, 0x1000, 0x6, 0x3, 0x7fff, 0x3, 0x0, 0x2, 0x7fff, 0x187, 0xf9, 0x0, 0x81, 0x2d, 0x6, 0x5, 0xfffff001, 0x7f, 0x1, 0x9, 0xf76, 0x400, 0x3, 0x9903, 0xfffffffe, 0x3, 0x1ff, 0x7, 0x8, 0x5, 0x5, 0x7, 0x54f, 0x80, 0x0, 0x2, 0x0, 0x2, 0x975, 0x8, 0x3f, 0x6, 0x1, 0x1, 0x3, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6c5, 0x34, 0x100, 0x81, 0xfffffff8, 0x9, 0x2, 0x7, 0x1, 0x7fffffff, 0x3, 0x8, 0x1, 0x8, 0x0, 0x2, 0x8724, 0x10001, 0x3, 0xffffff80, 0x10000, 0x5, 0x5, 0x6, 0xfffffffa, 0x6216, 0x9, 0x8, 0x2, 0xd2a, 0x7, 0x8, 0x5, 0x1, 0x1, 0x40, 0x9, 0x9, 0x4, 0x0, 0x3, 0xb1, 0x1, 0x8, 0xbb2, 0x7fff, 0x1, 0x80000001, 0x2, 0x6, 0x10000000, 0x81, 0x521, 0x0, 0xfffffff7, 0x1, 0xfffffff8, 0x76, 0x2, 0x7, 0x2, 0xfffffff8, 0x401, 0xffffff46, 0x0, 0x2, 0x7, 0x4, 0xfffff800, 0x3, 0x1f, 0x8, 0x1f, 0x6, 0xfff, 0x7f, 0x52, 0x0, 0xac, 0x2a, 0x6, 0x8c, 0xff, 0x1, 0x3, 0x9, 0x1, 0x5d61, 0x8, 0x10000000, 0x9, 0x1000, 0x0, 0x8, 0x5d, 0x7, 0xffffffff, 0x0, 0x6, 0x5, 0x6, 0x80000001, 0x8, 0x80, 0x200, 0x200, 0x1, 0x2, 0xda5, 0x8, 0x1, 0xfb8f, 0x6, 0x401, 0x4, 0x101, 0xbe6, 0x4000, 0x7, 0x6, 0x3f, 0x3ff, 0x8000, 0x3, 0x101, 0x101, 0xfffffc01, 0x2, 0x7fffffff, 0x3, 0x80000000, 0x1, 0x0, 0x3, 0x4, 0x1, 0xfffffff8, 0x5, 0x9, 0xfe, 0x1000, 0x1000, 0x10000, 0x388, 0x1f, 0x4, 0x9, 0xff, 0x10001, 0x0, 0x2, 0x10000, 0x6, 0x7, 0x2, 0x8, 0x70367198, 0x1ff, 0x7, 0x7, 0x354, 0x4e, 0x401, 0x0, 0x0, 0xffff, 0x897, 0x3a9, 0x4, 0x9, 0x7, 0xfc000000, 0x3f, 0x7013, 0x5, 0xff, 0x0, 0x1f, 0x8001, 0xbf, 0x7ff, 0x7, 0x2af, 0x81, 0x20, 0xd091, 0x200, 0x10001, 0xfaf7, 0xffffffe1, 0x2, 0x5, 0x7, 0xd2, 0x5fa, 0x0, 0xb7, 0x400, 0x8, 0x7, 0x409, 0xfffffffa, 0xff, 0x4b05, 0x200, 0xc952, 0x0, 0x6, 0x7ff, 0x8, 0x1, 0x0, 0x69a1, 0x3, 0x401, 0x4, 0x1, 0x19f, 0x5e, 0x17, 0x3, 0x0, 0x0, 0xfffffffd, 0x4, 0x7, 0x7, 0x3, 0xffff7fff, 0xfffffffc, 0x3, 0xfffffff9, 0x6, 0x81, 0x2, 0x20, 0x8, 0x7ff, 0x7f, 0x8, 0x50000000, 0x6, 0x80000000, 0x6, 0x6a, 0x80000000, 0x1, 0x7, 0xe3, 0xfffffffb, 0x2, 0x1f, 0xffffff38, 0x7fffffff, 0xffffffff, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0x200, 0xe3, 0xf38, {0x6f, 0x2, 0x1, 0x1, 0x2, 0x6}, {0x1, 0x2, 0x0, 0x40, 0x1, 0x10000}, 0x5, 0x2, 0x3}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x8dc}, 0x1, 0x0, 0x0, 0x8010}, 0x24044005) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmmsg$inet6(r5, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) (async) 10:51:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x4, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 255.494383][ T1228] ieee802154 phy1 wpan1: encryption failed: -22 10:51:23 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0xdc05, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 255.606688][ T25] audit: type=1804 audit(1645786283.439:248): pid=10050 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1380880114/syzkaller.P6AUVX/211/memory.events" dev="sda1" ino=1177 res=1 errno=0 10:51:23 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}]}, 0x38}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYRES16=r1]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01b3000000b90000000003"], 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x60804}, 0x24000091) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r4) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, r6, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5a6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffff584}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc3f}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000010}, 0x14015) 10:51:23 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0xfc00, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 255.801691][ T25] audit: type=1804 audit(1645786283.449:249): pid=10055 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir1380880114/syzkaller.P6AUVX/211/memory.events" dev="sda1" ino=1177 res=1 errno=0 10:51:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x18000000) 10:51:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x5, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:23 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d00010000ff03000000000000", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="2c01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400fbffffff3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB], 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000cc0)=@deltfilter={0x8dc, 0x2d, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0xc, 0xb}, {0x10, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffd}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_rsvp={{0x9}, {0x88c, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xa, 0xfff3}}, @TCA_RSVP_SRC={0x8, 0x3, @multicast2}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xf63, 0x5, 0x3}, {0x6, 0x4, 0x75}, 0x16, 0xd7, 0x89}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x7, 0x10}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xd, 0x2}}, @TCA_RSVP_POLICE={0x848, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xff, 0x1000, 0x9, 0xba, 0x9, 0x80000000, 0x1, 0x7fff, 0x200, 0x84, 0x5, 0x40, 0x1, 0x0, 0x2, 0x7, 0x8, 0x0, 0x25, 0x1, 0x80b723, 0x5c, 0xff, 0x81, 0x80000001, 0x8, 0xc481, 0x7fffffff, 0x10001, 0xffffffff, 0x4, 0x7, 0x7fffffff, 0x4f, 0x5, 0x5, 0x100, 0x0, 0x5, 0xbca5, 0x5, 0x200, 0x64, 0x87db, 0xffffffe6, 0x9, 0x3, 0x69180000, 0x3ff, 0x4, 0xffffffe1, 0x4, 0xffe, 0x9322, 0x4, 0x1, 0x8001, 0x4b4, 0x9, 0x2f97fad2, 0x8, 0xfffffc01, 0x8, 0x200, 0x400, 0x6, 0x6, 0x30000, 0x6, 0x5, 0xfffffe01, 0x80000000, 0x6, 0x401, 0x0, 0x1, 0xff, 0x100, 0x2, 0x1ff, 0x1f, 0x2e57, 0x96c, 0x6931, 0x8, 0x6, 0x3ff, 0x3, 0x7, 0xd52, 0x7, 0x9, 0xff, 0xdde, 0x3, 0x8, 0x7, 0x7d4f, 0x2, 0x401, 0x7f, 0x3, 0x8001, 0xab, 0x101, 0x7, 0x9, 0x2, 0x0, 0x8, 0x7fff, 0x8, 0xd5a, 0x8000, 0x7fffffff, 0x70, 0x2c, 0x3, 0x548c8fa6, 0x7, 0x3, 0x80, 0x7, 0x940, 0x9, 0x0, 0x6, 0x9, 0x5, 0x5, 0x80000000, 0x4, 0x20, 0x1, 0xffff4f65, 0x5, 0xd71, 0x800, 0x8, 0x80000001, 0x2991f23b, 0x5, 0x2, 0x80000000, 0x6, 0x80000001, 0xe101, 0x7, 0x4, 0x0, 0xbff7, 0xff, 0x9, 0x4, 0x2, 0x1, 0x4, 0x1f, 0x0, 0x4, 0x5, 0x6, 0x5, 0x552f, 0x3, 0x3f, 0x5, 0x3, 0x4, 0x800, 0x3, 0x0, 0x81, 0xfffffffe, 0x2, 0x9, 0xffff3bf8, 0x4, 0x9e, 0x1ff, 0x8, 0x3, 0x1, 0x0, 0x1f, 0x1, 0xfffff801, 0x8001, 0x3, 0xcb29, 0x5, 0x1, 0x1, 0x5, 0x3, 0x7, 0x80000001, 0x7fff, 0x1, 0x1, 0x236, 0x7f, 0x5, 0x80000000, 0xa400, 0x2, 0x7, 0x80000000, 0x7, 0xc2, 0x1000, 0x6, 0x3, 0x7fff, 0x3, 0x0, 0x2, 0x7fff, 0x187, 0xf9, 0x0, 0x81, 0x2d, 0x6, 0x5, 0xfffff001, 0x7f, 0x1, 0x9, 0xf76, 0x400, 0x3, 0x9903, 0xfffffffe, 0x3, 0x1ff, 0x7, 0x8, 0x5, 0x5, 0x7, 0x54f, 0x80, 0x0, 0x2, 0x0, 0x2, 0x975, 0x8, 0x3f, 0x6, 0x1, 0x1, 0x3, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6c5, 0x34, 0x100, 0x81, 0xfffffff8, 0x9, 0x2, 0x7, 0x1, 0x7fffffff, 0x3, 0x8, 0x1, 0x8, 0x0, 0x2, 0x8724, 0x10001, 0x3, 0xffffff80, 0x10000, 0x5, 0x5, 0x6, 0xfffffffa, 0x6216, 0x9, 0x8, 0x2, 0xd2a, 0x7, 0x8, 0x5, 0x1, 0x1, 0x40, 0x9, 0x9, 0x4, 0x0, 0x3, 0xb1, 0x1, 0x8, 0xbb2, 0x7fff, 0x1, 0x80000001, 0x2, 0x6, 0x10000000, 0x81, 0x521, 0x0, 0xfffffff7, 0x1, 0xfffffff8, 0x76, 0x2, 0x7, 0x2, 0xfffffff8, 0x401, 0xffffff46, 0x0, 0x2, 0x7, 0x4, 0xfffff800, 0x3, 0x1f, 0x8, 0x1f, 0x6, 0xfff, 0x7f, 0x52, 0x0, 0xac, 0x2a, 0x6, 0x8c, 0xff, 0x1, 0x3, 0x9, 0x1, 0x5d61, 0x8, 0x10000000, 0x9, 0x1000, 0x0, 0x8, 0x5d, 0x7, 0xffffffff, 0x0, 0x6, 0x5, 0x6, 0x80000001, 0x8, 0x80, 0x200, 0x200, 0x1, 0x2, 0xda5, 0x8, 0x1, 0xfb8f, 0x6, 0x401, 0x4, 0x101, 0xbe6, 0x4000, 0x7, 0x6, 0x3f, 0x3ff, 0x8000, 0x3, 0x101, 0x101, 0xfffffc01, 0x2, 0x7fffffff, 0x3, 0x80000000, 0x1, 0x0, 0x3, 0x4, 0x1, 0xfffffff8, 0x5, 0x9, 0xfe, 0x1000, 0x1000, 0x10000, 0x388, 0x1f, 0x4, 0x9, 0xff, 0x10001, 0x0, 0x2, 0x10000, 0x6, 0x7, 0x2, 0x8, 0x70367198, 0x1ff, 0x7, 0x7, 0x354, 0x4e, 0x401, 0x0, 0x0, 0xffff, 0x897, 0x3a9, 0x4, 0x9, 0x7, 0xfc000000, 0x3f, 0x7013, 0x5, 0xff, 0x0, 0x1f, 0x8001, 0xbf, 0x7ff, 0x7, 0x2af, 0x81, 0x20, 0xd091, 0x200, 0x10001, 0xfaf7, 0xffffffe1, 0x2, 0x5, 0x7, 0xd2, 0x5fa, 0x0, 0xb7, 0x400, 0x8, 0x7, 0x409, 0xfffffffa, 0xff, 0x4b05, 0x200, 0xc952, 0x0, 0x6, 0x7ff, 0x8, 0x1, 0x0, 0x69a1, 0x3, 0x401, 0x4, 0x1, 0x19f, 0x5e, 0x17, 0x3, 0x0, 0x0, 0xfffffffd, 0x4, 0x7, 0x7, 0x3, 0xffff7fff, 0xfffffffc, 0x3, 0xfffffff9, 0x6, 0x81, 0x2, 0x20, 0x8, 0x7ff, 0x7f, 0x8, 0x50000000, 0x6, 0x80000000, 0x6, 0x6a, 0x80000000, 0x1, 0x7, 0xe3, 0xfffffffb, 0x2, 0x1f, 0xffffff38, 0x7fffffff, 0xffffffff, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0x200, 0xe3, 0xf38, {0x6f, 0x2, 0x1, 0x1, 0x2, 0x6}, {0x1, 0x2, 0x0, 0x40, 0x1, 0x10000}, 0x5, 0x2, 0x3}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x8dc}, 0x1, 0x0, 0x0, 0x8010}, 0x24044005) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d00010000ff03000000000000", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="004000400000000400000cd0e9200018006400004f2f9078ac1e00010001000000000000"]}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="2c01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400fbffffff3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB], 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4000041) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000cc0)=@deltfilter={0x8dc, 0x2d, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0xc, 0xb}, {0x10, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffd}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_rsvp={{0x9}, {0x88c, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xa, 0xfff3}}, @TCA_RSVP_SRC={0x8, 0x3, @multicast2}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xf63, 0x5, 0x3}, {0x6, 0x4, 0x75}, 0x16, 0xd7, 0x89}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x7, 0x10}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xd, 0x2}}, @TCA_RSVP_POLICE={0x848, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xff, 0x1000, 0x9, 0xba, 0x9, 0x80000000, 0x1, 0x7fff, 0x200, 0x84, 0x5, 0x40, 0x1, 0x0, 0x2, 0x7, 0x8, 0x0, 0x25, 0x1, 0x80b723, 0x5c, 0xff, 0x81, 0x80000001, 0x8, 0xc481, 0x7fffffff, 0x10001, 0xffffffff, 0x4, 0x7, 0x7fffffff, 0x4f, 0x5, 0x5, 0x100, 0x0, 0x5, 0xbca5, 0x5, 0x200, 0x64, 0x87db, 0xffffffe6, 0x9, 0x3, 0x69180000, 0x3ff, 0x4, 0xffffffe1, 0x4, 0xffe, 0x9322, 0x4, 0x1, 0x8001, 0x4b4, 0x9, 0x2f97fad2, 0x8, 0xfffffc01, 0x8, 0x200, 0x400, 0x6, 0x6, 0x30000, 0x6, 0x5, 0xfffffe01, 0x80000000, 0x6, 0x401, 0x0, 0x1, 0xff, 0x100, 0x2, 0x1ff, 0x1f, 0x2e57, 0x96c, 0x6931, 0x8, 0x6, 0x3ff, 0x3, 0x7, 0xd52, 0x7, 0x9, 0xff, 0xdde, 0x3, 0x8, 0x7, 0x7d4f, 0x2, 0x401, 0x7f, 0x3, 0x8001, 0xab, 0x101, 0x7, 0x9, 0x2, 0x0, 0x8, 0x7fff, 0x8, 0xd5a, 0x8000, 0x7fffffff, 0x70, 0x2c, 0x3, 0x548c8fa6, 0x7, 0x3, 0x80, 0x7, 0x940, 0x9, 0x0, 0x6, 0x9, 0x5, 0x5, 0x80000000, 0x4, 0x20, 0x1, 0xffff4f65, 0x5, 0xd71, 0x800, 0x8, 0x80000001, 0x2991f23b, 0x5, 0x2, 0x80000000, 0x6, 0x80000001, 0xe101, 0x7, 0x4, 0x0, 0xbff7, 0xff, 0x9, 0x4, 0x2, 0x1, 0x4, 0x1f, 0x0, 0x4, 0x5, 0x6, 0x5, 0x552f, 0x3, 0x3f, 0x5, 0x3, 0x4, 0x800, 0x3, 0x0, 0x81, 0xfffffffe, 0x2, 0x9, 0xffff3bf8, 0x4, 0x9e, 0x1ff, 0x8, 0x3, 0x1, 0x0, 0x1f, 0x1, 0xfffff801, 0x8001, 0x3, 0xcb29, 0x5, 0x1, 0x1, 0x5, 0x3, 0x7, 0x80000001, 0x7fff, 0x1, 0x1, 0x236, 0x7f, 0x5, 0x80000000, 0xa400, 0x2, 0x7, 0x80000000, 0x7, 0xc2, 0x1000, 0x6, 0x3, 0x7fff, 0x3, 0x0, 0x2, 0x7fff, 0x187, 0xf9, 0x0, 0x81, 0x2d, 0x6, 0x5, 0xfffff001, 0x7f, 0x1, 0x9, 0xf76, 0x400, 0x3, 0x9903, 0xfffffffe, 0x3, 0x1ff, 0x7, 0x8, 0x5, 0x5, 0x7, 0x54f, 0x80, 0x0, 0x2, 0x0, 0x2, 0x975, 0x8, 0x3f, 0x6, 0x1, 0x1, 0x3, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6c5, 0x34, 0x100, 0x81, 0xfffffff8, 0x9, 0x2, 0x7, 0x1, 0x7fffffff, 0x3, 0x8, 0x1, 0x8, 0x0, 0x2, 0x8724, 0x10001, 0x3, 0xffffff80, 0x10000, 0x5, 0x5, 0x6, 0xfffffffa, 0x6216, 0x9, 0x8, 0x2, 0xd2a, 0x7, 0x8, 0x5, 0x1, 0x1, 0x40, 0x9, 0x9, 0x4, 0x0, 0x3, 0xb1, 0x1, 0x8, 0xbb2, 0x7fff, 0x1, 0x80000001, 0x2, 0x6, 0x10000000, 0x81, 0x521, 0x0, 0xfffffff7, 0x1, 0xfffffff8, 0x76, 0x2, 0x7, 0x2, 0xfffffff8, 0x401, 0xffffff46, 0x0, 0x2, 0x7, 0x4, 0xfffff800, 0x3, 0x1f, 0x8, 0x1f, 0x6, 0xfff, 0x7f, 0x52, 0x0, 0xac, 0x2a, 0x6, 0x8c, 0xff, 0x1, 0x3, 0x9, 0x1, 0x5d61, 0x8, 0x10000000, 0x9, 0x1000, 0x0, 0x8, 0x5d, 0x7, 0xffffffff, 0x0, 0x6, 0x5, 0x6, 0x80000001, 0x8, 0x80, 0x200, 0x200, 0x1, 0x2, 0xda5, 0x8, 0x1, 0xfb8f, 0x6, 0x401, 0x4, 0x101, 0xbe6, 0x4000, 0x7, 0x6, 0x3f, 0x3ff, 0x8000, 0x3, 0x101, 0x101, 0xfffffc01, 0x2, 0x7fffffff, 0x3, 0x80000000, 0x1, 0x0, 0x3, 0x4, 0x1, 0xfffffff8, 0x5, 0x9, 0xfe, 0x1000, 0x1000, 0x10000, 0x388, 0x1f, 0x4, 0x9, 0xff, 0x10001, 0x0, 0x2, 0x10000, 0x6, 0x7, 0x2, 0x8, 0x70367198, 0x1ff, 0x7, 0x7, 0x354, 0x4e, 0x401, 0x0, 0x0, 0xffff, 0x897, 0x3a9, 0x4, 0x9, 0x7, 0xfc000000, 0x3f, 0x7013, 0x5, 0xff, 0x0, 0x1f, 0x8001, 0xbf, 0x7ff, 0x7, 0x2af, 0x81, 0x20, 0xd091, 0x200, 0x10001, 0xfaf7, 0xffffffe1, 0x2, 0x5, 0x7, 0xd2, 0x5fa, 0x0, 0xb7, 0x400, 0x8, 0x7, 0x409, 0xfffffffa, 0xff, 0x4b05, 0x200, 0xc952, 0x0, 0x6, 0x7ff, 0x8, 0x1, 0x0, 0x69a1, 0x3, 0x401, 0x4, 0x1, 0x19f, 0x5e, 0x17, 0x3, 0x0, 0x0, 0xfffffffd, 0x4, 0x7, 0x7, 0x3, 0xffff7fff, 0xfffffffc, 0x3, 0xfffffff9, 0x6, 0x81, 0x2, 0x20, 0x8, 0x7ff, 0x7f, 0x8, 0x50000000, 0x6, 0x80000000, 0x6, 0x6a, 0x80000000, 0x1, 0x7, 0xe3, 0xfffffffb, 0x2, 0x1f, 0xffffff38, 0x7fffffff, 0xffffffff, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0x200, 0xe3, 0xf38, {0x6f, 0x2, 0x1, 0x1, 0x2, 0x6}, {0x1, 0x2, 0x0, 0x40, 0x1, 0x10000}, 0x5, 0x2, 0x3}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x8dc}, 0x1, 0x0, 0x0, 0x8010}, 0x24044005) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmmsg$inet6(r5, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) (async) 10:51:23 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0xfc01, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 255.940677][ T25] audit: type=1804 audit(1645786283.519:250): pid=10052 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/172/memory.events" dev="sda1" ino=1182 res=1 errno=0 10:51:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x6, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:24 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0xfe80, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:24 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000000000000d0001000000000000000000000e4a325d57e265e7305fb9db398dd03fba8b4eeb8b06d7201749f34fb61b9e008a76", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) socketpair(0x9, 0xa, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000080)={0x3, 0x88}) close(r5) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:51:24 executing program 5: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRES16=r2, @ANYRES32=r2, @ANYRESOCT=r3], 0x140}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'}) r4 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000003c0)) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:51:24 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0xfec0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x7, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 256.305514][T10075] infiniband syz2: set active [ 256.327874][T10075] infiniband syz2: added veth1_to_bond [ 256.636148][T10075] RDS/IB: syz2: added [ 256.652898][T10075] smc: adding ib device syz2 with port count 1 [ 256.670944][T10075] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:577 [ 256.681037][T10075] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 10075, name: syz-executor.0 [ 256.690541][T10075] preempt_count: 1, expected: 0 [ 256.695436][T10075] RCU nest depth: 0, expected: 0 [ 256.700376][T10075] 6 locks held by syz-executor.0/10075: [ 256.705985][T10075] #0: ffffffff906989f8 (&rdma_nl_types[idx].sem){.+.+}-{3:3}, at: rdma_nl_rcv_msg+0x161/0x690 [ 256.716422][T10075] #1: ffffffff8d053bb0 (link_ops_rwsem){++++}-{3:3}, at: nldev_newlink+0x25d/0x570 [ 256.725938][T10075] #2: ffffffff8d043410 (devices_rwsem){++++}-{3:3}, at: enable_device_and_get+0xfc/0x3b0 [ 256.735931][T10075] #3: ffffffff8d0432d0 (clients_rwsem){++++}-{3:3}, at: enable_device_and_get+0x15b/0x3b0 [ 256.746054][T10075] #4: ffff888077cdc5c0 (&device->client_data_rwsem){++++}-{3:3}, at: add_client_context+0x3d0/0x5e0 [ 256.757011][T10075] #5: ffff8880232e2318 (&pnettable->lock){++++}-{2:2}, at: smc_pnetid_by_table_ib+0x18c/0x470 [ 256.767483][T10075] Preemption disabled at: [ 256.767498][T10075] [<0000000000000000>] 0x0 [ 256.776279][T10075] CPU: 1 PID: 10075 Comm: syz-executor.0 Not tainted 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 256.786790][T10075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.796854][T10075] Call Trace: [ 256.800135][T10075] [ 256.803068][T10075] dump_stack_lvl+0xcd/0x134 [ 256.807679][T10075] __might_resched.cold+0x222/0x26b [ 256.812901][T10075] __mutex_lock+0x9f/0x12f0 [ 256.817428][T10075] ? smc_pnet_apply_ib+0x28/0x160 [ 256.822471][T10075] ? mutex_lock_io_nested+0x1150/0x1150 [ 256.828048][T10075] ? lock_release+0x720/0x720 [ 256.832744][T10075] ? smc_pnetid_by_table_ib+0x159/0x470 [ 256.838307][T10075] ? lock_downgrade+0x6e0/0x6e0 [ 256.843171][T10075] ? vprintk+0x88/0x90 [ 256.847260][T10075] ? _printk+0xba/0xed [ 256.851353][T10075] smc_pnet_apply_ib+0x28/0x160 [ 256.856229][T10075] smc_pnetid_by_table_ib+0x2ae/0x470 [ 256.861625][T10075] ? smc_ib_remove_dev+0x350/0x350 [ 256.866748][T10075] smc_ib_add_dev+0x4d7/0x910 [ 256.871443][T10075] ? do_raw_spin_unlock+0x171/0x230 [ 256.876671][T10075] ? smc_ib_remove_dev+0x350/0x350 [ 256.881799][T10075] add_client_context+0x405/0x5e0 [ 256.886845][T10075] ? ib_unregister_driver+0x1d0/0x1d0 [ 256.892249][T10075] enable_device_and_get+0x1cd/0x3b0 [ 256.897562][T10075] ? add_client_context+0x5e0/0x5e0 [ 256.902783][T10075] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 256.909050][T10075] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 256.914796][T10075] ? rdma_counter_init+0x1f1/0x3f0 [ 256.919949][T10075] ? rxe_ib_get_hw_stats+0xf0/0xf0 [ 256.925089][T10075] ib_register_device+0x814/0xaf0 [ 256.930136][T10075] ? crc32_pclmul_cra_init+0x9/0x50 [ 256.935355][T10075] ? alloc_port_data.part.0+0x3f0/0x3f0 [ 256.940921][T10075] ? crypto_alloc_tfm_node+0x12b/0x260 [ 256.946413][T10075] rxe_register_device+0x2fe/0x3b0 [ 256.951562][T10075] rxe_add+0x1331/0x1710 [ 256.955844][T10075] rxe_net_add+0x8c/0xe0 [ 256.960107][T10075] rxe_newlink+0xa9/0xd0 [ 256.964372][T10075] nldev_newlink+0x30a/0x570 [ 256.968994][T10075] ? nldev_set_doit+0x440/0x440 [ 256.973972][T10075] ? lock_release+0x720/0x720 [ 256.978670][T10075] ? __kernel_text_address+0x9/0x30 [ 256.983888][T10075] ? unwind_get_return_address+0x51/0x90 [ 256.989558][T10075] ? apparmor_capable+0x1d8/0x460 [ 256.994621][T10075] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 257.000889][T10075] ? ns_capable+0xd9/0x100 [ 257.005324][T10075] ? nldev_set_doit+0x440/0x440 [ 257.010197][T10075] rdma_nl_rcv_msg+0x36d/0x690 [ 257.014989][T10075] ? rdma_nl_multicast+0x320/0x320 [ 257.020145][T10075] rdma_nl_rcv+0x2ee/0x430 [ 257.024592][T10075] ? rdma_nl_rcv_msg+0x690/0x690 [ 257.029556][T10075] ? netlink_deliver_tap+0x1a2/0xc40 [ 257.034868][T10075] ? netlink_deliver_tap+0x1b1/0xc40 [ 257.040186][T10075] netlink_unicast+0x539/0x7e0 [ 257.044982][T10075] ? netlink_attachskb+0x880/0x880 [ 257.050110][T10075] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 257.056376][T10075] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 257.062644][T10075] ? __phys_addr_symbol+0x2c/0x70 [ 257.067688][T10075] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 257.073432][T10075] ? __check_object_size+0x16e/0x310 [ 257.078748][T10075] netlink_sendmsg+0x904/0xe00 [ 257.083550][T10075] ? netlink_unicast+0x7e0/0x7e0 [ 257.088524][T10075] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 257.094799][T10075] ? netlink_unicast+0x7e0/0x7e0 [ 257.099757][T10075] sock_sendmsg+0xcf/0x120 [ 257.104178][T10075] ____sys_sendmsg+0x6e8/0x810 [ 257.108960][T10075] ? kernel_sendmsg+0x50/0x50 [ 257.113632][T10075] ? do_recvmmsg+0x6d0/0x6d0 [ 257.118237][T10075] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 257.124209][T10075] ? futex_unqueue+0xb3/0x120 [ 257.128873][T10075] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 257.135131][T10075] ? futex_wait+0x533/0x670 [ 257.139641][T10075] ___sys_sendmsg+0xf3/0x170 [ 257.144219][T10075] ? sendmsg_copy_msghdr+0x160/0x160 [ 257.149494][T10075] ? lock_downgrade+0x6e0/0x6e0 [ 257.154369][T10075] ? __fget_files+0x28c/0x470 [ 257.159066][T10075] ? __fget_light+0xea/0x280 [ 257.163650][T10075] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 257.169904][T10075] __sys_sendmsg+0xe5/0x1b0 [ 257.174409][T10075] ? __sys_sendmsg_sock+0x30/0x30 [ 257.179447][T10075] ? restore_fpregs_from_fpstate+0xcc/0x1e0 [ 257.185358][T10075] ? syscall_enter_from_user_mode+0x21/0x70 [ 257.191273][T10075] do_syscall_64+0x35/0xb0 [ 257.195691][T10075] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 257.201592][T10075] RIP: 0033:0x7f93159e5059 [ 257.205995][T10075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 257.225593][T10075] RSP: 002b:00007f931435a168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.234007][T10075] RAX: ffffffffffffffda RBX: 00007f9315af7f60 RCX: 00007f93159e5059 [ 257.242013][T10075] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 257.249984][T10075] RBP: 00007f9315a3f08d R08: 0000000000000000 R09: 0000000000000000 [ 257.257947][T10075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.265910][T10075] R13: 00007fff3c6145bf R14: 00007f931435a300 R15: 0000000000022000 [ 257.273899][T10075] [ 257.276996][T10075] [ 257.279316][T10075] ============================= [ 257.284153][T10075] [ BUG: Invalid wait context ] [ 257.288986][T10075] 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 Tainted: G W [ 257.297457][T10075] ----------------------------- [ 257.302283][T10075] syz-executor.0/10075 is trying to lock: [ 257.307989][T10075] ffffffff8d714ef8 (smc_ib_devices.mutex){+.+.}-{3:3}, at: smc_pnet_apply_ib+0x28/0x160 [ 257.317719][T10075] other info that might help us debug this: [ 257.323598][T10075] context-{4:4} [ 257.327045][T10075] 6 locks held by syz-executor.0/10075: [ 257.332566][T10075] #0: ffffffff906989f8 (&rdma_nl_types[idx].sem){.+.+}-{3:3}, at: rdma_nl_rcv_msg+0x161/0x690 [ 257.342938][T10075] #1: ffffffff8d053bb0 (link_ops_rwsem){++++}-{3:3}, at: nldev_newlink+0x25d/0x570 [ 257.352317][T10075] #2: ffffffff8d043410 (devices_rwsem){++++}-{3:3}, at: enable_device_and_get+0xfc/0x3b0 [ 257.362257][T10075] #3: ffffffff8d0432d0 (clients_rwsem){++++}-{3:3}, at: enable_device_and_get+0x15b/0x3b0 [ 257.372286][T10075] #4: ffff888077cdc5c0 (&device->client_data_rwsem){++++}-{3:3}, at: add_client_context+0x3d0/0x5e0 [ 257.383176][T10075] #5: ffff8880232e2318 (&pnettable->lock){++++}-{2:2}, at: smc_pnetid_by_table_ib+0x18c/0x470 [ 257.393506][T10075] stack backtrace: [ 257.397201][T10075] CPU: 1 PID: 10075 Comm: syz-executor.0 Tainted: G W 5.17.0-rc4-syzkaller-01497-g9e7b78dc8826 #0 [ 257.409064][T10075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.419098][T10075] Call Trace: [ 257.422365][T10075] [ 257.425290][T10075] dump_stack_lvl+0xcd/0x134 [ 257.429870][T10075] __lock_acquire.cold+0xc5/0x3a9 [ 257.434896][T10075] ? swsusp_unmark.cold+0x1a/0x1c [ 257.439913][T10075] ? lock_chain_count+0x20/0x20 [ 257.444749][T10075] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 257.450715][T10075] lock_acquire+0x1ab/0x510 [ 257.455203][T10075] ? smc_pnet_apply_ib+0x28/0x160 [ 257.460213][T10075] ? lock_release+0x720/0x720 [ 257.464874][T10075] ? dump_stack_lvl+0x120/0x134 [ 257.469734][T10075] ? dump_stack_lvl+0x12a/0x134 [ 257.474590][T10075] ? dump_stack_lvl+0x12c/0x134 [ 257.479426][T10075] __mutex_lock+0x12f/0x12f0 [ 257.484006][T10075] ? smc_pnet_apply_ib+0x28/0x160 [ 257.489038][T10075] ? smc_pnet_apply_ib+0x28/0x160 [ 257.494043][T10075] ? mutex_lock_io_nested+0x1150/0x1150 [ 257.499576][T10075] ? lock_release+0x720/0x720 [ 257.504235][T10075] ? smc_pnetid_by_table_ib+0x159/0x470 [ 257.509763][T10075] ? lock_downgrade+0x6e0/0x6e0 [ 257.514593][T10075] ? vprintk+0x88/0x90 [ 257.518647][T10075] ? _printk+0xba/0xed [ 257.522704][T10075] smc_pnet_apply_ib+0x28/0x160 [ 257.527558][T10075] smc_pnetid_by_table_ib+0x2ae/0x470 [ 257.532917][T10075] ? smc_ib_remove_dev+0x350/0x350 [ 257.538011][T10075] smc_ib_add_dev+0x4d7/0x910 [ 257.542676][T10075] ? do_raw_spin_unlock+0x171/0x230 [ 257.547885][T10075] ? smc_ib_remove_dev+0x350/0x350 [ 257.552998][T10075] add_client_context+0x405/0x5e0 [ 257.558010][T10075] ? ib_unregister_driver+0x1d0/0x1d0 [ 257.563375][T10075] enable_device_and_get+0x1cd/0x3b0 [ 257.568645][T10075] ? add_client_context+0x5e0/0x5e0 [ 257.573826][T10075] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 257.580054][T10075] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 257.585897][T10075] ? rdma_counter_init+0x1f1/0x3f0 [ 257.591002][T10075] ? rxe_ib_get_hw_stats+0xf0/0xf0 [ 257.596105][T10075] ib_register_device+0x814/0xaf0 [ 257.601119][T10075] ? crc32_pclmul_cra_init+0x9/0x50 [ 257.606303][T10075] ? alloc_port_data.part.0+0x3f0/0x3f0 [ 257.611836][T10075] ? crypto_alloc_tfm_node+0x12b/0x260 [ 257.617281][T10075] rxe_register_device+0x2fe/0x3b0 [ 257.622385][T10075] rxe_add+0x1331/0x1710 [ 257.626635][T10075] rxe_net_add+0x8c/0xe0 [ 257.630865][T10075] rxe_newlink+0xa9/0xd0 [ 257.635092][T10075] nldev_newlink+0x30a/0x570 [ 257.639670][T10075] ? nldev_set_doit+0x440/0x440 [ 257.644521][T10075] ? lock_release+0x720/0x720 [ 257.649182][T10075] ? __kernel_text_address+0x9/0x30 [ 257.654367][T10075] ? unwind_get_return_address+0x51/0x90 [ 257.659991][T10075] ? apparmor_capable+0x1d8/0x460 [ 257.665001][T10075] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 257.671228][T10075] ? ns_capable+0xd9/0x100 [ 257.675646][T10075] ? nldev_set_doit+0x440/0x440 [ 257.680482][T10075] rdma_nl_rcv_msg+0x36d/0x690 [ 257.685231][T10075] ? rdma_nl_multicast+0x320/0x320 [ 257.690329][T10075] rdma_nl_rcv+0x2ee/0x430 [ 257.694731][T10075] ? rdma_nl_rcv_msg+0x690/0x690 [ 257.699653][T10075] ? netlink_deliver_tap+0x1a2/0xc40 [ 257.704927][T10075] ? netlink_deliver_tap+0x1b1/0xc40 [ 257.710201][T10075] netlink_unicast+0x539/0x7e0 [ 257.714953][T10075] ? netlink_attachskb+0x880/0x880 [ 257.720055][T10075] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 257.726285][T10075] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 257.732522][T10075] ? __phys_addr_symbol+0x2c/0x70 [ 257.737554][T10075] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 257.743260][T10075] ? __check_object_size+0x16e/0x310 [ 257.748535][T10075] netlink_sendmsg+0x904/0xe00 [ 257.753285][T10075] ? netlink_unicast+0x7e0/0x7e0 [ 257.758228][T10075] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 257.764458][T10075] ? netlink_unicast+0x7e0/0x7e0 [ 257.769381][T10075] sock_sendmsg+0xcf/0x120 [ 257.773803][T10075] ____sys_sendmsg+0x6e8/0x810 [ 257.778555][T10075] ? kernel_sendmsg+0x50/0x50 [ 257.783216][T10075] ? do_recvmmsg+0x6d0/0x6d0 [ 257.787800][T10075] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 257.793778][T10075] ? futex_unqueue+0xb3/0x120 [ 257.798450][T10075] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 257.804680][T10075] ? futex_wait+0x533/0x670 [ 257.809167][T10075] ___sys_sendmsg+0xf3/0x170 [ 257.813739][T10075] ? sendmsg_copy_msghdr+0x160/0x160 [ 257.819007][T10075] ? lock_downgrade+0x6e0/0x6e0 [ 257.823845][T10075] ? __fget_files+0x28c/0x470 [ 257.828522][T10075] ? __fget_light+0xea/0x280 [ 257.833095][T10075] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 257.839340][T10075] __sys_sendmsg+0xe5/0x1b0 [ 257.843829][T10075] ? __sys_sendmsg_sock+0x30/0x30 [ 257.848837][T10075] ? restore_fpregs_from_fpstate+0xcc/0x1e0 [ 257.854718][T10075] ? syscall_enter_from_user_mode+0x21/0x70 [ 257.860611][T10075] do_syscall_64+0x35/0xb0 [ 257.865014][T10075] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 257.870910][T10075] RIP: 0033:0x7f93159e5059 [ 257.875306][T10075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 257.894902][T10075] RSP: 002b:00007f931435a168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.903304][T10075] RAX: ffffffffffffffda RBX: 00007f9315af7f60 RCX: 00007f93159e5059 [ 257.911279][T10075] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 257.919236][T10075] RBP: 00007f9315a3f08d R08: 0000000000000000 R09: 0000000000000000 [ 257.927191][T10075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.935147][T10075] R13: 00007fff3c6145bf R14: 00007f931435a300 R15: 0000000000022000 [ 257.943195][T10075] [ 257.949773][T10075] smc: ib device syz2 port 1 has pnetid SYZ2 (user defined) 10:51:26 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}]}, 0x38}}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYRES16=r1]}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01b3000000b90000000003"], 0x14}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x60804}, 0x24000091) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r4) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, r6, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5a6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffff584}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc3f}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000010}, 0x14015) 10:51:26 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000000000000d0001000000000000000000000e4a325d57e265e7305fb9db398dd03fba8b4eeb8b06d7201749f34fb61b9e008a76", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) socketpair(0x9, 0xa, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000080)={0x3, 0x88}) close(r5) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000000000000d0001000000000000000000000e4a325d57e265e7305fb9db398dd03fba8b4eeb8b06d7201749f34fb61b9e008a76", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) socketpair(0x9, 0xa, 0x7, &(0x7f0000000040)) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000080)={0x3, 0x88}) (async) close(r5) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) (async) 10:51:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x8, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x20000000) 10:51:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0xff00, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:26 executing program 5: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRES16=r2, @ANYRES32=r2, @ANYRESOCT=r3], 0x140}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'}) r4 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000003c0)) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) unshare(0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x0, 0x3, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) bind(r1, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) shutdown(r3, 0x1) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRES16=r2, @ANYRES32=r2, @ANYRESOCT=r3], 0x140}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'}) (async) socket$inet6(0xa, 0x2, 0x0) (async) pipe(&(0x7f00000003c0)) (async) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) (async) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) 10:51:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x100000, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x9, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:26 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000000000000d0001000000000000000000000e4a325d57e265e7305fb9db398dd03fba8b4eeb8b06d7201749f34fb61b9e008a76", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) socketpair(0x9, 0xa, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000080)={0x3, 0x88}) (async) close(r5) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) [ 258.224223][T10127] rdma_rxe: already configured on veth1_to_bond 10:51:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x1000000, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:26 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}]}, 0x38}}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) pipe(&(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYRES16=r1]}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01b3000000b90000000003"], 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x60804}, 0x24000091) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r4) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, r6, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5a6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffff584}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc3f}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000010}, 0x14015) 10:51:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0xa, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x100000, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 258.315663][T10157] rdma_rxe: already configured on veth1_to_bond [ 258.335380][ T25] kauditd_printk_skb: 3 callbacks suppressed [ 258.335395][ T25] audit: type=1804 audit(1645786286.169:254): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/174/memory.events" dev="sda1" ino=1181 res=1 errno=0 10:51:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x2000000, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:26 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x4, &(0x7f00000002c0)=[{0x5, 0x40, 0x5, 0x55}, {0x1, 0x3, 0xde, 0x7}, {0x3a4, 0x3, 0x49, 0xffffffff}, {0x3ff, 0x7, 0x3, 0x7}]}, 0x10) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000001380)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)="90e5c77a8eee981d0739791af82e5b6e6e9d7915f916db10eff7a0f4c41c6fdc3c9b02afb4355d87d78a433635497ceed41d86be992abd05112a65611616189df3b070da55f3c7cb52e25ddf", 0x4c}], 0x1, &(0x7f0000000580)=[@rthdrdstopts={{0x38, 0x29, 0x37, {0x2c, 0x4, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x3, 0x7, [0x93de, 0xfffffffffffffff8]}}]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x5e, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x94}, @enc_lim={0x4, 0x1, 0x25}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @tclass={{0x14, 0x29, 0x43, 0xfffffff7}}, @tclass={{0x14}}], 0xa8}}, {{&(0x7f0000000640)={0xa, 0x4e20, 0x42, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000700)="08bb423788cfc389c97eb23da0645ad16c0ada6b70d59994e6e5a4b38179527b446cd28d7c71ac54546f5d7638ad54b460a361e9f07bdc3d08cda8331f61fda3193cb5835ce14aa3d4775cf03caaffe7e71205b3ee0f34d053f3d37dd4544c67226a2be5a848170c12e7254fdfdf53a8c3ec6a5148850d2eccda3e", 0x7b}, {&(0x7f0000000780)="6bdea527e17c9adfdd8e7050a09e1f8082deb1bc4fce9f154c0c8a40fee4a8604f2736fb0ced4c89d54d0cbe481d4c1716603a2f11b88c460dc866a89faf8e4e7b3a2a7d4dc05609fb227c2a521ca2f068fda907b9cd8faa392d4bbccd52ae5a3afafd487928146148a04075eb26079a5037e7d941d99793b2294f9f2c8f9a0956336ad713e3a63ef1999639d78ea71cce0e404d1bc52547ad27692924e7502a2dfd46d076c85b30a1c7271513b538b996d89847fdccbd7af9991fab56afc807508e8000dbc572c4c1563b5181d7b16cf35973c32ad7e86086b3fa2f1953080a57ce54c8", 0xe4}, {&(0x7f0000000880)="6e399dd61714fb26be983ba26da342e4925c3663c934b2639d84f553f78563bf5fac940677d1254ede3bfa8f2231d20b9e25f619267b406a79b956e0e7d3788749c687581a25c65e374fe8453d34850744b731bc7a5cc132462ef2702a26b1ac51627da4a243a25f4384d8c2020791f68b5377115048d8da3b1a2502ba32", 0x7e}, {&(0x7f0000000900)="c051ca3e6d3e2d044e02c64f2ad608edc2bb8b9b1746ec4070832f1d44e7b79cf27daf9a5d9b52a8550c828dd7c537780803208363a508ce95b009a9cf2faeaee4ef2af218ba234e5fd9d63101459de31cf6baa7221a5fdb08a14da3953dc251f053d6d6fdd903360aea3061d10f0dded3071770563f5a05e7fc15b5fbb3a6abe95032ad6db9b863dbc4d82f337aba170320827aca9674783adda875fb20b490e7b0a6c03f6d", 0xa6}], 0x4, &(0x7f00000009c0)=[@tclass={{0x14, 0x29, 0x43, 0x5}}, @dstopts={{0x30, 0x29, 0x37, {0x87, 0x2, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x9}, @pad1, @pad1]}}}, @dstopts={{0x40, 0x29, 0x37, {0x32, 0x4, '\x00', [@generic={0xbf, 0x19, "7a2c98fa1aab9f71537023ddcd1f50ca18e1c93ba185eef1de"}, @ra={0x5, 0x2, 0x2}, @enc_lim={0x4, 0x1, 0x3}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xcf}}, @flowinfo={{0x14, 0x29, 0xb, 0x20}}, @tclass={{0x14, 0x29, 0x43, 0x80000001}}], 0xd0}}, {{&(0x7f0000000ac0)={0xa, 0x4e24, 0x2, @mcast2, 0x3}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000b00)="ce79d4b9635e03a1abb241d5d02dc56459254e4aece9cee3808ad04d2dcf339a852d72a0059570cb3fb8c3765fd9e7dc2facf845c7145d495d22", 0x3a}], 0x1, &(0x7f0000000c80)=[@hopopts={{0x68, 0x29, 0x36, {0x2f, 0x9, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x20, {0x3, 0x6, 0xf6, 0x1, [0x2, 0x3, 0x7]}}, @ra={0x5, 0x2, 0xffff}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @loopback}]}}}], 0x68}}, {{&(0x7f0000000b80)={0xa, 0x4e22, 0x7ff, @remote, 0x80000001}, 0x1c, &(0x7f0000001080)=[{&(0x7f0000000d00)="e5757a5339a1f2d806e3865c5e7aa5f518621b8fed3b093c2987c91fc24338b66873cb1a31c258f0318e27beb9b3e641dff7b307702a56b3944d932cd8267b41e9643f3acfe44e85a729087046c1c5b04c31768a4095ca33ea43f259e112b3fab3b5ca101cfa020b64b68f824cee6571c2325845ba180ff649d596ecaa8cf612d6d9f38221904209fb69f0aa2f6ea7a682926144b922aaabd5754b7b41af95cefaebe2a5059a39a76e193672cc635f0fad4c26630369a10ff983edba6b2533420dbf7735c9c4f129db509eb8403867ed02", 0xd1}, {&(0x7f0000000e00)="f0570298eea49407cbf2d81dd1196029cfe043fd459211b70c44bf365396939572c7529ad359af8fde57ad9e76bae3040a8a0100dd5ad6733e7f9b7733b78487320da80a485d23e1614677baab1315c13bd78b3be9964181829e0710e59ced853235e2da6afc249c36f3908fb7da17679857dafc73d4baf4e42a0c14f6", 0x7d}, {&(0x7f0000000e80)="d76c99af34511a90bbc916fdf4f3be2ae0828f37a901fbddc342b31ce04e", 0x1e}, {&(0x7f0000000ec0)="37147d38fdb1aa2deb5fb8e2e50f25650be228d713113772987ed4ed51482a3ca1c09aec1dd176755098a74a0134d118d3e6725dc4dda4d85a7a771f83bd1620b8e4ca70922ed6eff9e75de2eac386413e381ae3b3e74bbe0cd1e583e290a4fb2e1d1778253c888724b9f1bd50c7d8b08bdc2f0b8eaa2977973291e048783a11ab10eff68a5a261555a1e186adac3a7bf625be40a183643ef147282ef3e6b57884cbf40342f1b9cda9f45eba7930d386aa77e9f9475a7f09766ec1eb263411160e2a05927d552567e3bf9b5e", 0xcc}, {&(0x7f0000000fc0)="e1126019709bff74a887c6b435f993b215c25e37f9e3dc2fa52bfcf289701d12bfc944a092bbae790b61bf2e5f1082ac66eabeb8be7321be20fbf81c90ab69a9142427450c60bb6a5d142d3fb096ed804fbbbe77756b40ea5eeeda67382c8c170e8a2667c4f58e18373b01e5d8c08c7466e207d1b64f1dbeb78c542e2ce994da1023c3498100147bc4546ba98f3a307e9e503581f0799f91d7", 0x99}], 0x5}}, {{&(0x7f0000001100)={0xa, 0x4e24, 0x80, @mcast2, 0x4}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000001140)="ebd80d652c7cc2ee7dd4", 0xa}, {&(0x7f0000001180)="082dfd278974654f2eac10b0a31c051e422e5cee8a723354e8a529b0796aaea644a1fb32f23596f7f8c4f6212a8842658e8d4f2672e29340da4c5004f1590c6f98a335616a26191331f2729d6034ac3372202adecc55263c6e18fd9d3c17c33b91cf561aaf41a230a90ef84f2068d48cfdb69c10bf821c6a4275d2bd83f1", 0x7e}], 0x2, &(0x7f0000001240)=[@hopopts_2292={{0x70, 0x29, 0x36, {0x2f, 0xa, '\x00', [@generic={0x80, 0x42, "31fdf15deea3e419c7fd86d72ab8324b306024146a02d131124b6383a8395bb9df854ae14e38f6d897eb6df6f51ab1d2b22ce1016ba8347da43b611125a0fc4632ab"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x80}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x1a, 0xa, 0x2, 0x0, 0x0, [@private2, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x65fcbd81}}, @dontfrag={{0x14, 0x29, 0x3e, 0xffffdc86}}, @hoplimit={{0x14, 0x29, 0x34, 0x10001}}], 0x120}}], 0x7, 0x4000040) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x2002, &(0x7f0000000280)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x10) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r5, &(0x7f0000000380)="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", 0xfb, 0x10, &(0x7f0000000080)={0xa, 0x4e24, 0x7, @private0, 0x7}, 0x1c) 10:51:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x3f000000) 10:51:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0xf, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 258.459322][ T25] audit: type=1804 audit(1645786286.219:255): pid=10154 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/174/memory.events" dev="sda1" ino=1181 res=1 errno=0 [ 258.571630][ T25] audit: type=1804 audit(1645786286.399:256): pid=10178 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/175/memory.events" dev="sda1" ino=1169 res=1 errno=0 [ 258.618527][ T25] audit: type=1804 audit(1645786286.449:257): pid=10178 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/175/memory.events" dev="sda1" ino=1169 res=1 errno=0 10:51:26 executing program 5: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRES16=r2, @ANYRES32=r2, @ANYRESOCT=r3], 0x140}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'}) r4 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000003c0)) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) unshare(0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x0, 0x3, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) bind(r1, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) shutdown(r3, 0x1) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRES16=r2, @ANYRES32=r2, @ANYRESOCT=r3], 0x140}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'}) (async) socket$inet6(0xa, 0x2, 0x0) (async) pipe(&(0x7f00000003c0)) (async) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) (async) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) 10:51:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x100000, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:26 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x4, &(0x7f00000002c0)=[{0x5, 0x40, 0x5, 0x55}, {0x1, 0x3, 0xde, 0x7}, {0x3a4, 0x3, 0x49, 0xffffffff}, {0x3ff, 0x7, 0x3, 0x7}]}, 0x10) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) (async) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000001380)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)="90e5c77a8eee981d0739791af82e5b6e6e9d7915f916db10eff7a0f4c41c6fdc3c9b02afb4355d87d78a433635497ceed41d86be992abd05112a65611616189df3b070da55f3c7cb52e25ddf", 0x4c}], 0x1, &(0x7f0000000580)=[@rthdrdstopts={{0x38, 0x29, 0x37, {0x2c, 0x4, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x3, 0x7, [0x93de, 0xfffffffffffffff8]}}]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x5e, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x94}, @enc_lim={0x4, 0x1, 0x25}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @tclass={{0x14, 0x29, 0x43, 0xfffffff7}}, @tclass={{0x14}}], 0xa8}}, {{&(0x7f0000000640)={0xa, 0x4e20, 0x42, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000700)="08bb423788cfc389c97eb23da0645ad16c0ada6b70d59994e6e5a4b38179527b446cd28d7c71ac54546f5d7638ad54b460a361e9f07bdc3d08cda8331f61fda3193cb5835ce14aa3d4775cf03caaffe7e71205b3ee0f34d053f3d37dd4544c67226a2be5a848170c12e7254fdfdf53a8c3ec6a5148850d2eccda3e", 0x7b}, {&(0x7f0000000780)="6bdea527e17c9adfdd8e7050a09e1f8082deb1bc4fce9f154c0c8a40fee4a8604f2736fb0ced4c89d54d0cbe481d4c1716603a2f11b88c460dc866a89faf8e4e7b3a2a7d4dc05609fb227c2a521ca2f068fda907b9cd8faa392d4bbccd52ae5a3afafd487928146148a04075eb26079a5037e7d941d99793b2294f9f2c8f9a0956336ad713e3a63ef1999639d78ea71cce0e404d1bc52547ad27692924e7502a2dfd46d076c85b30a1c7271513b538b996d89847fdccbd7af9991fab56afc807508e8000dbc572c4c1563b5181d7b16cf35973c32ad7e86086b3fa2f1953080a57ce54c8", 0xe4}, {&(0x7f0000000880)="6e399dd61714fb26be983ba26da342e4925c3663c934b2639d84f553f78563bf5fac940677d1254ede3bfa8f2231d20b9e25f619267b406a79b956e0e7d3788749c687581a25c65e374fe8453d34850744b731bc7a5cc132462ef2702a26b1ac51627da4a243a25f4384d8c2020791f68b5377115048d8da3b1a2502ba32", 0x7e}, {&(0x7f0000000900)="c051ca3e6d3e2d044e02c64f2ad608edc2bb8b9b1746ec4070832f1d44e7b79cf27daf9a5d9b52a8550c828dd7c537780803208363a508ce95b009a9cf2faeaee4ef2af218ba234e5fd9d63101459de31cf6baa7221a5fdb08a14da3953dc251f053d6d6fdd903360aea3061d10f0dded3071770563f5a05e7fc15b5fbb3a6abe95032ad6db9b863dbc4d82f337aba170320827aca9674783adda875fb20b490e7b0a6c03f6d", 0xa6}], 0x4, &(0x7f00000009c0)=[@tclass={{0x14, 0x29, 0x43, 0x5}}, @dstopts={{0x30, 0x29, 0x37, {0x87, 0x2, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x9}, @pad1, @pad1]}}}, @dstopts={{0x40, 0x29, 0x37, {0x32, 0x4, '\x00', [@generic={0xbf, 0x19, "7a2c98fa1aab9f71537023ddcd1f50ca18e1c93ba185eef1de"}, @ra={0x5, 0x2, 0x2}, @enc_lim={0x4, 0x1, 0x3}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xcf}}, @flowinfo={{0x14, 0x29, 0xb, 0x20}}, @tclass={{0x14, 0x29, 0x43, 0x80000001}}], 0xd0}}, {{&(0x7f0000000ac0)={0xa, 0x4e24, 0x2, @mcast2, 0x3}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000b00)="ce79d4b9635e03a1abb241d5d02dc56459254e4aece9cee3808ad04d2dcf339a852d72a0059570cb3fb8c3765fd9e7dc2facf845c7145d495d22", 0x3a}], 0x1, &(0x7f0000000c80)=[@hopopts={{0x68, 0x29, 0x36, {0x2f, 0x9, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x20, {0x3, 0x6, 0xf6, 0x1, [0x2, 0x3, 0x7]}}, @ra={0x5, 0x2, 0xffff}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @loopback}]}}}], 0x68}}, {{&(0x7f0000000b80)={0xa, 0x4e22, 0x7ff, @remote, 0x80000001}, 0x1c, &(0x7f0000001080)=[{&(0x7f0000000d00)="e5757a5339a1f2d806e3865c5e7aa5f518621b8fed3b093c2987c91fc24338b66873cb1a31c258f0318e27beb9b3e641dff7b307702a56b3944d932cd8267b41e9643f3acfe44e85a729087046c1c5b04c31768a4095ca33ea43f259e112b3fab3b5ca101cfa020b64b68f824cee6571c2325845ba180ff649d596ecaa8cf612d6d9f38221904209fb69f0aa2f6ea7a682926144b922aaabd5754b7b41af95cefaebe2a5059a39a76e193672cc635f0fad4c26630369a10ff983edba6b2533420dbf7735c9c4f129db509eb8403867ed02", 0xd1}, {&(0x7f0000000e00)="f0570298eea49407cbf2d81dd1196029cfe043fd459211b70c44bf365396939572c7529ad359af8fde57ad9e76bae3040a8a0100dd5ad6733e7f9b7733b78487320da80a485d23e1614677baab1315c13bd78b3be9964181829e0710e59ced853235e2da6afc249c36f3908fb7da17679857dafc73d4baf4e42a0c14f6", 0x7d}, {&(0x7f0000000e80)="d76c99af34511a90bbc916fdf4f3be2ae0828f37a901fbddc342b31ce04e", 0x1e}, {&(0x7f0000000ec0)="37147d38fdb1aa2deb5fb8e2e50f25650be228d713113772987ed4ed51482a3ca1c09aec1dd176755098a74a0134d118d3e6725dc4dda4d85a7a771f83bd1620b8e4ca70922ed6eff9e75de2eac386413e381ae3b3e74bbe0cd1e583e290a4fb2e1d1778253c888724b9f1bd50c7d8b08bdc2f0b8eaa2977973291e048783a11ab10eff68a5a261555a1e186adac3a7bf625be40a183643ef147282ef3e6b57884cbf40342f1b9cda9f45eba7930d386aa77e9f9475a7f09766ec1eb263411160e2a05927d552567e3bf9b5e", 0xcc}, {&(0x7f0000000fc0)="e1126019709bff74a887c6b435f993b215c25e37f9e3dc2fa52bfcf289701d12bfc944a092bbae790b61bf2e5f1082ac66eabeb8be7321be20fbf81c90ab69a9142427450c60bb6a5d142d3fb096ed804fbbbe77756b40ea5eeeda67382c8c170e8a2667c4f58e18373b01e5d8c08c7466e207d1b64f1dbeb78c542e2ce994da1023c3498100147bc4546ba98f3a307e9e503581f0799f91d7", 0x99}], 0x5}}, {{&(0x7f0000001100)={0xa, 0x4e24, 0x80, @mcast2, 0x4}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000001140)="ebd80d652c7cc2ee7dd4", 0xa}, {&(0x7f0000001180)="082dfd278974654f2eac10b0a31c051e422e5cee8a723354e8a529b0796aaea644a1fb32f23596f7f8c4f6212a8842658e8d4f2672e29340da4c5004f1590c6f98a335616a26191331f2729d6034ac3372202adecc55263c6e18fd9d3c17c33b91cf561aaf41a230a90ef84f2068d48cfdb69c10bf821c6a4275d2bd83f1", 0x7e}], 0x2, &(0x7f0000001240)=[@hopopts_2292={{0x70, 0x29, 0x36, {0x2f, 0xa, '\x00', [@generic={0x80, 0x42, "31fdf15deea3e419c7fd86d72ab8324b306024146a02d131124b6383a8395bb9df854ae14e38f6d897eb6df6f51ab1d2b22ce1016ba8347da43b611125a0fc4632ab"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x80}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x1a, 0xa, 0x2, 0x0, 0x0, [@private2, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x65fcbd81}}, @dontfrag={{0x14, 0x29, 0x3e, 0xffffdc86}}, @hoplimit={{0x14, 0x29, 0x34, 0x10001}}], 0x120}}], 0x7, 0x4000040) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x2002, &(0x7f0000000280)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x10) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r5, &(0x7f0000000380)="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", 0xfb, 0x10, &(0x7f0000000080)={0xa, 0x4e24, 0x7, @private0, 0x7}, 0x1c) 10:51:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x3000000, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x10, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x40000000) 10:51:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x4000000, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x100000, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x60, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:26 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x4, &(0x7f00000002c0)=[{0x5, 0x40, 0x5, 0x55}, {0x1, 0x3, 0xde, 0x7}, {0x3a4, 0x3, 0x49, 0xffffffff}, {0x3ff, 0x7, 0x3, 0x7}]}, 0x10) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000001380)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)="90e5c77a8eee981d0739791af82e5b6e6e9d7915f916db10eff7a0f4c41c6fdc3c9b02afb4355d87d78a433635497ceed41d86be992abd05112a65611616189df3b070da55f3c7cb52e25ddf", 0x4c}], 0x1, &(0x7f0000000580)=[@rthdrdstopts={{0x38, 0x29, 0x37, {0x2c, 0x4, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x3, 0x7, [0x93de, 0xfffffffffffffff8]}}]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x5e, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x94}, @enc_lim={0x4, 0x1, 0x25}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @tclass={{0x14, 0x29, 0x43, 0xfffffff7}}, @tclass={{0x14}}], 0xa8}}, {{&(0x7f0000000640)={0xa, 0x4e20, 0x42, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000700)="08bb423788cfc389c97eb23da0645ad16c0ada6b70d59994e6e5a4b38179527b446cd28d7c71ac54546f5d7638ad54b460a361e9f07bdc3d08cda8331f61fda3193cb5835ce14aa3d4775cf03caaffe7e71205b3ee0f34d053f3d37dd4544c67226a2be5a848170c12e7254fdfdf53a8c3ec6a5148850d2eccda3e", 0x7b}, {&(0x7f0000000780)="6bdea527e17c9adfdd8e7050a09e1f8082deb1bc4fce9f154c0c8a40fee4a8604f2736fb0ced4c89d54d0cbe481d4c1716603a2f11b88c460dc866a89faf8e4e7b3a2a7d4dc05609fb227c2a521ca2f068fda907b9cd8faa392d4bbccd52ae5a3afafd487928146148a04075eb26079a5037e7d941d99793b2294f9f2c8f9a0956336ad713e3a63ef1999639d78ea71cce0e404d1bc52547ad27692924e7502a2dfd46d076c85b30a1c7271513b538b996d89847fdccbd7af9991fab56afc807508e8000dbc572c4c1563b5181d7b16cf35973c32ad7e86086b3fa2f1953080a57ce54c8", 0xe4}, {&(0x7f0000000880)="6e399dd61714fb26be983ba26da342e4925c3663c934b2639d84f553f78563bf5fac940677d1254ede3bfa8f2231d20b9e25f619267b406a79b956e0e7d3788749c687581a25c65e374fe8453d34850744b731bc7a5cc132462ef2702a26b1ac51627da4a243a25f4384d8c2020791f68b5377115048d8da3b1a2502ba32", 0x7e}, {&(0x7f0000000900)="c051ca3e6d3e2d044e02c64f2ad608edc2bb8b9b1746ec4070832f1d44e7b79cf27daf9a5d9b52a8550c828dd7c537780803208363a508ce95b009a9cf2faeaee4ef2af218ba234e5fd9d63101459de31cf6baa7221a5fdb08a14da3953dc251f053d6d6fdd903360aea3061d10f0dded3071770563f5a05e7fc15b5fbb3a6abe95032ad6db9b863dbc4d82f337aba170320827aca9674783adda875fb20b490e7b0a6c03f6d", 0xa6}], 0x4, &(0x7f00000009c0)=[@tclass={{0x14, 0x29, 0x43, 0x5}}, @dstopts={{0x30, 0x29, 0x37, {0x87, 0x2, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x9}, @pad1, @pad1]}}}, @dstopts={{0x40, 0x29, 0x37, {0x32, 0x4, '\x00', [@generic={0xbf, 0x19, "7a2c98fa1aab9f71537023ddcd1f50ca18e1c93ba185eef1de"}, @ra={0x5, 0x2, 0x2}, @enc_lim={0x4, 0x1, 0x3}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xcf}}, @flowinfo={{0x14, 0x29, 0xb, 0x20}}, @tclass={{0x14, 0x29, 0x43, 0x80000001}}], 0xd0}}, {{&(0x7f0000000ac0)={0xa, 0x4e24, 0x2, @mcast2, 0x3}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000b00)="ce79d4b9635e03a1abb241d5d02dc56459254e4aece9cee3808ad04d2dcf339a852d72a0059570cb3fb8c3765fd9e7dc2facf845c7145d495d22", 0x3a}], 0x1, &(0x7f0000000c80)=[@hopopts={{0x68, 0x29, 0x36, {0x2f, 0x9, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x20, {0x3, 0x6, 0xf6, 0x1, [0x2, 0x3, 0x7]}}, @ra={0x5, 0x2, 0xffff}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @loopback}]}}}], 0x68}}, {{&(0x7f0000000b80)={0xa, 0x4e22, 0x7ff, @remote, 0x80000001}, 0x1c, &(0x7f0000001080)=[{&(0x7f0000000d00)="e5757a5339a1f2d806e3865c5e7aa5f518621b8fed3b093c2987c91fc24338b66873cb1a31c258f0318e27beb9b3e641dff7b307702a56b3944d932cd8267b41e9643f3acfe44e85a729087046c1c5b04c31768a4095ca33ea43f259e112b3fab3b5ca101cfa020b64b68f824cee6571c2325845ba180ff649d596ecaa8cf612d6d9f38221904209fb69f0aa2f6ea7a682926144b922aaabd5754b7b41af95cefaebe2a5059a39a76e193672cc635f0fad4c26630369a10ff983edba6b2533420dbf7735c9c4f129db509eb8403867ed02", 0xd1}, {&(0x7f0000000e00)="f0570298eea49407cbf2d81dd1196029cfe043fd459211b70c44bf365396939572c7529ad359af8fde57ad9e76bae3040a8a0100dd5ad6733e7f9b7733b78487320da80a485d23e1614677baab1315c13bd78b3be9964181829e0710e59ced853235e2da6afc249c36f3908fb7da17679857dafc73d4baf4e42a0c14f6", 0x7d}, {&(0x7f0000000e80)="d76c99af34511a90bbc916fdf4f3be2ae0828f37a901fbddc342b31ce04e", 0x1e}, {&(0x7f0000000ec0)="37147d38fdb1aa2deb5fb8e2e50f25650be228d713113772987ed4ed51482a3ca1c09aec1dd176755098a74a0134d118d3e6725dc4dda4d85a7a771f83bd1620b8e4ca70922ed6eff9e75de2eac386413e381ae3b3e74bbe0cd1e583e290a4fb2e1d1778253c888724b9f1bd50c7d8b08bdc2f0b8eaa2977973291e048783a11ab10eff68a5a261555a1e186adac3a7bf625be40a183643ef147282ef3e6b57884cbf40342f1b9cda9f45eba7930d386aa77e9f9475a7f09766ec1eb263411160e2a05927d552567e3bf9b5e", 0xcc}, {&(0x7f0000000fc0)="e1126019709bff74a887c6b435f993b215c25e37f9e3dc2fa52bfcf289701d12bfc944a092bbae790b61bf2e5f1082ac66eabeb8be7321be20fbf81c90ab69a9142427450c60bb6a5d142d3fb096ed804fbbbe77756b40ea5eeeda67382c8c170e8a2667c4f58e18373b01e5d8c08c7466e207d1b64f1dbeb78c542e2ce994da1023c3498100147bc4546ba98f3a307e9e503581f0799f91d7", 0x99}], 0x5}}, {{&(0x7f0000001100)={0xa, 0x4e24, 0x80, @mcast2, 0x4}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000001140)="ebd80d652c7cc2ee7dd4", 0xa}, {&(0x7f0000001180)="082dfd278974654f2eac10b0a31c051e422e5cee8a723354e8a529b0796aaea644a1fb32f23596f7f8c4f6212a8842658e8d4f2672e29340da4c5004f1590c6f98a335616a26191331f2729d6034ac3372202adecc55263c6e18fd9d3c17c33b91cf561aaf41a230a90ef84f2068d48cfdb69c10bf821c6a4275d2bd83f1", 0x7e}], 0x2, &(0x7f0000001240)=[@hopopts_2292={{0x70, 0x29, 0x36, {0x2f, 0xa, '\x00', [@generic={0x80, 0x42, "31fdf15deea3e419c7fd86d72ab8324b306024146a02d131124b6383a8395bb9df854ae14e38f6d897eb6df6f51ab1d2b22ce1016ba8347da43b611125a0fc4632ab"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x80}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x1a, 0xa, 0x2, 0x0, 0x0, [@private2, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x65fcbd81}}, @dontfrag={{0x14, 0x29, 0x3e, 0xffffdc86}}, @hoplimit={{0x14, 0x29, 0x34, 0x10001}}], 0x120}}], 0x7, 0x4000040) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x2002, &(0x7f0000000280)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x10) (async) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r5, &(0x7f0000000380)="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", 0xfb, 0x10, &(0x7f0000000080)={0xa, 0x4e24, 0x7, @private0, 0x7}, 0x1c) 10:51:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x20000000) 10:51:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x7d, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 258.878939][ T25] audit: type=1804 audit(1645786286.709:258): pid=10215 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/176/memory.events" dev="sda1" ino=1167 res=1 errno=0 [ 258.955161][ T25] audit: type=1804 audit(1645786286.709:259): pid=10221 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/176/memory.events" dev="sda1" ino=1167 res=1 errno=0 [ 259.003084][ T25] audit: type=1804 audit(1645786286.809:260): pid=10232 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3056829688/syzkaller.0VW25A/216/memory.events" dev="sda1" ino=1169 res=1 errno=0 [ 259.056292][ T25] audit: type=1804 audit(1645786286.829:261): pid=10233 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3056829688/syzkaller.0VW25A/216/memory.events" dev="sda1" ino=1169 res=1 errno=0 10:51:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x40000000) 10:51:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x5000000, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0xfc, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:27 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000000000d00010000000000000000000072839058f1db4ab62b0c71f3816c420e46f341069b3a9d457402544582b3771712c80bbe0cd919c8437e5dfdd91b97cc75e9d83fb71182", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r3, &(0x7f0000000a80)={0xa, 0x4e21, 0x3, @mcast1, 0x1}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)='{', 0x1}, {&(0x7f0000000500)="d484e8a35865d5167c9f0e4c65b8b54d46c136244caa0f86361175421d17cfff55aaa6260ed3f649c96f671bec4fdaa900e100f8521c32f2291584e5a65825fc1dcd3d7e753b3ae6566fe0a9af86352362638b967bd07930dfa0e16ae359a8812a10850614c2c7918932e43cc4916495287e247eab4182765e944bdf6b33b89fde447ee4de63f779d292fc0b2680afe357be47a813c08af11a13ea3b4dfd8ef671da442b798adb188326a5bd9c8c40f0d38a1c14fe3a47477915c2ef8679f59067bf526cbe36d3f0760b9106b2e650eae07db997dcc6d0299db859fd4556d09c3592c1e5763b3682a2fe781fe838", 0xee}], 0x2, &(0x7f0000000700)=[{0x110, 0xff, 0x9, "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"}, {0x10, 0x10e, 0x3ff}, {0x88, 0x115, 0x401, "b520579e303dfdac8e263d53de2b52da3e0418c0e6b49ff5ec4282f7a05c95c253570d36f85c501173d33b15e409c168cd42b22b275fac3f616fb72bce92a128166c5cbb8d2a85c017a089bf51efe26ae0d4cecde954f4b90cec191d727ccd24b408c603b58c6e39637067d46460c16c65088bf661"}, {0xa0, 0x110, 0xffffffff, "a2e3d5fb92fa6dfe8c721e6b67b27a87391c3574bdf5f669633461318e864c30d31a06fcfdcfd0a98618079f18d5f3484ab4f58b663df5da3ef63f8eeb0be6e006682f19cdf8c33e8fd0aa8fbd336851e69734e659ce6637ad6b1132d531d1849c825fcbc13f3756aee0a6a9e6ffc3db848e99ad4fb983662b890109003ce0b745a6d223549b14ff7e740310148387e1"}], 0x248}}, {{&(0x7f0000000640)=@llc={0x1a, 0x300, 0x0, 0xff, 0x1, 0x3, @random="43b99b5bc930"}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000980)="d8e598379ba825", 0x7}, {&(0x7f00000009c0)="ad80098a84f991967443a9184cf8a9650b29781ad88ee972814b7501b967292473f9ce6ada1b07e1b38d0349382f33cd8ca015b8844a03bc99c4820c48ac8a72db09388363ae135853d1ecee81c2a820f3e8ef8d7ceca42ee37f0cf489207e7c57d187696d1e1e426724026f63c11e2220afec231e6657cfac48610e8042a3381ca31de9258e825bae830fd11502e7ddde37fe1a8fcbc6f7494c75febbfb19811363ba9635f36e891b1169a0", 0xac}, {&(0x7f0000000a80)}], 0x3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="80000000000000000401000002000000a4beed33e841234c8ecb62970764e815369bb2c0b2f16d53f2fa818bbb1fe0df66f9d3cf79158f8a00c89c32ce46f57214369ecedb0be40d771386fa5b675f5ed69643ebc6f17539416dab20512313762e7827dba7bbffb64eb86e46b7cce2da5549a5388b487c57462a000000000000800000000000000006000000192a2b4cc66fde5a38c0c4fca68940a7a1c7b5fac145b3d1ff4bf0aa6bf5ecece19334061504d72ac5af8d7a190783bfc07ca8417d5e578403b24cf6487dd98b6871effae53a42d24a2e28b8fbd1fb829387845184e0d2bcd7373ec2327b60fc1f9147a6dcec8f13fe91590b631070e56a510000c80000000000000006000000ff070000f282e447c5ec24bc3f9e5c3517669e5e8baa690ebd6de5410b707f69ff09d1e1b4c872de80b1379ab2439d709402e32e5ff050839cfc102663d3725253c63835600b7de527c25f319920cf51a5c034546df57dbcb18df476d6617ee9010cae9019aa164ff27e3a7e4e6265f7f636cbca8d26591bbe0fcad24050ba0ff672829ed7587998d6b917ef37db434282f4df2351514600488544b6c78625cc037d9702527104ad5760029a2b4c099af316c14fa200000000000000d8000000000000001601000000000080d973c36c8ee8399680d066d1d8d079b3065d71a14d8436dbc915ec1cf55f4d7860e72f9f8722a940099b889d6b805a44876fbded3b055714aa54ef45e2e5ea80dbce0c3063ce59ded256277029cd3e5a0b0a3a2d49546cb1320a43fea7c35fa57b27bd80ac5a5532dcd33c10b7b9e1787f4b741ad06c90c7a540baf560c7ad41a905ca0c3d284e9e2bc7d71ead20e7510ec251b7746e387b5cb5cebab53238f1347b343763ab4a8a1ca51cab8b6bfc54a5cb9bc401eb3a9c804a9d1556c74e0c2cb97e8a3f18c600700000000000000003010000040000006b556e516d0922d681b321062138b4972a7ef22d5c2a0dbf98cab022ee842bda13daed196379e799ceadba7c6f1c11228ee82a49546ca26d716eed521751481d2218fbf8d76490dcab398e4772dbd5695ebb87084376a5a239f34754b500000060000000000000000f010000b6040000599db771059a6f0000cfcf3a5e2aae2b1a0a92726599e351ccf1e0769b5b30aeab74db1934a289e3c596bb4366976d4d1548d5eb18a14d223f1434dea7b7bca6f9e8eff8a3aafaab703962b436a39200c0000000000000000100000006000000768e7eb8206d0d255012a1d10dbfb4d49cbc3424a018f56d17eb4a9e8f9206dfa07269b76f5eb08d2bf56a0625877f6436e06cecd31afce0b3c65b51f05b316fdbc2b4c27fd76e20d04dc3602792cb61eb3695cb82081bd3f057c7f8e8eb987470e90db802366f2c2f0cef91d96b2d85046855f821181c1020736653dcec1b0f8364137c6d3fb1bfa7620ec3cabbfa707490ad1ea7cce214d189f4d0b58db00ccd088cfcea58007a6c20b9a1e0213c9a"], 0x430}}, {{&(0x7f0000000b00)=@in6={0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x299}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001100)="f76bc201867cee8f1f92142a314acd960d7c83894275954d4cffd0ecaa62bd74e7433f5a11794233801268e8e77691775e8b93d7b3b2de73fc86b1ebda7ed06d500e47dd36f28e6cacdb47edfd28086d662ee3169c307790c5c64d13b239f6a5458bac6e67470c6ee9529aa150d0c7a7112c8e105da860", 0x77}, {&(0x7f0000001180)="ba676f972a60df8a57f51b40b79ed222794940d024b2f18050c3d1062948fb731d22fb20ba742a5d1ee2fb972c60955c752f2f703f05d642bf2d73d76f8093255a775b274ad3c487ba9eac2f42516c2e202a4bde7eb384", 0x57}, {&(0x7f0000001200)="e9360a3e8bfa3480de68f7164c95b5092368f04c94b5bb0f55fd54d540075456f60b7f49cd15af29694a835d5b64ccbf9c8fd9c2766df15848b719bc54a3a55049f957c3f97e4d9c3375c17239466fcbdef899df6c3527a72cf93b6176369299f7c9ea48e3fe6e11b7b7b0efa20db6aee24525440cdfd87eddbaf56bc981bcf352120cc30f35be0d84b96c6f04d47bf95e721b8f3112e98c28e6179e5c0231a656563fb019e4fd0bdbb384fd4ba4fc5b0450c819adc0ce6adefd15e2814d977c452ee288ab92d74ee5fc0448520a76bddabc50c7d88e7afdc36e8972e3880dab0df10132861cdcd9650fdc2bd9", 0xed}, {&(0x7f0000001300)="e13933c170ee57c9521ddb0c529bf5db6efaf3a279fffa8216817449358dbc2edd40fe03277793a8f0c876b0188204e1382f578225ffe24014be524df6582364766a71d325ba31bfadcd5dffcb9a168c66ff9d9d8c326762cdd96538642086ba22d3ed2779862f5a693c01bd5d9247ea38ffb23ac08e71c2821aa0740813b02dfc2e74720ee21e632873a5a34d73572e375b9e701d692fb8320831edd78b82", 0x9f}, {&(0x7f0000000b80)="a12c552460f057514f79eb885ebe6ef4c0678f02fe93efe55bffe19c5c431f998ac0c381cce5816c2ae388df7baf0ee3c3c5a05faba8e9ae6b66f1c82bcd6fd4", 0x40}], 0x5}}, {{&(0x7f0000001440)=@in6={0xa, 0x4e22, 0x400, @loopback}, 0x80, &(0x7f0000001800)=[{&(0x7f00000014c0)="fd90f775f21a5feb8420be2da92cb7ee5867019d48424138182a56c6617d7ebb97a991101b2598c5c5f2483a523a3465ca86508e350688fa7745998fc9ab3ca10d376400796590ecde9a2e12b153c3298fb686963ce5ea05f880328ce6f7a021868539c2bca9500acbad5cb3414b8dead9bf0d6ff02c127922ad060dc361524e52129b6b52294b46ef7b9ec7bfd7efe07b5c69a7397b774287be0c87adabd100081932f4bd111d15de0fc278704cc486907cdbcc3dc7049aaaa3c0946518c389c05b543cb708d32d9db6a92b8d2a", 0xce}, {&(0x7f00000015c0)="7335530c0ae16ebe3192849c325cccf13f8d5ef53428d0a478dd8862de1a34e7adbc7ddf7b97abc52200038ee35e6f40f3307f850ae1", 0x36}, {&(0x7f0000001600)="b2ca144e5870d12e364dcc32ca78cf822c9ae02e2a029255c306ed115ceff8e79534c4775f00082e26d73ffeae44579d412e375782866f40442b4a85ce6188f1425dfd521d202a1be272f17a971609ba7394228e7e9c1ace5667d06fa65af4504984aac204f3bd7c60a7bcaf4cca09c6307335b595c378", 0x77}, {&(0x7f00000016c0)="afef2f39f0b656f7d539116bd057f4d49aaaab7046d2bcb2851224e6399fc1e011ab4e9dfcb97db9540bab9c9b1ea699f45baeaa4845718f51d68528a61636fda02bef7d21d9fd2ad067d6211b07458c3b694393bc0f792b452e9e4fe5e6a13182817cf050dc95bbf741d5a940496ec4ba94a4463ad431109094cbf1c06af12cbe81a8edd025135855de5c4af79eb19f7346727080260ba1b06f4d3a0c2d7156e756f28ef99c67ae070a11b3e20e05d2eab1d6fc4ea38f7ee330dd50c933fc95acda8d1238d772b71da1c2f9bd9053337e979b5d862b1e781811211bb12190d58d50651c37c8e81dc1d97c", 0xeb}, {&(0x7f00000017c0)="6c9eaa12a7bf854a17ab02297d9b9c4f8c7ccd557511bc520182ad69", 0x1c}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x428}}], 0x4, 0x40004) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0xe0, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7d}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x77}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x101}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x7fff}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x55f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa84}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x2c}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8800}, 0x80) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:51:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x43000000) 10:51:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x20000000) 10:51:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x6000000, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x12c, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:27 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000000000d00010000000000000000000072839058f1db4ab62b0c71f3816c420e46f341069b3a9d457402544582b3771712c80bbe0cd919c8437e5dfdd91b97cc75e9d83fb71182", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r3, &(0x7f0000000a80)={0xa, 0x4e21, 0x3, @mcast1, 0x1}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)='{', 0x1}, {&(0x7f0000000500)="d484e8a35865d5167c9f0e4c65b8b54d46c136244caa0f86361175421d17cfff55aaa6260ed3f649c96f671bec4fdaa900e100f8521c32f2291584e5a65825fc1dcd3d7e753b3ae6566fe0a9af86352362638b967bd07930dfa0e16ae359a8812a10850614c2c7918932e43cc4916495287e247eab4182765e944bdf6b33b89fde447ee4de63f779d292fc0b2680afe357be47a813c08af11a13ea3b4dfd8ef671da442b798adb188326a5bd9c8c40f0d38a1c14fe3a47477915c2ef8679f59067bf526cbe36d3f0760b9106b2e650eae07db997dcc6d0299db859fd4556d09c3592c1e5763b3682a2fe781fe838", 0xee}], 0x2, &(0x7f0000000700)=[{0x110, 0xff, 0x9, "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"}, {0x10, 0x10e, 0x3ff}, {0x88, 0x115, 0x401, "b520579e303dfdac8e263d53de2b52da3e0418c0e6b49ff5ec4282f7a05c95c253570d36f85c501173d33b15e409c168cd42b22b275fac3f616fb72bce92a128166c5cbb8d2a85c017a089bf51efe26ae0d4cecde954f4b90cec191d727ccd24b408c603b58c6e39637067d46460c16c65088bf661"}, {0xa0, 0x110, 0xffffffff, "a2e3d5fb92fa6dfe8c721e6b67b27a87391c3574bdf5f669633461318e864c30d31a06fcfdcfd0a98618079f18d5f3484ab4f58b663df5da3ef63f8eeb0be6e006682f19cdf8c33e8fd0aa8fbd336851e69734e659ce6637ad6b1132d531d1849c825fcbc13f3756aee0a6a9e6ffc3db848e99ad4fb983662b890109003ce0b745a6d223549b14ff7e740310148387e1"}], 0x248}}, {{&(0x7f0000000640)=@llc={0x1a, 0x300, 0x0, 0xff, 0x1, 0x3, @random="43b99b5bc930"}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000980)="d8e598379ba825", 0x7}, {&(0x7f00000009c0)="ad80098a84f991967443a9184cf8a9650b29781ad88ee972814b7501b967292473f9ce6ada1b07e1b38d0349382f33cd8ca015b8844a03bc99c4820c48ac8a72db09388363ae135853d1ecee81c2a820f3e8ef8d7ceca42ee37f0cf489207e7c57d187696d1e1e426724026f63c11e2220afec231e6657cfac48610e8042a3381ca31de9258e825bae830fd11502e7ddde37fe1a8fcbc6f7494c75febbfb19811363ba9635f36e891b1169a0", 0xac}, {&(0x7f0000000a80)}], 0x3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="80000000000000000401000002000000a4beed33e841234c8ecb62970764e815369bb2c0b2f16d53f2fa818bbb1fe0df66f9d3cf79158f8a00c89c32ce46f57214369ecedb0be40d771386fa5b675f5ed69643ebc6f17539416dab20512313762e7827dba7bbffb64eb86e46b7cce2da5549a5388b487c57462a000000000000800000000000000006000000192a2b4cc66fde5a38c0c4fca68940a7a1c7b5fac145b3d1ff4bf0aa6bf5ecece19334061504d72ac5af8d7a190783bfc07ca8417d5e578403b24cf6487dd98b6871effae53a42d24a2e28b8fbd1fb829387845184e0d2bcd7373ec2327b60fc1f9147a6dcec8f13fe91590b631070e56a510000c80000000000000006000000ff070000f282e447c5ec24bc3f9e5c3517669e5e8baa690ebd6de5410b707f69ff09d1e1b4c872de80b1379ab2439d709402e32e5ff050839cfc102663d3725253c63835600b7de527c25f319920cf51a5c034546df57dbcb18df476d6617ee9010cae9019aa164ff27e3a7e4e6265f7f636cbca8d26591bbe0fcad24050ba0ff672829ed7587998d6b917ef37db434282f4df2351514600488544b6c78625cc037d9702527104ad5760029a2b4c099af316c14fa200000000000000d8000000000000001601000000000080d973c36c8ee8399680d066d1d8d079b3065d71a14d8436dbc915ec1cf55f4d7860e72f9f8722a940099b889d6b805a44876fbded3b055714aa54ef45e2e5ea80dbce0c3063ce59ded256277029cd3e5a0b0a3a2d49546cb1320a43fea7c35fa57b27bd80ac5a5532dcd33c10b7b9e1787f4b741ad06c90c7a540baf560c7ad41a905ca0c3d284e9e2bc7d71ead20e7510ec251b7746e387b5cb5cebab53238f1347b343763ab4a8a1ca51cab8b6bfc54a5cb9bc401eb3a9c804a9d1556c74e0c2cb97e8a3f18c600700000000000000003010000040000006b556e516d0922d681b321062138b4972a7ef22d5c2a0dbf98cab022ee842bda13daed196379e799ceadba7c6f1c11228ee82a49546ca26d716eed521751481d2218fbf8d76490dcab398e4772dbd5695ebb87084376a5a239f34754b500000060000000000000000f010000b6040000599db771059a6f0000cfcf3a5e2aae2b1a0a92726599e351ccf1e0769b5b30aeab74db1934a289e3c596bb4366976d4d1548d5eb18a14d223f1434dea7b7bca6f9e8eff8a3aafaab703962b436a39200c0000000000000000100000006000000768e7eb8206d0d255012a1d10dbfb4d49cbc3424a018f56d17eb4a9e8f9206dfa07269b76f5eb08d2bf56a0625877f6436e06cecd31afce0b3c65b51f05b316fdbc2b4c27fd76e20d04dc3602792cb61eb3695cb82081bd3f057c7f8e8eb987470e90db802366f2c2f0cef91d96b2d85046855f821181c1020736653dcec1b0f8364137c6d3fb1bfa7620ec3cabbfa707490ad1ea7cce214d189f4d0b58db00ccd088cfcea58007a6c20b9a1e0213c9a"], 0x430}}, {{&(0x7f0000000b00)=@in6={0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x299}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001100)="f76bc201867cee8f1f92142a314acd960d7c83894275954d4cffd0ecaa62bd74e7433f5a11794233801268e8e77691775e8b93d7b3b2de73fc86b1ebda7ed06d500e47dd36f28e6cacdb47edfd28086d662ee3169c307790c5c64d13b239f6a5458bac6e67470c6ee9529aa150d0c7a7112c8e105da860", 0x77}, {&(0x7f0000001180)="ba676f972a60df8a57f51b40b79ed222794940d024b2f18050c3d1062948fb731d22fb20ba742a5d1ee2fb972c60955c752f2f703f05d642bf2d73d76f8093255a775b274ad3c487ba9eac2f42516c2e202a4bde7eb384", 0x57}, {&(0x7f0000001200)="e9360a3e8bfa3480de68f7164c95b5092368f04c94b5bb0f55fd54d540075456f60b7f49cd15af29694a835d5b64ccbf9c8fd9c2766df15848b719bc54a3a55049f957c3f97e4d9c3375c17239466fcbdef899df6c3527a72cf93b6176369299f7c9ea48e3fe6e11b7b7b0efa20db6aee24525440cdfd87eddbaf56bc981bcf352120cc30f35be0d84b96c6f04d47bf95e721b8f3112e98c28e6179e5c0231a656563fb019e4fd0bdbb384fd4ba4fc5b0450c819adc0ce6adefd15e2814d977c452ee288ab92d74ee5fc0448520a76bddabc50c7d88e7afdc36e8972e3880dab0df10132861cdcd9650fdc2bd9", 0xed}, {&(0x7f0000001300)="e13933c170ee57c9521ddb0c529bf5db6efaf3a279fffa8216817449358dbc2edd40fe03277793a8f0c876b0188204e1382f578225ffe24014be524df6582364766a71d325ba31bfadcd5dffcb9a168c66ff9d9d8c326762cdd96538642086ba22d3ed2779862f5a693c01bd5d9247ea38ffb23ac08e71c2821aa0740813b02dfc2e74720ee21e632873a5a34d73572e375b9e701d692fb8320831edd78b82", 0x9f}, {&(0x7f0000000b80)="a12c552460f057514f79eb885ebe6ef4c0678f02fe93efe55bffe19c5c431f998ac0c381cce5816c2ae388df7baf0ee3c3c5a05faba8e9ae6b66f1c82bcd6fd4", 0x40}], 0x5}}, {{&(0x7f0000001440)=@in6={0xa, 0x4e22, 0x400, @loopback}, 0x80, &(0x7f0000001800)=[{&(0x7f00000014c0)="fd90f775f21a5feb8420be2da92cb7ee5867019d48424138182a56c6617d7ebb97a991101b2598c5c5f2483a523a3465ca86508e350688fa7745998fc9ab3ca10d376400796590ecde9a2e12b153c3298fb686963ce5ea05f880328ce6f7a021868539c2bca9500acbad5cb3414b8dead9bf0d6ff02c127922ad060dc361524e52129b6b52294b46ef7b9ec7bfd7efe07b5c69a7397b774287be0c87adabd100081932f4bd111d15de0fc278704cc486907cdbcc3dc7049aaaa3c0946518c389c05b543cb708d32d9db6a92b8d2a", 0xce}, {&(0x7f00000015c0)="7335530c0ae16ebe3192849c325cccf13f8d5ef53428d0a478dd8862de1a34e7adbc7ddf7b97abc52200038ee35e6f40f3307f850ae1", 0x36}, {&(0x7f0000001600)="b2ca144e5870d12e364dcc32ca78cf822c9ae02e2a029255c306ed115ceff8e79534c4775f00082e26d73ffeae44579d412e375782866f40442b4a85ce6188f1425dfd521d202a1be272f17a971609ba7394228e7e9c1ace5667d06fa65af4504984aac204f3bd7c60a7bcaf4cca09c6307335b595c378", 0x77}, {&(0x7f00000016c0)="afef2f39f0b656f7d539116bd057f4d49aaaab7046d2bcb2851224e6399fc1e011ab4e9dfcb97db9540bab9c9b1ea699f45baeaa4845718f51d68528a61636fda02bef7d21d9fd2ad067d6211b07458c3b694393bc0f792b452e9e4fe5e6a13182817cf050dc95bbf741d5a940496ec4ba94a4463ad431109094cbf1c06af12cbe81a8edd025135855de5c4af79eb19f7346727080260ba1b06f4d3a0c2d7156e756f28ef99c67ae070a11b3e20e05d2eab1d6fc4ea38f7ee330dd50c933fc95acda8d1238d772b71da1c2f9bd9053337e979b5d862b1e781811211bb12190d58d50651c37c8e81dc1d97c", 0xeb}, {&(0x7f00000017c0)="6c9eaa12a7bf854a17ab02297d9b9c4f8c7ccd557511bc520182ad69", 0x1c}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x428}}], 0x4, 0x40004) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0xe0, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7d}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x77}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x101}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x7fff}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x55f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa84}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x2c}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8800}, 0x80) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000000000d00010000000000000000000072839058f1db4ab62b0c71f3816c420e46f341069b3a9d457402544582b3771712c80bbe0cd919c8437e5dfdd91b97cc75e9d83fb71182", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) connect$inet6(r3, &(0x7f0000000a80)={0xa, 0x4e21, 0x3, @mcast1, 0x1}, 0x1c) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmmsg(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)='{', 0x1}, {&(0x7f0000000500)="d484e8a35865d5167c9f0e4c65b8b54d46c136244caa0f86361175421d17cfff55aaa6260ed3f649c96f671bec4fdaa900e100f8521c32f2291584e5a65825fc1dcd3d7e753b3ae6566fe0a9af86352362638b967bd07930dfa0e16ae359a8812a10850614c2c7918932e43cc4916495287e247eab4182765e944bdf6b33b89fde447ee4de63f779d292fc0b2680afe357be47a813c08af11a13ea3b4dfd8ef671da442b798adb188326a5bd9c8c40f0d38a1c14fe3a47477915c2ef8679f59067bf526cbe36d3f0760b9106b2e650eae07db997dcc6d0299db859fd4556d09c3592c1e5763b3682a2fe781fe838", 0xee}], 0x2, &(0x7f0000000700)=[{0x110, 0xff, 0x9, "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"}, {0x10, 0x10e, 0x3ff}, {0x88, 0x115, 0x401, "b520579e303dfdac8e263d53de2b52da3e0418c0e6b49ff5ec4282f7a05c95c253570d36f85c501173d33b15e409c168cd42b22b275fac3f616fb72bce92a128166c5cbb8d2a85c017a089bf51efe26ae0d4cecde954f4b90cec191d727ccd24b408c603b58c6e39637067d46460c16c65088bf661"}, {0xa0, 0x110, 0xffffffff, "a2e3d5fb92fa6dfe8c721e6b67b27a87391c3574bdf5f669633461318e864c30d31a06fcfdcfd0a98618079f18d5f3484ab4f58b663df5da3ef63f8eeb0be6e006682f19cdf8c33e8fd0aa8fbd336851e69734e659ce6637ad6b1132d531d1849c825fcbc13f3756aee0a6a9e6ffc3db848e99ad4fb983662b890109003ce0b745a6d223549b14ff7e740310148387e1"}], 0x248}}, {{&(0x7f0000000640)=@llc={0x1a, 0x300, 0x0, 0xff, 0x1, 0x3, @random="43b99b5bc930"}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000980)="d8e598379ba825", 0x7}, {&(0x7f00000009c0)="ad80098a84f991967443a9184cf8a9650b29781ad88ee972814b7501b967292473f9ce6ada1b07e1b38d0349382f33cd8ca015b8844a03bc99c4820c48ac8a72db09388363ae135853d1ecee81c2a820f3e8ef8d7ceca42ee37f0cf489207e7c57d187696d1e1e426724026f63c11e2220afec231e6657cfac48610e8042a3381ca31de9258e825bae830fd11502e7ddde37fe1a8fcbc6f7494c75febbfb19811363ba9635f36e891b1169a0", 0xac}, {&(0x7f0000000a80)}], 0x3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x430}}, {{&(0x7f0000000b00)=@in6={0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x299}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001100)="f76bc201867cee8f1f92142a314acd960d7c83894275954d4cffd0ecaa62bd74e7433f5a11794233801268e8e77691775e8b93d7b3b2de73fc86b1ebda7ed06d500e47dd36f28e6cacdb47edfd28086d662ee3169c307790c5c64d13b239f6a5458bac6e67470c6ee9529aa150d0c7a7112c8e105da860", 0x77}, {&(0x7f0000001180)="ba676f972a60df8a57f51b40b79ed222794940d024b2f18050c3d1062948fb731d22fb20ba742a5d1ee2fb972c60955c752f2f703f05d642bf2d73d76f8093255a775b274ad3c487ba9eac2f42516c2e202a4bde7eb384", 0x57}, {&(0x7f0000001200)="e9360a3e8bfa3480de68f7164c95b5092368f04c94b5bb0f55fd54d540075456f60b7f49cd15af29694a835d5b64ccbf9c8fd9c2766df15848b719bc54a3a55049f957c3f97e4d9c3375c17239466fcbdef899df6c3527a72cf93b6176369299f7c9ea48e3fe6e11b7b7b0efa20db6aee24525440cdfd87eddbaf56bc981bcf352120cc30f35be0d84b96c6f04d47bf95e721b8f3112e98c28e6179e5c0231a656563fb019e4fd0bdbb384fd4ba4fc5b0450c819adc0ce6adefd15e2814d977c452ee288ab92d74ee5fc0448520a76bddabc50c7d88e7afdc36e8972e3880dab0df10132861cdcd9650fdc2bd9", 0xed}, {&(0x7f0000001300)="e13933c170ee57c9521ddb0c529bf5db6efaf3a279fffa8216817449358dbc2edd40fe03277793a8f0c876b0188204e1382f578225ffe24014be524df6582364766a71d325ba31bfadcd5dffcb9a168c66ff9d9d8c326762cdd96538642086ba22d3ed2779862f5a693c01bd5d9247ea38ffb23ac08e71c2821aa0740813b02dfc2e74720ee21e632873a5a34d73572e375b9e701d692fb8320831edd78b82", 0x9f}, {&(0x7f0000000b80)="a12c552460f057514f79eb885ebe6ef4c0678f02fe93efe55bffe19c5c431f998ac0c381cce5816c2ae388df7baf0ee3c3c5a05faba8e9ae6b66f1c82bcd6fd4", 0x40}], 0x5}}, {{&(0x7f0000001440)=@in6={0xa, 0x4e22, 0x400, @loopback}, 0x80, &(0x7f0000001800)=[{&(0x7f00000014c0)="fd90f775f21a5feb8420be2da92cb7ee5867019d48424138182a56c6617d7ebb97a991101b2598c5c5f2483a523a3465ca86508e350688fa7745998fc9ab3ca10d376400796590ecde9a2e12b153c3298fb686963ce5ea05f880328ce6f7a021868539c2bca9500acbad5cb3414b8dead9bf0d6ff02c127922ad060dc361524e52129b6b52294b46ef7b9ec7bfd7efe07b5c69a7397b774287be0c87adabd100081932f4bd111d15de0fc278704cc486907cdbcc3dc7049aaaa3c0946518c389c05b543cb708d32d9db6a92b8d2a", 0xce}, {&(0x7f00000015c0)="7335530c0ae16ebe3192849c325cccf13f8d5ef53428d0a478dd8862de1a34e7adbc7ddf7b97abc52200038ee35e6f40f3307f850ae1", 0x36}, {&(0x7f0000001600)="b2ca144e5870d12e364dcc32ca78cf822c9ae02e2a029255c306ed115ceff8e79534c4775f00082e26d73ffeae44579d412e375782866f40442b4a85ce6188f1425dfd521d202a1be272f17a971609ba7394228e7e9c1ace5667d06fa65af4504984aac204f3bd7c60a7bcaf4cca09c6307335b595c378", 0x77}, {&(0x7f00000016c0)="afef2f39f0b656f7d539116bd057f4d49aaaab7046d2bcb2851224e6399fc1e011ab4e9dfcb97db9540bab9c9b1ea699f45baeaa4845718f51d68528a61636fda02bef7d21d9fd2ad067d6211b07458c3b694393bc0f792b452e9e4fe5e6a13182817cf050dc95bbf741d5a940496ec4ba94a4463ad431109094cbf1c06af12cbe81a8edd025135855de5c4af79eb19f7346727080260ba1b06f4d3a0c2d7156e756f28ef99c67ae070a11b3e20e05d2eab1d6fc4ea38f7ee330dd50c933fc95acda8d1238d772b71da1c2f9bd9053337e979b5d862b1e781811211bb12190d58d50651c37c8e81dc1d97c", 0xeb}, {&(0x7f00000017c0)="6c9eaa12a7bf854a17ab02297d9b9c4f8c7ccd557511bc520182ad69", 0x1c}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x428}}], 0x4, 0x40004) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmmsg$inet6(r5, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0xe0, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7d}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x77}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x101}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x7fff}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x55f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa84}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x2c}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8800}, 0x80) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) (async) 10:51:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x1fc, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x7000000, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 259.331490][ T25] audit: type=1804 audit(1645786287.159:262): pid=10267 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/177/memory.events" dev="sda1" ino=1181 res=1 errno=0 10:51:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x8000000, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) [ 259.401658][ T25] audit: type=1804 audit(1645786287.159:263): pid=10270 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir512025291/syzkaller.Pa0S7M/177/memory.events" dev="sda1" ino=1181 res=1 errno=0 10:51:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x40000000) 10:51:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x300, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:27 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async, rerun: 64) close(0xffffffffffffffff) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000000000d00010000000000000000000072839058f1db4ab62b0c71f3816c420e46f341069b3a9d457402544582b3771712c80bbe0cd919c8437e5dfdd91b97cc75e9d83fb71182", @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 32) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async, rerun: 32) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (rerun: 32) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r3, &(0x7f0000000a80)={0xa, 0x4e21, 0x3, @mcast1, 0x1}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmmsg(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)='{', 0x1}, {&(0x7f0000000500)="d484e8a35865d5167c9f0e4c65b8b54d46c136244caa0f86361175421d17cfff55aaa6260ed3f649c96f671bec4fdaa900e100f8521c32f2291584e5a65825fc1dcd3d7e753b3ae6566fe0a9af86352362638b967bd07930dfa0e16ae359a8812a10850614c2c7918932e43cc4916495287e247eab4182765e944bdf6b33b89fde447ee4de63f779d292fc0b2680afe357be47a813c08af11a13ea3b4dfd8ef671da442b798adb188326a5bd9c8c40f0d38a1c14fe3a47477915c2ef8679f59067bf526cbe36d3f0760b9106b2e650eae07db997dcc6d0299db859fd4556d09c3592c1e5763b3682a2fe781fe838", 0xee}], 0x2, &(0x7f0000000700)=[{0x110, 0xff, 0x9, "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"}, {0x10, 0x10e, 0x3ff}, {0x88, 0x115, 0x401, "b520579e303dfdac8e263d53de2b52da3e0418c0e6b49ff5ec4282f7a05c95c253570d36f85c501173d33b15e409c168cd42b22b275fac3f616fb72bce92a128166c5cbb8d2a85c017a089bf51efe26ae0d4cecde954f4b90cec191d727ccd24b408c603b58c6e39637067d46460c16c65088bf661"}, {0xa0, 0x110, 0xffffffff, "a2e3d5fb92fa6dfe8c721e6b67b27a87391c3574bdf5f669633461318e864c30d31a06fcfdcfd0a98618079f18d5f3484ab4f58b663df5da3ef63f8eeb0be6e006682f19cdf8c33e8fd0aa8fbd336851e69734e659ce6637ad6b1132d531d1849c825fcbc13f3756aee0a6a9e6ffc3db848e99ad4fb983662b890109003ce0b745a6d223549b14ff7e740310148387e1"}], 0x248}}, {{&(0x7f0000000640)=@llc={0x1a, 0x300, 0x0, 0xff, 0x1, 0x3, @random="43b99b5bc930"}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000980)="d8e598379ba825", 0x7}, {&(0x7f00000009c0)="ad80098a84f991967443a9184cf8a9650b29781ad88ee972814b7501b967292473f9ce6ada1b07e1b38d0349382f33cd8ca015b8844a03bc99c4820c48ac8a72db09388363ae135853d1ecee81c2a820f3e8ef8d7ceca42ee37f0cf489207e7c57d187696d1e1e426724026f63c11e2220afec231e6657cfac48610e8042a3381ca31de9258e825bae830fd11502e7ddde37fe1a8fcbc6f7494c75febbfb19811363ba9635f36e891b1169a0", 0xac}, {&(0x7f0000000a80)}], 0x3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x430}}, {{&(0x7f0000000b00)=@in6={0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x299}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001100)="f76bc201867cee8f1f92142a314acd960d7c83894275954d4cffd0ecaa62bd74e7433f5a11794233801268e8e77691775e8b93d7b3b2de73fc86b1ebda7ed06d500e47dd36f28e6cacdb47edfd28086d662ee3169c307790c5c64d13b239f6a5458bac6e67470c6ee9529aa150d0c7a7112c8e105da860", 0x77}, {&(0x7f0000001180)="ba676f972a60df8a57f51b40b79ed222794940d024b2f18050c3d1062948fb731d22fb20ba742a5d1ee2fb972c60955c752f2f703f05d642bf2d73d76f8093255a775b274ad3c487ba9eac2f42516c2e202a4bde7eb384", 0x57}, {&(0x7f0000001200)="e9360a3e8bfa3480de68f7164c95b5092368f04c94b5bb0f55fd54d540075456f60b7f49cd15af29694a835d5b64ccbf9c8fd9c2766df15848b719bc54a3a55049f957c3f97e4d9c3375c17239466fcbdef899df6c3527a72cf93b6176369299f7c9ea48e3fe6e11b7b7b0efa20db6aee24525440cdfd87eddbaf56bc981bcf352120cc30f35be0d84b96c6f04d47bf95e721b8f3112e98c28e6179e5c0231a656563fb019e4fd0bdbb384fd4ba4fc5b0450c819adc0ce6adefd15e2814d977c452ee288ab92d74ee5fc0448520a76bddabc50c7d88e7afdc36e8972e3880dab0df10132861cdcd9650fdc2bd9", 0xed}, {&(0x7f0000001300)="e13933c170ee57c9521ddb0c529bf5db6efaf3a279fffa8216817449358dbc2edd40fe03277793a8f0c876b0188204e1382f578225ffe24014be524df6582364766a71d325ba31bfadcd5dffcb9a168c66ff9d9d8c326762cdd96538642086ba22d3ed2779862f5a693c01bd5d9247ea38ffb23ac08e71c2821aa0740813b02dfc2e74720ee21e632873a5a34d73572e375b9e701d692fb8320831edd78b82", 0x9f}, {&(0x7f0000000b80)="a12c552460f057514f79eb885ebe6ef4c0678f02fe93efe55bffe19c5c431f998ac0c381cce5816c2ae388df7baf0ee3c3c5a05faba8e9ae6b66f1c82bcd6fd4", 0x40}], 0x5}}, {{&(0x7f0000001440)=@in6={0xa, 0x4e22, 0x400, @loopback}, 0x80, &(0x7f0000001800)=[{&(0x7f00000014c0)="fd90f775f21a5feb8420be2da92cb7ee5867019d48424138182a56c6617d7ebb97a991101b2598c5c5f2483a523a3465ca86508e350688fa7745998fc9ab3ca10d376400796590ecde9a2e12b153c3298fb686963ce5ea05f880328ce6f7a021868539c2bca9500acbad5cb3414b8dead9bf0d6ff02c127922ad060dc361524e52129b6b52294b46ef7b9ec7bfd7efe07b5c69a7397b774287be0c87adabd100081932f4bd111d15de0fc278704cc486907cdbcc3dc7049aaaa3c0946518c389c05b543cb708d32d9db6a92b8d2a", 0xce}, {&(0x7f00000015c0)="7335530c0ae16ebe3192849c325cccf13f8d5ef53428d0a478dd8862de1a34e7adbc7ddf7b97abc52200038ee35e6f40f3307f850ae1", 0x36}, {&(0x7f0000001600)="b2ca144e5870d12e364dcc32ca78cf822c9ae02e2a029255c306ed115ceff8e79534c4775f00082e26d73ffeae44579d412e375782866f40442b4a85ce6188f1425dfd521d202a1be272f17a971609ba7394228e7e9c1ace5667d06fa65af4504984aac204f3bd7c60a7bcaf4cca09c6307335b595c378", 0x77}, {&(0x7f00000016c0)="afef2f39f0b656f7d539116bd057f4d49aaaab7046d2bcb2851224e6399fc1e011ab4e9dfcb97db9540bab9c9b1ea699f45baeaa4845718f51d68528a61636fda02bef7d21d9fd2ad067d6211b07458c3b694393bc0f792b452e9e4fe5e6a13182817cf050dc95bbf741d5a940496ec4ba94a4463ad431109094cbf1c06af12cbe81a8edd025135855de5c4af79eb19f7346727080260ba1b06f4d3a0c2d7156e756f28ef99c67ae070a11b3e20e05d2eab1d6fc4ea38f7ee330dd50c933fc95acda8d1238d772b71da1c2f9bd9053337e979b5d862b1e781811211bb12190d58d50651c37c8e81dc1d97c", 0xeb}, {&(0x7f00000017c0)="6c9eaa12a7bf854a17ab02297d9b9c4f8c7ccd557511bc520182ad69", 0x1c}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="580000000000000088000000060000001fa211db1ea235576d392b97890b74e56d05493bb39cbf36fdc5fbb0471d2e4564b1f52c3122d4e1624244657a58a5f9b2dbdfc05ee7b485272ab2a4112b28e6c18b23b62900000070000000000000008800000005000000d63802350f1aab4f8ddaadf9c304af5d634366c841ddc3733e2cd5d8a98255fc4ca25d551b5c6e9b372ef3c21c529191ba797119671ca54bda69a747741027295199ccf74284ad42807e61c8c4b0c08c2004e063d702f36f6dfa0000000000002000000000000000b701000002000000d93d5f16c3d439f533c67181f24ae800d800000000000000ff000000060000004becdc0f2bc72359af0601a0a61b7edc22612986cac226cb7b7c9accaefe8038d930f08aa08ef46ea9c1997298c1e84272c032053985a748e8d141a1447e0907fb83e55682f227066c6c56a49867b3f026b5e8eaae837b9e128e0e6f4088182e6770a239f4d59f34175aec94c7811fbcfa9d8e8680288b0d4360f8f605cb0c5c4a261b48396c2f08000000bfbd2c17b84e1165dcfc690d32878482f2c8c68c9e78e27ec172a599d759e2403e2c8fbb8ae1473a8224ebd816d2eadb301fa05596c76a46276a4e7302c80000000000000013010000020000000c184c6134278eaa58bc4fa73cbd8729ee252ff0b26f5eb9325578479130def7c508a09e8c831fafd096e9e0dba6a314ab8d1fbc3e57b3fae6c3d106126ad35c9fbf1e31990d0b85035044369a620cffb2f2b9c758d2a6088ed2a421b69eda9c2aad1af3c17306441e209db739005494dbe327ca5b34994ded79692c9ccae1785ae972ee90d219132cdceeaf12b519a45085393a0049f387a0cbc1420bc59782d0ec0219f9926c00006b1f0da098000000000000000100000001000000dab808f069f49a3543b5ee0391c8ad7b4387b0ddcc5077edfedb97c179687d39416575f8cdc489fef46b67135047ad97706e3897848d9d831deb8af6d958cbd685f276f82921fcc2e26873f098aee08794cf8b8a8d0aff382dadb99c499a12a2855dc1661fa5317a0cc3e632c0034945146b547b0834cb93bff8c03a79a79de59859cfa03aa00000400000000000000011000000cd0400008b2b9f208d00787c7029f75f71c4b0776aa36a172b5bc20c8021511aea9f179b2accffd31c07f35993ea0072d5862600c80000000000000017010000b20f0000be8886b095483fd91ab4d3f76d8c3517422a1b4860067bc58e544fca417be5f5880c707af787a2540673992c074f128200dcf5b764217d967a7b2e8275f234958bdc5caa30f7d561f1dadb1ca2f4b87e9665f10b2c7bdede865c3f64aff0e0d92073363b152de41e7692bcec87d04be43c1df196c4a4c7ed957a22b69653237ee71e3e5ea597ae1d9382a0958ba9e7c04664903998bc158e822af574463bc27c9063f8025a3d798872b83953a2bda14b84c739572c910000"], 0x428}}], 0x4, 0x40004) recvfrom$inet6(r1, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0xe0, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7d}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x77}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x101}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x7fff}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x55f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa84}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x2c}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8800}, 0x80) (async) recvfrom$llc(r2, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:51:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x9000000, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x48000000) 10:51:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x20000000) 10:51:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0xa000000, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x500, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0xf000000, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x5dc, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x10000000, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x600, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:27 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000280)=0x10, 0x80000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r2, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r3, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:51:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x40000000) 10:51:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x4c000000) 10:51:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x10000120, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x700, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x1a6de4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 10:51:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x900, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x1f000000, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:27 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) (async) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000280)=0x10, 0x80000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) recvfrom$inet6(r2, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) recvfrom$llc(r3, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) 10:51:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0xa00, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x20000000, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) 10:51:27 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000000000d000100"/20, @ANYRES16, @ANYRESDEC=r0], 0x48}}, 0x10) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000280)=0x10, 0x80000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0xd7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async, rerun: 64) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "c8ca9dd33351046d", "8004072e15d13991b4f0cd6ddcc8a411", "32ca469a", "5460bad7e5b71fd8"}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) (async) recvfrom$inet6(r2, &(0x7f0000000300)=""/68, 0x44, 0x142, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async, rerun: 64) recvfrom$llc(r3, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) (rerun: 64) 10:51:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x20010010, @private1},