to 1000 [ 1970.762474][ T29] audit: type=1804 audit(1595564016.836:4257): pid=17403 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1257/cgroup.controllers" dev="sda1" ino=15785 res=1 [ 1970.795505][T17300] IPVS: ftp: loaded support on port[0] = 21 [ 1970.872029][T17290] IPVS: ftp: loaded support on port[0] = 21 [ 1970.924413][T17303] IPVS: ftp: loaded support on port[0] = 21 [ 1970.960393][T17300] lo speed is unknown, defaulting to 1000 04:13:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) [ 1971.026918][T17429] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1971.082122][T17290] lo speed is unknown, defaulting to 1000 04:13:37 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x98000000}, &(0x7f0000000000)=0x54) 04:13:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000000b) [ 1971.279019][ T29] audit: type=1804 audit(1595564017.356:4258): pid=17446 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1282/cgroup.controllers" dev="sda1" ino=15773 res=1 [ 1971.439051][T17471] IPVS: ftp: loaded support on port[0] = 21 [ 1971.529259][T17471] lo speed is unknown, defaulting to 1000 [ 1971.564555][ T29] audit: type=1804 audit(1595564017.636:4259): pid=17478 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1258/cgroup.controllers" dev="sda1" ino=16193 res=1 04:13:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) [ 1971.882596][ T29] audit: type=1804 audit(1595564017.957:4260): pid=17512 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1283/cgroup.controllers" dev="sda1" ino=15773 res=1 04:13:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000000c) 04:13:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) [ 1972.197852][T17471] IPVS: ftp: loaded support on port[0] = 21 [ 1972.209785][ T29] audit: type=1804 audit(1595564018.287:4261): pid=17520 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1259/cgroup.controllers" dev="sda1" ino=16193 res=1 [ 1972.326279][T17471] lo speed is unknown, defaulting to 1000 04:13:38 executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="47a2000004000000000000000000000400000000000000000000000000000000ff1474dac4c7a004a5a610176fde120c72f532d28eee994c9dd2a8aa86daef159e15ce00"/81], 0x20}}, 0x0) sendmsg$sock(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x4, 0x2, {0xa, 0x4e24, 0x82, @private0, 0x1c0200e4}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="6d33c49113b43db6136ff756d3e610ba2ec3c9408848e19b1f0fad0f1b1e22c4d292ca9e5931266d75ccd402f5c82410a47be0382db3430bd2e72a58965eee14ebac5aebfe81e50eab918fe8a2c33b72b300b58ad726a58320fdc7ddc3e697139442b8c76d8f4f47e0c9c4b484136c17615affe818d73cc6511193c23cbf2e2751fce5240768b44071203ef1d4a93f166bf81fb9228832d8a073632a0d8f467e9b94f12ce5d89dd8bc35c1ce78e39c7bc666ab8cb8d931da", 0xb8}], 0x1, &(0x7f0000000200)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x9e5e}}], 0x48}, 0x20000890) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x20000040) [ 1972.485229][ T29] audit: type=1804 audit(1595564018.557:4262): pid=17526 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1284/cgroup.controllers" dev="sda1" ino=15773 res=1 [ 1972.622205][T17545] IPVS: ftp: loaded support on port[0] = 21 [ 1972.718514][T17545] lo speed is unknown, defaulting to 1000 [ 1973.243986][T17545] device geneve0 entered promiscuous mode [ 1973.334182][T17545] IPVS: ftp: loaded support on port[0] = 21 [ 1973.395426][T17545] lo speed is unknown, defaulting to 1000 [ 1974.827253][ T486] tipc: TX() has been purged, node left! 04:13:41 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x122, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:13:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) 04:13:41 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x4802, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:13:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000000d) 04:13:41 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x98020000}, &(0x7f0000000000)=0x54) 04:13:41 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000000)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x56}) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1975.017254][ T486] tipc: TX() has been purged, node left! [ 1975.024051][ T29] audit: type=1804 audit(1595564021.097:4263): pid=17601 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1285/cgroup.controllers" dev="sda1" ino=16322 res=1 [ 1975.059149][T17603] IPVS: ftp: loaded support on port[0] = 21 [ 1975.094174][T17609] IPVS: ftp: loaded support on port[0] = 21 [ 1975.151502][T17603] lo speed is unknown, defaulting to 1000 [ 1975.176302][T17616] IPVS: ftp: loaded support on port[0] = 21 [ 1975.201922][ T29] audit: type=1804 audit(1595564021.277:4264): pid=17613 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1260/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 1975.227410][ T486] tipc: TX() has been purged, node left! [ 1975.268662][T17609] lo speed is unknown, defaulting to 1000 [ 1975.290212][ T486] tipc: TX() has been purged, node left! [ 1975.304369][ T486] tipc: TX() has been purged, node left! [ 1975.321508][T17616] lo speed is unknown, defaulting to 1000 [ 1975.364942][ T486] tipc: TX() has been purged, node left! [ 1975.441688][ T486] tipc: TX() has been purged, node left! [ 1975.501407][ T486] tipc: TX() has been purged, node left! [ 1975.538147][ T486] tipc: TX() has been purged, node left! [ 1975.593623][ T486] tipc: TX() has been purged, node left! [ 1975.655073][ T486] tipc: TX() has been purged, node left! 04:13:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000000e) [ 1975.817233][ T486] tipc: TX() has been purged, node left! 04:13:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) 04:13:42 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0xfc, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) [ 1975.960270][T17603] IPVS: ftp: loaded support on port[0] = 21 [ 1975.971542][ T29] audit: type=1804 audit(1595564022.047:4265): pid=17684 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1261/cgroup.controllers" dev="sda1" ino=16380 res=1 [ 1976.007291][ T486] tipc: TX() has been purged, node left! [ 1976.052194][ T486] tipc: TX() has been purged, node left! [ 1976.059533][ T486] tipc: TX() has been purged, node left! [ 1976.064263][T17603] lo speed is unknown, defaulting to 1000 [ 1976.104602][T17609] IPVS: ftp: loaded support on port[0] = 21 [ 1976.106891][T17691] IPVS: ftp: loaded support on port[0] = 21 [ 1976.157827][ T486] tipc: TX() has been purged, node left! [ 1976.164089][ T486] tipc: TX() has been purged, node left! [ 1976.169717][T17616] IPVS: ftp: loaded support on port[0] = 21 [ 1976.210090][T17691] lo speed is unknown, defaulting to 1000 [ 1976.229111][ T486] tipc: TX() has been purged, node left! [ 1976.249956][ T486] tipc: TX() has been purged, node left! [ 1976.286010][T17616] lo speed is unknown, defaulting to 1000 [ 1976.320974][ T29] audit: type=1804 audit(1595564022.397:4266): pid=17719 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1286/cgroup.controllers" dev="sda1" ino=16378 res=1 [ 1976.376595][T17609] lo speed is unknown, defaulting to 1000 04:13:42 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000000f) 04:13:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) [ 1976.699496][ T29] audit: type=1804 audit(1595564022.777:4267): pid=17769 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1262/cgroup.controllers" dev="sda1" ino=16375 res=1 [ 1976.786072][ T29] audit: type=1804 audit(1595564022.827:4268): pid=17777 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1287/cgroup.controllers" dev="sda1" ino=16381 res=1 04:13:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e24, 0x0, @private1, 0x1}}}, &(0x7f0000000340)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000380)={0x8, 0x40, 0x800a, 0x5, 0x400, 0x5, 0x6, 0x2dd, r6}, &(0x7f0000000400)=0x20) r7 = socket(0x200000000000011, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r7, &(0x7f0000000080)={0x11, 0x0, r9}, 0x14) getsockname$packet(r7, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r11, 0x0, 0x7, &(0x7f0000000100)={@broadcast, @multicast1, r9}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000f3ffffff5e0000ca33352559000000000095000000693843c1b4ab0471419bf37f00000000000000"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], r10, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed6}, 0x56) 04:13:46 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x130, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:13:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000010) [ 1980.437436][ T29] audit: type=1804 audit(1595564026.507:4269): pid=17817 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1263/cgroup.controllers" dev="sda1" ino=15789 res=1 [ 1980.474919][T17820] IPVS: ftp: loaded support on port[0] = 21 [ 1980.670191][T17820] lo speed is unknown, defaulting to 1000 04:13:46 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x4a00, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:13:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000406010200000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) 04:13:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x100000001) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES64=r7, @ANYRESDEC=r8], 0x48}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200e0"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x0) 04:13:46 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0xffffffff}, &(0x7f0000000000)=0x54) [ 1980.980997][T17847] IPVS: ftp: loaded support on port[0] = 21 [ 1980.993198][ T29] audit: type=1804 audit(1595564027.067:4270): pid=17849 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1288/cgroup.controllers" dev="sda1" ino=16371 res=1 [ 1981.018862][T17855] IPVS: ftp: loaded support on port[0] = 21 [ 1981.029453][T17837] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1981.099556][T17847] lo speed is unknown, defaulting to 1000 [ 1981.116131][T17820] IPVS: ftp: loaded support on port[0] = 21 04:13:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xbcac618d609b3c64}, 0x4010) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000040000c0002000800030006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 1981.193510][T17855] lo speed is unknown, defaulting to 1000 [ 1981.217481][ T29] audit: type=1804 audit(1595564027.247:4271): pid=17819 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1263/cgroup.controllers" dev="sda1" ino=15789 res=1 04:13:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000011) [ 1981.479117][T17890] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1981.525056][T17906] bond16: (slave veth120): Enslaving as an active interface with a down link [ 1981.617130][ T29] audit: type=1804 audit(1595564027.687:4272): pid=17933 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1264/cgroup.controllers" dev="sda1" ino=15789 res=1 [ 1981.661142][T17930] bond16: (slave veth122): Enslaving as an active interface with a down link 04:13:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000406010200000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) [ 1981.764314][T17847] IPVS: ftp: loaded support on port[0] = 21 [ 1981.766381][T17906] bond16: (slave veth124): Enslaving as an active interface with a down link [ 1981.917468][T17930] bond16: (slave veth126): Enslaving as an active interface with a down link [ 1981.976339][T17847] lo speed is unknown, defaulting to 1000 [ 1982.008697][ T29] audit: type=1804 audit(1595564028.087:4273): pid=17963 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1289/cgroup.controllers" dev="sda1" ino=16209 res=1 [ 1982.044093][T17963] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:13:48 executing program 0: syz_emit_ethernet(0xdd, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004b1400cf00670000400c9078ac141429ac1414bb890b56ac1414aaffffffff440cb3d37f0000010000010101b2fae7a432a520573f617e612e53c53c21eb847c659265803d60174ac5831df064782d3749689daced2299ffe92754e32cc39ff624c150b140320d77f51bca0e1ee4d3f66ba6753b228276d7a305ddd39101087f8dcc2c7bca605f1ad081ef767997d7fd06dd6bb473643b225ef7ba2da4c05313f211038e81ec4aea2e75a10695b4068271d512bb1a9e80dc0109309d4362c39be5d321df53840e8c151a019b2db524"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x100000001) recvmmsg(r0, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/159, 0x9f}, {&(0x7f0000007480)=""/66, 0x42}], 0x2}, 0x7}, {{&(0x7f0000007500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000002c0)=""/65, 0x41}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/243, 0xf3}, {&(0x7f0000001440)=""/63, 0x3f}], 0x4}, 0x1000}, {{&(0x7f0000001500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001580)=""/83, 0x53}], 0x1, &(0x7f0000001640)=""/31, 0x1f}}, {{&(0x7f0000001680)=@sco, 0x80, &(0x7f0000002a00)=[{&(0x7f0000001700)=""/19, 0x13}, {&(0x7f0000001740)=""/189, 0xbd}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/251, 0xfb}, {&(0x7f0000002900)=""/239, 0xef}], 0x5, &(0x7f0000002a80)=""/44, 0x2c}, 0xffffffff}, {{&(0x7f0000002ac0)=@can, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002b40)=""/178, 0xb2}, {&(0x7f0000002c00)=""/159, 0x9f}], 0x2}, 0x280000}, {{&(0x7f0000002d00)=@tipc=@name, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002d80)=""/32, 0x20}, {&(0x7f0000002dc0)=""/193, 0xc1}], 0x2, &(0x7f0000002f00)=""/86, 0x56}, 0x6}, {{&(0x7f0000002f80), 0x80, &(0x7f00000053c0)=[{&(0x7f0000003000)=""/145, 0x91}, {&(0x7f00000030c0)=""/158, 0x9e}, {&(0x7f0000003180)=""/68, 0x44}, {&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000004200)=""/59, 0x3b}, {&(0x7f0000004240)=""/42, 0x2a}, {&(0x7f0000004280)=""/79, 0x4f}, {&(0x7f0000004300)=""/147, 0x93}, {&(0x7f00000043c0)=""/4096, 0x1000}], 0x9, &(0x7f0000005480)=""/174, 0xae}, 0x7}, {{0x0, 0x0, &(0x7f0000005bc0)=[{&(0x7f0000005540)=""/117, 0x75}, {&(0x7f00000055c0)=""/225, 0xe1}, {&(0x7f00000056c0)=""/204, 0xcc}, {&(0x7f00000057c0)=""/129, 0x81}, {&(0x7f0000005880)=""/164, 0xa4}, {&(0x7f0000005940)=""/92, 0x5c}, {&(0x7f00000059c0)=""/175, 0xaf}, {&(0x7f0000005a80)=""/80, 0x50}, {&(0x7f0000005b00)=""/32, 0x20}, {&(0x7f0000005b40)=""/94, 0x5e}], 0xa, &(0x7f0000005c80)=""/185, 0xb9}, 0x5}, {{&(0x7f0000005d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000007100)=[{&(0x7f0000005dc0)=""/210, 0xd2}, {&(0x7f0000005ec0)=""/33, 0x21}, {&(0x7f0000005f00)=""/85, 0x55}, {&(0x7f0000005f80)=""/163, 0xa3}, {&(0x7f0000006040)=""/4096, 0x1000}, {&(0x7f0000007040)=""/63, 0x3f}, {&(0x7f0000007080)=""/73, 0x49}], 0x7}, 0x2}], 0x9, 0x40000040, &(0x7f00000073c0)={0x0, 0x3938700}) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000007400)=[{0x1, 0x3, {0x1, 0xf0, 0x2}, {0x1, 0xf0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x1, 0xf0, 0x2}, {0x1, 0x1, 0x1}, 0xff, 0xfd}, {0x0, 0x0, {0x2, 0xff, 0x3}, {0x2, 0x1, 0x1}, 0xfe}], 0x60) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000001c0)={0x0, 'netpci0\x00', {0x3}, 0xb0}) [ 1982.078401][T17855] IPVS: ftp: loaded support on port[0] = 21 [ 1982.254055][T17855] lo speed is unknown, defaulting to 1000 [ 1982.315697][ T29] audit: type=1804 audit(1595564028.387:4274): pid=17942 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1264/cgroup.controllers" dev="sda1" ino=15789 res=1 04:13:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000080), 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="e00000027f0000010100000002"], 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) close(r3) 04:13:48 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) [ 1982.547089][T18011] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1982.629795][T18018] IPVS: ftp: loaded support on port[0] = 21 [ 1983.402230][T18019] IPVS: ftp: loaded support on port[0] = 21 04:13:51 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x13a, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:13:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000012) 04:13:51 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x5003, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:13:51 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000406010200000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) 04:13:51 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x4a00, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) [ 1985.729240][T18040] IPVS: ftp: loaded support on port[0] = 21 [ 1985.733914][T18039] IPVS: ftp: loaded support on port[0] = 21 [ 1985.808782][ T29] audit: type=1804 audit(1595564031.887:4275): pid=18046 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1290/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 1985.843421][T18045] IPVS: ftp: loaded support on port[0] = 21 [ 1985.854145][T18040] lo speed is unknown, defaulting to 1000 [ 1985.889365][T18039] lo speed is unknown, defaulting to 1000 04:13:52 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a5800800000"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) [ 1985.963270][T18045] lo speed is unknown, defaulting to 1000 [ 1985.983656][ T29] audit: type=1804 audit(1595564031.917:4276): pid=18042 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1265/cgroup.controllers" dev="sda1" ino=16371 res=1 [ 1986.228851][ T29] audit: type=1804 audit(1595564032.307:4277): pid=18108 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1291/cgroup.controllers" dev="sda1" ino=15865 res=1 [ 1986.264465][T18092] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:13:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000013) 04:13:52 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a5800800000"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) [ 1986.637830][T18039] IPVS: ftp: loaded support on port[0] = 21 [ 1986.644590][ T29] audit: type=1804 audit(1595564032.717:4278): pid=18120 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1266/cgroup.controllers" dev="sda1" ino=15881 res=1 [ 1986.725167][T18045] IPVS: ftp: loaded support on port[0] = 21 [ 1986.738058][T18039] lo speed is unknown, defaulting to 1000 [ 1986.834342][ T29] audit: type=1804 audit(1595564032.907:4279): pid=18127 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1292/cgroup.controllers" dev="sda1" ino=15865 res=1 [ 1986.866115][T18124] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:13:53 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000014) [ 1987.223469][ T29] audit: type=1804 audit(1595564033.297:4280): pid=18149 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1267/cgroup.controllers" dev="sda1" ino=15800 res=1 04:13:53 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x130, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:13:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a5800800000"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) [ 1987.442425][T18155] IPVS: ftp: loaded support on port[0] = 21 [ 1987.521579][ T29] audit: type=1804 audit(1595564033.598:4281): pid=18156 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1293/cgroup.controllers" dev="sda1" ino=15824 res=1 [ 1987.531228][T18156] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1987.600058][T18155] lo speed is unknown, defaulting to 1000 04:13:54 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x2]}, &(0x7f0000000000)=0x54) [ 1988.063703][T18185] IPVS: ftp: loaded support on port[0] = 21 [ 1988.142021][T18185] lo speed is unknown, defaulting to 1000 [ 1988.540629][T18185] IPVS: ftp: loaded support on port[0] = 21 [ 1988.584549][T18185] lo speed is unknown, defaulting to 1000 04:13:56 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x142, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:13:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000015) 04:13:56 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x5202, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:13:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) 04:13:56 executing program 0: r0 = socket(0x25, 0x3, 0x7) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0xfffffffffffffff9, 0xfffffffffffffffa}) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@deltaction={0x38, 0x31, 0x0, 0x70bd27, 0x6, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20044094) write(r0, &(0x7f0000000000)="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", 0xfc) 04:13:56 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x3]}, &(0x7f0000000000)=0x54) [ 1989.998827][T18239] IPVS: ftp: loaded support on port[0] = 21 04:13:56 executing program 0: unshare(0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x7, 0x0, 0xfd, 0xc, 0x6, 0xfff8}, &(0x7f0000000040)=0x20) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x0, 0x2]}, &(0x7f00000000c0)=0x54) [ 1990.039721][T18241] IPVS: ftp: loaded support on port[0] = 21 [ 1990.081406][T18239] lo speed is unknown, defaulting to 1000 [ 1990.100169][ T29] audit: type=1804 audit(1595564036.178:4282): pid=18250 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1268/cgroup.controllers" dev="sda1" ino=15855 res=1 [ 1990.115997][T18252] IPVS: ftp: loaded support on port[0] = 21 [ 1990.175739][T18243] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1990.228581][T18241] lo speed is unknown, defaulting to 1000 [ 1990.266469][ T29] audit: type=1804 audit(1595564036.218:4283): pid=18254 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1294/cgroup.controllers" dev="sda1" ino=15882 res=1 [ 1990.317870][T18252] lo speed is unknown, defaulting to 1000 04:13:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000016) 04:13:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) [ 1990.797940][ T29] audit: type=1804 audit(1595564036.878:4284): pid=18319 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1269/cgroup.controllers" dev="sda1" ino=15840 res=1 [ 1990.940176][T18239] IPVS: ftp: loaded support on port[0] = 21 [ 1990.952326][T18323] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1990.967829][ T29] audit: type=1804 audit(1595564037.018:4285): pid=18326 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1295/cgroup.controllers" dev="sda1" ino=15882 res=1 [ 1991.003163][T18241] IPVS: ftp: loaded support on port[0] = 21 [ 1991.112433][T18241] lo speed is unknown, defaulting to 1000 [ 1991.182468][ T486] tipc: TX() has been purged, node left! [ 1991.200051][T18252] IPVS: ftp: loaded support on port[0] = 21 [ 1991.208870][ T486] tipc: TX() has been purged, node left! [ 1991.272633][T18239] lo speed is unknown, defaulting to 1000 [ 1991.281768][ T486] tipc: TX() has been purged, node left! 04:13:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000017) [ 1991.323348][ T486] tipc: TX() has been purged, node left! [ 1991.380586][ T486] tipc: TX() has been purged, node left! [ 1991.420209][ T486] tipc: TX() has been purged, node left! [ 1991.458997][ T486] tipc: TX() has been purged, node left! 04:13:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) [ 1991.504717][ T29] audit: type=1804 audit(1595564037.578:4286): pid=18358 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1270/cgroup.controllers" dev="sda1" ino=15849 res=1 [ 1991.540081][ T486] tipc: TX() has been purged, node left! [ 1991.572572][ T486] tipc: TX() has been purged, node left! [ 1991.600602][ T486] tipc: TX() has been purged, node left! [ 1991.754240][ T29] audit: type=1804 audit(1595564037.828:4287): pid=18381 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1296/cgroup.controllers" dev="sda1" ino=15882 res=1 [ 1991.791795][T18381] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1991.839331][ T486] tipc: TX() has been purged, node left! [ 1991.959820][ T486] tipc: TX() has been purged, node left! [ 1991.974336][ T486] tipc: TX() has been purged, node left! [ 1992.000785][ T486] tipc: TX() has been purged, node left! 04:13:58 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x5600, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) [ 1992.156318][ T486] tipc: TX() has been purged, node left! [ 1992.216120][ T29] audit: type=1804 audit(1595564038.288:4288): pid=18361 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1270/cgroup.controllers" dev="sda1" ino=15849 res=1 [ 1992.273817][T18395] IPVS: ftp: loaded support on port[0] = 21 [ 1992.347917][T18395] lo speed is unknown, defaulting to 1000 [ 1992.386312][ T486] tipc: TX() has been purged, node left! [ 1992.506296][ T486] tipc: TX() has been purged, node left! [ 1992.676261][ T486] tipc: TX() has been purged, node left! [ 1992.813707][T18395] IPVS: ftp: loaded support on port[0] = 21 [ 1992.862128][T18395] lo speed is unknown, defaulting to 1000 04:14:00 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x194, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:14:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b00050001"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) 04:14:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000018) 04:14:00 executing program 0: mmap(&(0x7f0000600000/0x3000)=nil, 0x3000, 0x5, 0x400000000005e831, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) 04:14:00 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x6001, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:14:00 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x4]}, &(0x7f0000000000)=0x54) [ 1994.631902][ T29] audit: type=1804 audit(1595564040.708:4289): pid=18450 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1271/cgroup.controllers" dev="sda1" ino=15862 res=1 [ 1994.643168][T18452] IPVS: ftp: loaded support on port[0] = 21 [ 1994.680585][T18453] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1994.700080][T18460] IPVS: ftp: loaded support on port[0] = 21 [ 1994.734196][T18461] IPVS: ftp: loaded support on port[0] = 21 [ 1994.744281][ T29] audit: type=1804 audit(1595564040.748:4290): pid=18459 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1297/cgroup.controllers" dev="sda1" ino=16384 res=1 04:14:00 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x3]}, &(0x7f0000000000)=0x54) 04:14:01 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b00050001"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) [ 1995.062453][T18468] IPVS: ftp: loaded support on port[0] = 21 04:14:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000019) [ 1995.172691][ T29] audit: type=1804 audit(1595564041.248:4291): pid=18472 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1298/cgroup.controllers" dev="sda1" ino=15872 res=1 [ 1995.202522][T18472] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1995.349932][ T29] audit: type=1804 audit(1595564041.428:4292): pid=18476 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1272/cgroup.controllers" dev="sda1" ino=15862 res=1 [ 1995.436922][T18458] IPVS: ftp: loaded support on port[0] = 21 [ 1995.482005][T18452] lo speed is unknown, defaulting to 1000 04:14:01 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b00050001"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) [ 1995.582104][T18462] IPVS: ftp: loaded support on port[0] = 21 [ 1995.609962][T18463] IPVS: ftp: loaded support on port[0] = 21 [ 1995.611267][T18460] lo speed is unknown, defaulting to 1000 [ 1995.716089][T18468] lo speed is unknown, defaulting to 1000 [ 1995.769998][ T29] audit: type=1804 audit(1595564041.848:4293): pid=18500 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1299/cgroup.controllers" dev="sda1" ino=15872 res=1 [ 1995.807665][T18500] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:14:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000001a) [ 1995.866404][T18461] lo speed is unknown, defaulting to 1000 [ 1996.099704][ T29] audit: type=1804 audit(1595564042.178:4294): pid=18518 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1273/cgroup.controllers" dev="sda1" ino=16384 res=1 04:14:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r1, 0x0, 0x1000000eb) [ 1996.445104][ T29] audit: type=1804 audit(1595564042.518:4295): pid=18544 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1300/cgroup.controllers" dev="sda1" ino=15872 res=1 04:14:07 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x196, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:14:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000001b) 04:14:07 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x6202, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:14:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r1, 0x0, 0x1000000eb) 04:14:07 executing program 0: r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)='f', 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000001c0)={'nat\x00'}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000200)={{0x0, 0x7, 0x1, 0x7f, 0x210, 0x22, 0x361, 0xa022}, "dcbae562d71bbd544e94a9c1155bc3883dd273c73f88da1e07702a20b416fb09e1b5ab38be9a57b9667186e60166d2fd23e54d5e49fdd3ad96819db28d270386d35a7dedb153ef43ff65ea2af671f7a61c55d7085bb471ed5ed30ec4d9bce890b0efca52de6909de16852963e7ca3bb7e37c30383b71199b2f6b33ee9c280d5ca082cdb9ca3c1ab9351f513a3d39f0bd9d848987869ba137ddade59fe3502c910b003c76"}, 0xc4) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 04:14:07 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x6]}, &(0x7f0000000000)=0x54) [ 2001.973497][T18610] IPVS: ftp: loaded support on port[0] = 21 [ 2002.007347][T18614] IPVS: ftp: loaded support on port[0] = 21 [ 2002.038963][ T29] audit: type=1804 audit(1595564048.118:4296): pid=18611 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1274/cgroup.controllers" dev="sda1" ino=16033 res=1 [ 2002.068898][T18610] lo speed is unknown, defaulting to 1000 [ 2002.096825][T18619] IPVS: ftp: loaded support on port[0] = 21 04:14:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r1, 0x0, 0x1000000eb) [ 2002.203675][T18614] lo speed is unknown, defaulting to 1000 04:14:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x2, @in, 0x0, 0x1, 0x0, 0x20}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket$nl_crypto(0x10, 0x3, 0x15) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) sendfile(r2, r3, 0x0, 0x100000000) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e21, @remote}, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000), 0x9, 0xbc4, 0x1ff}) [ 2002.247252][ T29] audit: type=1804 audit(1595564048.158:4297): pid=18620 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1301/cgroup.controllers" dev="sda1" ino=16065 res=1 [ 2002.312241][T18619] lo speed is unknown, defaulting to 1000 [ 2002.487353][ T29] audit: type=1804 audit(1595564048.568:4298): pid=18656 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1302/cgroup.controllers" dev="sda1" ino=16018 res=1 04:14:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000000c) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={0x1, @default, @netrom={'nr', 0x0}, 0x74, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x800000000000c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x800000000000c) r3 = accept4$unix(r2, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x80800) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="03000000000000000a004e24000000080000000000000000000000000000000103000000000100000000000000085d6665a74ae6040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000020000000a004e2200000007fc010000000000000000000000000000000000000000000000000000000000000000000000000000003306fb06f6d90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400000002fc0100"/408], 0x190) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000180)={0x3, "e3f4ba"}, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 04:14:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000001c) 04:14:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1000000eb) [ 2002.723530][ T29] audit: type=1804 audit(1595564048.798:4299): pid=18696 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1343/memory.events" dev="sda1" ino=15970 res=1 [ 2002.819353][T18610] IPVS: ftp: loaded support on port[0] = 21 [ 2002.889647][T18619] IPVS: ftp: loaded support on port[0] = 21 [ 2002.895890][ T29] audit: type=1804 audit(1595564048.888:4300): pid=18698 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1275/cgroup.controllers" dev="sda1" ino=16018 res=1 04:14:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1000000eb) [ 2002.982177][T18610] lo speed is unknown, defaulting to 1000 [ 2003.058928][T18614] IPVS: ftp: loaded support on port[0] = 21 [ 2003.119313][ T29] audit: type=1804 audit(1595564048.968:4301): pid=18699 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1303/cgroup.controllers" dev="sda1" ino=16130 res=1 [ 2003.250124][T18614] lo speed is unknown, defaulting to 1000 [ 2003.356789][ T29] audit: type=1804 audit(1595564049.329:4302): pid=18723 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1304/cgroup.controllers" dev="sda1" ino=15852 res=1 04:14:11 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x198, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:14:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000001d) 04:14:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1000000eb) 04:14:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000001c) 04:14:11 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x6c01, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:14:11 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x1d]}, &(0x7f0000000000)=0x54) [ 2005.362120][T18770] IPVS: ftp: loaded support on port[0] = 21 [ 2005.365931][T18766] IPVS: ftp: loaded support on port[0] = 21 [ 2005.435760][ T29] audit: type=1804 audit(1595564051.519:4303): pid=18774 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1305/cgroup.controllers" dev="sda1" ino=16289 res=1 [ 2005.502376][T18770] lo speed is unknown, defaulting to 1000 04:14:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x0) [ 2005.566725][T18779] IPVS: ftp: loaded support on port[0] = 21 [ 2005.578878][ T29] audit: type=1804 audit(1595564051.569:4304): pid=18778 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1276/cgroup.controllers" dev="sda1" ino=16321 res=1 [ 2005.614099][T18766] lo speed is unknown, defaulting to 1000 04:14:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000001c) [ 2005.655476][ T486] tipc: TX() has been purged, node left! [ 2005.672699][ T486] tipc: TX() has been purged, node left! [ 2005.692874][T18779] lo speed is unknown, defaulting to 1000 04:14:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000001e) [ 2005.726419][ T486] tipc: TX() has been purged, node left! [ 2005.781476][ T486] tipc: TX() has been purged, node left! [ 2005.811598][ T486] tipc: TX() has been purged, node left! [ 2005.884037][ T486] tipc: TX() has been purged, node left! [ 2005.891317][ T486] tipc: TX() has been purged, node left! [ 2005.910440][ T29] audit: type=1804 audit(1595564051.989:4305): pid=18814 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1306/cgroup.controllers" dev="sda1" ino=16097 res=1 [ 2005.974317][ T486] tipc: TX() has been purged, node left! 04:14:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x0) 04:14:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000140)=""/87, &(0x7f00000000c0)=0x57) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000b35) 04:14:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000001c) [ 2006.135350][ T486] tipc: TX() has been purged, node left! [ 2006.271916][T18770] IPVS: ftp: loaded support on port[0] = 21 [ 2006.293847][T18779] IPVS: ftp: loaded support on port[0] = 21 [ 2006.305479][ T486] tipc: TX() has been purged, node left! [ 2006.331939][T18766] IPVS: ftp: loaded support on port[0] = 21 [ 2006.394763][T18770] lo speed is unknown, defaulting to 1000 [ 2006.408318][ T486] tipc: TX() has been purged, node left! [ 2006.470829][T18779] lo speed is unknown, defaulting to 1000 [ 2006.512400][T18766] lo speed is unknown, defaulting to 1000 04:14:15 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x1aa, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:14:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x0) 04:14:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FICLONE(r2, 0x40049409, r3) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x26, &(0x7f00000000c0)={@link_local, @empty, @val={@void, {0x8100, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) r6 = accept$phonet_pipe(r4, &(0x7f0000000040), &(0x7f0000000100)=0x10) pwritev(r6, &(0x7f0000000780)=[{&(0x7f0000000140)="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", 0xfb}, {&(0x7f0000000240)="147562d7f0a17eef6f72cb1bebbc1b88296df4e4affeed1a358613a38ff5c1043dfa6185c1a19cf828ffab0fed7cc13efd7a6aa87b8c9e3dafdcdbc926559495a0bd79f87bf5a69b0e337b8bda19f68730d23d0875c223ad20a9af26e4b6891d3fae6c52763bfad763cc5d5ea2cb68f6ad97f1b92c31e8e8f275b0baa86068d8e7ef157b075a67c9a9f1762a74fdf98bb49f565da802b0514892fe9b0838205ca7743f0d", 0xa4}, {&(0x7f0000000300)="cb033bca04198be8732b1e050315655ba53cfdb2bb82c82b45bc3b266d035515c9b4fd2deb83b0", 0x27}, {&(0x7f0000000340)="73a6511313f09436554d04ca63ae72ac536b6af8099bf23e227d2890285fdcecd6c888d9ed596a56f21dec7d098676d6cff88298aab05b103a8b1559d039361e42d5521b0bdf2134b4145b9b7b8c", 0x4e}, {&(0x7f00000003c0)="764f305c6eea89f4d5eefcd010ec2b665d", 0x11}, {&(0x7f0000000400)="6b6b279acfbaf0a2ba6cd7ca3947a0640940592d23ecc0d4f01e040be83a52c070f50de5f11c273c5c0a83d962df002dc07fc97a98c4bb7f45e4ed5c0ae1b23f7f9f1051ca8de3e1b1e776da77feab3c320714fae58d8bd8a15b0bea2fe9745099e6e9bf06ccc58084c65a7afc98e84b74b708dbddb1c6433cab3f62aeca6aaeb6746a4df5b015641242ee25abad682a0097484029", 0x95}, {&(0x7f00000004c0)="9611a39c327adaedc3b75192dac486329e4a4fa38d2589c16690b037b26db22f5fc4cf9953b304ee4f1411c0a455a38eeb76e11047dcd2bd0bcf4b08f966f69f443028885b4c0afa541661451bffb3e64f646e370ab5831ab2336ad5e65a716a4c", 0x61}, {&(0x7f0000000540)="bd907fe23423188c6982f1f05ca64080bff3d81946323835d2cf1085680838d4f750241cc76577c75b7601e178059467e3d8dcd1b0df67d900ddd843c4857778be11deee48f506dd1d27b97c8382df4ee2cb824f38a79fbb60b70aa420ae61e083f28a4a7ae1e3efc30ce3206e421984e3abde1aeca81a654be1e6bb08b5999782715a0bf89561b701c2674f607c5aabb5240565861940c8ac987b7d5abfdae0dfd8de5113f20cf8fad2a558397e01b9183ad542b66da8c8bd4fc27fbe53eaa60036283913af22afd2baa6d38b07380fa6722f2bb9524fdcc5bde18b021795e7145c422e6247ccfd", 0xe8}, {&(0x7f0000000640)="21e5006c4ff55fa11fc409138f309fafd5089ed715881ec974afe888b7d9b1be20dcf82aab52b5991ad5734695b5f9", 0x2f}, {&(0x7f0000000680)="497c080999e131839c2556224fd996fc3fd7305790fad577d7a003dcb5473b1797476ab9ffe4bcf3e4947c349c58648bec97eec7ee6e4cd8d2eadbcc1af8ca69afe83c9c5560edbb60426e76515ac411f8799a272356938bd40f07dc83e0d43f724d01bf366b4f10f98d0b82731d42c58b8efb77839f1a8bc210f97cbc41ac344ed9648d68648404966a0a558f792c65d09a51de8a15105827ecf28686aa47b3446931a28c8a6f29a02caf9483cf474618cde63ee9819df11b8aff6098fee37fcb6ae7d91121e59f24a0458cda", 0xcd}], 0xa, 0x6) syz_emit_ethernet(0x300cce, &(0x7f0000000080)={@local, @empty, @val={@val={0x8100}}, {@ipv6}}, 0x0) 04:14:15 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x6e00, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:14:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x24}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, &(0x7f0000000140)={0x1, 0x101, 0x36, 0x1}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r1, 0x0, 0x100000b35) 04:14:15 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x98]}, &(0x7f0000000000)=0x54) [ 2009.942420][T18975] IPVS: ftp: loaded support on port[0] = 21 [ 2009.983643][T18978] IPVS: ftp: loaded support on port[0] = 21 [ 2009.994248][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 2009.994298][ T29] audit: type=1804 audit(1595564056.069:4311): pid=18974 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1279/cgroup.controllers" dev="sda1" ino=16162 res=1 [ 2010.010039][T18981] IPVS: ftp: loaded support on port[0] = 21 [ 2010.080708][T18975] lo speed is unknown, defaulting to 1000 04:14:16 executing program 0: r0 = socket$inet6(0xa, 0x140000080806, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)={0x24, r5, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x5c, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x61c}}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x14}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x17}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x40800) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf4, r9, 0xc15, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xc9ab}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2e00000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}]}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20048010}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x6, &(0x7f0000000000), 0x4) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2010.139120][T18978] lo speed is unknown, defaulting to 1000 [ 2010.190612][ T29] audit: type=1804 audit(1595564056.109:4312): pid=18974 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1279/cgroup.controllers" dev="sda1" ino=16162 res=1 04:14:16 executing program 3 (fault-call:6 fault-nth:0): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) [ 2010.342161][T18981] lo speed is unknown, defaulting to 1000 [ 2010.400795][ T29] audit: type=1804 audit(1595564056.119:4313): pid=18974 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1279/cgroup.controllers" dev="sda1" ino=16162 res=1 04:14:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) sendfile(r3, r4, &(0x7f0000000000)=0x7f, 0x9) sendfile(r2, r1, 0x0, 0x100000b35) [ 2010.553934][T19035] FAULT_INJECTION: forcing a failure. [ 2010.553934][T19035] name failslab, interval 1, probability 0, space 0, times 0 [ 2010.579014][ T29] audit: type=1804 audit(1595564056.139:4314): pid=18984 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1308/cgroup.controllers" dev="sda1" ino=15950 res=1 [ 2010.644953][T19035] CPU: 1 PID: 19035 Comm: syz-executor.3 Not tainted 5.8.0-rc4-syzkaller #0 [ 2010.653668][T19035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2010.663731][T19035] Call Trace: [ 2010.667034][T19035] dump_stack+0x18f/0x20d [ 2010.671386][T19035] should_fail.cold+0x5/0x14 [ 2010.675980][T19035] should_failslab+0x5/0xf [ 2010.680417][T19035] kmem_cache_alloc_trace+0x240/0x2d0 [ 2010.685796][T19035] alloc_pipe_info+0x10a/0x590 [ 2010.690572][T19035] splice_direct_to_actor+0x779/0x980 [ 2010.695952][T19035] ? generic_splice_sendpage+0x140/0x140 [ 2010.701603][T19035] ? apparmor_file_permission+0x26e/0x4e0 [ 2010.707329][T19035] ? do_splice_to+0x170/0x170 [ 2010.712020][T19035] do_splice_direct+0x1b3/0x280 [ 2010.716877][T19035] ? splice_direct_to_actor+0x980/0x980 [ 2010.722444][T19035] ? apparmor_file_permission+0x26e/0x4e0 [ 2010.728206][T19035] do_sendfile+0x559/0xc30 [ 2010.732650][T19035] ? do_compat_pwritev64+0x1b0/0x1b0 [ 2010.737943][T19035] ? wait_for_completion+0x260/0x260 [ 2010.743235][T19035] ? vfs_write+0x1b0/0x6b0 [ 2010.747660][T19035] __x64_sys_sendfile64+0x1cc/0x210 [ 2010.752861][T19035] ? ksys_write+0x1a5/0x250 [ 2010.757370][T19035] ? __ia32_sys_sendfile+0x220/0x220 [ 2010.762661][T19035] ? lock_is_held_type+0xb0/0xe0 [ 2010.767605][T19035] ? do_syscall_64+0x1c/0xe0 [ 2010.772211][T19035] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2010.773379][ T29] audit: type=1804 audit(1595564056.629:4315): pid=19047 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1309/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 2010.778208][T19035] do_syscall_64+0x60/0xe0 [ 2010.778227][T19035] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2010.778239][T19035] RIP: 0033:0x45c1f9 [ 2010.778244][T19035] Code: Bad RIP value. [ 2010.778252][T19035] RSP: 002b:00007fcdec31bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2010.778266][T19035] RAX: ffffffffffffffda RBX: 0000000000026080 RCX: 000000000045c1f9 [ 2010.778274][T19035] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 2010.778283][T19035] RBP: 00007fcdec31bca0 R08: 0000000000000000 R09: 0000000000000000 [ 2010.778291][T19035] R10: 00000001000000eb R11: 0000000000000246 R12: 0000000000000000 [ 2010.778300][T19035] R13: 00007ffe385ab7ff R14: 00007fcdec31c9c0 R15: 000000000078bf0c [ 2010.930020][T18975] IPVS: ftp: loaded support on port[0] = 21 04:14:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) bind$packet(r2, &(0x7f0000000100)={0x11, 0xf8, r4}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', r4, 0x4, 0x7, 0x2, 0x2, 0x19, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x80, 0x80, 0x8000, 0x7}}) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r7 = socket(0x6, 0x80000, 0x1) sendmsg$AUDIT_DEL_RULE(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xa1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x4ac, 0x3f4, 0x222, 0x70bd27, 0x7, {0x2, 0x0, 0x2, [0xfff, 0x100, 0x6, 0x9, 0x10001, 0x80000000, 0x2, 0x5, 0x4, 0x7, 0x618, 0x4, 0x8, 0x80, 0x6, 0x7, 0x6, 0x20, 0x7, 0x1000, 0x9, 0x10000, 0x10001, 0x7, 0x2, 0x80000000, 0x1, 0x101, 0x1ff, 0xff, 0x80, 0x1ff, 0x9, 0x7, 0x7ae, 0x2, 0x2, 0x9, 0x0, 0x1, 0xcebd, 0x3, 0x7fffffff, 0x3, 0xe, 0x2e2f, 0x4, 0x7, 0x7fffffff, 0x3, 0x62, 0x2, 0x4, 0x2, 0x1, 0x5, 0xffffe85b, 0x3, 0xff, 0x8, 0x9, 0x3201ee8d, 0x7, 0x2], [0x7, 0x101, 0x9, 0x0, 0x40, 0xffff, 0x7fff, 0x0, 0x9, 0x3f, 0x8, 0x81, 0x5, 0x0, 0x3319, 0x100, 0x9, 0xdb, 0x2, 0x3, 0x7, 0xa4ba, 0x9, 0x5, 0x3, 0x2, 0x9, 0x9, 0x80000000, 0x80000001, 0x7, 0x2, 0x1000, 0x1ff, 0x1, 0x4, 0xe7, 0x80000001, 0x1, 0x4, 0x6, 0x3, 0x5, 0x5, 0xf22, 0xd52, 0x7f, 0x80, 0x8, 0x8, 0x3ff, 0x5, 0x20, 0x7, 0x27c, 0x756e0000, 0x5, 0x3, 0x1ff, 0x5, 0x9, 0x6, 0x3, 0x80000000], [0x0, 0x1d, 0x3, 0x1000, 0x1, 0xfffffff7, 0x4, 0x3, 0x2, 0x0, 0x6, 0xfe2, 0x7ff, 0x2, 0x5, 0xa4c, 0x10001, 0x98eb, 0x0, 0x7f, 0x7, 0x10001, 0x6, 0x4000000, 0xc9, 0x3, 0x6, 0x0, 0xea12, 0x3, 0x6, 0x4, 0x9, 0xf0d, 0x0, 0x7, 0x10000, 0x4, 0xbbc0, 0x3f, 0x4c5, 0x5, 0x8, 0x9, 0x5, 0x100, 0x59, 0x3, 0x1, 0x4, 0xab, 0x528, 0x36, 0x391, 0x7, 0x8001, 0x70, 0x8000, 0x0, 0x2, 0xfffffc00, 0x6d, 0x0, 0x7], [0x9, 0x6, 0x9, 0xe510, 0x0, 0x2, 0x0, 0x2, 0xec01, 0x3, 0xe0000000, 0x1, 0x6, 0xfffffff8, 0x8001, 0x10001, 0xfffffffd, 0x6, 0x80000000, 0x6, 0x7, 0x10001, 0x1, 0x2, 0x7, 0xfffffff8, 0x3ff, 0x4, 0x6da, 0x7, 0x8, 0x9, 0x6, 0xfffffffb, 0x7f, 0x5, 0x6, 0x6, 0xff, 0x3f, 0x7, 0x7, 0x0, 0x0, 0x0, 0x3f, 0x6, 0xd3200, 0x40, 0x1000, 0x1, 0xc0c, 0xffffff80, 0xf0, 0xfe, 0x1, 0x1, 0x80, 0x3, 0x4, 0x2, 0x0, 0xc1], 0x8a, ['cgroup.controllers\x00', 'cgroup.controllers\x00', 'cgroup.controllers\x00', 'cgroup.controllers\x00', 'cgroup.controllers\x00', 'cgroup.controllers\x00', 'cgroup.controllers\x00', '\xff/!}\x00']}, ["", "", "", "", "", ""]}, 0x4ac}, 0x1, 0x0, 0x0, 0x24048891}, 0x2000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r6, 0x0, 0x100000b35) [ 2011.003595][T18981] IPVS: ftp: loaded support on port[0] = 21 [ 2011.034840][T18975] lo speed is unknown, defaulting to 1000 [ 2011.067177][T18978] IPVS: ftp: loaded support on port[0] = 21 [ 2011.117716][T18981] lo speed is unknown, defaulting to 1000 [ 2011.173982][T18978] lo speed is unknown, defaulting to 1000 04:14:17 executing program 0: r0 = syz_genetlink_get_family_id$fou(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) bind$packet(r2, &(0x7f0000000100)={0x11, 0xf8, r4}, 0x14) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x98) r6 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xe2b9c5094dab0b45}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@dev, 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xa00}], 0x400000000000107, 0x0) bind$phonet(r1, &(0x7f0000000180)={0x23, 0xc0, 0x3, 0x20}, 0x10) [ 2011.360945][ T29] audit: type=1804 audit(1595564056.839:4316): pid=19055 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1280/cgroup.controllers" dev="sda1" ino=16162 res=1 [ 2011.487947][ T29] audit: type=1804 audit(1595564056.849:4317): pid=19055 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1280/cgroup.controllers" dev="sda1" ino=16162 res=1 04:14:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) [ 2011.597356][ T29] audit: type=1804 audit(1595564057.389:4318): pid=19109 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1281/cgroup.controllers" dev="sda1" ino=15909 res=1 [ 2011.937992][ T29] audit: type=1804 audit(1595564058.019:4319): pid=19146 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1310/cgroup.controllers" dev="sda1" ino=16194 res=1 [ 2011.971325][T19146] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:14:20 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x1b4, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:14:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000575100000000000000850000002c000000950000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = accept4(r2, &(0x7f0000000240)=@tipc=@name, &(0x7f0000000040)=0x80, 0x80000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) accept4$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14, 0x80000) connect$can_bcm(r3, &(0x7f0000000300)={0x1d, r5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}, [@IFLA_XDP={0xfffffffffffffcdd, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x4) 04:14:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x28011, r0, 0xffffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) 04:14:20 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x6e03, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:14:20 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x130]}, &(0x7f0000000000)=0x54) 04:14:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x110, 0x5, &(0x7f00000000c0)=[0x2, 0x1], 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r1, 0x0, 0x1000000eb) [ 2014.467680][T19161] IPVS: ftp: loaded support on port[0] = 21 [ 2014.479668][T19158] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2014.546306][ T486] tipc: TX() has been purged, node left! [ 2014.567054][T19161] lo speed is unknown, defaulting to 1000 [ 2014.583480][ T29] audit: type=1804 audit(1595564060.660:4320): pid=19166 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1311/cgroup.controllers" dev="sda1" ino=16374 res=1 [ 2014.588238][T19168] IPVS: ftp: loaded support on port[0] = 21 04:14:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x58, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x11}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3348}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x80) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x3c1, 0x0, 0x90, [0x200001c0], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/313]}, 0x1b1) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b01c23a00000000000000000000000000200061d19d5700de1ed33e5f5db16a0000000001c381ca967b15b54703005b5c465581f7c98d80194a314d8f6759700a7a32278fe60f7fd21e7568a5812c69eeaf4a212356bb80d9c511ef32cbd1e77967d740971c8a3cd9bce532c890d38435ae922c"], 0x1f4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x100000001) sendmsg$AUDIT_USER(r6, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0xf8, 0x3ed, 0x4, 0x70bd25, 0x25dfdbfc, "55f6b495df399d3d0da2306a6783c9d765b304dd94f6707838c4889e73bcd6ab8c4a68933c4283ca95fc41f3ad668aafd788f2e5b66f97576ce9eca9b59bd0e817777d90f242cf3fb4572a7b86c02799d7a9a6272780cf7ce0454e3902057df4e4f5354eee555c25ea5d8956d65f858d22d8e30e0d5594087e4835fa8b4de3e667f207e4f9204b206a9c94e0ca546e5f0312c0227aaa794a86106319ba654adbfc6eb2392eaa43f18e2e66b4fbf4e86a024df13778c6b3d9c74bf5962628af59845039de121625894fea7723319c8b6260637f93e949e09dd83c47808ecf17ea0e5d74e533f2", ["", "", "", ""]}, 0xf8}, 0x1, 0x0, 0x0, 0x57c64770e58f3af9}, 0x40000) [ 2014.653021][T19172] IPVS: ftp: loaded support on port[0] = 21 [ 2014.674351][ T486] tipc: TX() has been purged, node left! [ 2014.696517][ T486] tipc: TX() has been purged, node left! 04:14:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000007065deb00f48dea5af87ede4b00000008000640ffc6015a0f00010007fa2a83650d0fa4633b622c01021fec261eb01c855860b111466d789bcaf7abad3d939bfc7b7be9d6267d1d1cec931616e72848f28ca81962cb72c7b96cc5e5234a92421908d414a6f2fe672dafa01a627774d68dcee20ae5d83320fd09e83ea5ed7f50057861c27c7fbce770c764f9f1e69a18e9b2cb30"], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 04:14:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6d8e4a8b16e2561b15", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0)=0xa4900000, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) [ 2014.777108][T19172] lo speed is unknown, defaulting to 1000 [ 2014.807092][ T486] tipc: TX() has been purged, node left! [ 2014.813350][ T486] tipc: TX() has been purged, node left! [ 2014.900744][T19168] lo speed is unknown, defaulting to 1000 [ 2014.941415][T19192] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2014.999801][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 2014.999815][ T29] audit: type=1804 audit(1595564061.080:4323): pid=19202 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1351/cgroup.controllers" dev="sda1" ino=16380 res=1 04:14:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001240)={'syztnl1\x00', &(0x7f0000001200)={'ip_vti0\x00', 0x0, 0x80, 0x40, 0x2, 0x401, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x66, 0x0, 0x7, 0x2f, 0x0, @loopback, @empty}}}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r2, 0x0, 0x100000001) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES64=r4], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000140)='freezer.state\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100000b35) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000001280)={'veth0_vlan\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}) preadv(r7, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0xe) 04:14:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001200)=ANY=[@ANYBLOB="6df0d7820000edffffff00b5399cc423ab8e0a8b165752f3fc2a06a722e6", @ANYRES32], 0x208e24b) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x1010, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000001280)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r3], &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value, 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x1f, 0x1, [0x3ff]}, &(0x7f0000000100)=0xa) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000240)={r6, @in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x100, 0x3ff, 0xb724, 0x2}, &(0x7f0000000180)=0x98) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000001007a58008000000b0005000100"], 0x1}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r2, 0x0, 0x1000000eb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f0000001240), 0x0) [ 2015.248807][ T29] audit: type=1804 audit(1595564061.330:4324): pid=19233 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1284/cgroup.controllers" dev="sda1" ino=16371 res=1 [ 2015.338482][T19161] IPVS: ftp: loaded support on port[0] = 21 [ 2015.397821][ T29] audit: type=1804 audit(1595564061.440:4325): pid=19233 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1284/cgroup.controllers" dev="sda1" ino=16371 res=1 [ 2015.540594][T19173] IPVS: ftp: loaded support on port[0] = 21 [ 2015.560861][T19175] IPVS: ftp: loaded support on port[0] = 21 04:14:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065debfa99bb1dc3aba44d4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) [ 2016.002112][T19173] lo speed is unknown, defaulting to 1000 [ 2016.050141][T19175] lo speed is unknown, defaulting to 1000 [ 2016.059569][ T29] audit: type=1804 audit(1595564062.140:4326): pid=19256 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1285/cgroup.controllers" dev="sda1" ino=15960 res=1 [ 2016.290744][ T29] audit: type=1804 audit(1595564062.370:4327): pid=19239 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1313/cgroup.controllers" dev="sda1" ino=16384 res=1 [ 2016.419981][ T29] audit: type=1804 audit(1595564062.400:4328): pid=19244 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1313/cgroup.controllers" dev="sda1" ino=16384 res=1 [ 2016.476274][ T29] audit: type=1804 audit(1595564062.520:4329): pid=19271 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1313/cgroup.controllers" dev="sda1" ino=16384 res=1 04:14:26 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x1c8, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:14:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000240)={{0x0, 0x0, @descriptor="966e78df53b17ee1"}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1ff, 0xbd}, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) 04:14:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@can_delroute={0x20, 0x19, 0x400}, 0x8}, 0x1, 0x0, 0x0, 0x80}, 0x800) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0xa, 0x0) 04:14:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r2, 0x0, 0x13, &(0x7f00000000c0)='cgroup.controllers\x00'}, 0x30) sendfile(r3, r1, 0x0, 0x100000b35) 04:14:26 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x276]}, &(0x7f0000000000)=0x54) 04:14:26 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x7802, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) [ 2020.464746][T19359] IPVS: ftp: loaded support on port[0] = 21 [ 2020.484523][T19361] IPVS: ftp: loaded support on port[0] = 21 04:14:26 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) bind$llc(r0, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) [ 2020.496093][ T29] audit: type=1804 audit(1595564066.580:4330): pid=19357 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1314/cgroup.controllers" dev="sda1" ino=15958 res=1 [ 2020.590565][T19367] IPVS: ftp: loaded support on port[0] = 21 [ 2020.612903][T19359] lo speed is unknown, defaulting to 1000 04:14:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0000001000000ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001580)={0x12d0, 0xd, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x104}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1298, 0x3, 0x0, 0x1, [{0x1294, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x274, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x87, 0x1, "48726ca2a3e0b4a000ac94b7b4f02fca6a7cae6f9378bda9940ba718da4d702c67d32e1669d3196dabb8ce31c5103a3fb928a47c01b4cbec090727bf32cc8d23a23825969ecaf8aa414f2d45b3f9b904e4407dc59497602a934ea20c3c92046a6f7bb4b8329e656c1a936fab5b7544873067c45620bb7b66dd04ad3dcb66f1dca563b1"}, @NFTA_DATA_VALUE={0xd9, 0x1, "4165350831fb36dea571b6440d19268c101142db32890f71df2ef84ff38949096351a0b758484e5d7aa8411fc9d8463fc3dbb02a447206a691d96bda08611944c39206a0214e31a02ae3c1d01f1aaba324df31c7a6c4e2feda27949f40dbaf3a5249f8c3d1308c3f400cd7a31b965185d89451a8dab0850b8b2255b54c5efde1be13321877e48880f80e672ba30c075169bf64a6f38d0b6b209a5403f56f84832e49f0473a468d2fa92f5d9a58a57ab031e9e7dd78a4b7b34445a6850cb68997d30fa12833667695186ce21f7482d7c7532036be6a"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x4d, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x8c, 0x1, "c88b269f2ee09a57d105e90b3dcf1b5dc118b70fb7b3294041c57d34a4505e97f8cf0532e0cb3fdf05fb4c62fbfe219e25e48fbb34df002150f5ca21920306fd27263954d47b887e8e5e1575b2264b1ae955aae5f35c87fb0488c1260acb44b2aacc1e5210e47daadc8c242775fb7c9af5a994d803531c2c5f47d0923c975cd025359e8dd208758d"}, @NFTA_DATA_VALUE={0x0, 0x1, "fac696b1bdffe101028c82036974d11c46880c9ae878fad26a26a5cc661e631930800c3aa8f76d78e9b75732237d491bb309ca2993e3d8d0f3955c0223ad2b85c085151f4d914cd4a18a51e96ab31ffccb9cee8c8df216cc8e79246d41cb42cbd7e13f46163bacd4303e6bf95652469b5c700252e3273f5ef4542df1bfdbbcc2af756d749a2dc8dfdbfb267c336746cede9bd9b8b9366dd8"}]}, @NFTA_SET_ELEM_USERDATA={0x1004, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}]}, 0x12d0}, 0x1, 0x0, 0x0, 0x4000810}, 0x48000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x1000000eb) [ 2020.639060][ T29] audit: type=1804 audit(1595564066.580:4331): pid=19357 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1314/cgroup.controllers" dev="sda1" ino=15958 res=1 [ 2020.642190][T19361] lo speed is unknown, defaulting to 1000 04:14:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4044) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001200)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000b35) 04:14:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) r1 = accept4(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000004c0)={r4, 0x1000, "92cc44c44cc86827acddeed4c3018d062b7940f1286ae19c621472cbab9606fc0f234034d604b962403cc8527de309ccfc050d60e8ade5b9daa1e865276467c2d4e2b2c18f795de92a1b69e2aea25a3b757c1aca2ad9234ccfaf31186416e70a63bac344b8afe1a50618d7cf69c43374acffc7665bd64499c304f5cc72210db8674e1de3d704ff9f7dd27edbab1f717875efeb8198d75d558c2f2ac9c23a25accc3e4a0bb2a878771b3fad79d62fdd353d287640f642c58668208418d9b2944b67525d87c9fa2fca3af3f965af287933eada19d8c568ee321b345e8afb0caf2e82ce735e359f66b2f557e29b7a0e29085e733adf684a531186a3a42f0cef6cc7c087ae2ec59f45042af05b0e509ce7a916ba8c9308929f9f1ee7efd5ad8dfb554f64cdcf29315e1eb718a7b9a8638a8ecc42adad27e3f6c3aa73c744406d03cc1ca2d9d3d450b3f3c532881946f5f0d7bc0001d9b538417083accde21c9ef660c847b85fc0f7d978c6f1832f0ceb64d256ca784af6960575b303345c0a6e89d70748674821430642591ecce7dba428425fc953878dcce6cb8ab4f7789e6596b3b2a7a3acce261421125df16602cc9b09d2d61443a442daf2a769496bee185e1103102b87133ac191aff4bc36d63064c15f6c8b70186a197d5fdf2dfe35d37d2951b520b6ed67a55a38ee2fd11925d86083b8c70c2b38b08dd1c689c549bcd5882c1c96f120e87c19312dd8fcc43b1c14dc03bc17ac2726fbce6d18897f1189da00ffd8e6cb50fb80a35cde0e7a0e2f9f6d2710420bdc172be5de15db75f566085ee7f0fb09add215166d08a34cfb906edf373d149fab8ecde6d4c2f6e251ef83a300c54ea21e5fee4d728190e3a9a521da0939e1caa2933b8d39bc2fc512e873f597ff4e4faff945b17c55b140133b86dc15a950f606fce0e44283f44b4366fc25128be301ebb611e6f397a51af8a10b2fcd71cd86f272e3d14375557de9d6ffc3961acdf285e7e00a7e38b230218c0a10cb76865d57d48496a4c12f58e3e8cb107d506374170a9650debad81da64bf3193c36b88e4abd318a63b7f10b3ed1a49fcec47ab4a3b0cccd7f3f5ff526f212b1a35c8c33e66fe43ab645b1ae588784673a8b8511dcf161eec7d2c8b1f84473b51ad79d4fba8217b401e7d91b2a3db26ee18646e2718f0c82c7798fea9ffec57b98c759455cbf58b8ba9d1593b8c350f58e6502b4e4afb8be41e21392c9fb063d2f94cde141bd7ed53c472e1edffff486a8d9631329c14b5435f3649250a1b5b6a34427324572a4b978c0961f43e05828b6e87da0a9fac2126c5ccae93b1a23fc26ec411b435b39beb4d6b34311596953e82c31c45f6b39d555728241e1bb2dc93ce11064f7fa9be43fda4221baf99453771398ca649a2ea2638b9cd3802548956404de305be3944b4756593db35afd9abce805dfa26bd08f7bc9b9bda648a47bb41268bc8f95583516eb2e785337f523dc2a6fc7f4781ed9f6ed1ce21319e6f1f3aba3ef2b5951411bc5079b2e229629d5d1c405f414ba05e3d300fff48bc16a36eeb17f93ff61d30c8dc24bc0272be1128ae741c176f08590b76150afcca054b1a5122adadf7e26d7ca61241ca3fc051516601ddcc160dab34bc23d4d7f6d1c96ebe4402b55a6296910695af858ff9ca69f4dd5045b8812c11c0d91afb2c08f66ca87292f77e096d5633e1cd9bebd24c1758e5f7b31a9ab3f44b95de83234738ccaf7d3589bf873918438942a55b1c4c98b30c05d3dac1739f11a565c40d5aafcc70a9fc7447e702657d6df397d4b5b214705c9e66cca88e2ec7151dfbf8acb0c8a6ff851863c1304d146a294a50b3b968104eda36fa0d66ec81b4f045d48c09a6288c69c790ec39a264500cade2a6441561fbbfac1aa2ffcf3e3aee7223bd25f8e5f0ec2259e1dbcd5df3fd1982a902eb0a2552f5fcce0136c82e93ed2d9ce3d9ebdcdb1a6b1a7cb4166bad83433dadf37b7ee1c3cce45f89f7c5a698f5816dcb2651a9ff47662c18d66ec7b00ed4ea2dccd55cf38d76da3f8fb0858bdd49864ffe5aa955d1343afd6afc55500a84ef5697e6cd8e8352279e9f60817dffbecb88e56d01df906e6f26e62995cddb8dd4cf0dd2094a3ef2d66f6168835df0b5509f1bd763202f625d8d0105e37b5698c927968b3998957ebccf14012f95d797248626348251f2b7e5e963082ab491272f83e4fce638b5c91868612285ec26f471ca6e5fce83f53dfb1b0ead54899b1c0d4322cec61ca1b724e36f9c62613748e681f877a9e8f0df18555319709e5bcf8bb656d027a92b51ae7769386887514dea2976d31ea8895e2cc41e4d52133f6b5f8ad65b245cf7fa894e82379d4bf2527858226e2486d7de90b003aab7cffb82ee7a1b7592e5af95936c28c5a783c6b243c545c6055300be4fa6644bb30849fe6224b41a72185e3a4fa11275f92f5555af30893594c570e0cedda0e12ab13e4100318ac33927ed3ba31b5abb018c9f94fc8313008753bcd593ecf510ee0357cb1f457c7c2d1bb14b841e561c010f744cf571aa3982b7a1f2d4f0b0d19d0b6813be7d7c2de7acecb6ac318f319b5e0bc9f3cef11a76a5bfeed16be1b3c7d108739d24c67433995568dd0cc0747161e43ad87dfd1f331df3a42c925163343716f95d66ee96ee76917f0def7a7115793b0c8822a5dbe89b7a6b9eb2e19272c93b0aa60a78510a18b5e03abe890e93369f490178074012c549319cedae8ee58fe23677da53e21a4f29d7addeeaf21cdb8d218bc47b07a7fcd78b62f15025df3a2cd9ad5dfa98cc021111e507d4f828e0952dc85e019f24dd22dafe560cc0093c6d03491aaf6b0961a9c07ab693478a2042ac1c368324b2708e1954797a126b106179c2c9587ff404da8705239d7aaccb5cee0b1d9015c20e5fec48ef1abb6c1b9453a38d6877c80609c9816461325f9cca339ca3ea7dfd880b4bed825b14ff76dbd09901a10a64b5a8864e42c46511c8865902b90c3994530ba2f5de12a3efc80abd627f0926b7c89cb07330a370f90bce3b7f739b70e8e12e776860f79525a6a06a806d1f9c14ae5492c40fe5678ea9bdbcd5145a46d4ff56a10b495bdd982e529c9c3446dd5cb47c6e150c8a00e02cc8c8b860520dcb0b1e423cf0f86b8068ab08d7e2a492a0d34e85f2dc29b8ad307817031421194145604dd5f345371b684be4a8aea935fc2cc7ac29709daa0bfb9ed56b7b88c3f1d1403a707e615b1775a3212637bc161a621621757d4f219631c2a54f088f6dc304b32a3d697f4082e6b9cf02cf38123e20389f9d6b6503dac16133942cc2fd3d38f6d8a732558bf39dedda75276713a5dac3ae67384d6ca19f1bc853ac02286e119b3c734353b2786993a5ae8f25395545ae8fb15bfa13b36404f02f1ca88bee59cb61a13412408c611f8ca8fb91831dd597daa8f79292e32160a43971879631c48d35feb5c3bd38871d5ad1ab888de02a6833bdcbcdcd4f8c693b1a894389eb5068a900766fbe480726262fa70730745c8a1c31a7620dd4bb65233b7dce9d3e2b4eed48d46eac71d84b2e118b652b21f725ab0c5f01d87daab15d5cbfeecbfb455e6489c80f8329ee2206bfbf5d93132ba8ee196b608e26a4973ef5913f6412f1ed8912d5932e6bc31b6ff339a14b7fd426a8220261a8311804821d145e5cef50fb36f5aa2b6e4037c4aa4e4397cc6ed6f9619f4a89dfbc3639fa00f84c198423e41827e14aa87d1308de91bc1c063d48a8906000bdf07dd5479ec34ea4e737a531f77ecc07662f47b7b88d87846091e8235cd6127661dd46a4bc2083699f0b2921756d041c9209cf0209a5da8bfc5bda5acb78c32ad585cee02003edd52ce0ebcd5e01c07fad954a39dbaa23b00b527800ebd9a3f768ca16329599cb17f011a2d3e28d393c97a47525f5905b09d33b82ce12fd2e4bed463f8510327bc24a2a88a830e4583caa06c0475d81a38d4b8077b3737113d8ffaff2b6ea7701bd289e216dd5df01d6f0e6c1ad7f11aa33e0375177d0553c9e306ee3ea1e742442e280d0220cab77497d007cfcbd20b64a5a89b6fd14a783442769ef1d2025c71789adaf0179dff095a1556f676021cd1e668baa4569857702e0ea3fc857e71129df1af062e609df5130d737945a6dfb50d3077044cf52e3dfe227807b5bd54084b1a988c0da8f2bae69ffbb1119d387a71f69ded788adaa60be31159755a5a802fa1de716ce0edc75a34f19748eaf39172a728f7b8eaa0be433019a4a68e852bf9e651de9b21ffbf473d9e992eb913b4e35c5a98d7cda2fcc2fc915195f7727e13b97b8b8bcc8b0eb7474539a66cbcaf9a26492bc55fcb2258c267ffb61e6d52d789bf910b3f9d0c210f6d618d6917e323185184daf8d410fabac5bf4e8ecd037620b863eb0b4b3d91018aa020b99e95f74d9b67b2e6bbd5fb727c1da596d1f82459fe82b86ecb7166e158be5ccdf836a2ab5468d1ae5407ecc45fc9e6cf1612121586923684f28a56eb3f5afcb81885c99b331a884f87b778258ebc9a16ecc58402402a73a698e421029ec3ac99f7d1ce38892fa501518fb5a9039b522122fa13b335de6ff79f852edc149f42911b1be4032c68776deccccf37896b837dd44104edfa476ea5ab162137ac952c7e07cc34186887abfc4866dc1ba7ea5b37f0aca595ef72efa80e6b1c5eecb1ebf39f3244d15f274217ff39661436483ae4490e7da9e31f0ce267c6fbac6604ba58596d07fe0acd4fa67e1499c27297bb291a97e53e4590acad8b9e8b420d2419533f6b362e4c9992beef0a12f5fadca44776c237a0d81e76f86985756777f1f5bfcfa5b02cd535b9c9ab5a6c650cc766cce9cac084c232c6c2cbc31659df36bb00735416882d0397894dd590442ae0423efd47aed79e53e43fc31f8880f4598fa67b916d1f721275ecdadb5bbff370c6090b706ba829a1cda50baba50ba0799e6ff30962cd588c76c767ce93d1d9991db3a3b90c93095ac9156200da43b1ce116332e1727bf1463d9ce2a9389a3f6253818652e6cda576309eb72f06d8cdb98794b161a3428268fcca4f1a4f2eb8620c4674ced32342cc0830df596d58ab7f322d75bcb6a6a09c0aaca1aaf715500c934084535359dca5ef4f65c551385ba150cedefef340d71d5e4ea94e9a1d93a21b8bd25224b1bad8651ecca752572ea04861f610e981cb9e7e421bc248dd672d0f6212a62f70bde07556d6cc6ad9c79a307eb00de311099c2a9ad3c67edc182dc48903ea75ceec180ee3c7ded71be54a9ae0d3f595493f50399f14be92049d9af0609fa0eb6ba12a80405d41bcb37e4f3ebe3fad1bc010fb4f21adf76f04d58649b482051ee8608e106851bebad22cd55136396d553fad92a951ccdb2568ff4be5fd28b6e4b3a664edd68104abd65decfc4a53548b70fc4a77812e6cd9097420dbaa8fc414d920f25f9c4f7df763cdfaf3286258d2008bb939f5fcae91f6c42ffc066f7aa9b0ee0e42b5c3c2e2a4ab7d8b9a0db96cbce088a238b542e1f922b7d8407b8393e3b2c6c66dbac6ad87cf7f96bbbd162384d9fdf0645733bb889f6985927074b9cda0d880e608176eafe2218669cf19a5393d0d87f36b708edd7082c44b15964c29a2b54ab6385e088b01318003f43919c2677fd7feeed9d3d1f78a9210a30b956d68b648a3258a2609f6935ac00650ccc0a15af42b9bcaa7c97be51c28890032ddf3d6bd1be5c3504f3a9086bd09988e4cecf7185d3ee203e4b36e134f7ee745f39292d26d70555c1ac28ef2"}, &(0x7f0000000100)=0x1008) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32, @ANYBLOB="00000e"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\x00\x00\x00('], 0x3}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x5, 0x0) [ 2020.832863][ T29] audit: type=1804 audit(1595564066.610:4332): pid=19366 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1286/cgroup.controllers" dev="sda1" ino=16368 res=1 [ 2020.846614][T19367] lo speed is unknown, defaulting to 1000 [ 2020.971486][T19400] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2021.040505][ T29] audit: type=1804 audit(1595564066.610:4333): pid=19358 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1286/cgroup.controllers" dev="sda1" ino=16368 res=1 [ 2021.152998][T19434] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2021.224516][ T29] audit: type=1804 audit(1595564066.970:4334): pid=19400 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1315/cgroup.controllers" dev="sda1" ino=15920 res=1 04:14:27 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea9cc423ab8e4a8b160000200000", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000000040601e3ea0e4b1b4558da4600"], 0x1}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000240)={r6, 0xfff}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r7}, 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)={r7, 0x8, 0x3, [0xc9b, 0x7, 0x0]}, &(0x7f0000000180)=0xe) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r1, 0x0, 0x1000000eb) [ 2021.364939][ T29] audit: type=1800 audit(1595564066.970:4335): pid=19400 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=15920 res=0 [ 2021.441462][T19361] IPVS: ftp: loaded support on port[0] = 21 [ 2021.492577][ T29] audit: type=1804 audit(1595564066.990:4336): pid=19400 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1315/cgroup.controllers" dev="sda1" ino=15920 res=1 [ 2021.530063][T19367] IPVS: ftp: loaded support on port[0] = 21 [ 2021.548711][T19359] IPVS: ftp: loaded support on port[0] = 21 [ 2021.571434][T19361] lo speed is unknown, defaulting to 1000 [ 2021.668567][T19367] lo speed is unknown, defaulting to 1000 [ 2021.695733][ T29] audit: type=1804 audit(1595564066.990:4337): pid=19394 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1315/cgroup.controllers" dev="sda1" ino=15920 res=1 [ 2021.748101][T19359] lo speed is unknown, defaulting to 1000 [ 2021.858247][ T29] audit: type=1804 audit(1595564067.070:4338): pid=19411 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1287/cgroup.controllers" dev="sda1" ino=15927 res=1 04:14:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="080db5055e0bcfe847a071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x7, 0xb, 0x36, 0xfffffffffffffff0}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf6, &(0x7f0000002880)=""/246, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, &(0x7f0000000080)={0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r6, 0x1f, 0x4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={r7, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xaca, 0x1, 0x6, 0x1, 0x6, 0xffffffff, 0x1f}, 0x9c) [ 2021.974193][ T29] audit: type=1804 audit(1595564067.711:4339): pid=19452 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1316/cgroup.controllers" dev="sda1" ino=15947 res=1 04:14:28 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x1ca, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:14:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0)=0x1f, 0x4) sendfile(r2, r1, 0x0, 0x100000b35) 04:14:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) setsockopt$packet_buf(r2, 0x107, 0xd, &(0x7f0000000240)="d6d82a679598b19450327d720eff014bf4459ddbdc8b651e96cfa346a8d65539e91ca86ad98b6457f9b3a08e480aa68773bd24444f4553f74e0b1a45dd5cc264cb031f3833d427b6e134405264e66599128e42e6b968a651c93d5dda70ca37a66933db159f9b1da2329833cff128294085cd080b8fa42ea639ab41cf9fb6d2f76fd78d3bb4f1c2881f3abf67fdca17eb8a4ed478d89988a984ad2a683116e835dd379bc1", 0xa4) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="030b000000fa00020004cc2b6c59", @ANYRES16, @ANYRESOCT=r3, @ANYRES64, @ANYBLOB="c3739836520100635b251831af72960cda8820d0873a7a01c36693eca49f49cad151cf4b14acb4d631774134b5ba066b4a247822ee5c60ebf4109f8e07329181b7a10a95f5a94185090000003554f66bc148f642274780f29f5510593170267144bd0256778c6f64a01ab69129c9aa021cd8dd42584b9d1313f71baf1000000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000001200)={0x54, r4, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3de}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20008001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r1, 0x0, 0x1000000eb) [ 2022.121267][T19512] IPVS: ftp: loaded support on port[0] = 21 [ 2022.223339][T19512] lo speed is unknown, defaulting to 1000 04:14:28 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000b00ff"], 0x3c}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000010000000002800128055fa02eb2c618fe46e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 2022.503514][T19552] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2022.973326][ T486] tipc: TX() has been purged, node left! [ 2022.990355][T19512] IPVS: ftp: loaded support on port[0] = 21 [ 2023.055589][T19512] lo speed is unknown, defaulting to 1000 [ 2023.105126][ T486] tipc: TX() has been purged, node left! [ 2023.146200][ T486] tipc: TX() has been purged, node left! [ 2023.179481][ T486] tipc: TX() has been purged, node left! [ 2023.201895][ T486] tipc: TX() has been purged, node left! [ 2023.390384][ T486] tipc: TX() has been purged, node left! 04:14:31 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x298]}, &(0x7f0000000000)=0x54) 04:14:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f00000000c0)={'ipvs\x00'}, &(0x7f0000000100)=0x1e) sendfile(r2, r1, 0x0, 0x1000000eb) 04:14:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x404140}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x40000) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100000b35) 04:14:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x5c}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r5, 0x9}, &(0x7f0000000140)=0x8) 04:14:31 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x1d0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:14:31 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x7803, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) [ 2025.136619][T19588] IPVS: ftp: loaded support on port[0] = 21 [ 2025.221194][T19588] lo speed is unknown, defaulting to 1000 [ 2025.227918][T19594] IPVS: ftp: loaded support on port[0] = 21 [ 2025.284699][T19601] IPVS: ftp: loaded support on port[0] = 21 [ 2025.308016][T19595] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2025.350353][T19594] lo speed is unknown, defaulting to 1000 [ 2025.441049][T19601] lo speed is unknown, defaulting to 1000 04:14:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000000c0)=0xe2, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000b35) 04:14:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) r1 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt(r1, 0x8, 0x9, &(0x7f00000000c0)="94fae6fa7b912d6cb74b59a648ea429ccc32169779208ac7a9914683ae2d0bba6b1c2eef35a468cdb17d6268b307783a08d8398b023569", 0x37) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x1000000eb) [ 2025.951057][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 2025.951073][ T29] audit: type=1804 audit(1595564072.031:4346): pid=19671 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1290/cgroup.controllers" dev="sda1" ino=15989 res=1 [ 2026.027758][T19672] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2026.041114][T19588] IPVS: ftp: loaded support on port[0] = 21 [ 2026.062245][T19601] IPVS: ftp: loaded support on port[0] = 21 [ 2026.171267][T19594] IPVS: ftp: loaded support on port[0] = 21 [ 2026.196530][T19601] lo speed is unknown, defaulting to 1000 04:14:32 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000440)={0x0, 0x3e, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x0, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040085}, 0x4) [ 2026.201540][ T29] audit: type=1804 audit(1595564072.101:4347): pid=19672 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1319/cgroup.controllers" dev="sda1" ino=15990 res=1 [ 2026.222492][T19588] lo speed is unknown, defaulting to 1000 04:14:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r2], 0x24}}, 0x30000081) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100000b35) [ 2026.424745][T19709] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2026.430915][ T29] audit: type=1804 audit(1595564072.131:4348): pid=19671 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1290/cgroup.controllers" dev="sda1" ino=15989 res=1 04:14:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000024000b0f00000000000020a37df64a00c50e16131b2180b22db1534c75f4eda1820600000000000000350a876a7b951faaef40cddedb16ebd97c", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010063616b65000000001400020008000d00010000000800030003000000"], 0x44}}, 0x0) bind$packet(r1, &(0x7f0000000100)={0x11, 0xf8, r3}, 0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x40004}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x2c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r8}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={r8, @in6={{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x1c}, 0x6}}, 0xffff, 0x8001, 0x5, 0x3, 0x40, 0x80000001, 0x9}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r9, &(0x7f0000000380)=0x4) setsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000100)=0x1, 0x4) sendfile(r6, r5, 0x0, 0x100000001) getsockname$unix(r5, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) 04:14:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x10c0, 0x18, 0x200, 0x70bd2d, 0x25dfdbff, {0x4}, [@generic="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", @nested={0xac, 0x74, 0x0, 0x1, [@generic="48f915039c026d7623ffeef0720c89bcb6ff2eaa4403243552220e", @generic="75d6284d658822b7b480270670b09cd247271e8bf9bae522a9d3f4aea674022705ec31cb49cc86cf1f4607f0af9370ccaa5106a1cdcef3ebaebcd9f5464e504da32c5b19acc1f147a38b8c3bd78545da75533e22889c37123c71a31741f06471b2370b6114c15a47cee5fd2d501db1062ff98a049618c2dd38264d4443e79b215a40e7223e", @typed={0x8, 0x3f, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x10c0}, 0x1, 0x0, 0x0, 0x404c000}, 0x1) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x1000000eb) [ 2026.648049][ T29] audit: type=1804 audit(1595564072.661:4349): pid=19711 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1291/cgroup.controllers" dev="sda1" ino=15992 res=1 [ 2026.698409][T19726] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2026.741319][ T29] audit: type=1804 audit(1595564072.671:4350): pid=19711 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1291/cgroup.controllers" dev="sda1" ino=15992 res=1 [ 2027.559636][T19747] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 04:14:35 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x300]}, &(0x7f0000000000)=0x54) 04:14:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) 04:14:35 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001d00070f000000000004000007030001", @ANYRES32=r2, @ANYBLOB="dd3d1f2454d90a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) socket(0x1e, 0x4, 0x2) 04:14:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f00008d6000/0x3000)=nil, 0x3000, 0x1000012, 0x28011, r0, 0xffffc000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1000000eb) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000100)='pids.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x100000001) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f00000000c0)={0x8}, 0x4) 04:14:35 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x202, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) [ 2029.889748][T19757] IPVS: ftp: loaded support on port[0] = 21 [ 2029.902895][ T29] audit: type=1804 audit(1595564075.982:4351): pid=19760 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1321/cgroup.controllers" dev="sda1" ino=16376 res=1 [ 2029.956301][T19759] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:14:36 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x7c03, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) [ 2030.046930][ T29] audit: type=1804 audit(1595564075.992:4352): pid=19760 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1321/cgroup.controllers" dev="sda1" ino=16376 res=1 [ 2030.082744][ T486] tipc: TX() has been purged, node left! [ 2030.089424][ T486] tipc: TX() has been purged, node left! 04:14:36 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x298]}, &(0x7f0000000000)=0x54) [ 2030.103256][T19757] lo speed is unknown, defaulting to 1000 [ 2030.172883][ T486] tipc: TX() has been purged, node left! [ 2030.181985][ T486] tipc: TX() has been purged, node left! [ 2030.213674][ T486] tipc: TX() has been purged, node left! [ 2030.224095][ T29] audit: type=1804 audit(1595564076.062:4353): pid=19764 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1321/cgroup.controllers" dev="sda1" ino=16376 res=1 [ 2030.289877][ T486] tipc: TX() has been purged, node left! [ 2030.351895][ T29] audit: type=1804 audit(1595564076.092:4354): pid=19761 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1292/cgroup.controllers" dev="sda1" ino=16375 res=1 04:14:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x100000001) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="b20010c69c8a9e83d8f904378db4", @ANYRES16=r3, @ANYBLOB="030b000000fa00020004cc2b6c59", @ANYRES16, @ANYRESOCT=r2, @ANYRES64, @ANYBLOB="c373983652b7fc635b251831af72960cda8820d0873a7a1fc36693eca49f49cad134cf4b14acb4d631774134b5ba066b4a247822ee5c60ebf4109f8e07329181b7a10a95f5a94185956a728d3554f66bc148f642274782f29f5510efb1de2e7144bd0256778c6f64a01ab69129c9aa021cd8dd42a958fa3f"], 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x24c, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffe1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @loopback, 0x7f}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, [], 0x1}, 0xaa0}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf, 0x3, "7dfedf4c8c6633552e6705"}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4008040) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100000b35) [ 2030.674294][ T29] audit: type=1804 audit(1595564076.752:4355): pid=19764 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1321/cgroup.controllers" dev="sda1" ino=16376 res=1 04:14:37 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x214, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:14:37 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x600]}, &(0x7f0000000000)=0x54) [ 2031.191053][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 2031.191068][ T29] audit: type=1804 audit(1595564077.262:4359): pid=19805 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1293/cgroup.controllers" dev="sda1" ino=16382 res=1 04:14:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000180)={@generic={0x22, "191794a34d451a0c498ee4ba51bebef4659864aeac66a412d148fd742b5b54716bef1b6c9d2a9fd81f36d0eeaa1f056f78eea0194e681c72286f0fc99f87dc2eb334510cc8950a3e518e30301aa44191245f34f893e62e859cd8fd73280de59d5f95aafb90b13257ab69f7bbb2189d47082b66e64dce0cadccd25c1ace41"}, {&(0x7f00000000c0)=""/64, 0x40}, &(0x7f0000000140), 0x8}, 0xa0) sendfile(r2, r1, 0x0, 0x100000b35) 04:14:37 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x8601, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:14:37 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x298]}, &(0x7f0000000000)=0x54) [ 2031.351049][ T29] audit: type=1804 audit(1595564077.262:4360): pid=19808 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1293/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 2031.497733][ T29] audit: type=1804 audit(1595564077.572:4361): pid=19823 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1294/cgroup.controllers" dev="sda1" ino=16372 res=1 04:14:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000140)=0xff, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f00000000c0)={0x6, 'ip6gretap0\x00', {0x8000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)={0x24, 0x0, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x80000001}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000000) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000180)=""/255, &(0x7f0000000280)=0xff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r3, 0x0, 0x100000b35) [ 2032.045055][ T29] audit: type=1804 audit(1595564078.122:4362): pid=19838 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1295/cgroup.controllers" dev="sda1" ino=16372 res=1 04:14:38 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x228, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) [ 2032.154271][ T29] audit: type=1804 audit(1595564078.152:4363): pid=19836 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1295/cgroup.controllers" dev="sda1" ino=16372 res=1 04:14:40 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x1d00]}, &(0x7f0000000000)=0x54) 04:14:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r1, 0xd}, 0x10) 04:14:40 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x298]}, &(0x7f0000000000)=0x54) 04:14:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800000, 0x1010, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) openat$cgroup_ro(r3, &(0x7f0000000240)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000001) r5 = accept(r4, &(0x7f0000000140)=@caif, &(0x7f00000001c0)=0x80) ioctl$SIOCGETNODEID(r5, 0x89e1, &(0x7f0000000200)={0x3}) r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)={0x24, 0x0, 0x11, 0x70bd27, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) accept4$x25(r4, 0x0, &(0x7f00000000c0), 0x80000) sendfile(r2, r1, 0x0, 0x100000b35) 04:14:40 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x8802, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:14:40 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x22c, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) [ 2034.312633][T19870] IPVS: ftp: loaded support on port[0] = 21 [ 2034.333810][T19872] IPVS: ftp: loaded support on port[0] = 21 [ 2034.341369][T19873] IPVS: ftp: loaded support on port[0] = 21 [ 2034.352200][T19870] lo speed is unknown, defaulting to 1000 [ 2034.359658][T19874] IPVS: ftp: loaded support on port[0] = 21 [ 2034.441032][ T486] tipc: TX() has been purged, node left! [ 2034.459491][ T486] tipc: TX() has been purged, node left! [ 2034.470557][T19873] lo speed is unknown, defaulting to 1000 [ 2034.499782][ T29] audit: type=1804 audit(1595564080.572:4364): pid=19881 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1322/cgroup.controllers" dev="sda1" ino=16009 res=1 [ 2034.534636][T19872] lo speed is unknown, defaulting to 1000 [ 2034.540821][T19881] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2034.569762][T19874] lo speed is unknown, defaulting to 1000 04:14:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000004065eb8deed8d2de2d80080ab000b0d372372b4dbd8bc03"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, &(0x7f00000003c0)=""/207, &(0x7f00000002c0)=0xcf) sendfile(r4, r3, 0x0, 0x100000001) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="8902eee2aad7000000000100000006000a004e220000080008"], 0x24}}, 0x0) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x50, r6, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, [], 0x1}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x400) [ 2035.121957][T19874] IPVS: ftp: loaded support on port[0] = 21 [ 2035.145916][ T29] audit: type=1804 audit(1595564081.222:4365): pid=19967 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1323/cgroup.controllers" dev="sda1" ino=16009 res=1 [ 2035.178810][T19870] IPVS: ftp: loaded support on port[0] = 21 [ 2035.226785][T19873] IPVS: ftp: loaded support on port[0] = 21 [ 2035.292397][ T29] audit: type=1804 audit(1595564081.322:4366): pid=19970 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1323/cgroup.controllers" dev="sda1" ino=16009 res=1 04:14:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r4}, 0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)={r4, 0x6, 0xfff}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000001007acf96000100"/25], 0x1}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x1000000eb) [ 2035.435950][ T29] audit: type=1804 audit(1595564081.332:4367): pid=19883 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1296/cgroup.controllers" dev="sda1" ino=15985 res=1 [ 2035.451692][T19873] lo speed is unknown, defaulting to 1000 04:14:41 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x300]}, &(0x7f0000000000)=0x54) [ 2035.589609][ T29] audit: type=1804 audit(1595564081.332:4368): pid=19891 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1296/cgroup.controllers" dev="sda1" ino=15985 res=1 04:14:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd050001000789cfbd81890d4c9ce5fcc02da12f791236fdd1e6ee68cae5a044c5ce2d2ce0a5ea363dce2ea88a89f8aa00afb40e40e563969f9cb7bf42fa84d4f72be2dddcd47d171413bc83741d951b538b3683d9b5c96782fe6e4c6bcd1525194e5ad448874df20e45b10dcfa6e50af351e2b28f065fa8b96353328d67062291da4c5a7e42e161e8212820997be30a64c4b0bd8f2401572110ccb0c2048577c13a6457bdd705c533acca24ecf3dd5172ab9f7825c58dc5b4a0bbc1b292f7ece51cadd44537"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) [ 2035.666419][T19993] IPVS: ftp: loaded support on port[0] = 21 [ 2035.803353][T19993] lo speed is unknown, defaulting to 1000 04:14:42 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x100000001) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="030b000000fa00020004cc2b6c59", @ANYRES16, @ANYRESOCT=r2, @ANYRES64, @ANYBLOB="c373983652b7fc635b251831af72960cda8820d0873a7a1fc36693eca49f49cad134cf4b14acb4d631774134b5ba066b4a247822ee5c60ebf4109f8e07329181b7a10a95f5a94185956a728d3554f66bc148f642274782f29f5510efb1de2e7144bd0256778c6f64a01ab69129c9aa021cd8dd42a958fa3f"], 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8014}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000002c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x14) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) sendfile(r5, r6, 0x0, 0x100000b38) 04:14:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) write$binfmt_aout(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b01050982080000600300000b000000e4000000090000000000000000000000af1177ce54cb350cb730c8d6e6e4d3d9e4831d95d8a084d4afddbb7b64f7ee3af014259985e8fd082f578df72c05ca61d19c532c2889723f2140da51a2aacc8e4b0736b02c29e0fb913beb8a8b569dc2c49b08e01c57aea2c5e80d85cbb46eb83028aa69200e9758e8f9ae3a197f48555ac6231c4569e361930a861a8791d1c3f3011883"], 0x80) sendto$x25(r3, &(0x7f0000000240)="25f95b863c14e64c90905d5774d794117b5137468048f611c029084337d61c359e8959dfb8d1fd94cd651fffe5030f967289477509760f820edbbed1babd683528a7c533542b4c4e6aff2643036e7f3542202d82124bf0b8a5d7d9c0142999bb11b09ba364a49f29c977696298495ea466d0155c2e133fae25146089f5bbfdadaeaca46d78e3f4fc48", 0x89, 0x80, &(0x7f00000000c0)={0x9, @null=' \x00'}, 0x12) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="33000000c124e39ee89b04f58b5b008000a00b0005000100"], 0x1}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r1, 0x0, 0x1000000eb) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuset.effective_cpus\x00', 0x7a05, 0x1700) sendfile(r8, r7, 0x0, 0x100000001) setsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000100)=0x200, 0x4) [ 2036.444597][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 2036.444612][ T29] audit: type=1804 audit(1595564082.522:4373): pid=20037 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1298/cgroup.controllers" dev="sda1" ino=15959 res=1 [ 2036.627881][ T29] audit: type=1804 audit(1595564082.522:4374): pid=20037 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1298/cgroup.controllers" dev="sda1" ino=15959 res=1 04:14:42 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x3001]}, &(0x7f0000000000)=0x54) 04:14:42 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) [ 2036.772714][ T29] audit: type=1804 audit(1595564082.692:4375): pid=20042 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1325/cgroup.controllers" dev="sda1" ino=15910 res=1 04:14:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000fffffffd050001000700000000000000000000cf680d27af8d38d30000"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xff, @private1={0xfc, 0x1, [], 0x1}, 0x7ff}, @in6={0xa, 0x4e21, 0x66, @dev={0xfe, 0x80, [], 0x36}}, @in={0x2, 0x5e24, @multicast2}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e22, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, @in6={0xa, 0x4e21, 0x2dd5, @private2={0xfc, 0x2, [], 0xfc}, 0x4a}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x7, @loopback, 0x7}], 0xbc) [ 2036.893672][T20051] IPVS: ftp: loaded support on port[0] = 21 [ 2036.933634][ T29] audit: type=1804 audit(1595564082.692:4376): pid=20042 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1325/cgroup.controllers" dev="sda1" ino=15910 res=1 [ 2037.020228][T20051] lo speed is unknown, defaulting to 1000 04:14:43 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(pcrypt(aegis256-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000c0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xc, 0x2011, r2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x424043, 0x0) [ 2037.101277][ T29] audit: type=1804 audit(1595564082.692:4377): pid=20042 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1325/cgroup.controllers" dev="sda1" ino=15910 res=1 [ 2037.246328][ T29] audit: type=1804 audit(1595564082.742:4378): pid=20043 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1325/cgroup.controllers" dev="sda1" ino=15910 res=1 [ 2037.394906][ T29] audit: type=1804 audit(1595564083.212:4379): pid=20056 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1300/cgroup.controllers" dev="sda1" ino=16011 res=1 [ 2037.518212][ T29] audit: type=1804 audit(1595564083.272:4380): pid=20062 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1300/cgroup.controllers" dev="sda1" ino=16011 res=1 [ 2037.738480][T20051] IPVS: ftp: loaded support on port[0] = 21 [ 2037.822794][T20051] lo speed is unknown, defaulting to 1000 04:14:45 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x8803, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) [ 2039.506915][T20125] IPVS: ftp: loaded support on port[0] = 21 [ 2039.525082][T20125] lo speed is unknown, defaulting to 1000 04:14:45 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x234, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:14:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000000c0)={0x1, 0x81, 0x81, 0x7}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000b35) 04:14:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x1000000eb) 04:14:45 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x3}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x24004, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={r4, 0x68, &(0x7f0000000100)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e20, 0x7fffffff, @loopback, 0x20}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e23, 0xfffffff8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xea}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r5, 0x1f, 0x1, [0xffff]}, 0xa) 04:14:45 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x3f00]}, &(0x7f0000000000)=0x54) [ 2039.745325][T20157] IPVS: ftp: loaded support on port[0] = 21 [ 2039.789472][T20158] IPVS: ftp: loaded support on port[0] = 21 [ 2039.814863][ T29] audit: type=1804 audit(1595564085.893:4381): pid=20163 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1326/cgroup.controllers" dev="sda1" ino=16163 res=1 04:14:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x100000001) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r2, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x181}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x40041) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@map=r5, r6, 0x15}, 0x10) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000005f21f69aff392fcbac04060102000001007a5800"], 0x1}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r4, 0x0, 0x1000000eb) [ 2039.909983][T20157] lo speed is unknown, defaulting to 1000 04:14:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="924aab7c1da12626cd00", @ANYRES16=r4, @ANYBLOB="020029bd7000fddbdf2511000000050030000000000005002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x95}, 0x20040001) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r1, 0x0, 0x100000b35) r6 = accept$ax25(0xffffffffffffffff, &(0x7f0000000800)={{0x3, @rose}, [@rose, @remote, @default, @netrom, @default, @rose, @remote, @bcast]}, &(0x7f0000000880)=0x48) accept(r6, &(0x7f00000008c0)=@generic, &(0x7f0000000940)=0x80) [ 2039.957721][ T29] audit: type=1804 audit(1595564085.893:4382): pid=20156 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1326/cgroup.controllers" dev="sda1" ino=16163 res=1 [ 2039.967747][T20158] lo speed is unknown, defaulting to 1000 [ 2040.093294][ T486] tipc: TX() has been purged, node left! [ 2040.118059][ T486] tipc: TX() has been purged, node left! [ 2040.138314][ T486] tipc: TX() has been purged, node left! [ 2040.161962][ T486] tipc: TX() has been purged, node left! [ 2040.182810][ T486] tipc: TX() has been purged, node left! [ 2040.207907][ T486] tipc: TX() has been purged, node left! [ 2040.242851][ T486] tipc: TX() has been purged, node left! [ 2040.268861][T20125] IPVS: ftp: loaded support on port[0] = 21 [ 2040.372470][T20125] lo speed is unknown, defaulting to 1000 [ 2040.435567][ T486] tipc: TX() has been purged, node left! [ 2040.593721][T20157] IPVS: ftp: loaded support on port[0] = 21 04:14:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) accept4$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, &(0x7f0000000140)=0x1c, 0x80000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) [ 2040.646797][T20158] IPVS: ftp: loaded support on port[0] = 21 04:14:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r5, 0xa5a27f2e7ede6595, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}]}, 0x58}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0xc8, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4001}, 0x400d0) sendfile(r2, r1, 0x0, 0x1000000eb) [ 2040.714608][T20157] lo speed is unknown, defaulting to 1000 04:14:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)={0x1c, r6, 0xb29}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r6, 0x800, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x20000000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r9}}, 0x20}}, 0x0) [ 2040.815382][T20158] lo speed is unknown, defaulting to 1000 [ 2040.976815][T20262] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:14:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f00000000c0), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1000000eb) [ 2041.251387][T20284] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:14:47 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x9201, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) [ 2041.496618][T20307] IPVS: ftp: loaded support on port[0] = 21 [ 2041.557242][T20265] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2041.742519][T20307] lo speed is unknown, defaulting to 1000 [ 2041.897703][T20307] IPVS: ftp: loaded support on port[0] = 21 [ 2044.682933][ T0] NOHZ: local_softirq_pending 08 04:14:51 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x240, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:14:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, 0xffffffffffffffff, 0x54033000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) readv(r1, &(0x7f0000001700)=[{&(0x7f0000000140)=""/143, 0x8f}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/211, 0xd3}, {&(0x7f0000000440)=""/141, 0x8d}, {&(0x7f00000000c0)=""/22, 0x16}, {&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/205, 0xcd}, {&(0x7f0000000380)=""/58, 0x3a}], 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000b35) 04:14:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4240a2a0) socket$netlink(0x10, 0x3, 0xb) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="030b000000fa00020004cc2b6c59", @ANYRES16, @ANYRESOCT=r3, @ANYRES64, @ANYBLOB="c373983652b7fc635b251831af72960cda8820d0873a7a1fc36693eca49f49cad134cf4b14acb4d631774134b5ba066b4a247822ee5c60ebf4109f8e07329181b7a10a95f5a94185956a728d3554f66bc148f642274782f29f5510efb1de2e7144bd0256778c6f64a01ab69129c9aa021cd8dd42a958fa3f"], 0x14}}, 0x0) connect$pptp(r2, &(0x7f0000000540)={0x18, 0x2, {0x1, @local}}, 0x1e) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x24c, r4, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb52b}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0x80}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @ipv4={[], [], @private=0xa010102}, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4641}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x69}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4d}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}]}, @TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "876bfc1b8325813e4b44720d2c2bd1df15b8c9db311a1f5c7af97d"}}, @TIPC_NLA_NODE_ID={0x2b, 0x3, "ee8646ea1427815e7d5c517a68c929c941f9c15729509e1906e7016f2ad39738ef8377dc0a1db6"}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xacd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x68}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3782}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x800}, 0x10) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468", @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x0, 0x3}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) 04:14:51 executing program 3: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xffff}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x3}}]}, 0x2c}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xf8, r0}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0xfffffffffffffdb7) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000024000b0f000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000001400020008000d00010000000800030003000000"], 0x44}}, 0x0) bind$packet(r2, &(0x7f0000000100)={0x11, 0xf8, r4}, 0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xc8, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000c80}, 0x40000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r7, 0x0, 0x1000000eb) 04:14:51 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x9203, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:14:51 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x4000]}, &(0x7f0000000000)=0x54) [ 2045.169213][T20372] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2045.185153][T20370] IPVS: ftp: loaded support on port[0] = 21 [ 2045.192319][T20373] IPVS: ftp: loaded support on port[0] = 21 [ 2045.244164][T20378] IPVS: ftp: loaded support on port[0] = 21 [ 2045.268680][T20370] lo speed is unknown, defaulting to 1000 [ 2045.307037][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 2045.307052][ T29] audit: type=1804 audit(1595564091.383:4393): pid=20374 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1330/cgroup.controllers" dev="sda1" ino=16337 res=1 [ 2045.346981][T20374] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:14:51 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x3f00]}, &(0x7f0000000000)=0x54) [ 2045.369328][T20373] lo speed is unknown, defaulting to 1000 [ 2045.449329][T20378] lo speed is unknown, defaulting to 1000 [ 2045.588374][T20426] IPVS: ftp: loaded support on port[0] = 21 04:14:51 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f00000000c0)=""/43, &(0x7f0000000100)=0x2b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000180), 0x4) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r1, 0x0, 0x1000000eb) [ 2045.751113][T20426] lo speed is unknown, defaulting to 1000 [ 2046.001555][ T29] audit: type=1804 audit(1595564092.084:4394): pid=20467 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1331/cgroup.controllers" dev="sda1" ino=16337 res=1 [ 2046.034077][T20370] IPVS: ftp: loaded support on port[0] = 21 [ 2046.054001][T20467] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2046.126228][ T29] audit: type=1804 audit(1595564092.114:4395): pid=20467 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1331/cgroup.controllers" dev="sda1" ino=16337 res=1 [ 2046.165661][T20370] lo speed is unknown, defaulting to 1000 [ 2046.232213][T20373] IPVS: ftp: loaded support on port[0] = 21 [ 2046.284272][T20378] IPVS: ftp: loaded support on port[0] = 21 [ 2046.326350][ T29] audit: type=1804 audit(1595564092.114:4396): pid=20467 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1331/cgroup.controllers" dev="sda1" ino=16337 res=1 [ 2046.369132][T20373] lo speed is unknown, defaulting to 1000 04:14:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e22, 0x6, @remote, 0x2}}}, 0x84) sendfile(r2, r1, 0x0, 0x100000b35) 04:14:52 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES64=r1], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x28011, r0, 0x55146000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x1000000eb) [ 2046.489618][ T29] audit: type=1804 audit(1595564092.474:4397): pid=20392 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1304/cgroup.controllers" dev="sda1" ino=16306 res=1 [ 2046.622138][ T29] audit: type=1804 audit(1595564092.474:4398): pid=20396 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1304/cgroup.controllers" dev="sda1" ino=16306 res=1 [ 2046.779724][ T29] audit: type=1804 audit(1595564092.474:4399): pid=20483 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1304/cgroup.controllers" dev="sda1" ino=16306 res=1 04:14:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100a7e5374115d0d6680a6378db0f91ef9b6087bde966cf9be60018dede2cff7cee856a87c6857be7d72b30d06ce12ecf27a406ec6fd4437b5d7d179f50bb6b53c275094a182e54fb9883c5f98f814f5ea7c8bb259b463e23abc708a77fb23a188fe7b0a70ace64997926aa38358f"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) 04:14:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x115, 0x115, 0x4, [@ptr={0xe, 0x0, 0x0, 0x2, 0x3}, @union={0xd, 0x9, 0x0, 0x5, 0x1, 0x1000, [{0x1, 0x0, 0xe2f9}, {0x7, 0x0, 0x10000}, {0x3, 0x1, 0x8}, {0xc, 0x3}, {0x8b, 0x5, 0x2}, {0x2, 0x1, 0x1}, {0x6, 0x3, 0xffffffff}, {0x2, 0x4, 0x3}, {0x3, 0x4}]}, @datasec={0xf, 0x8, 0x0, 0xf, 0x1, [{0x1, 0x8, 0x400}, {0x5, 0x4, 0x9}, {0x2, 0x1, 0x5}, {0x3, 0xffffffff, 0x2b0c}, {0x4, 0x39d3, 0x8}, {0x4, 0x7, 0xa9b}, {0x1, 0x8, 0x1000}, {0x2, 0x3, 0x3}], 'T'}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0xffff}}, @fwd={0x9}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000300)=""/243, 0x134, 0xf3, 0x1}, 0x20) sendmmsg(r0, &(0x7f0000006180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 2046.938661][ T29] audit: type=1804 audit(1595564092.474:4400): pid=20484 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1304/cgroup.controllers" dev="sda1" ino=16306 res=1 [ 2047.063717][ T29] audit: type=1804 audit(1595564092.834:4401): pid=20529 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1305/cgroup.controllers" dev="sda1" ino=16258 res=1 [ 2047.226491][ T29] audit: type=1804 audit(1595564093.294:4402): pid=20559 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1333/cgroup.controllers" dev="sda1" ino=16063 res=1 [ 2048.530035][ T486] tipc: TX() has been purged, node left! [ 2048.690049][ T486] tipc: TX() has been purged, node left! [ 2048.850546][ T486] tipc: TX() has been purged, node left! [ 2049.020722][ T486] tipc: TX() has been purged, node left! 04:14:55 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x254, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:14:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) connect$bt_rfcomm(r2, &(0x7f0000000140)={0x1f, @any, 0x81}, 0xa) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000b35) write$binfmt_elf64(r4, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xc1, 0x0, 0x6, 0x1, 0x3, 0x3e, 0x3ff, 0xa4, 0x40, 0x2c7, 0x7, 0x8000, 0x38, 0x2, 0x9b8a, 0x1f, 0x1}, [{0x6, 0x3f, 0x200, 0xff, 0x8, 0x480, 0x1f, 0x2}], "91f22a1dc4491386f1fdd44f8c17aca9639a800c8129ef3868d36d36602c3a3b8a789a1cda102d4639fd8d9e5126a8634ac760a03f3db531e6c3e6a797aa565f0454017fe71dd986accbec863e4ec4169f9126891bae35db9df36fd1042f569ea9e607848d0e94193279c6b9978d2dc5a942e86f8e898f560d555973d8093b5c3d578ccce93e7dcf18bd8f982825b272b01e5bef66a3b67cb49a", [[], [], [], [], [], [], [], []]}, 0x912) 04:14:55 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) accept4(r2, 0x0, &(0x7f0000000100), 0x800) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'gre0\x00', {0x3}}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="00001c020000000000e5ef3d6e97af0900000000000000a5cf004000ddf300", 0x1f) accept(r0, 0x0, 0x0) 04:14:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b00050001005614e5e4661fc1e24d08f1dd33c7e163732f9733961e0d2b439e4ecce6f4dc2794183fb024ff046ee5cdecf60b4663adb0b075a8332fce7f82c59588ae0e5ab5959d29e8f1224948ee5e1f2322fb5ce4ddf449fe9bf198"], 0x1}}, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) 04:14:55 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x9800, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:14:55 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x7602]}, &(0x7f0000000000)=0x54) [ 2049.180101][ T486] tipc: TX() has been purged, node left! [ 2049.247495][T20575] IPVS: ftp: loaded support on port[0] = 21 [ 2049.253856][ T486] tipc: TX() has been purged, node left! [ 2049.256975][T20578] IPVS: ftp: loaded support on port[0] = 21 [ 2049.266133][ T486] tipc: TX() has been purged, node left! [ 2049.334956][ T486] tipc: TX() has been purged, node left! [ 2049.353548][T20586] IPVS: ftp: loaded support on port[0] = 21 04:14:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000023c0)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cfe8b00", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000640)=0x1a3f26cb, 0x4) sendfile(r2, r1, 0x0, 0x100000002) [ 2049.376257][T20575] lo speed is unknown, defaulting to 1000 [ 2049.405263][T20578] lo speed is unknown, defaulting to 1000 [ 2049.485994][T20586] lo speed is unknown, defaulting to 1000 04:14:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) openat$cgroup_devices(r0, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r3, 0x91f, 0x100000000, 0x5}) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100000b35) 04:14:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bind$llc(r1, &(0x7f0000000180)={0x1a, 0x335, 0x4, 0x4, 0x1, 0x2e, @random="c070a55a8afc"}, 0x10) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) 04:14:56 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) socket$key(0xf, 0x3, 0x2) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000001100)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000001f40)='dctcp\x00', 0x6) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000011c0)="18738697962d777ae15647267fc043ac708e5c5791d6bcbee33a246153eaa0a79d9c648f4a5aa4e4663042b1171906150257569429b7811c8785e70079dd156aa400a3528d89a725c61ba8dc03d066c5652bd849ee3edc70857074bc674b6fe1386024ed9d3a850dd88a7c324e22eff3d3509ab83cfeafbbf6dd0a69758ea2b5e98c27140c77fbc8f4bea436c4288c1474a6036e2b39ce2bbca2bbe2f4b28683a6d207b5edda655612bf9fe4a0217ae54071a94c9bf205f001eb28fcfb5554d34404c69317a768f22b5847385785c0e7d8ffc4540df2a60b05144a0b72d03e28bdc6bdf25f88a0f2614de02b82915cd3c15d4c4c4169e586a160278a428c57f0") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0xb, 0x800, 0x8, 0x41, 0x1, 0x70, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r2, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001080)={r2, &(0x7f0000000040), &(0x7f0000000080)=""/4096}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, &(0x7f0000000040)=0x42, r3, &(0x7f00000010c0)=0x1, 0x7f, 0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) ppoll(&(0x7f0000001140)=[{r4, 0x220a}, {r1, 0x10}], 0x2, &(0x7f00000012c0), &(0x7f0000001300)={[0x7]}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000026000000300012800b00010067656e6576650000200002800800050000000000140007000000000000000005000000000000000108000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) [ 2050.031914][T20664] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2050.094188][T20575] IPVS: ftp: loaded support on port[0] = 21 [ 2050.132313][T20671] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2050.137113][T20578] IPVS: ftp: loaded support on port[0] = 21 04:14:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r0}, 0x10) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000700000008000640fffffffd0500010007e746b9b8fd9bb94f9c3b29cf94e093c81f296db834296c7b982c317c458f668c4fb0fe0a5fd67e844162424d95707960c278340112e1a93c2cf12c65c350b85aa0cec1900000000000061fd6407797f872aef13add9e7d863515ba018ac7581c52ea67206f86465da7dac9c811d9ec41b6fb4f5fcf891e23ec58c5dd22bf4d952d8d3f4f5f28a91d30af4667433d869f4515c761202e294edbf8939cc4028fac88d67499f1970632cf9eb7816cffd3e90a1e1805f8dd4a55efe6b568b4677ae3c7ae7ccc5924df71d7237813098f174de2fae00faa8b"], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000004c0)=0x4) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r3}, 0xc) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r3}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x100000001) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@remote, @in=@private}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@private1}}, &(0x7f00000003c0)=0xe8) sendfile(r5, r4, 0x0, 0x100000b35) [ 2050.189317][T20586] IPVS: ftp: loaded support on port[0] = 21 [ 2050.363648][T20671] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2050.420405][T20578] lo speed is unknown, defaulting to 1000 [ 2050.583333][T20586] lo speed is unknown, defaulting to 1000 04:14:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5209cc423ab8c4aff017f7a8847a2b79eb87ee900c0601bcf8b96b36d143361fb1145eefab525eb83b9c507e8e1912901debd54976592f352d123fc67858e5898adca1066f442d0c822f4551f5a4ee0852e3522cb4790b9e1a4524d1de9bdc0b67434bd519c6135f380257b81f10bfed421920a", @ANYRES32], 0x208e24b) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000180)) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0xa9a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800510004060102000001007a58008000000b000528d644a75e1f29fb33d8c9000100"], 0x1}}, 0x4004840) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r7}, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r7, 0x5}, &(0x7f0000000280)=0x8) sendfile(r4, r3, 0x0, 0x4) [ 2051.609204][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 2051.609220][ T29] audit: type=1804 audit(1595564097.684:4408): pid=20717 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1336/cgroup.controllers" dev="sda1" ino=16014 res=1 [ 2051.694035][ T29] audit: type=1804 audit(1595564097.684:4409): pid=20718 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1336/cgroup.controllers" dev="sda1" ino=16014 res=1 [ 2051.749797][ T29] audit: type=1804 audit(1595564097.724:4410): pid=20728 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1336/cgroup.controllers" dev="sda1" ino=16014 res=1 [ 2051.817384][ T29] audit: type=1804 audit(1595564097.884:4411): pid=20717 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1336/cgroup.controllers" dev="sda1" ino=16014 res=1 [ 2051.867701][ T29] audit: type=1804 audit(1595564097.884:4412): pid=20718 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1336/cgroup.controllers" dev="sda1" ino=16014 res=1 04:14:59 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x260, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:14:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="afde5591e89f642d191e3a79f88a241c021e5925f86658254de5aa0aef0b193149ba46fc6f9b3cba66c37c2603b2fb76f3bd9ec07f", @ANYRES32=0x0], &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r3}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280)={r3, 0xff, 0x10}, &(0x7f00000002c0)=0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000080000000eb00f48dce5af87ede4b00eeff07000640fffffffd0500010007"], 0x24}, 0x1, 0x0, 0x0, 0x20000804}, 0x40000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6tnl0\x00', r7, 0x4, 0x80, 0x5, 0x1, 0x20, @mcast1, @empty, 0x20, 0x7800, 0x7035, 0x5}}) sendfile(r5, r4, 0x0, 0x100000b35) 04:14:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@getchain={0x34, 0x66, 0x10, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff9, 0xc}, {0x5, 0xb}, {0xb, 0x3}}, [{0x8, 0xb, 0x400}, {0x8, 0xb, 0x8001}]}, 0x34}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xf8}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) bind$packet(r2, &(0x7f0000000100)={0x11, 0xf8, r4}, 0x14) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) bind$packet(r6, &(0x7f0000000100)={0x11, 0xf8, r8}, 0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000480)={0x498, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x270, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @activeport={{0x14, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x27d}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x54, 0x1, @name={{0x0, 0x1, 'mode\x00'}, {}, {0x0, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xc24}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @activeport={{0x0, 0x1, 'activeport\x00'}, {}, {0x0, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x80}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipmr_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) 04:14:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000180)=0x1c, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000240)=0x3, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32=r2], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100bb73b37fbf34582f625c19675d71eb3f4f2f4aaeaa547999bbadedf52e846c31b305c71f31b4084cfb66ec3ff3"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1000000eb) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)={0x24, 0x0, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x1000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) bind$packet(r7, &(0x7f0000000100)={0x11, 0xf8, r9}, 0x14) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040027bb7000fddbdf2501000000080001000300000008000300", @ANYRES32=r9, @ANYBLOB="0c00990000140000000000000c00990080ffffff0400000008000100030000000c00990002000000ffffffff08000300", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0) [ 2053.106357][T20774] IPVS: ftp: loaded support on port[0] = 21 [ 2053.143376][ T29] audit: type=1804 audit(1595564099.224:4413): pid=20771 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1337/cgroup.controllers" dev="sda1" ino=16064 res=1 [ 2053.206511][T20774] lo speed is unknown, defaulting to 1000 [ 2053.758589][T20774] IPVS: ftp: loaded support on port[0] = 21 [ 2053.829963][T20774] lo speed is unknown, defaulting to 1000 [ 2053.949521][ T29] audit: type=1804 audit(1595564100.024:4414): pid=20781 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1309/cgroup.controllers" dev="sda1" ino=16077 res=1 [ 2054.046013][ T29] audit: type=1804 audit(1595564100.034:4415): pid=20782 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1309/cgroup.controllers" dev="sda1" ino=16077 res=1 [ 2054.173083][ T29] audit: type=1804 audit(1595564100.255:4416): pid=20814 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1309/cgroup.controllers" dev="sda1" ino=16077 res=1 04:15:01 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x9a03, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) [ 2055.426617][T20836] IPVS: ftp: loaded support on port[0] = 21 [ 2055.490361][T20836] lo speed is unknown, defaulting to 1000 04:15:01 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x9800]}, &(0x7f0000000000)=0x54) 04:15:01 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fc, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x26e1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000280)=@v2={0x2, @aes256, 0x10, [], "247d0e26dc136e0a6126fdfd8ddbb829"}) write$cgroup_int(r3, &(0x7f0000000140), 0xff4d) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0', [{0x20, 'bridge_slave_1\x00'}], 0xa, "4676c0f7c12cf0bac7e4470a9b7f3b5e89e1fbdd4a88cf671878ed86fddb37cc8f1aa4c7eb730bc7b5df8799f460ce0bfb1fc17ff7f1a32fdd4770639d1305401f6710"}, 0x5e) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000240), 0x0) write$binfmt_script(r2, &(0x7f0000000240)=ANY=[], 0xfffffd78) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r2, 0x0) mmap(&(0x7f0000a35000/0x400000)=nil, 0x400000, 0x0, 0x2013, r2, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000002c0)={0x1, 'bridge_slave_1\x00', {}, 0x38}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x2400c850}, 0x2000c010) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x8, 0x0, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}}, 0x0) 04:15:01 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000f7ffffffffffffff007a58008000000b0005000100"], 0x1}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket$netlink(0x10, 0x3, 0x0) bind$packet(r4, &(0x7f0000000100)={0x11, 0xf8, r6}, 0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a00)={&(0x7f0000000440)={0x15bc, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x12e0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0xb4, 0x5, "143114032857ee0b524f87a41d0e082ba750637bb6b220e11381d75df0ca281b413a82295162a0846810b171e2ce3cd4608e6aa15ec4c640116e644c1bfbefc016e28e61baba420f545b14e2152ba97a46964525d4402b912dcaf14b50f92bbd878cb6fb377e3f38d217d099220ce5b7dc31c21c49139d311367333a69dc19f3b09858e51223d2fc24ab01aa8ee24dc3770741e24f23150575b09dff8d15a006c396dc4c889dd03d1adf3a333a97f987"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffbe}, @ETHTOOL_A_BITSET_BITS={0x1b0, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '~*,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'cgroup.controllers\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'cgroup.controllers\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'cgroup.controllers\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'cgroup.controllers\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@(}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ':*!.{]\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1282}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'cgroup.controllers\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'cgroup.controllers\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'cgroup.controllers\x00'}]}, {0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'cgroup.controllers\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x15f5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9d9a}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'cgroup.controllers\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x53, 0x5, "01d929847b8a36a36019975eaedfd0456dcad0e8e91f2e89a8488c0b1549137478c236550533eeee51e7aede164a2ada21dea977cae56124c19d94fb33a2087410be42ab0d8603cc62d8da67034110"}, @ETHTOOL_A_BITSET_MASK={0x9, 0x5, "d937b436af"}]}, @ETHTOOL_A_FEATURES_WANTED={0x1e4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe1, 0x4, "c7c28944ce20ae6a05137bf8bc0085e2171fac2e0960fe07f9f2c02c554c31fdb56ca1654855290a358a2b4c9cd2e4c00a90725c130b98b91c333fbbbaaf34020032d89d19e361b0e05bc8490f48ceeb9b33d6746a8772a3360ec5dad6a0f522f735b8a9ef5af068969f3acf84b49192a7d3efc04fe9c120abb0b936b5f72c1283fb5b99f99159ddc4cec44b249eaeefde0239b77baeba7a766534c56a9db6278159dbb6d3c2d6b729ffb3e18d875b27e3d42dfad236dca83084ade749b89d6b44d80206675027f0d06feb8dd9b757db89ab5ea207257f67879b1d5650"}, @ETHTOOL_A_BITSET_VALUE={0xfc, 0x4, "63b186d8536bf899882978eb2b5cd3a6bec4be073bc401bc18f174e41c7829dfd54ef8081999410d262c2f9e00e1613518d2b08827509a744058fc3b0dd29cefe2afbfaf5b7996c0054f28bf6a93b0b318f721bc3b8a5a6fa833528e2211ab57776237ea866ee179ab3bfec2259a230519e40b2c07f07922ab2cf34913a66b79012311ae179f9a87339afd62ec37ad7abca61c75e073e2dbfd85d227e9d0dd0e7325a52b9d5d39aa336865c7e90beeeebf09e405124169c1337c8bd0c833d314d1d1c070b61bd6b8e0e60f271db08c0a791f94e0b62fc478daa86f8777e62a130943428ee0d2dc56df4448ac3e166627e98a6381b40c4805"}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2f8c}]}, @ETHTOOL_A_FEATURES_WANTED={0x70, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4b, 0x5, "87e9baf973b2adf375610034bf55236ce60b0a6f86e8da5e044b01d127615a0e512d0dbad05c8134d2eed0b31cc6b1c6d3512bbc53eacfc7216ef65e8c77abf35264eea77e48fb"}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x12b2be9e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}]}, 0x15bc}, 0x1, 0x0, 0x0, 0x8000}, 0xc810) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000280)=0x6, 0x2) sendto$inet6(r3, &(0x7f0000000100)="0d46fb8a78f778d0662dc176fc59dedc6161adcef6a5509933ae12ad7575338b490a3ed25159ad8ebdd85e8e66a7d6ce3d9cda8c2c770d28835879652f700459d522951c98b8355e7b1636c2d617f3d6e548268a76bf2968c296a0a7bfe13a17ceb78dde481bb58224ac0b81e6e6164bfc343007716051fdc56beecd6d897b85db0b7ce7351a59a76e4839e8381f41dd75abbeccb9eca9ce3b771e2bc91fc75683a1cc88a788e0dd8e842800becd6695c2d3f1300b831e", 0xb7, 0x2004c004, &(0x7f0000000240)={0xa, 0x4e21, 0xa29, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x400}, 0x1c) sendfile(r2, r1, 0x0, 0x1000000eb) 04:15:01 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x264, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:15:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000771ff065deb00f48dce5af87ede4b0006002c1eba63fffffffd050001000709ba657961727dc5d473e4a9fd4cab06554bd313fad493b4dfd6e3a2917a6a907477b7cc314ed1c300701f988f14e99389189a7302d502551ba1e32354dfd6c293169ae32c590269cc7936d60b0ca6d83aae95d86da3beeb1ba723daee908d6f5bda5b7c779a05fa7bbb46c1d7a6b8ec2306358a952bc1b15f6013dffbe6860f1a27be008bdf1e00feb3f01ae8faf22389f44b7f1e48eb6aac550194eef53c679658b469ad36d573a40f26a67e"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) [ 2055.677932][T20864] IPVS: ftp: loaded support on port[0] = 21 [ 2055.761654][ T29] audit: type=1804 audit(1595564101.845:4417): pid=20867 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1338/cgroup.controllers" dev="sda1" ino=16374 res=1 [ 2055.763921][T20864] lo speed is unknown, defaulting to 1000 [ 2055.852974][T20876] IPVS: ftp: loaded support on port[0] = 21 04:15:02 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fc, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x26e1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000280)=@v2={0x2, @aes256, 0x10, [], "247d0e26dc136e0a6126fdfd8ddbb829"}) write$cgroup_int(r3, &(0x7f0000000140), 0xff4d) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0', [{0x20, 'bridge_slave_1\x00'}], 0xa, "4676c0f7c12cf0bac7e4470a9b7f3b5e89e1fbdd4a88cf671878ed86fddb37cc8f1aa4c7eb730bc7b5df8799f460ce0bfb1fc17ff7f1a32fdd4770639d1305401f6710"}, 0x5e) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000240), 0x0) write$binfmt_script(r2, &(0x7f0000000240)=ANY=[], 0xfffffd78) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r2, 0x0) mmap(&(0x7f0000a35000/0x400000)=nil, 0x400000, 0x0, 0x2013, r2, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000002c0)={0x1, 'bridge_slave_1\x00', {}, 0x38}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x2400c850}, 0x2000c010) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x8, 0x0, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}}, 0x0) [ 2055.962109][T20876] lo speed is unknown, defaulting to 1000 04:15:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x2801d, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060400000000e231000029c500000000050001"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) 04:15:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0xd, &(0x7f0000000140)=""/250, &(0x7f00000000c0)=0xfa) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) [ 2056.345463][T20836] IPVS: ftp: loaded support on port[0] = 21 [ 2056.467553][T20836] lo speed is unknown, defaulting to 1000 [ 2056.541375][T20864] IPVS: ftp: loaded support on port[0] = 21 [ 2056.677481][T20864] lo speed is unknown, defaulting to 1000 04:15:02 executing program 0: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400), 0xc, 0x0}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x11, 0x800000003, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="f459a61efa2e24c56b98b0d722d34fd870e898ca1daf108f4a3fc18127e85dc58ff30be6ddcb55142c5799b3", 0x2c, 0x1, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0xf8, r2}, 0x14) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x10, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000340), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000c88000)={r4, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) [ 2056.733979][T20876] IPVS: ftp: loaded support on port[0] = 21 04:15:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000000c0)) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x100000001) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x3, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x48000) sendfile(r4, r1, 0x0, 0x100000b35) [ 2056.935661][T20876] lo speed is unknown, defaulting to 1000 [ 2057.080848][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 2057.080862][ T29] audit: type=1804 audit(1595564103.165:4421): pid=20922 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1339/cgroup.controllers" dev="sda1" ino=16075 res=1 04:15:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x24}}, 0x9e0b91dc41a4adfb) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) [ 2057.198781][ T29] audit: type=1804 audit(1595564103.195:4422): pid=20926 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1339/cgroup.controllers" dev="sda1" ino=16075 res=1 [ 2057.267782][ T29] audit: type=1804 audit(1595564103.275:4423): pid=20984 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1339/cgroup.controllers" dev="sda1" ino=16075 res=1 [ 2057.382666][ T29] audit: type=1804 audit(1595564103.465:4424): pid=21014 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1313/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 2058.109073][ T29] audit: type=1804 audit(1595564104.185:4425): pid=21017 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1313/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 2058.528873][ T486] tipc: TX() has been purged, node left! [ 2058.695925][ T486] tipc: TX() has been purged, node left! [ 2058.868876][ T486] tipc: TX() has been purged, node left! [ 2059.028802][ T486] tipc: TX() has been purged, node left! [ 2059.198901][ T486] tipc: TX() has been purged, node left! [ 2059.378797][ T486] tipc: TX() has been purged, node left! 04:15:05 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0xb201, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:15:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000300)="b0bf9195f859e45552bb8e3822edd4f9bed5d1afb3bb19b40df6b6728dc0647ef08aab0d53eb14ea86aed823184231dc484ab005935bf438a801cfe9b5193da9ab7afa61983f1f47b5eb01b171f2a23e26a355a5d8f215d184423680bce2f5e8791aeaa638f14045670d17daea5386672fa30f7305535184a1a1840bef39136b9038c72cd1bca207f3f9e2e9d70d9f89b43cbae7b56bb8c7ff41dd9ddaf830122ac311883215e9eb0ad5d0233bdd865d70c1f10ff4a7e423", &(0x7f00000003c0)=""/233}, 0x20) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000004060102000023007a58008000000b0005000100f9f0cfd7ffb17ca1b5bb90a3984e2ad124125263652dae51d8acb7d66d89a34217129d879ff4a1c969d17e16706c949a8b4aff1de5aea84675ae066f05108de7483b774cc410ef5936f9034183cc122296212fe7647b3c393c1ec890d81dbc7b486f0b30606f12101e79785a74ba5fa81a79d6a7adfb482b3118ed75"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x1000000eb) 04:15:05 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x101, 0x6e, 0xa}, [@ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 04:15:05 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x9802]}, &(0x7f0000000000)=0x54) 04:15:05 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x26c, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:15:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000001340)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="aab0a782f416d5467daee9606e18cd5a182c9e", @ANYRES16=0x0, @ANYBLOB="04002abd7000fbdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x24000840) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) ioctl(r5, 0x9, &(0x7f00000016c0)="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") r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)={0x1c, r6, 0xb29}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x10, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc4}, 0x4010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2500000007065deb00f48dce5af87ede4b8ac1e7b66ec2259d"], 0x24}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r7, 0x0, 0x100000b35) [ 2059.530117][ T486] tipc: TX() has been purged, node left! [ 2059.618379][ T29] audit: type=1804 audit(1595564105.695:4426): pid=21034 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1340/cgroup.controllers" dev="sda1" ino=16080 res=1 04:15:05 executing program 0: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0xf4d3}) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100002c07) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="28800000", @ANYRESOCT, @ANYRESOCT=r3], 0x28}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00042cbd7000ffdbdf25150000000a00bbbbbbbbbb00000a0006100180b100000000000800010002000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x800c) [ 2059.661683][T21039] IPVS: ftp: loaded support on port[0] = 21 [ 2059.687214][T21042] IPVS: ftp: loaded support on port[0] = 21 [ 2059.708813][ T486] tipc: TX() has been purged, node left! [ 2059.722730][T21035] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2059.727159][T21044] IPVS: ftp: loaded support on port[0] = 21 [ 2059.752948][ T29] audit: type=1804 audit(1595564105.695:4427): pid=21034 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1340/cgroup.controllers" dev="sda1" ino=16080 res=1 [ 2059.823063][T21039] lo speed is unknown, defaulting to 1000 [ 2059.845441][ T486] tipc: TX() has been purged, node left! [ 2059.867777][T21044] lo speed is unknown, defaulting to 1000 [ 2059.923864][ T29] audit: type=1804 audit(1595564105.765:4428): pid=21041 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1314/cgroup.controllers" dev="sda1" ino=16379 res=1 [ 2059.951715][T21042] lo speed is unknown, defaulting to 1000 [ 2060.158391][ T29] audit: type=1804 audit(1595564105.795:4429): pid=21035 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1314/cgroup.controllers" dev="sda1" ino=16379 res=1 [ 2060.329763][ T29] audit: type=1804 audit(1595564105.965:4430): pid=21055 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1379/memory.events" dev="sda1" ino=16369 res=1 04:15:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) write$binfmt_script(r0, &(0x7f0000001200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) sendfile(r5, r4, 0x0, 0x1020000a9) 04:15:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x2f, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x100000001) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000140)=0x2, 0x4) close(r4) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}], 0x30) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r8}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x1773, 0x8001, 0x8, 0x100, r8}, 0x10) sendfile(r3, r1, 0x0, 0x100000b35) [ 2060.580888][T21042] IPVS: ftp: loaded support on port[0] = 21 [ 2060.656408][T21039] IPVS: ftp: loaded support on port[0] = 21 04:15:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000002a00)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "a5c268", 0x298, 0x3a, 0xff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [{0x0, 0x19, "e5fb000005005357cd99e33bca98e246dc9027eb3334ea443e7fdc4049b892d54090878bee496aa11e07fb0f1db1a0ebe2f95347b0317613023381165c01f08fea1048ea59a6f2273e02707fdd7defc02bde3192360593169594710bddd04aead6c89c87778555de42d23236534ba1a799a63eb4532003a703b249e4628e4706bccc7a264ee85014d99a7fd4565d3c416c835a741eb4e97140e834013724d23450072f0087ac65295ca0d7c601c30de0161560e2d20c5b1052e9b208e25470e9fa884ecd2082ec38b3cb19c083"}, {0x0, 0x1b, "14a142ef59c04e8e7b4db5309006bd98ec79847a52ed68124e8a24d3079fc53b81c039a7d59f992dcb481043f510a0ce1ebb98c07a624ff8c8cc0b4fd3b8e700196d1f5696e184393de669ffaebfbd494a9d6a5fedac0738ffc3dcb3c1b96e48fd063786ae5701f6aa5022621e665607848e20f162630df96d0a773993e97ae6b847e51883d73d66bb30b4375229cfd0c9c41f511bfbf2bca94caa7ce76be257173a4eae2b484117ac32acf6ea1a32def26c919c93055c2f9a640b2d847d527357902538828abd66b3d1a9b85034066154f0b2ec054f6a8712ec98e5"}, {0x0, 0x1b, "8cf0833ae2772f05d302c778833be4f2b9c43c83284b82e71ca1ee382af46513079a2f52da08c93afdfc1a18e4b677b307a1c7df90787cbd143b129bc8dbc39104eb21674d26fd4ced8626df256869e168d42f4d160ad1442cae2bd8fda0fc44a08759d245bfe8eba42ec7967c1e953256a057369159333bca73b498a882fb5e840d429804169a6446c1d1b013144ae0ee276a463ef69ea4c4636751083041811c9b549256c6a3a71e451f8fd4de25629b3de61cba78315412fa14e350bb03feaf63909bd7320561df80bc77f36d4561a5efcc324450355ed3"}]}}}}}, 0x2ca) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={'nr', 0x0}, 0xea5a, 'syz1\x00', @bcast, 0x2, 0x5, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) [ 2060.766949][T21044] IPVS: ftp: loaded support on port[0] = 21 04:15:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[@ANYBLOB="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", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x841) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000002440)={r3, 0x0, 0x101, 0x8000}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000f703000125bd7000ffdbdf2507000000070021002e2f66696c65302e0f66696c653000fa"], 0x28}, 0x1, 0x0, 0x0, 0x2604c840}, 0x40000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000000), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r1, 0x0, 0x1000000eb) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001280)={0x0, 0x11a38ff0, 0x9, 0x7}, &(0x7f00000012c0)=0x10) [ 2060.839011][T21039] lo speed is unknown, defaulting to 1000 04:15:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10010, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f2, 0x200, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000b35) 04:15:09 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0xba03, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:15:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) bind$packet(r5, &(0x7f0000000100)={0x11, 0xf8, r7}, 0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x4c, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffff41d}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800) sendfile(r2, r1, 0x0, 0x1000000eb) 04:15:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[@ANYBLOB="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", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x841) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000002440)={r3, 0x0, 0x101, 0x8000}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000f703000125bd7000ffdbdf2507000000070021002e2f66696c65302e0f66696c653000fa"], 0x28}, 0x1, 0x0, 0x0, 0x2604c840}, 0x40000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000000), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r1, 0x0, 0x1000000eb) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001280)={0x0, 0x11a38ff0, 0x9, 0x7}, &(0x7f00000012c0)=0x10) [ 2063.999262][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 2063.999276][ T29] audit: type=1804 audit(1595564110.086:4450): pid=21197 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1343/cgroup.controllers" dev="sda1" ino=15778 res=1 [ 2064.026583][T21201] IPVS: ftp: loaded support on port[0] = 21 [ 2064.091520][T21201] lo speed is unknown, defaulting to 1000 [ 2064.187950][ T29] audit: type=1804 audit(1595564110.126:4451): pid=21197 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1343/cgroup.controllers" dev="sda1" ino=15778 res=1 [ 2064.324642][ T29] audit: type=1804 audit(1595564110.226:4452): pid=21198 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1381/cgroup.controllers" dev="sda1" ino=15842 res=1 [ 2064.431219][ T29] audit: type=1804 audit(1595564110.456:4453): pid=21198 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1381/cgroup.controllers" dev="sda1" ino=15842 res=1 04:15:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) sendto$netrom(r2, &(0x7f00000000c0)="e6ff7caeecf3e7a611d35cb09c2806c47c984aa3e08d018c6edc9ebb94356e0d60c71163a172da6674e807d020acdc22", 0x30, 0x4000004, &(0x7f0000000140)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000b35) 04:15:10 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x40000]}, &(0x7f0000000000)=0x54) 04:15:10 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x288, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:15:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = accept4$inet6(r1, 0x0, &(0x7f00000004c0), 0x80800) sendmmsg$sock(r0, &(0x7f0000000680)=[{{&(0x7f00000000c0)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24, 0x4}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)="68f58f4d158bf8e3970c8fe8751d1063547af7ceb8f23a8c1ada5085c8e9f9d1c50e181931c6530ba69c92061f168a670f17994901426b11b66747d59c94b9897ce211302e0aa523b547926f4cb586167ad84cbc379691d77699b7002e2abb3a30933e6165286522c13d9285455461a676e90a27afef32327f52928d0984f6b5a47efb0733381c83d738da76e220b3f0dce2377c6ca82ac477bc1314faa8f9973401750dd566e8c00fd1929300689beb2244ad78b3e98a33ac1a32a7cbf48c8c7dc4537a", 0xc4}, {&(0x7f0000000340)="d65a05619313adb63266e9a45ad2f19e71f25d2766d819d216cfa2a5344b95d315c3f9ca3a1e5b1f2455ce0fe22c620017949c0a0e1be7054bad900fd5b2dadad4adc974d7fc1357a39a68735f0b1975db923aeab29246b3c755876dbbf6f13fa63a3f90385b6be0f0d751c3e966d7b74784167a8e1f9b53b0a2cd7f55f305f2d99f92ffd6324d562421d05940265d1d4ee0443f2ae4abf8448eb6e6c6143daab2dd440e74c87c3c06bc1b25313d0a2277411d5729f7e4a0c8609f5b76658cb4c3ce4d6f6686452bb2c8acfb41", 0xcd}], 0x2, &(0x7f0000000440)=[@txtime={{0x18, 0x1, 0x3d, 0x7fff}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x3f}}], 0x60}}, {{&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x4, 0x1, 0x3, {0xa, 0x4e21, 0x8, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x36}}, 0x1ff}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)="761dfc05bed3963ace935f97b7e9b0f1724479bc4b869f6b0759b3396d86fdc74377902f15bbd31ce3855de59864b586ce99af982c5afb12cce8ddbc54c7344362481b0ad41a0c1d85e143bca8665feaf906d157", 0x54}], 0x1, &(0x7f0000000640)=[@txtime={{0x18, 0x1, 0x3d, 0x80000001}}], 0x18}}], 0x2, 0x4008001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1000000eb) [ 2064.473199][T21201] IPVS: ftp: loaded support on port[0] = 21 [ 2064.564976][T21201] lo speed is unknown, defaulting to 1000 [ 2064.629295][T21236] IPVS: ftp: loaded support on port[0] = 21 [ 2064.656370][T21238] IPVS: ftp: loaded support on port[0] = 21 [ 2064.683921][ T29] audit: type=1804 audit(1595564110.766:4454): pid=21245 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1317/cgroup.controllers" dev="sda1" ino=16018 res=1 [ 2064.775113][T21236] lo speed is unknown, defaulting to 1000 04:15:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) r3 = socket$inet(0x2, 0xa, 0x5) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @multicast2}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000b35) 04:15:11 executing program 3: setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value, 0x8) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x8, 0x8, 0xfffa, 0x1, 0x5, 0x6, 0x75, {r3, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, 0x80000000, 0x1f, 0x1, 0x80, 0x8}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={r4, 0xb0, 0x1}, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="4b6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x1000000eb) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x2) sendto$ax25(r0, &(0x7f0000000300)="36c82775d2915d4521e9976cb772276fa2546a3a024a7d3053b62f81933f603c574f148cc8a8dfc17d2f091dcdb3f99e3edc26d8dcb21b125e436f2375f5694d54d09b38f446fa0ec083badc4625c4c18425f393053c999e1417321217eee7cb8fc0b6ce511b27cb4f0ce3dea0e13b56f74dd2a8e44072c5eb39ab7c41bee7a6d91fd6154daa14e2028b38e54b15a09b666b13f0b00c6d6a3cf9cd6c90257d60a5a160c3d3142a6bdd37fdfaf866e5cfa461216a6288d1ebc6b45fcd23df16f9e466c856a4cfbbdc9dcdff85756ba1c1", 0xd0, 0x4081, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r9, r8, 0x0, 0x100000001) mmap(&(0x7f000047a000/0x1000)=nil, 0x1000, 0x4, 0x8010, r8, 0x495ef000) [ 2064.905116][T21238] lo speed is unknown, defaulting to 1000 04:15:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[@ANYBLOB="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", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x841) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000002440)={r3, 0x0, 0x101, 0x8000}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000f703000125bd7000ffdbdf2507000000070021002e2f66696c65302e0f66696c653000fa"], 0x28}, 0x1, 0x0, 0x0, 0x2604c840}, 0x40000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000000), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r1, 0x0, 0x1000000eb) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001280)={0x0, 0x11a38ff0, 0x9, 0x7}, &(0x7f00000012c0)=0x10) [ 2065.111567][ T29] audit: type=1804 audit(1595564111.196:4455): pid=21286 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1345/cgroup.controllers" dev="sda1" ino=15795 res=1 [ 2065.263186][ T29] audit: type=1804 audit(1595564111.226:4456): pid=21301 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1318/cgroup.controllers" dev="sda1" ino=16084 res=1 [ 2065.399786][ T29] audit: type=1804 audit(1595564111.266:4457): pid=21285 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1318/cgroup.controllers" dev="sda1" ino=16084 res=1 [ 2065.542084][T21236] IPVS: ftp: loaded support on port[0] = 21 [ 2065.562902][ T29] audit: type=1804 audit(1595564111.276:4458): pid=21306 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1345/cgroup.controllers" dev="sda1" ino=15795 res=1 04:15:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="6df0d7ea10d219db2d6133b5399cc4230b8e4a8b16a4ed66011a24ccab1a6a0efaaf9cb1083ae31523d53fe846bafc6d5fa6adaa43ced3c9fdfda0bd6f", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, 0x1404, 0x200, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x24048000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) bind$packet(r4, &(0x7f0000000100)={0x11, 0xf8, r6}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'sit0\x00', r6, 0x29, 0xff, 0x6, 0x8, 0x28, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x40, 0x1, 0x4bdb}}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r3, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5ed7, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4041}, 0x20004800) sendfile(r2, r1, 0x0, 0x1000000eb) [ 2065.641147][T21236] lo speed is unknown, defaulting to 1000 [ 2065.657578][T21238] IPVS: ftp: loaded support on port[0] = 21 [ 2065.717404][ T29] audit: type=1804 audit(1595564111.276:4459): pid=21306 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1345/cgroup.controllers" dev="sda1" ino=15795 res=1 [ 2065.835470][T21238] lo speed is unknown, defaulting to 1000 04:15:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}}, 0x0) [ 2066.252743][T21385] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) 04:15:14 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0xd403, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:15:14 executing program 0: r0 = socket(0x1c, 0x5, 0x0) bind$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x27) 04:15:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001340)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xc4, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x23}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hald_acl_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x16}}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x42}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0xc4}, 0x1, 0x0, 0x0, 0x50000091}, 0x24000890) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012abd7000060053c400d3d73102dbdf25070000001400060076657468305f746f5f626174616476002800070073797374656f5f753a6f626a6563745f723a736f756e645f6465766963655f743a73300014000300fe8000000000000000000000000000bb149058000300fe8000000000000068bfee59cdf581cfd11e674450fd993a5d983d291479c171058c5004b82d6aef088da623d584faaff3d43f5fd8b0b1a49a74a8f0cab9474a00896f8c1cc735e843a273c2af21df2b14b3262132"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4030001}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x98, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apt_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x12}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8004}, 0x4) r5 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0) r6 = accept(0xffffffffffffffff, &(0x7f0000000a00)=@x25, &(0x7f0000000980)=0x80) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r6, &(0x7f0000003040)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003000)={&(0x7f0000001040)=ANY=[@ANYRES64=r5, @ANYRES16=r7, @ANYBLOB="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"], 0x3}}, 0x4004020) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x38, r7, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x880) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_vlan\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r1, 0x0, 0x100000b35) 04:15:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000540)={0x0, 0x4, 0x2, [0x8, 0x872]}, &(0x7f0000000580)=0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000024000b0f0000000000000000000000005d55fd59ee03bc363080d4d31228a0924b3a08a8d8313c72d4fc3cc30fda4d1eb8ab2f261e3661acfcca9d87fe988e0d8ef7da07617b8b0000666c23c606ad1347a18eb872a23f8dfe9f8e1f5a5e643034bc83102218886ce5acdde0226434292e0341f4f8da42b9e0cfa5c9cd28864cb6ecdddf1cd7c496", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010063616b65000000001400020008000d000100000008000300030000008a8ee14d2b6619ce44f4f3c4635b8a8300c70487537b28b47afd8adba3cd96dff7e4ef78965388437623c64f898b61b8be4cf92c6d1b9d79c495eca43ad4745427a9698aa62f585cddb079a81b8be5c8bbad4587a64856862c51e3973fa086f95f8391ab26803cb358d41d2cdac5a81a167ff074c8b8c688309a122ff04603048fc6fb0e"], 0x44}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xf8, r2}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) bind$packet(r4, &(0x7f0000000100)={0x11, 0xf8, r5}, 0x14) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x48011}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="30000000000201030000000000000000070000030800084000000000080009400000003f0900060073797a30000000009cc6bb49801a16541e03d88588aed0c67d5464f77062e2b984500787cf6aa8af5c6c67bf0ac24974867338eb0aba4412c5a8d03b5611ed95f63b628fce578916e85b107c3831fad021e4369a76d3df0f1745c0dc8b1c74d55df3e7f3e26ec2969cbe3c3a7d33"], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x800) sendfile(0xffffffffffffffff, r1, 0x0, 0x1000000eb) 04:15:14 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x1000000]}, &(0x7f0000000000)=0x54) [ 2068.563091][T21401] IPVS: ftp: loaded support on port[0] = 21 [ 2068.625596][T21409] IPVS: ftp: loaded support on port[0] = 21 [ 2068.679094][T21401] lo speed is unknown, defaulting to 1000 [ 2068.758750][T21409] lo speed is unknown, defaulting to 1000 04:15:15 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x28c, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:15:15 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:15:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x2f8, 0x118, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xf}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x2}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2, @local, [0xff, 0xff, 0x0, 0xffffffff], [0xffffff00, 0xffffff00, 0xff000000, 0xff], 'team_slave_0\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x5c, 0x0, 0x1, 0x6e}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x8, 0x4, 0x400, 'syz1\x00', 'syz0\x00', {0x6}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x2, 0x2) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000001880)=0x3f, 0x4) sendfile(r3, r1, 0x0, 0x1000000eb) 04:15:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001800)=ANY=[@ANYBLOB="2400000007065deb00f49dce5af87ede4b000000a66a5f0264c20490187aff9604e6e5467be008000640ffff800c"], 0x24}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) connect$inet6(0xffffffffffffffff, &(0x7f0000001640)={0xa, 0x4e21, 0x6, @mcast1, 0x7}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r6}, 0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001840)={r6, 0x3}, 0x8) ioctl$sock_qrtr_TIOCINQ(r4, 0x541b, &(0x7f0000001600)) sendmsg$inet6(r2, &(0x7f00000017c0)={&(0x7f00000000c0)={0xa, 0x4e21, 0xfffffe00, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000000140)="db7ef2dae64a58b9a3a9336f1d00facc63e8e62b1b346e9573fe90e4b81b34ef1d0e17a902156d622c725856b311ffa1c631c5764bec2df4f1efd68e56481850e9", 0x41}, {&(0x7f00000001c0)="cd6e7eb86d80731109446c7dc7baf36bb922772f8f7601", 0x17}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000200)="09be2fe77da031f38b8b22dba7fddda022bd64cc11b0404661fe5fd0298b2ef2e975255d598c425e48f64d44db621607887e646e04f7b179213fe14c4ccb779bbd643596be8957e6d9b51b60f7d114a0bed6cb3a172fcb3cef7a04b7fbca85d6d676b6c2eb4eedec1e088c707004fca7c2f491f864236ebea0ac219aa83a93262e55487299a543b14dad42b4c9e5d1e4d5902fe18b356295dc728b810d41da12d4c73e2bcbc01f5c41921fb181f968e7118401e8dcc03acc67c37f3a2317bc92991550d9737841f90185582094ab11c7cdd0d1e033079f5c185595f60e83c55c54a2afd6c7d89eba8f730947cef9a7cca62716", 0xf3}, {&(0x7f0000000300)="574944050f6a4755eeb36a8dae1c71c1b1a7d027f7d9cf0ff1866c0dbe61fa311b603925a9dc88af0bc691c1281e4112745d895f5037cb930f352fc8d55d5edd789998e17f86f5b908941ec8ed2d35fd0ce71489c8e0b1f5fcf8ca28e0d50a5a62c91ad4f85c58553b7b44af", 0x6c}, {&(0x7f0000000380)="f44efb0889d0b1c5ddc8321a0b5740679b712aac2452ac2f14d1aa2f9807a2d2026e732099c31e75e0949bb95c7057055e54b64a4a5730e99579b7f661bb29fcae46c8d6b68adf35a76cd57b3fb7f83415380322101dde15d1d05c309281314862061630aa", 0x65}, {&(0x7f0000001440)="cf2240977101af2c4f08aa828f4124dbc61a1d6807399935002264abdcfb40a90445d978c8e5321329303158be8424", 0x2f}, {&(0x7f0000001480)="05bf14181065428ce81047733ae609b940138adb71be4fb9975cfc802e8c95de209ec1fde24e4b90a02a85788664e4784231429885a069323f52658c3c8d51f4fc9407ce279e5cc6f127f3354db4c24751a59d64563762a5c47fee", 0x5b}, {&(0x7f0000001500)="abe805b7fa0f5d763c", 0x9}], 0x9, &(0x7f0000001880)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x32}}}, @dstopts={{0x88, 0x29, 0x37, {0x32, 0xd, [], [@pad1, @generic={0x1f, 0x5d, "08ace2791c1ecd7122b5409ed69c47c474d30b7a15ee64198cf939ee3eb40c770ef14c9d6ab0ba086b5eeeaa7de164a5fe4a4ef46c207a3b07a2215bab29d096f2e1a9cdff7119a403c3525314fad39085806b5a25c7ed008398ad56c4"}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x8}]}}}, @hopopts={{0x100, 0x29, 0x36, {0x16, 0x1c, [], [@generic={0x6, 0xcd, "aaf9b921fa682d0f451b5a2894070c9a837b8fb201e50feaec7c5200eef32fe15d452e6b65ab4e01fe36378ec29cd358c8eb3643da6d85a9ba7e434b081267ded2e437d4af808ee212789351c18be655b720a6c351455419c2f65096dfe39a546f005557c5440a0aacabefae97e8c5ce9895fed6375d098184171aa1b7f4b0f3328572c37870061d5c6e6d8ac0fcf4d19f0ff3ab8f829651a29c525564634ee9ff49ba1cb51d14da9e5dacf070a230eaeda7a9f5c07c860a2a41cde5e118605e3e24c2b25bac5b35341e9b23aa"}, @hao={0xc9, 0x10, @private1}, @pad1]}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x5c, 0x3, [], [@hao={0xc9, 0x10, @private1}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0xd9}, @enc_lim={0x4, 0x1, 0x3}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3ff}}, @tclass={{0x14, 0x29, 0x43, 0x3}}], 0x208}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r1, 0x0, 0x100000b35) [ 2069.226825][T21401] IPVS: ftp: loaded support on port[0] = 21 [ 2069.262214][T21462] IPVS: ftp: loaded support on port[0] = 21 [ 2069.302387][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 2069.302401][ T29] audit: type=1804 audit(1595564115.386:4465): pid=21463 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1348/cgroup.controllers" dev="sda1" ino=16093 res=1 [ 2069.336622][T21401] lo speed is unknown, defaulting to 1000 [ 2069.360436][T21469] IPVS: ftp: loaded support on port[0] = 21 [ 2069.390217][T21468] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2069.411518][T21409] IPVS: ftp: loaded support on port[0] = 21 [ 2069.446312][T21462] lo speed is unknown, defaulting to 1000 [ 2069.506751][T21469] lo speed is unknown, defaulting to 1000 [ 2069.619471][T21409] lo speed is unknown, defaulting to 1000 [ 2069.862343][T21462] IPVS: ftp: loaded support on port[0] = 21 04:15:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="6df0d7ea7c10d219afdad0d6b539d344ec55c584c214eb77eb1d835ac510fcc9f812fce1ae378123bd4eb74fa5a41aea2007a4a0fc7fc7eec54fd7550c67299a734251f65727173276fdd741f28e7d94a0897dbab9bdb853916a12142531f6b016245b4d4a6a65447c58c97c3af500044b5cf55f618f5fcfd35c466db1f96e6441b6ad22089a4721", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="83007900", @ANYRES16=r5, @ANYBLOB="000226bd7000ffdbdf250e00000024000280060002004e230000080008000400000005000d000000000006000f0003000000140003800500080006000000060007004e230000080006000900000008000500040000000800050000f0ffff"], 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x801) [ 2069.977217][T21462] lo speed is unknown, defaulting to 1000 [ 2070.154519][ T29] audit: type=1804 audit(1595564116.236:4466): pid=21473 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1320/cgroup.controllers" dev="sda1" ino=16111 res=1 [ 2070.211543][T21469] IPVS: ftp: loaded support on port[0] = 21 [ 2070.218276][T21580] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2070.263803][ T29] audit: type=1804 audit(1595564116.266:4467): pid=21478 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1320/cgroup.controllers" dev="sda1" ino=16111 res=1 [ 2070.288498][T21469] lo speed is unknown, defaulting to 1000 [ 2070.386813][ T29] audit: type=1804 audit(1595564116.266:4468): pid=21488 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1320/cgroup.controllers" dev="sda1" ino=16111 res=1 [ 2070.421290][ T486] tipc: TX() has been purged, node left! [ 2070.434974][ T486] tipc: TX() has been purged, node left! [ 2070.470266][ T486] tipc: TX() has been purged, node left! [ 2070.506510][ T486] tipc: TX() has been purged, node left! 04:15:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1405, 0x2, 0x70bd25, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007085c43a703d9065deb00f48dce5af87ede4b00000008000640ffffff"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) [ 2070.548131][ T29] audit: type=1804 audit(1595564116.266:4469): pid=21579 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1320/cgroup.controllers" dev="sda1" ino=16111 res=1 [ 2070.584215][ T486] tipc: TX() has been purged, node left! [ 2070.640048][ T486] tipc: TX() has been purged, node left! [ 2070.641663][ T29] audit: type=1804 audit(1595564116.296:4470): pid=21587 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1349/cgroup.controllers" dev="sda1" ino=16070 res=1 [ 2070.671392][ T486] tipc: TX() has been purged, node left! [ 2070.678415][ T486] tipc: TX() has been purged, node left! 04:15:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d798b9a0a6afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) write$binfmt_aout(r2, &(0x7f0000000240)={{0xcc, 0xa2, 0x40, 0x29c, 0x27b, 0x4, 0x155, 0x9b5}, "27121262daecbe3eddbf0c8c3244a2d9154673322fa67a3b025d6449fa03ae315fe7ef3a45bb83d3640bd64b21f914aca2a413f8f33aa041657c92ca6606d0b1c5aee36875d9cb23c69c641904962f01397aff38671ead4b37c4407e81f29525e4bb40d73f95bc1566e5704d6b4927b0c434c1886074e4a43c93717d373fdc59c3db34043b50c91d5e1539542882b1d077b2aa61266a0f5094e505cbabf6e20f3ad257bb884b2ead73eea6bd63c0230e0fc0f19d5c844a360f48b73809834ec9c8"}, 0xe1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x1000000eb) [ 2070.685437][ T29] audit: type=1804 audit(1595564116.406:4471): pid=21587 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1349/cgroup.controllers" dev="sda1" ino=16070 res=1 [ 2070.789692][ T29] audit: type=1804 audit(1595564116.876:4472): pid=21625 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1321/cgroup.controllers" dev="sda1" ino=15921 res=1 [ 2070.816840][ T486] tipc: TX() has been purged, node left! 04:15:20 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0xd600, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:15:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) openat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) r5 = openat$cgroup_ro(r3, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x1000000eb) 04:15:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r2, @ANYRES16=r1, @ANYRESHEX=r1, @ANYRESOCT=0x0, @ANYRES64], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'ip6erspan0\x00'}}, 0x1e) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000000400003393f12554dd3942740000f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r3, 0x0, 0x100000b35) 04:15:20 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x2000000]}, &(0x7f0000000000)=0x54) [ 2074.007045][T21664] IPVS: ftp: loaded support on port[0] = 21 [ 2074.015128][ T29] audit: type=1804 audit(1595564120.097:4473): pid=21667 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1322/cgroup.controllers" dev="sda1" ino=16127 res=1 [ 2074.049430][T21668] IPVS: ftp: loaded support on port[0] = 21 [ 2074.123595][T21664] lo speed is unknown, defaulting to 1000 [ 2074.156471][ T29] audit: type=1804 audit(1595564120.157:4474): pid=21665 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1351/cgroup.controllers" dev="sda1" ino=16124 res=1 [ 2074.221547][T21668] lo speed is unknown, defaulting to 1000 [ 2074.343075][ T29] audit: type=1804 audit(1595564120.157:4475): pid=21665 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1351/cgroup.controllers" dev="sda1" ino=16124 res=1 04:15:20 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x290, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) [ 2074.537072][ T29] audit: type=1804 audit(1595564120.217:4476): pid=21667 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1322/cgroup.controllers" dev="sda1" ino=16127 res=1 [ 2074.615050][T21717] IPVS: ftp: loaded support on port[0] = 21 04:15:20 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:15:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000180)=0xfffffffb, 0x4) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) bind$packet(r3, &(0x7f0000000100)={0x11, 0xf8, r5}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', r5}) [ 2074.741173][T21717] lo speed is unknown, defaulting to 1000 [ 2074.877864][T21729] IPVS: ftp: loaded support on port[0] = 21 [ 2074.893156][T21668] IPVS: ftp: loaded support on port[0] = 21 [ 2074.970868][ T29] audit: type=1804 audit(1595564121.057:4477): pid=21738 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1323/cgroup.controllers" dev="sda1" ino=16120 res=1 [ 2074.994371][T21664] IPVS: ftp: loaded support on port[0] = 21 [ 2075.035093][T21729] lo speed is unknown, defaulting to 1000 [ 2075.113939][T21668] lo speed is unknown, defaulting to 1000 [ 2075.149537][T21664] lo speed is unknown, defaulting to 1000 [ 2075.518708][T21717] IPVS: ftp: loaded support on port[0] = 21 04:15:21 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x3000000]}, &(0x7f0000000000)=0x54) 04:15:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/72, &(0x7f0000000080)=0x48) [ 2075.624021][T21717] lo speed is unknown, defaulting to 1000 04:15:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b000000080006489faae341d24d780007"], 0x24}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r7, 0x0, 0x100000b35) [ 2075.698757][T21814] IPVS: ftp: loaded support on port[0] = 21 [ 2075.841779][T21814] lo speed is unknown, defaulting to 1000 04:15:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) poll(&(0x7f0000000080)=[{r0}], 0x1, 0xffff) sendto$inet6(r0, &(0x7f0000001240)="19", 0x2, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 2075.958910][ T29] audit: type=1804 audit(1595564122.047:4478): pid=21847 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1324/cgroup.controllers" dev="sda1" ino=16121 res=1 04:15:22 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x2a2, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) [ 2076.024195][T21832] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2076.111845][ T29] audit: type=1804 audit(1595564122.077:4479): pid=21832 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1324/cgroup.controllers" dev="sda1" ino=16121 res=1 [ 2076.219796][T21867] IPVS: ftp: loaded support on port[0] = 21 [ 2076.297529][ T29] audit: type=1804 audit(1595564122.077:4480): pid=21832 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1324/cgroup.controllers" dev="sda1" ino=16121 res=1 [ 2076.349310][T21867] lo speed is unknown, defaulting to 1000 04:15:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xec, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:setrans_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hald_acl_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x16}}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x42}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0xec}, 0x1, 0x0, 0x0, 0x50000881}, 0x24000890) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012abd7000060053c400d3d73102dbdf25070000001400060076657468305f746f5f626174616476002800070073797374656f5f753a6f626a6563745f723a736f756e645f6465766963655f743a73300014000300fe8000000000000000000000000000bb149058000300fe8000000000000068bfee59cdf581cfd11e674450fd993a5d983d291479c171058c5004b82d6aef088da623d584faaff3d43f5fd8b0b1a49a74a8f0cab9474a00896f8c1cc735e843a273c2af21df2b14b3262132"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4030001}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x98, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apt_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x12}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8004}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x80, r4, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, [], 0x2e}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, [], 0xc}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r1, 0x0, 0x1000000eb) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001200)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r8, 0x1}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x14, r8, 0x2, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008080}, 0x4) 04:15:22 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0xd801, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) [ 2076.456452][ T29] audit: type=1804 audit(1595564122.077:4481): pid=21832 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1324/cgroup.controllers" dev="sda1" ino=16121 res=1 04:15:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007", @ANYRES16, @ANYRESHEX=r2], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100000b35) [ 2076.566321][T21887] IPVS: ftp: loaded support on port[0] = 21 [ 2076.593164][T21814] IPVS: ftp: loaded support on port[0] = 21 [ 2076.648525][T21883] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2076.656661][T21887] lo speed is unknown, defaulting to 1000 [ 2076.673949][ T29] audit: type=1804 audit(1595564122.717:4482): pid=21894 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1352/cgroup.controllers" dev="sda1" ino=16126 res=1 [ 2076.730878][T21814] lo speed is unknown, defaulting to 1000 [ 2076.865985][ T29] audit: type=1804 audit(1595564122.927:4483): pid=21902 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1325/cgroup.controllers" dev="sda1" ino=16121 res=1 04:15:23 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={[], 0x20}, 'veth1_macvtap\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={[], 0x20}, 'veth1_macvtap\x00'}}, 0x1e) [ 2077.047990][ T29] audit: type=1804 audit(1595564122.927:4484): pid=21902 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1325/cgroup.controllers" dev="sda1" ino=16121 res=1 [ 2077.097264][T21867] IPVS: ftp: loaded support on port[0] = 21 04:15:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xf8, r2}, 0x14) bind$can_raw(r0, &(0x7f0000001200)={0x1d, r2}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) ioctl$FIONCLEX(r4, 0x5450) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f00000000c0)=0xdf) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r1, 0x0, 0x1000000eb) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000180)=0x4) [ 2077.203547][T21867] lo speed is unknown, defaulting to 1000 04:15:23 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r0, &(0x7f0000000900)={0x2c, 0x0, r3}, 0x10) [ 2077.341112][T21887] IPVS: ftp: loaded support on port[0] = 21 04:15:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000140)=0x4) [ 2077.452984][T21887] lo speed is unknown, defaulting to 1000 04:15:26 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x4000000]}, &(0x7f0000000000)=0x54) 04:15:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7d0d6b539206d23ab8e4a8b16000000000000", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1000000eb) 04:15:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000100005ff000000000008001f00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32], 0x50}}, 0x0) 04:15:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000140)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b000000080006409125876c5547d32e07"], 0x24}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x100000001) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000001200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001340)={0x110, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x7c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private2={0xfc, 0x2, [], 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_NAT_SRC={0x2e, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xfffffffffffffdc3}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MAXIP={0x0, 0x2, @multicast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}]}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44054}, 0x0) sendfile(r4, r3, 0x0, 0x100000b35) [ 2080.641220][T22035] bond2: (slave veth132): Enslaving as an active interface with an up link [ 2080.649401][T22042] IPVS: ftp: loaded support on port[0] = 21 [ 2080.660358][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 2080.660374][ T29] audit: type=1804 audit(1595564126.748:4489): pid=22037 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1327/cgroup.controllers" dev="sda1" ino=16141 res=1 [ 2080.804266][ T29] audit: type=1804 audit(1595564126.788:4490): pid=22037 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1327/cgroup.controllers" dev="sda1" ino=16141 res=1 [ 2080.860945][T22047] bond2: (slave veth134): Enslaving as an active interface with an up link [ 2080.896294][T22042] lo speed is unknown, defaulting to 1000 04:15:27 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x2a8, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:15:27 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f00000000c0)={0x0, 0x101, 0x6}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000001200)={0x1, &(0x7f0000000180)=[{0x2, 0x6, 0x2, 0xfffffffb}]}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r6, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000240)=[@in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e23, 0xfffff001, @loopback, 0x1f}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, @in6={0xa, 0x4e24, 0x8000, @private1, 0x2}, @in6={0xa, 0x4e24, 0x6, @remote, 0x20}, @in6={0xa, 0x4e24, 0x4, @private1, 0x200}], 0x90) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="030b000000fa00020004cc2b6c59", @ANYRES16, @ANYRESOCT=r7, @ANYRES64, @ANYBLOB="c373983652b7fc635b251831af72960cda8820d0873a7a1fc36693eca49f49cad134cf4b14acb4d631774134b5ba066b4a247822ee5c60ebf4109f8e07329181b7a10a95f5a94185956a728d3554f66bc148f642274782f29f5510efb1de2e7144bd0256778c6f64a01ab69129c9aa021cd8dd42a958fa3f"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000012c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001280)={&(0x7f0000001500)={0x160, r8, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcf8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xed7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x4}]}, 0x160}, 0x1, 0x0, 0x0, 0x80}, 0x4004040) sendfile(r4, r3, 0x0, 0x1000000eb) 04:15:27 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0xdc01, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:15:27 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000fc0)={0x14, r1, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 04:15:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af81bd5189c0000edff0540fffffffd057be90007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x100000001) write$binfmt_elf64(r6, &(0x7f0000000780)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x6, 0x1, 0x3, 0x3, 0x3, 0x3e, 0x2, 0x2ae, 0x40, 0x392, 0x400, 0x7, 0x38, 0x2, 0x7, 0x6, 0xe5e}, [{0x60000000, 0x0, 0x2, 0x5, 0xfffffffffffffffb, 0x4969, 0x3, 0x7}], "31e42e651bf2b2acaf09b3a20bf82da510c0c2038b61206026920dbb1cfb4e10d01dc0c82225fac85bcf01bccaa9b23b270aaa5d1c15132f6cad9f58803252b184ed6e57f419e14a41bfb9b8cde8c2ae485f67a604a5f6d1239a82be962736ac695d6ef37a3c746159b96f5e25f59dd562c1faf7679728292bd2c6707a63b0cba6824d34d14e0240da9d4c0c2d76ab8090f01b5059a63cf557bece5351210d1ecb17bc58532bc5561c585164fe854d1bedaeff77a7ab88c48309f9c5cc18720a65457127ae674eaa010f9ddca6e6ccf37a3f80154b22fc6193af766d6f34b9aaebaa2862a6a9e149995b6831a3ee6d0c3645fb35ce", [[], [], [], []]}, 0x56d) write$cgroup_int(r5, &(0x7f0000000300), 0xfffffe8c) gettid() r8 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000000000000100d119716000006fe699aadc5f7955d08f0f9fc632c061ad1f334889b0edb0e9daab82", @ANYRES64, @ANYRES32, @ANYRES32=r8, @ANYRESHEX=r8, @ANYRES32, @ANYBLOB="f9959c4587069f7d1542e96c0611edc1e8c4008e5b866516031533d2e3934ddd48f3b837c46a10f5203494047136ceac650a45cdaaf1700edd3517a2cce14b2f93b7c30c968cea56709b58d2b516a2d1e9f29380b812a6cfc9358c8994068f01aecc6cf6ed479e1ddddd14e01c2cb0db869bf35501f28e2f79e11ba85e52df04a65944da63170835f9eff70ed83fabf5db980d6c5194bb6319b1f40421dd1bad785f16b0d7dbfa16b8049d6190fa259da290aba05dcfdf042c7c56aa10e18ba7fab30bd9e891665540b5c8882450508205650b4ee08fa2780a2a0c73221e8983d7a03d95483e776058ec6f9b667c8b30d8a35afd", @ANYRES32, @ANYBLOB="c070aa59757c6ed9556491b9b2201199ddd42867bf2f44dd62acf34bff60d3bf6c2c75fcdf6e6386ee4b16373c83cd878daeb302037247e4df9299fcf84b51856fb2bcf6917f66c956e2992c612520adfbd7043c5712144076424ec85526d4c7c41ecd04d88723197ae19c41e19000"/121, @ANYRESOCT=r0, @ANYRESOCT=0x0, @ANYRESOCT], 0x3c}, 0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, r8) sendfile(r2, r1, 0x0, 0x100000b35) [ 2081.251891][T22042] IPVS: ftp: loaded support on port[0] = 21 [ 2081.349425][ T29] audit: type=1804 audit(1595564127.428:4491): pid=22079 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1355/cgroup.controllers" dev="sda1" ino=16025 res=1 [ 2081.359974][T22083] IPVS: ftp: loaded support on port[0] = 21 04:15:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0xc}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) [ 2081.497759][ T29] audit: type=1804 audit(1595564127.438:4492): pid=22079 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1355/cgroup.controllers" dev="sda1" ino=16025 res=1 [ 2081.529796][T22042] lo speed is unknown, defaulting to 1000 [ 2081.548370][T22092] IPVS: ftp: loaded support on port[0] = 21 [ 2081.632614][ T486] tipc: TX() has been purged, node left! [ 2081.640375][ T486] tipc: TX() has been purged, node left! [ 2081.668956][T22083] lo speed is unknown, defaulting to 1000 04:15:27 executing program 0: r0 = socket(0x2, 0x5, 0x0) bind$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x27) [ 2081.685695][ T486] tipc: TX() has been purged, node left! [ 2081.715880][T22092] lo speed is unknown, defaulting to 1000 [ 2081.733572][ T486] tipc: TX() has been purged, node left! [ 2081.795084][ T486] tipc: TX() has been purged, node left! 04:15:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20) getsockname(r2, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000000c0)=0x80) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) bind$packet(r4, &(0x7f0000000100)={0x11, 0xf8, r6}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_deladdr={0x2c, 0x15, 0x400, 0x70bd2d, 0x25dfdbfe, {0xa, 0x18, 0x1, 0x0, r6}, [@IFA_CACHEINFO={0x14, 0x6, {0x8000, 0x6, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r8, 0x0, 0x100000b35) [ 2081.865020][ T486] tipc: TX() has been purged, node left! [ 2081.927756][ T486] tipc: TX() has been purged, node left! [ 2081.974821][ T486] tipc: TX() has been purged, node left! [ 2082.130073][ T29] audit: type=1804 audit(1595564128.218:4493): pid=22160 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1329/cgroup.controllers" dev="sda1" ino=16148 res=1 [ 2082.163248][ T486] tipc: TX() has been purged, node left! [ 2082.185557][T22083] IPVS: ftp: loaded support on port[0] = 21 [ 2082.230009][T22092] IPVS: ftp: loaded support on port[0] = 21 [ 2082.293527][ T486] tipc: TX() has been purged, node left! [ 2082.300031][T22083] lo speed is unknown, defaulting to 1000 [ 2082.318060][T22092] lo speed is unknown, defaulting to 1000 [ 2082.340908][ T486] tipc: TX() has been purged, node left! [ 2082.350009][ T486] tipc: TX() has been purged, node left! [ 2082.382677][ T486] tipc: TX() has been purged, node left! 04:15:28 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={[], 0x20}, 'veth1_macvtap\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}) 04:15:28 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x6000000]}, &(0x7f0000000000)=0x54) 04:15:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) 04:15:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f00000000c0)={0x60, 0x3, 0x7f, @local, 'ip6gre0\x00'}) sendfile(r2, r1, 0x0, 0x100000b35) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000740)={r5, 0x3ff, 0xec56, 0xed}) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000780)='tls\x00', 0x4) [ 2082.702411][T22212] IPVS: ftp: loaded support on port[0] = 21 [ 2082.722415][ T29] audit: type=1804 audit(1595564128.808:4494): pid=22211 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1356/cgroup.controllers" dev="sda1" ino=16153 res=1 [ 2082.762509][T22211] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2082.814235][T22212] lo speed is unknown, defaulting to 1000 [ 2082.844465][ T29] audit: type=1804 audit(1595564128.918:4495): pid=22224 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1330/cgroup.controllers" dev="sda1" ino=16139 res=1 [ 2082.976508][ T29] audit: type=1804 audit(1595564128.928:4496): pid=22218 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1330/cgroup.controllers" dev="sda1" ino=16139 res=1 [ 2083.428719][T22212] IPVS: ftp: loaded support on port[0] = 21 [ 2083.437263][ T29] audit: type=1804 audit(1595564129.528:4497): pid=22216 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1356/cgroup.controllers" dev="sda1" ino=16153 res=1 04:15:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) socketpair(0x1e, 0x2, 0x4, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000b35) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x15}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 04:15:31 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x40000]}, &(0x7f0000000000)=0x54) 04:15:31 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0xde01, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:15:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x4004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) 04:15:31 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x1d000000]}, &(0x7f0000000000)=0x54) 04:15:31 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x2aa, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) [ 2085.815440][T22260] IPVS: ftp: loaded support on port[0] = 21 [ 2085.822660][T22263] IPVS: ftp: loaded support on port[0] = 21 [ 2085.848826][T22265] IPVS: ftp: loaded support on port[0] = 21 [ 2085.875425][T22267] IPVS: ftp: loaded support on port[0] = 21 [ 2085.894256][ T29] audit: type=1804 audit(1595564131.978:4498): pid=22262 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1357/cgroup.controllers" dev="sda1" ino=16168 res=1 [ 2085.930719][T22262] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2085.960022][T22263] lo speed is unknown, defaulting to 1000 [ 2085.997827][T22260] lo speed is unknown, defaulting to 1000 [ 2086.063952][T22265] lo speed is unknown, defaulting to 1000 [ 2086.106978][ T29] audit: type=1804 audit(1595564131.988:4499): pid=22271 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1331/cgroup.controllers" dev="sda1" ino=16170 res=1 [ 2086.171133][T22267] lo speed is unknown, defaulting to 1000 04:15:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0xc0000001}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000640), 0x0, &(0x7f00000006c0)=""/179, 0xb3}, 0x40000003) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000940)={{0x2, 0x0, @reserved="559e4632f54a0897d68b759d0ea133e187183214687118aece32cb4e05e4e3a2"}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000840)=ANY=[@ANYBLOB="010000007dd6b5f05d0406776ee2e6603d92e42733640a6b6bcd75a7fc56b4f14ca82a458c8b7d6e4e7c518b52330466ff5cda51408dcb7c5d403bb05e513789f0116b9856f829bae796685065b8b5d2c69c275c60f683f723a3f4a6546d8790f3ca64f5b9239ab7893b32ccc2e0c798fe631dd7b7c8b3668f8089065abd1c1bfd0bf2c341ba1c3bb6c71ef73f78ea69d08def9f117c2fe9bab6b3d3adbf607d5db0f1fb646e4ec627ffcec6dfbd729ece77d610a818c88bb945935935b2aed3da6edba5fa0bb875b7cb6e08b94df8ff4c61983d7471f699b4ea12c415c2b69c8535eef88674bdd8386208632b0e33eb1d363adaf632", @ANYRES32=0x0], &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r6}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0)={r6, 0x8001, 0x8}, 0xfffffffffffffcf3) sendfile(r5, r3, 0x0, 0xffffffffcb0b5b5f) 04:15:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) sendfile(r4, r5, &(0x7f00000000c0)=0x1ff, 0x400) sendfile(r2, r1, 0x0, 0x1000000eb) [ 2086.756553][ T29] audit: type=1804 audit(1595564132.848:4500): pid=22364 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1358/cgroup.controllers" dev="sda1" ino=16168 res=1 [ 2086.769402][T22267] IPVS: ftp: loaded support on port[0] = 21 [ 2086.807765][T22263] IPVS: ftp: loaded support on port[0] = 21 [ 2086.820581][T22265] IPVS: ftp: loaded support on port[0] = 21 [ 2086.931636][T22265] lo speed is unknown, defaulting to 1000 [ 2086.938670][ T29] audit: type=1804 audit(1595564132.898:4501): pid=22363 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1358/cgroup.controllers" dev="sda1" ino=16168 res=1 [ 2086.986904][T22263] lo speed is unknown, defaulting to 1000 04:15:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e23, 0x7f, @private2, 0x800}}, 0x0, 0x0, 0x3a, 0x0, "ff0540d6254fb44232372434d58556d0e090a23430dd81b9ab75fdec1aa13dab89449272c21146cad724efc7a41c51fad9dac7e4af5dcf74bc1cf05db953007a4b866764d8061db39c06d34fdb60960f"}, 0xd8) sendfile(r3, r2, 0x0, 0x100000001) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r3], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r1, 0x0, 0x1000000eb) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r8, r7, 0x0, 0x100000001) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x401}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000240)={r9, @in6={{0xa, 0x4e23, 0x90, @local, 0x1}}, [0x4, 0x9, 0xffffffff, 0xfffffffffffffffe, 0x401, 0x4, 0x9, 0x4, 0x1, 0x8, 0x0, 0x80000000, 0xffffffff, 0x8, 0x7]}, &(0x7f00000001c0)=0x100) 04:15:33 executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00150000850000002e000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c192ab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc4ea1d75d3066d52dbb55d0e331a5fb33abadd3a0c218078be8d75aabad71bfc70281251ab132740a4781353d114e024762f07612b1c3d686f1264c8fc62eaf2aea3cfda8c226f236b2b017b569762fa39884bd1dc08eb9d6c91b9364b7bcf572d0cb61794986331bdc2fc568652ea4e96ceb14693c84382d3b09a196d1c9777095cd6d24a0b552533892d4884f6b6714b8604698d313bce432e59c0a32f77bd1e81b71106295ed3774f0d7aea07607036ad2c6b4c130f017967dc39370163ad23e0aed12b461b206dd73855c2be067a36219c3271b278edc3f103337108bc6b7679010d33a897ec914441d33f8ac6b189c81cbe937117eaa5f9a8e6ec18fc6d176ee02b8dd6d91c2f1dc"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x10}, 0x78) r1 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f005051fffffff00004000630677fbac1414330200000162079f4b4d2f87e5feca6aab840413f2325f1a390101050a0100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x296, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x28) 04:15:33 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) mmap(&(0x7f0000950000/0x4000)=nil, 0x4000, 0x1, 0x13, r3, 0x1de09000) 04:15:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0)={0x9}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xcc, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x40000000}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7fff}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x3f}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x84}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000180), &(0x7f0000000200)=0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16e75992f4f37cad24deb575b5681078a6ba774546e64a9cfc48f9f803c490a29c0be15fb90075cee8c807696029c2", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x1000000eb) [ 2087.726409][ T29] audit: type=1804 audit(1595564133.819:4502): pid=22431 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1333/cgroup.controllers" dev="sda1" ino=16156 res=1 04:15:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100449f5b56ac4588ae0a843b8a9f39658122d8dfed40b46cc65a73734e425e7f298d7bdde5c9b95051bb85e78b544839bb57998cbb77ea22a9c5ada6274d63b828f81d8836b43401322ea5923362344c23ff9d33abcb8c009ed780159a8036ca2258d1a782203add21df99bf93f12e1a984fe7a13ef335180c58101ba9b73fea0b7b99fa1eff6b"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) 04:15:34 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @ipv4={[], [], @local}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, [], @mcast2={0xff, 0x2, [0x60], 0x2}, @loopback={0xff00000000000000}}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r1 = socket$inet6(0xa, 0x3, 0x7) connect$rds(0xffffffffffffffff, &(0x7f0000001940)={0x2, 0x4e23, @local}, 0x10) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000340)=0x2, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14, r2, 0x1, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x5a0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000180), &(0x7f0000000280)=0x40) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022abd7000fcdbdf25010000000000000002410000001000137564703a73797a300000000084f69c7ffe8d497af1ee6d11779cbef4b2cc39b0591f5095284b4e31892025f7887b2816eb28b3566b435a04b754fcdf185d8c58f759716107aa8c19ff184b610867f1b24d2e02e0e791258401778d5cdb22484561810d32661c27ca063d963eca996b88f1415452f4504f848b99fe8334a0f192d9e42c8a9073c8a92158be7eced1038efc2828c3af1bb2f44af6dffd8bb7a6b2d9dfa99bb8309b2b0b91c4e9ab374fc9c0726e51"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x8800) [ 2088.196986][ T29] audit: type=1804 audit(1595564134.289:4503): pid=22440 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1361/cgroup.controllers" dev="sda1" ino=16173 res=1 [ 2088.371142][ T29] audit: type=1804 audit(1595564134.449:4504): pid=22431 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1333/cgroup.controllers" dev="sda1" ino=16156 res=1 04:15:36 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0xde03, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:15:36 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x30010000]}, &(0x7f0000000000)=0x54) 04:15:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x20040040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) 04:15:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32=r0], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$inet(0x2, 0x5, 0xfffffffe) writev(r4, &(0x7f0000001300)=[{&(0x7f0000000240)="31459c7e2d96a636c3a1e4ac11a91af990de694ac8fe98c50b3d3adaa7b1e12b4dfcf679bdb5ee381b6d591a1cf0e0a8ac4a3999bd0b6a925665e7be531e8d5cddaf496c59fd18ace67c84f725409efc1daff4ff9eb92c6921c957736cf6b02393a2d5493240c6194585b00cfc80e9098495b1b8a83f940fee58adbd754915d4d1dcdfcc0d058953a714f8a82a18c73c8dd08d6aba6162d34c1b88931a667dad5ccfa1c54772d5139439ae12e58e09392d4788900b118eed7033a80f2e0866", 0xbf}, {&(0x7f0000000180)="5306580fe32960f41a78ec815622aca7d61ab4e674c67dfd894a24787da589b2527324", 0x23}, {&(0x7f0000000300)="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", 0x1000}], 0x3) getsockopt$inet_dccp_buf(r3, 0x21, 0x2, &(0x7f0000000080)=""/40, &(0x7f0000000100)=0x28) sendfile(r2, r1, 0x0, 0x1000000eb) 04:15:36 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400", 0x6}], 0x1) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8100635b36dd2f5e31032cfff6663b64342a00628d79974592ad0e471d5e7ed7326acd88a47529a27481b17f9c43d4540a349bd3b400a691b39fc0251b0f55face70b428e56191ee6ee968141a71e51a4d5b5d496eb2b4bcf297bb3330b92702bf17407a3cbaffed96a8e6bc75e47ffcf59f7019b2d1b04c881a281f8137b7ff12332be4c24419c218461d8169d124e61fa6f31df33b8bea73748ae90e0f5d730ab8c282769a81680ca4a67e6dedc4262397f009473cfdd028efe87e6a09dd54efddb46660320464a59254d9579372d9987871d82f71c8744ab01dec229cb5b60f831c9b4d99074c9a307873152cc8e4ba432477a086caf03f4e539aeaca9524583471242abb8a6bf9271d428c2fcca1068296b08024c3267c564bcdb658ea6d48bd1c8cc7527819c56c79fabb3f420aeda532a3ab4eb0a49802304f7a193904d5748bb8f541b7e6195681765dae7f6e857c6dc5a7881f409feb7da0f02c92419bcc7c3fff60aa6fa9620abefe6b843fe8e1891fdf9d2ab93681093995184f57e37aac877d7ed954f91a049a4f1daf12f97ec6109dfff5e9937a7f565675b19bbca2e9d70be800be05dbfc7d6eeba677b73543d332c22bf53ca7b93bf5af43bce892c26414bb50a23ee9ae63e10c43d9947fbebf5c5bff04b6e102208bd9b0c3d3e197637ac179b2fed4b3c13ab88711797770e14dad1c3daada315493ebf8da62413af152e180a2a68e3a1a19aff132f5"], 0xd) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) pipe(&(0x7f0000008f40)) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001800)=ANY=[@ANYBLOB="9a08030000", @ANYRES16=r5, @ANYBLOB="030b000000000000000013000000100007800c00030000000000000000002c000380080002000300000008000300ff7f0000080001000002000008000100018000000800010003000000180101802c00028008000200ab090000080002000800000008000400070000000800010006000000080004000010000008000300060000001200010069623a76657468305f766c616e000000380004001400010002000000e00000020000000000000000200002000a004e22fffffff7ff0100000000000000000000000000015800000008000300080000000d0001007564703a73797a3200000000380004001400010002004e227f0000010000000000000000200002000a004e2400000005fe8800000000000000000000000001010800000044000400200001000a004e2200000001fe8000000000000000000000000000bb07000000200002000a004e240000000300000000000000000000ffffac1e0001ff0300001800028014000380080001000104000008000100000000005400058008000100756470003c00028008000200ff07000008000400da090000080004000500000008000200fbffffff080003000200000008000200eb03000008000300001000000c00028008000300070000003c0004801300010062726f6164636173742d6c696e6b00000900010073797a31000000000900010073797a31000000000900010073797a3100000000f80005800c000280080003000000010008000100657468002400028008000400050000000800020000000000080004000700000008000300090000001c00028008000400080000000800020004000000080001001a0000003400028008000300fbffffff080001000b0000000800010006000000080001001300000008000400290000000800020006000000440002800800020001000100080001001500000008000300e70e000008000400500d00000800020000000080080003000300000008000300008000000800020009000000080001007564700014000280080004000000300008000400040000000c000280080001001e000000"], 0x308}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000001780)={0x48, r6, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40c}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000580)="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", 0xff0}], 0x1) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:15:36 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x2be, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) [ 2090.608995][T22459] IPVS: ftp: loaded support on port[0] = 21 [ 2090.635754][ T29] audit: type=1804 audit(1595564136.729:4505): pid=22462 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1399/memory.events" dev="sda1" ino=16181 res=1 [ 2090.682013][T22465] IPVS: ftp: loaded support on port[0] = 21 [ 2090.737131][T22459] lo speed is unknown, defaulting to 1000 [ 2090.766167][T22472] IPVS: ftp: loaded support on port[0] = 21 [ 2090.783625][ T29] audit: type=1800 audit(1595564136.759:4506): pid=22462 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16181 res=0 [ 2090.866285][T22465] lo speed is unknown, defaulting to 1000 [ 2090.933522][T22472] lo speed is unknown, defaulting to 1000 [ 2090.999632][ T29] audit: type=1804 audit(1595564136.759:4507): pid=22462 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1399/memory.events" dev="sda1" ino=16181 res=1 04:15:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r4, 0xa5a27f2e7ede6595, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}]}, 0x58}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x120, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfc}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xff}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1ff}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x81a}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x400c0c1) 04:15:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000001) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) bind$packet(r4, &(0x7f0000000100)={0x11, 0xf8, r6}, 0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040026bd7000fcdbdf250600000005002d0001000000050038000100000008000600", @ANYRES32=r6, @ANYBLOB="050030000000000008002c006254484f05b63d83a0748c00000000051a9d809bb03d69"], 0x44}}, 0x24040810) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004068102000001007a58008000000b0005000100"], 0x1}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r8, 0x0, 0x1000000eb) [ 2091.225926][ T29] audit: type=1804 audit(1595564136.779:4508): pid=22468 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1334/cgroup.controllers" dev="sda1" ino=16176 res=1 [ 2091.361031][T22539] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2091.437866][ T29] audit: type=1804 audit(1595564136.919:4509): pid=22478 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1399/memory.events" dev="sda1" ino=16181 res=1 04:15:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r2], 0x24}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100000b35) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xf8, r6}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000480)={'ip6tnl0\x00', r6, 0x4, 0x1c, 0x72, 0xe0000000, 0x36, @ipv4={[], [], @loopback}, @rand_addr=' \x01\x00', 0x700, 0x20, 0x7ff, 0xfb}}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000500)={{{@in=@loopback, @in6=@empty, 0x4e23, 0x8, 0x4e23, 0x2, 0x2, 0x80, 0x0, 0x69e3a0ada6ab138e, r8, 0xee01}, {0x7, 0xff, 0x4, 0x3ff, 0x3, 0x200, 0x0, 0x100}, {0x5, 0x7fff, 0x8, 0x4}, 0x7, 0x6e6bc0, 0x2, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x11}, 0x4d6, 0x2b}, 0x2, @in6=@private2, 0x0, 0x1, 0x0, 0x6, 0x6, 0x6, 0x9}}, 0xe8) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x18, r9, 0x301, 0x0, 0x0, {0x13}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1c4, r9, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_OURS={0x198, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x7b, 0x4, "2114385e3fb16c3013dc033c3787922a956e90bad33bc2cb9c68513df8b2293e3df68a8a3be435d64242b1ffd431bd6aa01d756ded4f8bdfdb48c2f148d05fda682ebc74a5a470b57a0bf9930f0063805b0ead9395344bbb0af9106b6ea14063981a53020373379c8fd1266a61b4b9a3d108797c40e76d"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_VALUE={0xf4, 0x4, "9a07fe19e5cd6aacd4d8c7fd0a885012e88f8d3693a371aa7799e47ee5d81a436c40a9a0230aab9807a9701ebaf0dfd029a856670ca71772b077a1505da2123782ee960b5e5a513c3248986b771a4021e6203bdd95b0e0e30e6376922fd2ecd8303177535dd43cd350ce6a38224e2e71da6dc5e2682d81a1ddf30799c375f7301562934cc3bad1e1ad0190c037defb19d6254f4bc096581ad0a3507063128196d4717a2c1f4742fd8064b9df884582e753627e70b58db42f81e65468d588e992c889e6720bbdf2899862e19e4c1c7b5750491c403485849b3ff94dd8508b95a387677b5aa0c1d0d58a3f17b71bb80ddc"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fffffff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40000}, 0x2000094) 04:15:37 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x7, 0x4e20, 0x2, 0xa, 0x20, 0x20, 0x0, 0x0, 0xee00}, {0xfff, 0x8, 0x1, 0x7, 0x7fffffff, 0x3, 0x4, 0xb6b}, {0xa5, 0x7, 0x7f, 0x200}, 0x7, 0x6e6bbc, 0x0, 0x1, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d5, 0x33}, 0xa, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3504, 0x3, 0x7, 0x7, 0x1, 0x7fff, 0x80}}, 0xe8) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") [ 2091.617405][T22459] IPVS: ftp: loaded support on port[0] = 21 [ 2091.652773][ T29] audit: type=1804 audit(1595564137.449:4510): pid=22539 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1363/cgroup.controllers" dev="sda1" ino=16176 res=1 [ 2091.675864][T22465] IPVS: ftp: loaded support on port[0] = 21 [ 2091.755931][T22459] lo speed is unknown, defaulting to 1000 [ 2091.820263][T22465] lo speed is unknown, defaulting to 1000 [ 2091.835322][T22472] IPVS: ftp: loaded support on port[0] = 21 [ 2091.836814][ T29] audit: type=1804 audit(1595564137.499:4511): pid=22474 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1399/memory.events" dev="sda1" ino=16181 res=1 [ 2091.969175][T22472] lo speed is unknown, defaulting to 1000 [ 2092.013322][ T29] audit: type=1804 audit(1595564137.499:4512): pid=22478 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1399/memory.events" dev="sda1" ino=16181 res=1 04:15:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x80, 0x0, 0x2, 0x201, 0x0, 0x0, {0x5}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xf64}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0x14, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40c00d1}, 0x400c000) 04:15:38 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000040)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x2c}}, 0x0) [ 2092.231991][ T29] audit: type=1804 audit(1595564137.639:4513): pid=22546 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1399/memory.events" dev="sda1" ino=16181 res=1 04:15:38 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0xe002, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) [ 2092.373114][T22617] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2092.386079][ T29] audit: type=1804 audit(1595564138.039:4514): pid=22571 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1400/cgroup.controllers" dev="sda1" ino=16190 res=1 [ 2092.504296][ T29] audit: type=1804 audit(1595564138.109:4515): pid=22571 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1400/cgroup.controllers" dev="sda1" ino=16190 res=1 [ 2092.554424][T22646] IPVS: ftp: loaded support on port[0] = 21 [ 2092.586090][ T29] audit: type=1804 audit(1595564138.459:4516): pid=22617 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1364/cgroup.controllers" dev="sda1" ino=16161 res=1 [ 2092.659196][T22646] lo speed is unknown, defaulting to 1000 [ 2093.119869][T22646] IPVS: ftp: loaded support on port[0] = 21 [ 2093.187677][T22646] lo speed is unknown, defaulting to 1000 [ 2094.264634][ T486] tipc: TX() has been purged, node left! [ 2094.435017][ T486] tipc: TX() has been purged, node left! [ 2094.594794][ T486] tipc: TX() has been purged, node left! 04:15:40 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x3f000000]}, &(0x7f0000000000)=0x54) 04:15:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c65300a671dd1f5b416a751f26216b12253ac7399bc704edb03fdd00c45b8293a3a4288c49eabbf42fc846f9ad85e31d7b611d179a43c10b4a65f268b54f7679cde64c3538b89f61dc8a8ab2396bf0eff1d5e1109c84f2dead11ea0c01c3543089fd293fcc892059ab443"], 0xb) r2 = socket$inet6(0xa, 0x3, 0x3a) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000200)={&(0x7f0000000040), 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x3, 0x803, 0xf8b, {r3, r4/1000+10000}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x1, 0x0, 0x1}, 0x12, 0x0, 0x0, 0x0, "101c23a681abc92771f0c7b2ae3780c72794bd0a424c9ef29453d285572bcdb1c5f58930139631947d7a4c40862ecffbeddf5c5df1cd8870a1e6786ad7ae513e"}}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet6_int(r2, 0x29, 0xd1, 0x0, 0x0) 04:15:40 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x986) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x20, 0x3, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040060}, 0x48814) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r7], 0x4}}, 0x0) getsockname$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r6, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r2, 0x0, 0x100000b35) 04:15:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="280102000001e8797b1754c54c6d36c17d4358a93e5e4a00a556f925d1b7000b002f0d5e473b197e34333d7c69e8c4e63492510f4026eade7532f04e7a81ebe675ed3ee7abdc66790834e2107d70510a740694865af600fea37d6312dc2133a092d7c060b9dfbe2b50d45df44c804ba2901f401e6433edf87c3e8521c03dba8f80"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='pids.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) sendfile(r2, r1, 0x0, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000001) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r6}, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0)={r6, 0x3, 0x5, 0x6, 0x8, 0x101}, 0x14) [ 2094.744577][ T486] tipc: TX() has been purged, node left! 04:15:40 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x2c2, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:15:40 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0xe003, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) [ 2094.851285][T22711] IPVS: ftp: loaded support on port[0] = 21 [ 2094.872232][T22713] IPVS: ftp: loaded support on port[0] = 21 [ 2094.894568][ T486] tipc: TX() has been purged, node left! 04:15:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc4238b8e4a8b16b586e0f8efe33c97ce27a6b4de3fc5122133af7e8313a801f622d4bc736b9d20fd848e6f50c1ee7073a14fea7acf4590e98dcd55ac19adae59b8b453d9879a", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="288d4a40807e4356d70001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r6, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000100)={r6, 0x0, 0x7ff, 0x93f}) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0xb00000000065808, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r9, r8, 0x0, 0x100000001) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x344}, {r3, 0x40}, {r5, 0x8}, {r7, 0x10}, {r8, 0x110b}], 0x5, &(0x7f0000000280)={r10, r11+60000000}, &(0x7f00000002c0)={[0xfffffffffffffffa]}, 0x8) sendfile(r2, r1, 0x0, 0x1000000eb) [ 2094.946401][ T486] tipc: TX() has been purged, node left! [ 2094.960548][T22711] lo speed is unknown, defaulting to 1000 [ 2094.989364][T22720] IPVS: ftp: loaded support on port[0] = 21 [ 2095.002206][ T486] tipc: TX() has been purged, node left! [ 2095.008517][ T486] tipc: TX() has been purged, node left! [ 2095.032574][T22713] lo speed is unknown, defaulting to 1000 [ 2095.046880][ T486] tipc: TX() has been purged, node left! [ 2095.065045][T22727] IPVS: ftp: loaded support on port[0] = 21 [ 2095.087372][ T486] tipc: TX() has been purged, node left! [ 2095.124364][ T486] tipc: TX() has been purged, node left! [ 2095.167667][T22720] lo speed is unknown, defaulting to 1000 [ 2095.186886][T22727] lo speed is unknown, defaulting to 1000 [ 2095.269212][ T486] tipc: TX() has been purged, node left! [ 2095.276105][ T486] tipc: TX() has been purged, node left! [ 2095.280904][T22716] IPVS: ftp: loaded support on port[0] = 21 [ 2095.364184][ T486] tipc: TX() has been purged, node left! [ 2095.410217][ T486] tipc: TX() has been purged, node left! [ 2095.423685][ T486] tipc: TX() has been purged, node left! 04:15:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) accept4$unix(r3, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0x6e, 0x80000) sendfile(r2, r1, 0x0, 0x100000b35) [ 2095.747835][T22713] IPVS: ftp: loaded support on port[0] = 21 [ 2095.775769][T22720] IPVS: ftp: loaded support on port[0] = 21 [ 2095.839348][T22713] lo speed is unknown, defaulting to 1000 [ 2095.876549][T22720] lo speed is unknown, defaulting to 1000 [ 2095.880068][T22727] IPVS: ftp: loaded support on port[0] = 21 04:15:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r5}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={r2, 0xfffffffffffffff7, 0x1, 0x5}) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000240)={0x0, r1, 0x401, 0x0, 0x7fff, 0x6}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={r5, 0x1}, &(0x7f0000000100)=0x8) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000000)=0xfff, 0x4) sendfile(r7, r1, 0x0, 0x1000000eb) [ 2096.150177][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 2096.150191][ T29] audit: type=1804 audit(1595564142.239:4524): pid=22845 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1367/cgroup.controllers" dev="sda1" ino=16207 res=1 04:15:42 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) write$nbd(r0, &(0x7f0000000200)={0x67446698, 0x0, 0x1, 0x1, 0x3, "f0913b7235b778e9e6f94d6c17909464923653ebc451a7e3b5a71f7bf9cb4f9dc5c375d8228b7cc3445ebbba77fc42ae5a13353716e7dca71f6c0208b966ff292e068be1"}, 0x54) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) [ 2096.482825][ T29] audit: type=1804 audit(1595564142.570:4525): pid=22858 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1339/cgroup.controllers" dev="sda1" ino=16200 res=1 04:15:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000040601d023d461c701963900f0000500012000003829575817206a96dd0501000080f71dceb254f4824d7cb22df15bc4d7da52b68fa2cb2006c80cbf00a9dc5285856b1408c73baea2317c7890c884e3630d8c812b4d"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) [ 2096.800274][ T29] audit: type=1804 audit(1595564142.890:4526): pid=22869 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1368/cgroup.controllers" dev="sda1" ino=16207 res=1 04:15:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) connect$tipc(r2, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x10) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f6, 0x400, 0x70bd29, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100000b35) [ 2097.388064][ T29] audit: type=1804 audit(1595564143.480:4527): pid=22879 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1340/cgroup.controllers" dev="sda1" ino=16200 res=1 [ 2097.506084][ T29] audit: type=1804 audit(1595564143.480:4528): pid=22879 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1340/cgroup.controllers" dev="sda1" ino=16200 res=1 04:15:46 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x40000000]}, &(0x7f0000000000)=0x54) 04:15:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0)={0x7, 0x7, 0x1}, &(0x7f0000000140)=0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) 04:15:46 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.swap.current\x00', 0x0, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001200)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000001240)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f00000000c0)={0x4d, 0xd5, 0x6, 0xc, 0x7ff, 0x183}) sendfile(r4, r3, 0x0, 0x100000001) r5 = openat$cgroup_ro(r4, &(0x7f0000000100)='pids.current\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001340)={0x0, @qipcrtr={0x2a, 0x3, 0x8000}, @generic={0x5f, "b3d0a79cd80b15a5d4f9913f9491"}, @nfc={0x27, 0x0, 0x2, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x1ff, &(0x7f0000001280)='veth1_macvtap\x00', 0x3, 0xffffffff, 0x7}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x1000000eb) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) 04:15:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) write$nbd(r0, &(0x7f0000000200)={0x67446698, 0x0, 0x1, 0x1, 0x3, "f0913b7235b778e9e6f94d6c17909464923653ebc451a7e3b5a71f7bf9cb4f9dc5c375d8228b7cc3445ebbba77fc42ae5a13353716e7dca71f6c0208b966ff292e068be1"}, 0x54) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) 04:15:46 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x2c8, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:15:46 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0xe401, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) [ 2100.471634][T22898] IPVS: ftp: loaded support on port[0] = 21 [ 2100.488861][T22899] IPVS: ftp: loaded support on port[0] = 21 04:15:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000000c0)=0x1, 0x8) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) [ 2100.554391][T22904] IPVS: ftp: loaded support on port[0] = 21 [ 2100.581468][T22898] lo speed is unknown, defaulting to 1000 [ 2100.588769][ T29] audit: type=1804 audit(1595564146.680:4529): pid=22902 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1341/cgroup.controllers" dev="sda1" ino=16034 res=1 [ 2100.669928][T22899] lo speed is unknown, defaulting to 1000 [ 2100.708279][T22904] lo speed is unknown, defaulting to 1000 [ 2100.774179][ T29] audit: type=1804 audit(1595564146.860:4530): pid=22900 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1403/cgroup.controllers" dev="sda1" ino=16019 res=1 [ 2100.841553][T22916] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2100.969780][ T29] audit: type=1804 audit(1595564146.900:4531): pid=22932 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1370/cgroup.controllers" dev="sda1" ino=16049 res=1 04:15:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100000b35) [ 2101.308158][ T29] audit: type=1804 audit(1595564147.400:4532): pid=22980 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1342/cgroup.controllers" dev="sda1" ino=16034 res=1 04:15:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000000c0)=0x8000, &(0x7f0000000100)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x1000000eb) [ 2101.428224][T22904] IPVS: ftp: loaded support on port[0] = 21 [ 2101.456815][T22898] IPVS: ftp: loaded support on port[0] = 21 04:15:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) write$nbd(r0, &(0x7f0000000200)={0x67446698, 0x0, 0x1, 0x1, 0x3, "f0913b7235b778e9e6f94d6c17909464923653ebc451a7e3b5a71f7bf9cb4f9dc5c375d8228b7cc3445ebbba77fc42ae5a13353716e7dca71f6c0208b966ff292e068be1"}, 0x54) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) [ 2101.486276][ T29] audit: type=1804 audit(1595564147.400:4533): pid=22980 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1342/cgroup.controllers" dev="sda1" ino=16034 res=1 [ 2101.504574][T22899] IPVS: ftp: loaded support on port[0] = 21 [ 2101.615224][T22898] lo speed is unknown, defaulting to 1000 [ 2101.694442][T22986] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2101.711017][T22904] lo speed is unknown, defaulting to 1000 [ 2101.749629][ T29] audit: type=1804 audit(1595564147.690:4534): pid=22986 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1371/cgroup.controllers" dev="sda1" ino=15810 res=1 [ 2101.780885][T22899] lo speed is unknown, defaulting to 1000 04:15:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001200)={&(0x7f00000001c0)={0x2c, 0x0, 0x7, 0x204, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}]}, 0x2c}}, 0x40040) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e21, @local}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x40, 0x40}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000b35) [ 2102.024069][ T29] audit: type=1804 audit(1595564147.770:4535): pid=22993 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1371/cgroup.controllers" dev="sda1" ino=15810 res=1 [ 2102.218591][ T29] audit: type=1804 audit(1595564148.100:4536): pid=22995 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1404/cgroup.controllers" dev="sda1" ino=16049 res=1 04:15:48 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800006000000000000000007a58008000a0e193ba000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) [ 2102.394472][ T29] audit: type=1804 audit(1595564148.150:4537): pid=23029 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1343/cgroup.controllers" dev="sda1" ino=16113 res=1 [ 2102.565247][ T29] audit: type=1804 audit(1595564148.640:4538): pid=23065 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1372/cgroup.controllers" dev="sda1" ino=15810 res=1 04:15:48 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x76020000]}, &(0x7f0000000000)=0x54) 04:15:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x20048800) 04:15:49 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="53880800"/21, @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) [ 2103.009054][T23082] IPVS: ftp: loaded support on port[0] = 21 04:15:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) write$nbd(r0, &(0x7f0000000200)={0x67446698, 0x0, 0x1, 0x1, 0x3, "f0913b7235b778e9e6f94d6c17909464923653ebc451a7e3b5a71f7bf9cb4f9dc5c375d8228b7cc3445ebbba77fc42ae5a13353716e7dca71f6c0208b966ff292e068be1"}, 0x54) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) [ 2103.046936][ T29] audit: type=1804 audit(1595564149.140:4539): pid=23081 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1344/cgroup.controllers" dev="sda1" ino=16188 res=1 [ 2103.140733][T23082] lo speed is unknown, defaulting to 1000 [ 2103.271791][ T29] audit: type=1804 audit(1595564149.360:4540): pid=23089 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1373/cgroup.controllers" dev="sda1" ino=16019 res=1 [ 2103.279799][T23089] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2103.443660][ T29] audit: type=1804 audit(1595564149.530:4541): pid=23092 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1405/cgroup.controllers" dev="sda1" ino=16049 res=1 [ 2103.821899][T23082] IPVS: ftp: loaded support on port[0] = 21 [ 2103.912766][T23082] lo speed is unknown, defaulting to 1000 04:15:52 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x2f0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:15:52 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0xe803, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:15:52 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000100)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x1000000eb) 04:15:52 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28011, r1, 0xfffff000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010807"], 0x24}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={r1}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000140)={0x7, 'veth0_vlan\x00', {0x146}, 0x7}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) bind$packet(r4, &(0x7f0000000100)={0x11, 0xf8, r6}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'ip6tnl0\x00', r6, 0x4, 0x7, 0x2, 0x10000, 0x2c, @mcast2, @empty, 0x7800, 0x701, 0x1, 0x72a}}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x268, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x58, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x5, 0x6c, 0x9, 0x2bad}, {0x5, 0x73, 0x5, 0x4}, {0x4, 0x81, 0x2, 0x80000000}, {0x0, 0x33, 0x0, 0x9}]}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r2, 0x0, 0x100000b35) 04:15:52 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x2be, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:15:52 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x98000000]}, &(0x7f0000000000)=0x54) [ 2106.037615][T23147] IPVS: ftp: loaded support on port[0] = 21 [ 2106.055616][T23149] IPVS: ftp: loaded support on port[0] = 21 [ 2106.070465][T23152] IPVS: ftp: loaded support on port[0] = 21 [ 2106.141256][T23157] IPVS: ftp: loaded support on port[0] = 21 [ 2106.177357][T23147] lo speed is unknown, defaulting to 1000 [ 2106.238143][T23149] lo speed is unknown, defaulting to 1000 [ 2106.272543][T23152] lo speed is unknown, defaulting to 1000 04:15:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x805}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100000b35) 04:15:52 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df04a8b1600000000000000e1d3cc10b154072820", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000640)={0xbba7, "4bc07a"}, 0x6) close(0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="000000ff", @ANYRES32=0x0], &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000340)={r6, 0x4}, &(0x7f0000000380)=0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r3, 0x0, 0x100000001) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x50, 0x1, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VLAN={0x3c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4}, @NFQA_VLAN_TCI={0xfffffffffffffddf, 0x2, 0x1, 0x0, 0x1ff}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendfile(r2, r1, 0x0, 0x8000000000082) [ 2106.316061][T23157] lo speed is unknown, defaulting to 1000 [ 2106.689095][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 2106.689115][ T29] audit: type=1804 audit(1595564152.781:4544): pid=23242 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1346/cgroup.controllers" dev="sda1" ino=16221 res=1 [ 2106.849573][ T29] audit: type=1804 audit(1595564152.821:4545): pid=23242 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1346/cgroup.controllers" dev="sda1" ino=16221 res=1 [ 2106.943613][T23147] IPVS: ftp: loaded support on port[0] = 21 [ 2107.018339][T23152] IPVS: ftp: loaded support on port[0] = 21 [ 2107.055057][T23147] lo speed is unknown, defaulting to 1000 04:15:53 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000000c0)="f62214091038fea1a8f05f6ade8ebbd7", 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000b35) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000140), 0x4) [ 2107.085858][T23157] IPVS: ftp: loaded support on port[0] = 21 [ 2107.172259][T23152] lo speed is unknown, defaulting to 1000 [ 2107.236202][T23157] lo speed is unknown, defaulting to 1000 04:15:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={r5, 0xfb74}, &(0x7f0000000100)=0x8) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r1, 0x0, 0x1000000eb) [ 2107.424678][ T29] audit: type=1804 audit(1595564153.521:4546): pid=23301 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1347/cgroup.controllers" dev="sda1" ino=16221 res=1 [ 2107.534793][ T29] audit: type=1804 audit(1595564153.521:4547): pid=23287 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1347/cgroup.controllers" dev="sda1" ino=16221 res=1 04:15:53 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd050001000703a49ba753e223784aa4d5f9b8da4b47d88644dd6d6551bfdcab09303098a673bbc3dca1f9e23c33f35e741d5fb60eaf69"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) close(r3) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r6, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8b93733797a70c30}, 0x811) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="ea64d71bcdd0d456f1b1632e6cbc6a271d6413378a81fa558f4c57438eebc36b8746cb0c35a2d12ec6e7d66a3f551838c82191e3cdcd2269d58375513b0ab1af0c117914829f367365aadb75a51e41846180ea45fdcbbf0dd1fc3f0faf0fce7994c9b29c06cece1e4557105997efeb7a622fd7db2f6953c78f30a84705be3482e36846ea5dab99262e73b7db2c2d31ad8ea691f572bce7ff67", @ANYRES32=0x0], &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r8}, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={r8, 0x6, 0xffff, 0xfffffff8}, &(0x7f00000000c0)=0x10) 04:15:53 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x800, 0x800, 0x8, 0x41, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x3ffffffd}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r0, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001080)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000031c0)=""/4096}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000201035de4b4395fa69a1295dc331c000000000000000000"], 0x1c}}, 0x0) splice(r0, &(0x7f0000000040)=0x42, r1, &(0x7f00000010c0)=0x1, 0x7f, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a40)={&(0x7f0000000300)=ANY=[@ANYBLOB="6de27997828f21a35bc2356c545196007603f8560b57953494ec7a3774f5c1fc30ba81bc79cd3774e931b2c42d1018c6f7d10ec5504e2357b6d458cd2e33c6d47d31b7546e6b052c8a4feec49e5d116bc35483b64f094a020be5f158084936f51435a9b4e62bf3db3ba603b11c40c0975f5968773a86cafa5b1c98d8b2c86735aede2027af1ff52c351e3fbdd52780e0234370915d6e92c0e31842ba75c80749", @ANYRES16=0x0, @ANYBLOB="020028bd7000fedbdf250100000000000000014100000020001700000017000008006574683a76657468305f746f5f62617461647600"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="88000000031410002dbd7000ffdbdf250900020073797a3200000000080041007278650014003300766c616e3000000000000000000000000900020073797a310000000033006d6163766c616e3000000000000000000900020073797a310000000008004100736977001400330076657468315f746f5f626f6e6400"/136], 0x88}, 0x1, 0x0, 0x0, 0x40044}, 0xc840) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0040020000000000280012800b0001006d616373656300001800028005000600000000000c00010000000000000000000a000500140000000000000008000a00", @ANYRES32=r6, @ANYBLOB="5531a576aa1fd6d3f836a943f4"], 0x5c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000001980)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001940)={&(0x7f00000011c0)={0x770, r7, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7f}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x6c73}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x8}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x468, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x9f, 0x1, "68f951e5261e616b4b9b24414824ce7c661ba6dec7ce0b0ce5b2d926dbcf1297160920e8088f1ee876672a52c3fbb5a1b2c7c4a14c3d208f23289a4556e77bf6cf3347aa9b012cbb7df3cb2ab26a2133ce33b68e92ab51d818213e94cb24beeaa03b198831a3e5b0bf0162f50d01209b79f89b0ebe64da7f5aede970de6a715b11b3429ff15e1912ec94342595afdc4bc1b9624bd15ee5678c066b"}, @NL80211_BAND_2GHZ={0xfc, 0x0, "06bfdc16e68bbf8dc19f09a2868270a590c3c9fd303d5e702e0e2dd7c152f1ff53a691714328242a6c7aa93d6532efe34e50fea4290f7a98b8f05977a7ed31ab821dcb7cf05368d33471d469d22aaa825b7a7c97522defd142cb474eee72375b70f0247178ea4f6a4d0c793d98764db46ea5ffb97c632161cd9cbb075c0b256da6ad204f33b45d0a6387ffcc8e1d16f1fc530b0b7dd703041fdd9b8c392a9af86d16eba80f491e652eb99fb67b35a79623220918ee266c9e6b83f1271dad8778b2bf77b465f1c9d56476c6bf096d0ef31fd0db77343d72aff8710d8669bcf1998c5734366d37072ada3c1204135d53fa6754457d46c230c2"}, @NL80211_BAND_2GHZ={0x41, 0x0, "a7525fd9bd67b157b3ad4b61cf1b9915748aa47bb2ab604ae4c079717f90ed8b34d993425247e8105466abc9f691fad40b5306f1db8915c7e013859285"}, @NL80211_BAND_2GHZ={0x62, 0x0, "c8dd5d313c6d3ab7a052f0162392cad9c9ef923c5403966d7c4a99a320b6b646df5d8bff9ef004cdb7f6e43d79469badce4cd1fa8e81785d86c9256450bf10307f0245e7cce35eef51aa5b3889f62dec6735921598ec8b419488e11655cc"}, @NL80211_BAND_6GHZ={0x86, 0x3, "64201212a723b8de0f6fa7eaf4f721bbe2c4798c65038170169da1e808492779597108c2accc16f69a14a31e918745bf71d67bae8b5196d2a084181307d96b961cb3dada4b35093b0b6fb85d2da37157fc5b2fc41f93f980092c874212ef47a9023f248e94e13f72710bdb08ee6c68b88970d4ebe02cf3d983b5afa42dac56911109"}, @NL80211_BAND_60GHZ={0xb4, 0x2, "88042d75a200b621686a414f1ba7600256e6bf96a5e33aa227b47548aa2735a73ea42543a99a3c4298c974a51114656df61c9889b5e0d51dfce1c535771fd01c14c647790fdc8ec95d0e1f12fa8eb7362e7899423e3f8ffa1eb8edf206c42e5753330e612e232b5461659c4e48c852496a35794bb7e425e67d6b20fd16fe5b0cc0d7279e00b082ed723663de59f5112b166adf970e65700c0a4c128506a29cf8beca0c46e8c2c58b9bbb3fa57db32921"}, @NL80211_BAND_5GHZ={0xe4, 0x1, "bbfa1c7c3903ae57dfb3e891806b1f1357429a20d2b775d86e33d603dccf49d6b3ba76628ae964d60e2f27a050a94b2ade6d16a1aaa780bcfeecfaeabe9b80a3d259815ed44bb29f3561e777d5807fa4e09304c1025731f5e83ea1219084a9d96eee2992457e621fbabd55514e13db2229fcd3ea1ea41dfb65724e9004ff01104b94f54615d6742cae7be281c1133c61411f02bd5b36b4070c5b50ee5a89cc57c59e1dc3b9e8098b898c42817f8b1ec85457db323d8078d1b611c43492d63f8b5568c29c1c3da139df76db340e423b4a217ae914d99d47b0a27cc2771e07fc8c"}]}, @NL80211_ATTR_IE={0xac, 0x2a, "71b217aee3df60fe8d83aa994e2c06ecb8cffb8b492da9916ff9aa9150d9ecb31749f42286d1f653e6a8bece8b8f6e357f0c14999be096bc63ac3279db2db77ea27dedd0c66a91957fefefefece54724cdc88858f273a437df1f63577397b398009d095022c562432ffd0d5f9d4871d5e5ff8bdc5aeb3bfc46df9b4d8c3a31f3ad5a7fbe281a306b49595764115b9fc4eadc93610323cc2c3cf779b3855d6dd77d2999f26c69c9d5"}, @NL80211_ATTR_IE={0x1fd, 0x2a, "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"}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1000}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x770}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c1) socket(0x18, 0x800, 0x3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x20000040) [ 2107.640446][T23316] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2107.674759][ T29] audit: type=1804 audit(1595564153.721:4548): pid=23316 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1376/cgroup.controllers" dev="sda1" ino=16225 res=1 [ 2107.704096][T23331] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2107.782991][T23336] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2107.812278][ T29] audit: type=1804 audit(1595564153.901:4549): pid=23332 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1348/cgroup.controllers" dev="sda1" ino=16221 res=1 [ 2107.903856][T23336] device veth136 entered promiscuous mode [ 2107.975503][ T29] audit: type=1804 audit(1595564153.951:4550): pid=23335 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1348/cgroup.controllers" dev="sda1" ino=16221 res=1 [ 2108.429844][T23336] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2108.488976][T23369] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2110.172771][ T486] tipc: TX() has been purged, node left! [ 2110.332756][ T486] tipc: TX() has been purged, node left! [ 2110.509126][ T486] tipc: TX() has been purged, node left! [ 2110.682724][ T486] tipc: TX() has been purged, node left! [ 2110.862708][ T486] tipc: TX() has been purged, node left! 04:15:57 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x2f8, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) [ 2110.980269][T23378] IPVS: ftp: loaded support on port[0] = 21 [ 2110.996244][T23378] lo speed is unknown, defaulting to 1000 [ 2111.019252][ T486] tipc: TX() has been purged, node left! 04:15:57 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0xea02, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:15:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x38, 0x1, 0x5, 0x3, 0xff}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x1000000eb) 04:15:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)={r0, 0x3, 0x101, "79e8e9ef0a8f83094ff2ef0cb97520fa4ae0f661253d5b82e4a85e63ecaea85ce6192a93d11d"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = socket(0xa, 0x1, 0x0) close(r4) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000200)={0x0, 0x5}, 0x2) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380802001ff104857698df40809f8b643186099313f64b589fb1aca676447e03f89e68b2893549b88c3dac7885abbe5fdc9f54899c8ea99eccb5ec24e541000000000000", @ANYRES16, @ANYBLOB="ad1b79008100000000fcdbdf2505000000050001000800005d66910008000400ffffffff1400060000000000000000000000dc39d1071f23f9438b17757b46ad44f18266716b0cbf4b23825e0f5b8ce1d690000007c1647f856de6d9cc597701a9544034377a2ca563ce93b751913f66a5cb64a04bfb03fca778b7cfcb44857f6e12a3057e3618d93c19ab7dfe5f034d09f275aa6273f550201930048633d3b1468305713910bf83aaf562012c15d1b3781ccc2d159f8f5e62c2cea7da4463aa44cd27197e46e5a5277dc1467f7fe05a570b"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20008040) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x44040) sendmmsg$inet_sctp(r4, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="3000000000000000840000000100000000000000040000000000000000000000000010000000000000000000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r6}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='team_slave_0\x00', 0x10) syz_emit_ethernet(0x8a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "0c7567cdaff7756a11c89f034a80bd61"}, @md5sig={0x13, 0x12, "91f9e3511f817ae7c6885f1e9a77dc6a"}, @md5sig={0x13, 0x12, "b4b0d7188290f542b53d207691b9a85f"}]}}}}}}}}, 0x0) 04:15:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="ab3b1e7ec02f641943c3ad05b74328871653b51dfe969d96fe103ada33421805a80f22ab4d045c149809c0e5a17a4ec93ce8ed9d26d50e42128524eb783ba8d5780f3a9eb351d9ddac419a78bb35a594e77d246f3786075eea87e6"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000b35) 04:15:57 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x98020000]}, &(0x7f0000000000)=0x54) [ 2111.026195][ T486] tipc: TX() has been purged, node left! [ 2111.046693][ T486] tipc: TX() has been purged, node left! [ 2111.056186][ T486] tipc: TX() has been purged, node left! [ 2111.117027][ T486] tipc: TX() has been purged, node left! [ 2111.166196][T23407] IPVS: ftp: loaded support on port[0] = 21 [ 2111.238968][T23407] lo speed is unknown, defaulting to 1000 [ 2111.269667][T23413] IPVS: ftp: loaded support on port[0] = 21 [ 2111.322772][ T486] tipc: TX() has been purged, node left! [ 2111.336402][ T486] tipc: TX() has been purged, node left! 04:15:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4(r0, 0x0, &(0x7f00000000c0), 0x180800) sendfile(r2, r1, 0x0, 0x1000000eb) [ 2111.379558][T23413] lo speed is unknown, defaulting to 1000 [ 2111.388167][ T486] tipc: TX() has been purged, node left! [ 2111.651998][ T29] audit: type=1804 audit(1595564157.741:4551): pid=23453 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1378/cgroup.controllers" dev="sda1" ino=16236 res=1 [ 2111.679609][T23453] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2111.867974][T23378] IPVS: ftp: loaded support on port[0] = 21 [ 2111.970072][ T29] audit: type=1804 audit(1595564158.061:4552): pid=23412 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1408/cgroup.controllers" dev="sda1" ino=16230 res=1 [ 2112.051092][ T29] audit: type=1804 audit(1595564158.061:4553): pid=23466 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1408/cgroup.controllers" dev="sda1" ino=16230 res=1 [ 2112.085517][T23407] IPVS: ftp: loaded support on port[0] = 21 [ 2112.123207][T23413] IPVS: ftp: loaded support on port[0] = 21 04:15:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000001007a58008000000b000500010000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4004}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000100)=0x2c) sendfile(r1, r1, 0x0, 0x1000000eb) [ 2112.251367][ T29] audit: type=1804 audit(1595564158.201:4554): pid=23416 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1349/cgroup.controllers" dev="sda1" ino=16234 res=1 [ 2112.286683][T23378] lo speed is unknown, defaulting to 1000 [ 2112.323149][T23407] lo speed is unknown, defaulting to 1000 [ 2112.346917][ T29] audit: type=1804 audit(1595564158.201:4555): pid=23429 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1349/cgroup.controllers" dev="sda1" ino=16234 res=1 04:15:58 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x98000000]}, &(0x7f0000000000)=0x54) [ 2112.413902][ T29] audit: type=1804 audit(1595564158.481:4556): pid=23481 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1379/cgroup.controllers" dev="sda1" ino=16236 res=1 04:15:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @local, 0x4}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000001240)={0x2, [0x0, 0x0]}, &(0x7f00000012c0)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000180)={r6, 0x1000}, &(0x7f0000001200)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r7, 0x0, 0x1000000eb) [ 2112.512253][ T29] audit: type=1804 audit(1595564158.481:4557): pid=23481 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1379/cgroup.controllers" dev="sda1" ino=16236 res=1 04:15:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)={0x24, r5, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="2c000000158b76a637ec1d58dd6c89cbbce7df9b447da2f25379fad7947b4e278d238a345908c84bcce7a56f2583cdfe8e2de3ee4ccd794af764a7", @ANYRES16=r5, @ANYBLOB="200427bd7000fedbdf25440000000400cc000c00238006001800000000000800010004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) [ 2112.557582][T23486] IPVS: ftp: loaded support on port[0] = 21 [ 2112.693116][T23486] lo speed is unknown, defaulting to 1000 [ 2112.709729][ T29] audit: type=1804 audit(1595564158.551:4558): pid=23471 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1349/cgroup.controllers" dev="sda1" ino=16234 res=1 [ 2112.803176][T23490] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2112.883356][ T29] audit: type=1804 audit(1595564158.551:4559): pid=23474 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1349/cgroup.controllers" dev="sda1" ino=16234 res=1 [ 2112.974997][ T29] audit: type=1804 audit(1595564158.871:4560): pid=23510 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1380/cgroup.controllers" dev="sda1" ino=16230 res=1 04:15:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) getsockopt$inet_buf(r0, 0x0, 0x9, &(0x7f0000000140)=""/138, &(0x7f00000000c0)=0x8a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) [ 2113.103678][ T29] audit: type=1804 audit(1595564158.891:4561): pid=23490 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1380/cgroup.controllers" dev="sda1" ino=16230 res=1 04:16:02 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x2fc, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:16:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r3], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000005000100000000000000000000000000000000002abc61121a63e492f57bd5d27b84000821c328fc"], 0x1}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r8, r7, 0x0, 0x100000001) ioctl$F2FS_IOC_GET_PIN_FILE(r8, 0x8004f50e, &(0x7f0000000180)) sendfile(r6, r5, 0x0, 0x1000000eb) 04:16:02 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x98000000]}, &(0x7f0000000000)=0x54) 04:16:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000007065deb0006000000f87ede3030dd2358589547e678a20f377f421b8878c84b18dbce6a4a010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) 04:16:02 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0xf201, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) [ 2116.256957][T23586] IPVS: ftp: loaded support on port[0] = 21 [ 2116.319510][T23588] IPVS: ftp: loaded support on port[0] = 21 [ 2116.344645][T23586] lo speed is unknown, defaulting to 1000 [ 2116.391656][T23596] IPVS: ftp: loaded support on port[0] = 21 [ 2116.469352][T23588] lo speed is unknown, defaulting to 1000 [ 2116.506253][T23596] lo speed is unknown, defaulting to 1000 04:16:02 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0xffffffff]}, &(0x7f0000000000)=0x54) 04:16:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0e205990637ca82b8176fd7ea10d219afd7d0d6", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0x9) sendfile(r2, r1, 0x0, 0x1000000eb) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000240)={0xffffffff, 0x5, 0x1, 0x4, 0x5, [{0x40, 0x400, 0x8001, [], 0x84}, {0x7, 0x6, 0xe2, [], 0x800}, {0xffffffff, 0xfffffffffffffffe, 0x20, [], 0x2803}, {0x8, 0x1ff, 0x6, [], 0x500}, {0x7, 0x20, 0x8}]}) [ 2116.793007][T23656] IPVS: ftp: loaded support on port[0] = 21 04:16:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400180007065deb00f48dce5af87ede4b000000ff000640fffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) [ 2116.920496][T23656] lo speed is unknown, defaulting to 1000 04:16:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) sendfile(r1, r3, 0x0, 0x1000000eb) [ 2117.183174][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 2117.183189][ T29] audit: type=1804 audit(1595564163.272:4570): pid=23686 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1353/cgroup.controllers" dev="sda1" ino=16244 res=1 [ 2117.238067][T23588] IPVS: ftp: loaded support on port[0] = 21 [ 2117.278752][T23596] IPVS: ftp: loaded support on port[0] = 21 [ 2117.325053][T23588] lo speed is unknown, defaulting to 1000 [ 2117.359409][T23596] lo speed is unknown, defaulting to 1000 04:16:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xf8, r3}, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x268, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x238, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x80}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7fffffff}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xb, [0xc, 0x7, 0x2, 0xa, 0x0, 0x7, 0x5, 0x8, 0x10, 0xc, 0x6, 0x8, 0x4, 0x2, 0x5], 0x0, [0x7f, 0x5, 0x1000, 0x5, 0x7, 0x1e, 0xf000, 0x5, 0x1, 0xfffe, 0x8, 0x8000, 0x7f, 0x504f, 0x5, 0x5], [0x100, 0x49f, 0x4, 0x7, 0xff, 0x7c8c, 0xff, 0x3ff, 0x5, 0x6, 0x9, 0x0, 0x2, 0x100, 0xe47f, 0x6]}}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x9, [0x8, 0xa, 0x0, 0xa, 0x8, 0xd, 0x1, 0xd, 0x9, 0x3, 0x2, 0x6, 0xe, 0xd, 0x4, 0x8], 0x0, [0x400, 0x7f, 0x5, 0x0, 0x2, 0xffff, 0xfffa, 0x7f, 0x0, 0x0, 0x5, 0xedb0, 0x1, 0x5, 0x1ff, 0x36], [0x100, 0x0, 0x3f, 0x7, 0x1, 0x7, 0x0, 0x3, 0x3, 0xfff, 0x3, 0x7, 0x14c, 0x40, 0xd5, 0x6]}}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0xb, 0x10, 0x9, 0x2, 0x9, 0x1, 0xf, 0x0, 0x1, 0xc, 0x8, 0x1, 0xc, 0x0, 0x9, 0x6], 0x0, [0x1, 0x18b, 0x3, 0x7, 0xce, 0x0, 0x8, 0x5, 0x7fff, 0x9, 0x638, 0x7, 0x3, 0x6, 0x5, 0xf8], [0x7, 0x4de, 0x7, 0x0, 0x8, 0x9, 0x40, 0x3, 0x7, 0xffff, 0x80, 0x6, 0x8cf, 0x100, 0x5, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x3}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xb0f}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xfc, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffffffff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xec3c}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8000000}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xb1}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xec}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x800}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x800}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x38}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7fff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10f2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6c2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}]}}]}, 0x268}}, 0x400c010) bind$packet(r5, &(0x7f0000000100)={0x11, 0xf8, r7}, 0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x268, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}]}, 0x268}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 2117.466984][ T29] audit: type=1804 audit(1595564163.552:4571): pid=23700 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1383/cgroup.controllers" dev="sda1" ino=15777 res=1 04:16:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x1000000eb) [ 2117.623573][ T29] audit: type=1804 audit(1595564163.582:4572): pid=23700 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1383/cgroup.controllers" dev="sda1" ino=15777 res=1 [ 2117.690871][T23656] IPVS: ftp: loaded support on port[0] = 21 [ 2117.770371][ T29] audit: type=1804 audit(1595564163.742:4573): pid=23731 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1354/cgroup.controllers" dev="sda1" ino=16248 res=1 [ 2117.815460][T23656] lo speed is unknown, defaulting to 1000 [ 2117.887564][T23746] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:16:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001200)=ANY=[@ANYBLOB="676742834ca8dd26be6b9b4ea66fe562aaf1148e4a557fb935c4c81dbb4e86da2ffcf649944c8cd846cee8d11cb460bcb4e1e9467417140d6352823373a3533a00007ff47a567d5153cf76cad7bf50e06a019ad661c45069e3d1d913856756581211094f0206bcc1417c0e97f83ecf28f2b99f474d67edc97e5ffd5390cf266eb9e165aed775933421937f09ecccb108f1d3117dc09bcc625ca2537d984a3fb9ffb6", @ANYBLOB="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", @ANYRES64], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xc, 0x2011, r1, 0x0) tee(r1, 0xffffffffffffffff, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000f44000/0x4000)=nil, 0x50707c, 0x1000006, 0x2013, r1, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x30, r2, 0x8124e000) r3 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) [ 2117.941402][ T29] audit: type=1804 audit(1595564163.902:4574): pid=23746 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1384/cgroup.controllers" dev="sda1" ino=16224 res=1 [ 2118.126447][ T29] audit: type=1804 audit(1595564163.912:4575): pid=23740 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1384/cgroup.controllers" dev="sda1" ino=16224 res=1 [ 2118.237896][ T29] audit: type=1804 audit(1595564163.962:4576): pid=23746 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1384/cgroup.controllers" dev="sda1" ino=16224 res=1 04:16:06 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x30f, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:16:06 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r1, &(0x7f00000000c0)=""/11, 0xb, 0x2100, &(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfec8) r4 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 04:16:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="061dc6a46c1d0c4eb00bc3eadcf06df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) 04:16:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f00000000c0)={0x0, 'veth0_to_team\x00'}) 04:16:06 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0xf403, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) [ 2120.456484][T23795] IPVS: ftp: loaded support on port[0] = 21 [ 2120.469178][T23796] IPVS: ftp: loaded support on port[0] = 21 [ 2120.495283][ T29] audit: type=1804 audit(1595564166.582:4577): pid=23794 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1385/cgroup.controllers" dev="sda1" ino=16267 res=1 [ 2120.528578][T23794] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2120.606432][T23796] lo speed is unknown, defaulting to 1000 [ 2120.668728][T23795] lo speed is unknown, defaulting to 1000 04:16:07 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:16:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x4e, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b0000000800a69515217af0891a010007"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000b35) 04:16:07 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r1, &(0x7f00000000c0)=""/11, 0xb, 0x2100, &(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfec8) r4 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 04:16:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x3f6, 0x400, 0x70bd26, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) [ 2121.199007][T23796] IPVS: ftp: loaded support on port[0] = 21 [ 2121.216099][T23795] IPVS: ftp: loaded support on port[0] = 21 [ 2121.262699][T23795] lo speed is unknown, defaulting to 1000 [ 2121.289364][T23796] lo speed is unknown, defaulting to 1000 [ 2121.410482][T23870] IPVS: ftp: loaded support on port[0] = 21 [ 2121.435604][ T29] audit: type=1804 audit(1595564167.522:4578): pid=23875 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1386/cgroup.controllers" dev="sda1" ino=16265 res=1 [ 2121.471621][T23860] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2121.493918][T23866] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 04:16:07 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt(0xffffffffffffffff, 0x81, 0x0, &(0x7f0000000040)="f06326e9aaa451d1c32bff97a777a4230b12d5b98e5ccfbf", 0x18) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xd, 0x0, 0x5, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@loopback}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0xa0}}, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000001200)={0x3, 'sit0\x00', {}, 0x1ff}) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x1, 0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@loopback}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0xa0}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x100000001) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000080)=0x7fff) [ 2121.585266][ T29] audit: type=1804 audit(1595564167.552:4579): pid=23880 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1356/cgroup.controllers" dev="sda1" ino=16281 res=1 [ 2121.623994][T23870] lo speed is unknown, defaulting to 1000 04:16:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) r3 = accept4(r2, &(0x7f00000000c0)=@rc={0x1f, @none}, &(0x7f0000000180)=0x80, 0x80000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) sendfile(r0, r3, &(0x7f0000001200)=0x8, 0x737e7c13) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x1000000eb) 04:16:08 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000040)={0xfff, 0x7}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000090601"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x45fe5, 0x0) [ 2122.075772][T23870] IPVS: ftp: loaded support on port[0] = 21 [ 2122.158621][T23870] lo speed is unknown, defaulting to 1000 [ 2123.171321][ T486] tipc: TX() has been purged, node left! [ 2123.361235][ T486] tipc: TX() has been purged, node left! [ 2123.558532][ T486] tipc: TX() has been purged, node left! [ 2123.761173][ T486] tipc: TX() has been purged, node left! [ 2123.941324][ T486] tipc: TX() has been purged, node left! [ 2124.111651][ T486] tipc: TX() has been purged, node left! [ 2124.294406][ T486] tipc: TX() has been purged, node left! [ 2124.451319][ T486] tipc: TX() has been purged, node left! 04:16:10 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x328, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:16:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) sendfile(r2, r1, 0x0, 0x100000b35) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{0x20, 'cgroup.controllers\x00'}, {0x20, 'cgroup.controllers\x00'}, {0x20, '$${'}, {0x20, 'cgroup.controllers\x00'}, {0x20, 'cgroup.controllers\x00'}, {0x20, 'cgroup.controllers\x00'}, {0x20, '[!'}, {0x20, 'cgroup.controllers\x00'}, {0x20, '/))@$,{,'}, {0x20, 'cgroup.controllers\x00'}], 0xa, "86a03506f693bed76aa4d9e60c7f96d59b9636a9b5ccb7d0e193221f6fe656f41a46fcd81531b453a2347d7a624d57a66b9eac3b8a8eb61ad033d56979c225d95fbcdcfb47454721f90f038f4427f3f5594d370ef4a224d0ec7a2c324742070634cb4f07f2222196a5ce0285b79133b09c0bcd9bd85de95232c0fd176155268841bfaec57726a0037c6df936ce81e131304ad8d165631bb88f2b73b86ffd4122b6da9073c932834d24f73e56c7503f"}, 0x156) 04:16:10 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r7}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000300)={0xd0, 0x8004, 0x3, 0x400, r7}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={r8, 0x57, 0x3f}, 0x8) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r6, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101008000000000000002000000", @ANYRES32=r6, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) 04:16:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) tee(r1, r2, 0x8, 0x1) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1000000eb) 04:16:10 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0xfa03, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) [ 2124.620146][ T486] tipc: TX() has been purged, node left! [ 2124.719821][T23991] IPVS: ftp: loaded support on port[0] = 21 [ 2124.763509][T23995] IPVS: ftp: loaded support on port[0] = 21 [ 2124.797910][ T29] audit: type=1804 audit(1595564170.883:4580): pid=23992 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1357/cgroup.controllers" dev="sda1" ino=16289 res=1 [ 2124.809896][T24001] IPVS: ftp: loaded support on port[0] = 21 [ 2124.861195][ T486] tipc: TX() has been purged, node left! [ 2124.911202][T23991] lo speed is unknown, defaulting to 1000 [ 2124.948538][ T486] tipc: TX() has been purged, node left! [ 2124.958340][ T486] tipc: TX() has been purged, node left! [ 2124.966041][T23995] lo speed is unknown, defaulting to 1000 [ 2125.069203][T24001] lo speed is unknown, defaulting to 1000 04:16:11 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0x2]}, &(0x7f0000000000)=0x54) 04:16:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r1, @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x1000000eb) 04:16:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$inet6(0xa, 0x80003, 0xff) sendmsg$inet6(r3, &(0x7f0000000040)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000140)="982b56ad37732c208b680b0aee893cead31a08108acadfbf0700841812d3d0d5d33f7ad4da2902fc", 0x30}], 0x1}, 0xe00) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100000b35) [ 2125.426994][T24069] IPVS: ftp: loaded support on port[0] = 21 [ 2125.578607][T23991] IPVS: ftp: loaded support on port[0] = 21 [ 2125.612681][T24001] IPVS: ftp: loaded support on port[0] = 21 [ 2125.674054][T23995] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2125.699353][ T29] audit: type=1804 audit(1595564171.783:4581): pid=24075 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1358/cgroup.controllers" dev="sda1" ino=16296 res=1 [ 2125.768676][T24069] lo speed is unknown, defaulting to 1000 04:16:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640ffffecfd0500010007661f7236a14ab22f41d6cbe88129e5a0d464d3050ae26ea43267133ad5e6318fa2661b0ab257b18e330f98c325eaa63674e5249eb9808aecfb53c77baf25d13b305eccbb99e503daabba1fe3dfc96a707f061be8428115c89ab9b4faac86450c7565b0aa8ce42e554a39edc82e10"], 0x24}}, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=""/118, &(0x7f0000000000)=0x76) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) [ 2125.849444][ T29] audit: type=1804 audit(1595564171.833:4582): pid=24083 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1358/cgroup.controllers" dev="sda1" ino=16296 res=1 [ 2125.987930][T23999] IPVS: ftp: loaded support on port[0] = 21 [ 2126.043315][ T29] audit: type=1804 audit(1595564172.133:4583): pid=24092 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1359/cgroup.controllers" dev="sda1" ino=16301 res=1 [ 2126.190003][T24072] IPVS: ftp: loaded support on port[0] = 21 [ 2126.343196][T24089] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2126.407826][T23999] lo speed is unknown, defaulting to 1000 [ 2126.424820][ T29] audit: type=1804 audit(1595564172.513:4584): pid=24070 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1389/cgroup.controllers" dev="sda1" ino=16273 res=1 [ 2126.552170][ T29] audit: type=1804 audit(1595564172.513:4585): pid=24074 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1389/cgroup.controllers" dev="sda1" ino=16273 res=1 [ 2126.670283][ T29] audit: type=1804 audit(1595564172.753:4586): pid=24111 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1389/cgroup.controllers" dev="sda1" ino=16273 res=1 04:16:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b4399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) 04:16:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x48080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000b35) [ 2126.781558][ T29] audit: type=1804 audit(1595564172.753:4587): pid=24113 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1389/cgroup.controllers" dev="sda1" ino=16273 res=1 [ 2126.986639][ T29] audit: type=1804 audit(1595564173.073:4588): pid=24129 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1390/cgroup.controllers" dev="sda1" ino=16302 res=1 [ 2126.992782][T24129] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:16:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) socket$kcm(0x29, 0x7, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000240), 0x4) sendfile(r2, r1, 0x0, 0x100000b35) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="33000000452792673ebd3fa20c2ac18ead3a0d000e1df8ba47317d993cc452a612fccb37dd506e1952195a841bcbdc1bcc2f0dd86a1a42b14c92879b57574a7e6a4797a9cc24e9e46a207461ae52f07bae5ef12a1a7f465ba85fdd208a6da6076b6d22529e226ac284c2c6fff33b1aa01f6d093611ea73fffb863aaa70c8c5316de0028d8d856b8a61d291373dfa88b2396a877671f6d4c9b47aa1d646c1f2", @ANYRES16=r5, @ANYBLOB="00022abd7000fcdbdf2500000000140008007663616e3000"/34], 0x28}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r4, 0x0, 0x100000001) write$tun(r4, &(0x7f0000000440)={@void, @val={0x3, 0x1, 0x2, 0xe4, 0x688, 0x4}, @ipv6=@icmpv6={0x9, 0x6, "4c3e01", 0x13c9, 0x3a, 0x1, @mcast2, @private2, {[@dstopts={0x89, 0x3, [], [@calipso={0x7, 0x10, {0x36f782f90ca1f7b0, 0x2, 0xff, 0x8001, [0x321]}}, @jumbo={0xc2, 0x4, 0x1}]}, @fragment={0x32, 0x0, 0xf9, 0x0, 0x0, 0xb}, @dstopts={0x2, 0x3, [], [@hao={0xc9, 0x10, @private2={0xfc, 0x2, [], 0x1}}, @jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0x1, [0x0]}]}, @srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x48, 0x1, [@mcast1, @loopback]}, @fragment={0x62, 0x0, 0x81, 0x1, 0x0, 0x9, 0x64}], @time_exceed={0x3, 0x1, 0x0, 0xd0, [], {0x2, 0x6, "a94710", 0xff, 0xff, 0x1, @remote, @mcast2, [@routing={0x1d, 0x6, 0x1, 0x2, 0x0, [@local, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @dstopts={0x6c, 0x2, [], [@hao={0xc9, 0x10, @private1}]}, @srh={0x2b, 0xa, 0x4, 0x5, 0x3f, 0x18, 0xcf6b, [@private2={0xfc, 0x2, [], 0x1}, @remote, @local, @ipv4={[], [], @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @dstopts={0x2, 0x18, [], [@generic={0x95, 0x95, "62b1a4d71ef119d8dad130864234e10b51fd2bd8afdbc67e289e12afacf12d34f9e7e488e5170d72c5431755a05a5a7b5f62035d21a8891aa7d9cb1e2ecfb7d1ed39705374567c1430ad8f1c68cd0397be226e7ff78996fed8bde57a5d54cc2a0cc54108e8cbba2aff8b67f80ec93a1c4ce2e23ae4c6470219c839e28f2cf335c4c17652683b7f7be1494a24f7808aeda09c1a2579"}, @generic={0x3f, 0x2d, "4cb59b143032ab915e1487025a47f2f8f3a3ba15a8e48a1cb8b18d970eeabcf714c34eced96d0c4433947e01c1"}]}, @dstopts={0x2}, @fragment={0x67, 0x0, 0x0, 0x0, 0x0, 0x1, 0x65}, @dstopts={0x2c, 0xf, [], [@hao={0xc9, 0x10, @private1={0xfc, 0x1, [], 0x1}}, @ra={0x5, 0x2, 0x1d9}, @jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x50, {0x3, 0x12, 0x1f, 0x215, [0xad, 0x1, 0x7, 0xe1, 0x3ff, 0x7ff, 0x3, 0x6, 0x8]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}, @hopopts={0x3a, 0x7, [], [@ra={0x5, 0x2, 0x8873}, @jumbo={0xc2, 0x4, 0x5}, @pad1, @generic={0xc1, 0x2f, "97696209df28395daeb36892618d57e76cdaa7e4da25dd885b516e0b673107ce00149d84462acff5a7228a2924eb9e"}]}, @srh={0x6c, 0xe, 0x4, 0x7, 0x0, 0xe0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @empty, @private1={0xfc, 0x1, [], 0x1}, @empty, @empty, @ipv4={[], [], @empty}]}, @hopopts={0x89, 0x206, [], [@generic={0x9, 0x1000, "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"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x2, 0x6, 0xd9, 0x7e81, [0xfffffffffffffffe, 0x1f, 0x5277]}}, @jumbo={0xc2, 0x4, 0x1}]}], "540a3a3b02b9193b55"}}}}}, 0x13fb) [ 2127.384745][ T29] audit: type=1804 audit(1595564173.473:4589): pid=24148 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1361/cgroup.controllers" dev="sda1" ino=16308 res=1 04:16:16 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x340, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:16:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="6df0d7ea10b5399cc460ab824a8b161cd3672e35b3692a021256aa712741235b1efbe5379b3c0c92bf85a5630da2798b1b1f579a4f234352d4ca5420f2aab89371b6317cd996d6e6b8276196b0516590fdf516103e19b37968a566c9cfb805861346d9df1acf10e2b6076539e9694bb5505b", @ANYRES32], 0x208e24b) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000001) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f00000007c0)=""/4096) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24008040) mmap(&(0x7f000034e000/0xa000)=nil, 0xa000, 0x1000000, 0x28011, r0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r8, r7, 0x0, 0x100000001) getpeername$netrom(r7, &(0x7f00000000c0)={{0x3, @default}, [@netrom, @netrom, @remote, @bcast, @default, @rose, @remote, @null]}, &(0x7f0000000180)=0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r6, 0x0, 0x1000000eb) [ 2130.205733][T24181] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2130.229256][T24180] IPVS: ftp: loaded support on port[0] = 21 [ 2130.308368][T24180] lo speed is unknown, defaulting to 1000 [ 2130.434071][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 2130.434087][ T29] audit: type=1804 audit(1595564176.523:4591): pid=24181 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1391/cgroup.controllers" dev="sda1" ino=16309 res=1 [ 2130.537814][ T29] audit: type=1804 audit(1595564176.563:4592): pid=24183 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1391/cgroup.controllers" dev="sda1" ino=16309 res=1 [ 2130.685007][ T29] audit: type=1804 audit(1595564176.663:4593): pid=24183 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1391/cgroup.controllers" dev="sda1" ino=16309 res=1 [ 2130.766120][ T29] audit: type=1804 audit(1595564176.663:4594): pid=24186 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1391/cgroup.controllers" dev="sda1" ino=16309 res=1 [ 2130.809511][T24180] IPVS: ftp: loaded support on port[0] = 21 [ 2130.898731][T24180] lo speed is unknown, defaulting to 1000 04:16:18 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x30f, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:16:18 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0xfe00, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:16:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001e80)=@newtaction={0x175c, 0x30, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{0x1748, 0x1, [@m_csum={0x190, 0x4, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000000, 0x80000001, 0xffffffffffffffff, 0x0, 0x61}, 0x51}}]}, {0x146, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6}}}}, @m_skbedit={0x1030, 0xc, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x4}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x98, 0x9, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x1, 0xffffffffffffffff, 0x3, 0x80}}]}, {0x39, 0x6, "ae97a5a46b46f1625db495c5b3d0d5e2267704ee74b6a98091542cfd728b5c6cf8868a9d905694d09da874fce67452f99eb5790062"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0xb4, 0xb, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x2, 0x6, 0x5, 0x1ff}, 0x56}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1, 0x3, 0x4}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x800, 0x6, 0x5, 0x83, 0x9}, 0x1f}}]}, {0x34, 0x6, "5f39b72ccc5de8bed3fa5ae8f17caffe519a5d0b79ed717868ae91cf72c2b16b317e6b0792b3a861d45270e5a3195b14"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x180, 0x2, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xa}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1f, 0x8, 0x10000000, 0x6b26, 0xfff}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7ff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7fffffff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x3, 0x20000001, 0x0, 0x10001}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x200}]}, {0xfa, 0x6, "127613762be7a6085eb5f20f60aaa2e2ea86196413cc8ef5bd853c0de080af302d49d6a15ed94ded174d68910f40bfa32380393720eb0299eebb22ba631924af4378b5b43fe0e7d247e2778ba3ecb6ea78545aaa11cff795c73353cafb4be336b843838793943822f4ad0957217a1fee0e72506a8c5150564d69e03801660043497a164240148af5314c6f437ddc5f348c692bd5acd8110eea0552e60eec69da90b15593440e94e52038c2509a6e3a0267ea5ee8bcb1947aa75c20ecf80784668fa083ffba23960af175f24c1646969885bb6a7b63081ecede2f55657d60904a3ac29f5ee424c73ed4f6c0d437c26088bd7664db3f99"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_vlan={0xdc, 0xc, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff000, 0x8, 0x4, 0x7fffffff, 0x6}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb0b}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x1, 0x3, 0x401, 0x400}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa51}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x5e, 0x6, "43c8733ffc0831b76d0c8a883f85142252cc37aaea54f776ca311af8a51c8122fa5d0fe703dd846847c71f804201a16d5a9214eefc2939a58a4bacfbfe7212aa666ec38a733c561dd58e39fdfb4b06e75594ca306da426e3f45b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_bpf={0x190, 0x1f, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x3f, 0x9, 0x0, 0x400}, {0x800, 0x68, 0x4, 0x213}, {0x731, 0x9, 0x0, 0x2}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x9, 0x8, 0xfc, 0x5}, {0xcea, 0x0, 0x9, 0x101}, {0x1000, 0x0, 0x3f, 0xd8}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0xfb, 0x6, "45cc8a7dc24f442665355cfcd5875db6878e941fb276e7a25746dd866d5329522f09a81ce34af9a47bada2f837ce106aed6f4a7d584792a4c55d229069302da02b66ad3a1d9167319b6c87e5ded319f27ef83015ec2cfac2ee094c7bd3ceaa91305bd176f04994a26f5473e686a1b53e2ec9dfd07c1bb33497019eae83fc41319a92470091cadb300274477bbc04ae47e3bc98f0280099ca6613d7b73cffa886c1dcea38e9e7ca76e42cea84720ef25bc1d87db29c9074192f444cd9cd209bc532b6ac62b0364a0b174f871a0993759a744026b7e37a3632cc231d3f7093f101441369a0554cf3470531f37a6651512d98c1e5ac289a78"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x4c, 0xc, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x4}, {0x1d, 0x6, "a0592ea708ecac0311ce3df223b73100e8a2f243497e336f6d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x175c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) bind$packet(r1, &(0x7f0000000100)={0x11, 0xf8, r3}, 0x14) r5 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@dev={0xfe, 0x80, [], 0x36}, @in=@broadcast, 0x4e22, 0x4, 0x4e23, 0x0, 0xa, 0x20, 0xe0, 0x3a, r3, r5}, {0x1, 0x8, 0x1, 0xfd0, 0x7, 0x5, 0xfffffffffffffffc, 0x8}, {0x3ff, 0x6, 0x9421, 0x7fffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d6, 0x33}, 0x2, @in=@private=0xa010101, 0x3506, 0x1, 0x0, 0x0, 0x7fffffff, 0x48, 0x80000001}}, 0xe8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x100000001) sendfile(r7, r0, &(0x7f00000000c0)=0xfffffffffffffffa, 0x4a9d) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r8, 0x0, 0x100000b35) 04:16:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d8e4a8a16343576998c081f7f4e224cd7ce8191030053d30f0584b87b4fcf911180e335c40037e96b9eb2b1", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) 04:16:18 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0x3]}, &(0x7f0000000000)=0x54) 04:16:18 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x342, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) [ 2132.031217][T24240] IPVS: ftp: loaded support on port[0] = 21 [ 2132.032247][T24244] IPVS: ftp: loaded support on port[0] = 21 [ 2132.038880][T24241] IPVS: ftp: loaded support on port[0] = 21 [ 2132.095614][T24249] IPVS: ftp: loaded support on port[0] = 21 [ 2132.119777][ T29] audit: type=1804 audit(1595564178.204:4595): pid=24250 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1392/cgroup.controllers" dev="sda1" ino=16326 res=1 [ 2132.144584][T24240] lo speed is unknown, defaulting to 1000 [ 2132.159052][T24245] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2132.231059][T24244] lo speed is unknown, defaulting to 1000 [ 2132.285133][T24241] lo speed is unknown, defaulting to 1000 [ 2132.334853][T24249] lo speed is unknown, defaulting to 1000 04:16:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000440)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e24, 0x0, @mcast1}, @in6={0xa, 0x4e21, 0x2, @private1, 0x3f}, @in6={0xa, 0x4e24, 0x3, @local, 0xfffffffc}, @in={0x2, 0x4e21, @empty}], 0x74) sendmsg$nl_generic(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x27c, 0x20, 0x4, 0x70bd26, 0x25dfdbfe, {0x1d}, [@nested={0x25d, 0x44, 0x0, 0x1, [@typed={0x14, 0x5e, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, [], 0x1f}}, @typed={0x4, 0x5f}, @generic="f3ff377de0e701528486ef30beb6307175606de0fb10f138d5929f1470ed82b24920c85fab6e0adb6c6af920b42af4133aeba20d8a1015921d3dd0ca79d460de50177cd155fb782c597df511bbc73048e8d851dbb1bf4ad8090ee9de0b1ed8af9381fdae3577fe75cb68b1056a5e12cce358734be01764af1fd98f75d6cf1b50de45c35ab9c38933a09432e04264993a75d9e219fb641774a1f004dc7dced42126ab79d26a2aa3a90e", @generic="3e287acbd1a20abd41ee21ade9bccff3dfba8b0ba05711fd0b11250d4c548c399e87d6512b727c5e412cd4b8a284e512e635e4bc413a200b971f545edc129a956705941eea95d0a93fd02f59b9b581acddddb490c0ec52b01169c058cc1407c4d9a8c89cdd081e828d4baad48c2a4463d83e32ad6e67ed005d5d6e15a55fa3ee0b5110d2bba6420f49bdca98e65dd443e4c0fff4489b821b0d62b0e64c7aabaa3ef81ba9f3c6d32d1dcb8bb1bfd15fb1e54b5ce148f173224626353c9fdbe5214de65688d23d1d8fe4abb28e2738a979084da12de0c4ab5d54d70be551dc42b9c6a07367ea2566f24114751f75ca", @generic="2208dd016bda3caef8f9a2ec7aad2bc8d8861e8de06914bac4f3f24d0ef485e9fd54a94c0d62cfd2cd40beb57f40bc1046e3c1cec7ad8bfc7b634cbd694622ddfc2f5570f6682549cf047507e060d8a046801ba93a018ef8890470916d5493a2ce90faabbf45feabd82a1a637d118fc78ac23f3e2b1ce082eb3ca8b4746d43bdbcf57e66bcfbda154a488f9d6cd8d805dbe424196f340792ffa8db8329e6932f4e190196fd915b19e0c6"]}, @typed={0x8, 0x4c, 0x0, 0x0, @ipv4=@local}]}, 0x27c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8080) 04:16:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000406014780fbb06192ab68a1daadd33700890b02"], 0x1}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f00000000c0)=0x7, &(0x7f0000000100)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="8902eee2aad7000000000100000006000a004e220000080008"], 0x24}}, 0x0) sendmsg$FOU_CMD_GET(r4, &(0x7f0000001280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x34, r5, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x89}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x100000001) write$binfmt_aout(r7, &(0x7f0000001340)={{0xcc, 0x3, 0x49, 0x3a5, 0x185, 0xfffff800, 0x81, 0x2511a707}, "36949059ef2fbc19a980a59d58d202342527dfd6965863bbce04fb8e7fcd95b4111e4c409508689b3d6bf21bb6b04afb67f17483de9c5867a4f0a17aaf51dcb806ded2058887aab1c23924aba98068b230c3d7ca98c76a278004f9e89cb3bfb72387cf7135494a4dd8d15b95a5e653a11801da8b08686693563bf19723b82d51735871647b5ba32f4d1b45ef95b407be9345c249", [[], [], [], [], [], [], [], []]}, 0x8b4) sendfile(r3, r1, 0x0, 0x1000000eb) [ 2132.766298][ T29] audit: type=1804 audit(1595564178.854:4596): pid=24336 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1363/cgroup.controllers" dev="sda1" ino=16271 res=1 [ 2132.886915][ T29] audit: type=1804 audit(1595564178.914:4597): pid=24338 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1363/cgroup.controllers" dev="sda1" ino=16271 res=1 [ 2132.929314][T24244] IPVS: ftp: loaded support on port[0] = 21 [ 2132.967140][T24240] IPVS: ftp: loaded support on port[0] = 21 [ 2133.044017][T24241] IPVS: ftp: loaded support on port[0] = 21 [ 2133.050338][ T29] audit: type=1804 audit(1595564178.994:4598): pid=24339 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1393/cgroup.controllers" dev="sda1" ino=16326 res=1 [ 2133.063835][T24244] lo speed is unknown, defaulting to 1000 [ 2133.219656][ T29] audit: type=1804 audit(1595564179.034:4599): pid=24339 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1393/cgroup.controllers" dev="sda1" ino=16326 res=1 04:16:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) epoll_wait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x4, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dca5af87ede4b0000000000000001fffffd0500010007"], 0x24}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r5, 0x400, 0x7, [0xfff8, 0x40, 0xff74, 0x2, 0x3f, 0x0, 0x3]}, &(0x7f0000000180)=0x16) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e21, 0xf9cb563a, @local, 0x12d55573}}}, 0x84) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x2, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r1, 0x0, 0x100000b35) [ 2133.261533][T24240] lo speed is unknown, defaulting to 1000 [ 2133.303689][T24241] lo speed is unknown, defaulting to 1000 04:16:19 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0xf403, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:16:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) sendfile(r2, r1, 0x0, 0x1000000eb) [ 2133.505846][ T29] audit: type=1804 audit(1595564179.594:4600): pid=24379 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1364/cgroup.controllers" dev="sda1" ino=15796 res=1 [ 2133.538927][T24379] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2133.649223][T24413] IPVS: ftp: loaded support on port[0] = 21 [ 2133.753819][T24413] lo speed is unknown, defaulting to 1000 04:16:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000012c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x48, 0xb, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r4, 0x13}, 0x10) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r1, 0x0, 0x1000000eb) 04:16:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b000000080006400800ff0e0600010007"], 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)={0x24, r3, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xffffffffffffffff}}]}, 0x20}}, 0x4010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r1, 0x0, 0x100000b35) [ 2134.206337][T24485] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2134.245829][T24485] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2137.139925][ T486] tipc: TX() has been purged, node left! [ 2137.299641][ T486] tipc: TX() has been purged, node left! 04:16:23 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x40000, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:16:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$alg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000240)="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", 0xfa}, {&(0x7f0000000340)="13d57a677fff2b7190baf389e9a6050f55aab5ba9c8fcf6471ac263b7ff68fd3bc97809f34aedcee91e4060e12f595e8e50cc03b074b98c8e9fd1c7f8d91ec654b6d68eeb132f601157e0db985281948046cf5b6507dcca7357eb4f5bbb53cd37189c57de7d8016c2879b0e3da6464dbf7b7f2640741c31a3957db5bcc7e984b857394fab240134c2cfed9bbd4ddf6d864dce5d22f896e8b7b83319a9af488c4a70655ba0af300f7111c47d1f505b2c9a9858708cc5508f7d058bb091fd7d31586abdb4be4caeeba2dc7bd5479f0481149", 0xd1}, {&(0x7f0000000440)="d517a635006679dc2d13f061683418f2562cd9b7ec23e575b77022e416f7d15588c968e2b21569bdba5c82105344061f170ca8f71eaf22579d0b38a688533a2aabdac02bfbe7828c3ab6acf38273e8f9a994b4d841a3491ab46bc02c967ce4ae5c06ab288a768eb88426b8e5746607fe7097aa96eb96b89c249d645205a29f80af0dc9a345d79218d1d938021cfeb0dd8799afe57e1770380764bd62693334451c7d187aad023d25a75811a457da4e2d84f666baf589a3fa055c86cb56a8a2dd3d6d536770ad9c29e8478d646b91ec052486489edd083b0b48adbcd979695fdffa10c33187eca82dc4b51ed8c0d30a47ef", 0xf1}, {&(0x7f00000000c0)="8ebfeae9d5e5e05a7bda178d450c094d5f31c942992531c41de023c4cbb9", 0x1e}, {&(0x7f0000000540)="1e2134c9e8492da8374c0943f71b462f98e7647915a2242e939a31f21dcc939b1e2c6d1a99d3b41e59e90878e07f8c703971feaf75aa390722d1e519a44aad664d7698e5a063b867e807e60ed71bcc57ae83a04650ae86aa184124bb272566d3be68002fd4225ed07f621aae4427fe6650d3e3fb306e77277f0a1e7fda7f5a5d39607cbed6e88eadd1b84c6d56fd2091a552f02e973879fae9d268f3f86caa5fb3114f1b3d40f6b1181655791dbf4fb712", 0xb1}], 0x5, &(0x7f0000000100)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x1}, 0x4) sendfile(r2, r1, 0x0, 0x1000000eb) 04:16:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x100000001) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f00000000c0)={'erspan0\x00', @ifru_map={0x4f, 0x9, 0x1ff, 0x5, 0x1, 0x6}}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r6, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) write$binfmt_script(r5, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="81d0cbad50fe67a6bcf346735015ac7ace1e753ba18ff4ac74d2b5b98fb310c484a8dbd3c509a7b79b801e51ca290c789cbe9289d9d38739fc454234e641", @ANYRESHEX=r6], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r7, 0x0, 0x100000b35) 04:16:23 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0x4]}, &(0x7f0000000000)=0x54) 04:16:23 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001800)='cgroup.stat\x00', 0x0, 0x0) read$alg(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000c00)={&(0x7f00000004c0)=@in={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000500)="0d6d3d7c227fa7d9686cf3cc731ecc18582cef8c5c99a3b41f7e71b33cc7a1e9e48fab117d012d53706699f470866ec04c0186a81f735161f6b2483d685e65958ceeae1ef75f5d068010ede56610fcb94813351df08a55849cfa8cb9bbb0bf99054b3dae1300cc677dd3093873d5a52ea770896573a865480465ff", 0x7b}, {&(0x7f0000000580)="76d3a718275ee3ef34cfb3a509008433de320b05e8a8aa951883c533233b653f896cbcdb90ab9d2e0b7e6eeb8ece282656716587254368ab65e74f7370d2d08e53129f91e53150ec1a424513aa283c32153915957ff7e33c23b6a1f0a18d286393b52fa204b0e98983abd8dc951202ddf5f37eb8cbb224d8454b01439bd496e91cec999b08ffe0a7f497d04319436bf415921a68db94a7671e467a7e5233ede1a57b4ebb22d654489fc8ce6d5eb8fb7e2ea23fa3c451eeec6e0ec773e2e77e17f2b4e09e6c1af8f1598aaeb50e9c0476b3a3af6e90913d", 0xd7}, {&(0x7f0000000680)="c70bfb2210ab716c296b14a6c8fb4d066185cdd3015aada96e264292c604b9997d58a41830e77a057907ab44ae6e430cb651f696bada98b20822f5075cb349f62882dd", 0x43}, {&(0x7f0000000700)="8ab2ca7e028647e3862c2bff27d2d89d47b2c892f100b449478f1179d2690e1ebdb145ee60bce74134c355eed8c295da14d4bc0207d6c15efc6764baea3cf1664976c136838ffde98a0f44d2d53123903c8294f5a50b04c27c951355d60d0cb915c3f6e81f58c8605ee85fc9ff292d928fc5b9f8f51c734fd94010ce1c60665b15543914b811797eb5ab4d68701dd2ab7b5c2fb786a70775db46c80354c5cc94b937fb0b50a87d365c4915e5b26ae85553b8444a8aea61fefd0d06bc234b1826f55a7c18db835db183275b2038ebaf6c45", 0xd1}, {&(0x7f0000000800)="ea865a04c3efef451479e57f5cdbfcdf8ddb87378b275aca592ac14f5bcb666fbaf38217cca9a14340a4b4b23af5b98833e3ecc3c446af719513b8dd5cdf3667788e3f029445c6314a", 0x49}, {&(0x7f0000000880)="9d141a4666fa39281fecbdb8e95bcf81c722f94a545ff89e1fab96fc07002178ca48a470a711d64591da9a70c0d2e49cfc62f9876aa7cb6329137b00ad65dcc1be470003e133d92de8d20779dcfb5074647bab465b9064610df122509ccfb880a42e579f2a46098d911e54baf658937b952aeab80c9b4d9c34579ceef599816661aaff34676f318a02b4225e1557a3c18738efc6bd7581c2815e8cb0b948530442ed544d4a6b925595ce5020ff8e402eb910c357ad82eb7cf8fea5ae5325cc54e793d0431f3ecff9cd915d4efe0ff813219b7fc1317cc7f546529b3db1d842ba033b69d28ab3e5dba17b5e", 0xeb}, {&(0x7f0000000980)="1b6755e9634919714847068c52ab93a6bf2949854b4b0e408a8d08f5ca94054cbf2f950b3a5cd82cfff2c19d4462d119434986402aa48e03ce3cabd6fc8d92c2dbb92bd2", 0x44}], 0x7, &(0x7f0000000b00)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010102}, @sndinfo={0x20, 0x84, 0x2, {0xa38a, 0x8202, 0x7, 0x7}}, @authinfo={0x18, 0x84, 0x6, {0x7f}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010101}, @authinfo={0x18, 0x84, 0x6, {0x401}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @init={0x18, 0x84, 0x0, {0x40e9, 0xcc81, 0x3e0, 0x7}}], 0xc8, 0x4000000}, 0x855) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r4}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000040)={r4, 0x0, 0xda, "1db5e44f2c8b885f6bea582403dc6619c12ffc6d0199f7b91afd414a03e6ee1bc513ff6c71ffd67d01a55e2f827a949b66e10ff17c2f668d76298632b0961687538e25c1d1865d33c315c35c496bf856b6fd7c6abcb66d4e5fed32b4c207179570ca453ed14ec15c8a86e2696ecbb34707dde02d424416d61854fb3008747bac07f56259ba72a520d00228b3426c78e420532fe625b6f7128ffb231b171ed193ef5b4b1c7dde89ed9c4c2364209ade1a8bcbfb9fba02b32904ac5f73cca3069e45bd534384ee263113de5544dd919b7d60b24ece139b64076ae0"}, 0xe2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="03ff0100000000000004cc2b6c59", @ANYRES16, @ANYRESOCT=r6, @ANYRES64, @ANYBLOB="c373983652b7fc635b251831af72960cda8820d0873a7a1fc36693eca49f49cad134cf4b14acb4d631774134b5ba066b4a247822ee5c60ebf4109f8e07329181b7a10a95f5a94185956a728d3554f66bc148f642274782f29f5510efb1de2e7144bd0256778c6f64a01ab69129c9aa021cd8dd42a958fa3f"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="59f210d9196f93b43bdf5cdd22c65c7b1f6c45ca3fffad403c6081670f278419b7eed4fd78bb2e1c8d98e12e9d389bb11013a1047bb61275535d60e27b3483ff955b6f6c4d73beacbfa65045281c8643fac38e9eb24a9d87f7c6f3367a26e8178798bb158ec5c021892b2ef0c1e743b0", @ANYRES16=r7, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x10}, 0x40) 04:16:23 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x34c, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) [ 2137.450559][ T486] tipc: TX() has been purged, node left! [ 2137.453793][T24510] IPVS: ftp: loaded support on port[0] = 21 [ 2137.465373][T24509] IPVS: ftp: loaded support on port[0] = 21 [ 2137.488614][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 2137.488629][ T29] audit: type=1804 audit(1595564183.574:4606): pid=24514 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1366/cgroup.controllers" dev="sda1" ino=16193 res=1 [ 2137.565016][T24519] IPVS: ftp: loaded support on port[0] = 21 [ 2137.609623][T24509] lo speed is unknown, defaulting to 1000 [ 2137.632493][ T486] tipc: TX() has been purged, node left! [ 2137.681294][ T486] tipc: TX() has been purged, node left! [ 2137.686616][T24510] lo speed is unknown, defaulting to 1000 04:16:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000013c0)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000004060100000b0005000100756a1ab6686d3166cd0fd5c9ce5858364c38ed9e208ffd96a003b3534d3a450f41e3b8bb2951adf133fdf157fc44ef2da9b6284b45eeae5a60ee230ad87c3d7b225db296e576a2d7f9a4cdd3679bac532e8eea00000000000000"], 0x1}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r6, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) writev(r6, &(0x7f00000015c0)=[{&(0x7f0000001280)="eecff33be1cc7b4db93179e9d6894de257ac7fa95ffd2a0f89b71eae825ee2bb4abbf779db9026d154c69e92635d5ec09426ca2f484c636cb433e773d7c54744b1e85796e645cda6a446ef0d21a94b1483ecd462858101acdaaa0ab0405d101176", 0x61}, {&(0x7f0000001340)="a547f6dcb223a849f87d484da3e636e90af223ea3c49377525e85f636bb329f44f5b5161514e8bc9a34dc5445c993dc783b900a89f9057b18c", 0x39}, {&(0x7f0000001380)="1f63cee833efc78e93dc12c3c793dd2b43bb5a1a89c71598d2cbbea6", 0x1c}, {&(0x7f0000001800)="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", 0x1c7}, {&(0x7f0000001a00)="4f1dc04cf2887f3bc5d02b9fc86e3de591b4cd95e00362ca93bd76eac260cb48d723a2074c663614795617bcffea665ae5ba7f802d562a172c4fe82bf674985ebaace960e69ad384bc356107a25a421b22092f77c579d20fdc4a960093f0c097f06222988ecd0382fd8b2c3257fd8fe5bc1e84c6118f90fe9f378a1f5406aa04d9b273d48b947dda960a95432cf6195b54cd38f5650db1fa8500e0b47bdf1bd50c5dbd24af4c9531ba390928f6ffac73d15cc163027817a6b53e2b22f2aa1a16da3756591f25cb28ff00000000000000e0b8a647d3381eee6a8291a1943ed315fe03796f3a6c30b180f2fe25135692cebfba1233f52f74ed2a2f71d5f7563f6625e5ceb080901ce4424a616b97ad4ffed1c34d191a0a6eaa0ca5b968fb879ac04d1f1f67168af6fa58bf1308d6981d2ce87f43a7915084e203a4b01991f1b187ada06331feb24fa7355166cf500ff0618f01915f56b345dcd55c9da7d22772518f0c1b19e4c900"/373, 0x175}], 0x5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x34, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x950}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004850}, 0x20000011) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000001200), &(0x7f0000001240)=0x18) sendfile(r7, r5, 0x0, 0x1000000eb) [ 2137.722132][T24519] lo speed is unknown, defaulting to 1000 [ 2137.730240][ T486] tipc: TX() has been purged, node left! [ 2137.736547][ T486] tipc: TX() has been purged, node left! [ 2137.821051][ T486] tipc: TX() has been purged, node left! [ 2137.827221][ T486] tipc: TX() has been purged, node left! [ 2137.868635][ T486] tipc: TX() has been purged, node left! [ 2137.873918][ T29] audit: type=1804 audit(1595564183.954:4607): pid=24564 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1397/cgroup.controllers" dev="sda1" ino=16129 res=1 04:16:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) sendfile(r2, r1, 0x0, 0x1) 04:16:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "47755986b3f42d22", "de4e5adbdd1814e3a127ddecb92b93e7", 'Fdr#', "056a245f877b1bd7"}, 0x28) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x202100, 0x4) pipe(&(0x7f0000000180)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000028c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x38}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev={0xfe, 0x80, [], 0x2c}, 0x4e20, 0xfff, 0x4e24, 0x0, 0x2, 0x20, 0xa0, 0x0, 0x0, r4}, {0x1, 0x1ff, 0x7f6, 0x3, 0x1000, 0x4, 0xfa3d, 0x3}, {0x6, 0x5, 0x9, 0xffffffff}, 0x0, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, {{@in6=@loopback, 0x4d2, 0xab}, 0xa, @in6=@local, 0x0, 0x1, 0x3, 0x0, 0x9, 0x10001}}, 0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001340)={'team_slave_1\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000002880)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002840)={&(0x7f0000001380)=ANY=[@ANYBLOB="881400001a00000228bd7000fddbdf25ac1414aa000000000000000000000000fc0100000000000000000000000000004e21ffff4e2307ff0a00400002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000ac00070000100000010000040000000000000000fe80000000000000000000000000000b4e2400004e21006b0200208032000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="02000000000000000400000000000000b3e200000000000007000000000000000500000000000000f9ffffffffffffff0100000000000000322e000000000000ff0f0000000000007b1700000000000001000000010000004c0f00000000000000000000be6b6e000000000100000000e40006000a010101000000000000000000000000ac1e01010000000000000000000000000001001f4e2400010200002006000000", @ANYRES32=r5, @ANYRES32, @ANYBLOB="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"], 0x1488}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000) r6 = openat$cgroup_ro(r3, &(0x7f00000001c0)='memory.current\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000070649eb00f48dce5af84d60ee84000008000640fffffffd0500010007"], 0x24}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000b35) [ 2138.212545][ T29] audit: type=1804 audit(1595564184.304:4608): pid=24593 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1398/cgroup.controllers" dev="sda1" ino=16129 res=1 [ 2138.254632][T24509] IPVS: ftp: loaded support on port[0] = 21 [ 2138.287158][T24510] IPVS: ftp: loaded support on port[0] = 21 [ 2138.321446][T24519] IPVS: ftp: loaded support on port[0] = 21 04:16:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRESHEX=r0, @ANYBLOB="19000000000000001c0012000c000100627269646765", @ANYBLOB="27738cb4a6b980d98f8c644c53561ef4626cd4ce35fa943a030d2ec86a2cf0de16cf3c1e34c21a103d1a53b108816b244ce703958d0d9c940410f27473bc2f75f5872caa772d0d4b0b58d7411bbb201fbc838c44811c27d48d4576b93f0d38d9e60270156a9120c5acf6035a1fa0d8877a3d782e7c53d8f392adf7adee9f402fec9b70392fd5775c07cd411bc5be3b038be0de313494c5c67e5ece5e6690cbddc3457dc0f44d35006ba810639d66b80141b6343206537b7ee18232df118e70f652634048e24a91a1c1837670efd8a008d570", @ANYRESDEC], 0x3c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000080)=0x6900000000000000) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000000c0)={r6, 0x3}, 0x8) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_FLAGS={0x8, 0x9, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) [ 2138.371619][ T29] audit: type=1804 audit(1595564184.334:4609): pid=24593 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1398/cgroup.controllers" dev="sda1" ino=16129 res=1 04:16:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="7471616d30323000fc2f9920a97f6cf5188e56e429ffb482a7e2c71f2b08c7c534aa710039e7d548f2a20ace4a221c7dbc86ee9bfcc0fdf1882021129d4aa1d226de8d4449a23e532e9c3548e2b8685d8a88a76a39a3c669539d335e3d2419e5409888be7c5c587d618cee1528729b0eb85e6617cff01b218404254f13fa"], 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) accept$inet(r3, &(0x7f0000000100)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) ioctl(r5, 0x8, &(0x7f00000002c0)="2e9504cd36436c6ff1f3379f4c4f5e3547bc5bc67dfd72e38905e0e5b39465b76cf586dd9e6c974039ffb8da156dd1a9fe83") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r1, 0x0, 0x1000000eb) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x4c, 0xd, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0xffffffffffffff0f, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x84) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000280), 0x2) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r7, 0xf507, 0x0) [ 2138.476497][T24519] lo speed is unknown, defaulting to 1000 [ 2138.590873][ T29] audit: type=1804 audit(1595564184.484:4610): pid=24601 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1367/cgroup.controllers" dev="sda1" ino=16329 res=1 04:16:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffe73, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r1, 0x0, 0x100000b35) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f00000000c0)={0x0, 0x7, 0x78c3, 0x8}) [ 2138.681076][ T29] audit: type=1804 audit(1595564184.724:4611): pid=24613 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1399/cgroup.controllers" dev="sda1" ino=16145 res=1 [ 2138.757991][ T29] audit: type=1800 audit(1595564184.724:4612): pid=24613 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=16145 res=0 [ 2138.854355][ T29] audit: type=1804 audit(1595564184.724:4613): pid=24611 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1399/cgroup.controllers" dev="sda1" ino=16145 res=1 [ 2138.937944][ T29] audit: type=1804 audit(1595564184.734:4614): pid=24613 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1399/cgroup.controllers" dev="sda1" ino=16145 res=1 [ 2139.053852][ T29] audit: type=1804 audit(1595564184.734:4615): pid=24611 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1399/cgroup.controllers" dev="sda1" ino=16145 res=1 04:16:25 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x1000000, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:16:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r1, 0xa5a27f2e7ede6595, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}]}, 0x58}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x5}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000940)=0x2, 0x4) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2000) 04:16:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x4) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x29011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000b35) r5 = epoll_create1(0x80000) epoll_pwait(r5, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x6, 0x1, &(0x7f00000000c0)={[0x6]}, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x100000001) getpeername$tipc(r7, &(0x7f0000000240)=@id, &(0x7f0000000280)=0x10) 04:16:27 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0x6]}, &(0x7f0000000000)=0x54) 04:16:27 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x40000, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:16:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000b35) 04:16:27 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x2000000, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:16:27 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x350, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:16:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000b35) [ 2142.526100][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 2142.526115][ T29] audit: type=1804 audit(1595564188.615:4630): pid=24688 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1371/cgroup.controllers" dev="sda1" ino=16332 res=1 04:16:28 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x40000, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:16:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0xffffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) 04:16:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x1, 0x10}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r5, &(0x7f00000001c0)=0x4) 04:16:30 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x352, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:16:30 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x3000000, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:16:30 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0x1d]}, &(0x7f0000000000)=0x54) 04:16:30 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x40000, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) [ 2144.532698][T24720] IPVS: ftp: loaded support on port[0] = 21 [ 2144.545144][T24721] IPVS: ftp: loaded support on port[0] = 21 [ 2144.558563][T24722] IPVS: ftp: loaded support on port[0] = 21 [ 2144.599271][ T29] audit: type=1804 audit(1595564190.695:4631): pid=24726 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1372/cgroup.controllers" dev="sda1" ino=16347 res=1 [ 2144.647664][T24723] IPVS: ftp: loaded support on port[0] = 21 [ 2144.651676][T24721] lo speed is unknown, defaulting to 1000 [ 2144.721682][T24722] lo speed is unknown, defaulting to 1000 04:16:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x7, @none, 0x3ff}, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) sendmsg$sock(r3, &(0x7f00000005c0)={&(0x7f0000000140)=@ethernet={0x1, @multicast}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)="9af871fc7adda10742f97ab586460f3186f88d7649c799e61af9aaf425ad053e4f00278d4c9a36b5a14bfb794c47e005ec2a43d4efc15b4f5b6c0b4cde629fc4770f082b812616b6e5207cae13461ebedc6799675aa8720a4b929a9adf68f933faff45168a6902a931c20d911357850cb63b3017d040f8f4b69c5200015efb5391daad6ee9ee46ff9d70ea69e4e3e7ecd1514ad8bdfc086f183b32bb9b01bf3a01b1e2e8957d73d558a80010277a2967a378760561df35f98a5057c1abeede97db153607f4e1c64e0d", 0xc9}, {&(0x7f00000002c0)="1285a1339b70f7f108580c74a57418f6b9e4bdd07ac0ca635acec55ceaa6b7a5ae2c1ec9d70906b880f6f0bb32508654572ce6bb179a3979fe0bb98770124ac89ab12e32af904ecd5795f125ae", 0x4d}, {&(0x7f0000000340)="36f18e578d0804028e68862ae26986d5df6bf92eeb764f3b1187a82e29df9de830b45bf04cf3e29e54f203be1ea06e0be3d8151fea6862ba77649c38ed5c398bc611f756f603757b3ed17ad6e4ba9c83c6e85fda3122db70f4fab7c28b1a69436c34855b5294545d8c2e031f420bf32d2024baac780d07b825b54273c09f0f32bd49b1abac372b76486b8122579fd5838e2db567fd0655a286747cadee53307d7782e8c6abc7704d97d4bddab586f8710404ef3e5e8da9f333348e65b404dd", 0xbf}, {&(0x7f0000000440)="15e0da70d9242ba1890b02d93bcdce771062e534ddf1852316a361c5c7dfebd5e5abc17b9177bcea7ef988f4b9691d098389e85b75022fc8d93b8c9417447a6ba013711f94e9fa4ef4060851287cd604e54efc0289d175", 0x57}], 0x4, &(0x7f0000000500)=[@mark={{0x14, 0x1, 0x24, 0x100}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xa8}, 0x20040040) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100000b35) [ 2144.752366][ T29] audit: type=1804 audit(1595564190.765:4632): pid=24726 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1372/cgroup.controllers" dev="sda1" ino=16347 res=1 [ 2144.789127][ T486] tipc: TX() has been purged, node left! [ 2144.797324][ T486] tipc: TX() has been purged, node left! [ 2144.806137][T24720] lo speed is unknown, defaulting to 1000 [ 2144.842738][T24723] lo speed is unknown, defaulting to 1000 [ 2144.882087][ T486] tipc: TX() has been purged, node left! [ 2144.963356][ T486] tipc: TX() has been purged, node left! 04:16:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x10, r0, 0x3000) ioctl$FIOCLEX(r0, 0x5451) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000c116a7e45445b12d39fc1747094397f4fb2b3e9f232b13496b60d9e202e461fbe41f3cae3e1591c8aa7da4fb71e492caf43c9b7ed579c8adf93f7f6d4300f3d17616102441e80f4b951b2e10ef3f7c48885cf86503331a6efe583161b3e1bc7532061d7fa88e48f23aaaa15c80a06ccd10348ea1096ba3f4f14b9a6b2a398e937debc3294e5b7b482c51bfc5634f45441604e3c9cbc490ddf57e1da1c3ea6efa4cd89c23bedc1a56ee438bae278ad06ca96d6de234a9ca8328c9cb86e516eb26581b97592f9815600f8d4f8047b66eafc231b3e4ad02f2a3ccc9234c16e6fbd9", @ANYRES16=r3, @ANYBLOB="0100000000000000000009000000280003800800010001000000140002007663616e3000000000000000000000000800030000000000"], 0x3c}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) sendfile(r4, r1, 0x0, 0x1000000eb) [ 2145.035967][ T486] tipc: TX() has been purged, node left! [ 2145.094120][ T486] tipc: TX() has been purged, node left! [ 2145.169933][ T29] audit: type=1804 audit(1595564191.265:4633): pid=24803 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1373/cgroup.controllers" dev="sda1" ino=16369 res=1 [ 2145.199943][ T486] tipc: TX() has been purged, node left! [ 2145.301417][ T29] audit: type=1804 audit(1595564191.305:4634): pid=24803 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1373/cgroup.controllers" dev="sda1" ino=16369 res=1 [ 2145.367111][T24721] IPVS: ftp: loaded support on port[0] = 21 [ 2145.490473][T24722] IPVS: ftp: loaded support on port[0] = 21 [ 2145.546119][T24723] IPVS: ftp: loaded support on port[0] = 21 [ 2145.626445][T24721] lo speed is unknown, defaulting to 1000 [ 2145.677255][T24722] lo speed is unknown, defaulting to 1000 [ 2145.730685][T24723] lo speed is unknown, defaulting to 1000 04:16:32 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x1, 0x10}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r5, &(0x7f00000001c0)=0x4) [ 2146.087554][ T29] audit: type=1804 audit(1595564192.175:4635): pid=24819 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1401/cgroup.controllers" dev="sda1" ino=16379 res=1 [ 2146.202855][ T29] audit: type=1804 audit(1595564192.205:4636): pid=24820 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1401/cgroup.controllers" dev="sda1" ino=16379 res=1 [ 2146.285457][ T29] audit: type=1804 audit(1595564192.205:4637): pid=24872 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1401/cgroup.controllers" dev="sda1" ino=16379 res=1 [ 2146.437203][ T29] audit: type=1804 audit(1595564192.375:4638): pid=24873 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1425/cgroup.controllers" dev="sda1" ino=16341 res=1 [ 2146.541857][ T29] audit: type=1804 audit(1595564192.465:4639): pid=24881 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1425/cgroup.controllers" dev="sda1" ino=16341 res=1 04:16:32 executing program 0: r0 = socket(0x2b, 0x5, 0x2) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001640)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x30, r1, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r2 = accept4$packet(r0, &(0x7f0000001740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001780)=0x14, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000017c0)) socketpair(0x8, 0x3, 0x5, &(0x7f0000004b40)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004bc0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000004cc0)={&(0x7f0000004b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004c80)={&(0x7f0000004c00)={0x4c, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @private=0xa010101}}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000004d00)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000004e00)={&(0x7f0000004d40)={0x10, 0x0, 0x0, 0x8892006}, 0xc, &(0x7f0000004dc0)={&(0x7f0000004d80)={0x1c, 0x3, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040090}, 0x4000084) sendmsg(r0, &(0x7f00000062c0)={&(0x7f0000004e40)=@isdn={0x22, 0xff, 0x4, 0x40, 0x6}, 0x80, &(0x7f0000006040)=[{&(0x7f0000004ec0)="04f43f96accb2a26713fe5b4bea11421d1168623a047799e246971d4ab8d82a8ee582d0e5d166be9a531bf97d71aeae13b4805fadf64c91480bf4f4ec0f0b108", 0x40}, {&(0x7f0000004f00)="70ecec71979d2a93c03b49350dac01316c1c2269f9bb432b3c49df86862b30", 0x1f}, {&(0x7f0000004f40)="8152cae692fa5c8c8cae86db86444ffe0a54f7505400376eeaef09eacb87c8a77ed7c4ab0aa854f430e9360eb7a15e6092df34ace2b6193814c8a5d1d0d928696d1c0a9665b3f4ba5ef2016388fd10e5b87c2f968d500370fad494f6d49955a4a5aee2ca895f8c1c6d69578d75c24b3caa627399730eb0b7a461c333b0a5ee810f8406af857f6293f6cfaab065d10f58c6ee1a65eca3aa01bb2e7ddc9adb099762602b23beb00d059161c7a3cd0eba19bb7c2d0927c8716ffb6e499a8351b0651096b827c7e1cb0f769c7b", 0xcb}, {&(0x7f0000005040)="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", 0x1000}], 0x4, &(0x7f0000006080)=[{0xe0, 0x112, 0x1, "295b71c55e10af7dcc0ec3ef1404385f5bb99e39c8c151a1f80d58c1127514eeedc3a69bc29c99c9b0f24ae8c14b1c2cf6e7515ec060300714264d86772e5de4f1cd6ae759e449be504e7bb4ee9ced2cb38047b69f7052f42eb76fcadf4b0e5c1e1e77b17c605cab61bbff3ca21f593da2e0e45530379b40a36381403fa0c76d890e797a73f39f167b56deabe63d41bca2d472a0c03f8156b18cc139326a4cc57c9c019a2493ca866937a75fa59cbd466c2dd3dc25189985932cb52f43063563f2f6e352b00a19ac0030"}, {0xe0, 0x10b, 0x1000, "cd985ae0698139f91d66e1220fe95913e43aec795dac35bb5a1975c14b069ec32e8a7ce2e722924835c6873ffb25651146a24e05012962a53d829d80417b279bb0d5cfd8c54b1ba35b149a55a0394597198f389e78d8ec312c86ed2363f3e34279931a7b868bc0912da13e1118ace91ddd1be87f98164d7937766a82682c62cef6e19a2a82e7f16ac5b1aa152f56d53d37a4ee1ff4ff4e76c815c446b18195352f72242675d210fd79a55d7490b967041ccebc861bae6a120365e9d9cd6f8148085fb2edbcef4f09f371b624d8e60f"}, {0x58, 0x116, 0x1c, "04fcc34a70470b76f5bfe4ece8cd42a3603c8c6524f62c55338e8081009809178f8632d41d7a9256f67a25b6d50a0e634db8101b31e490c476fd609f605dc0795e7aebbf8e"}], 0x218}, 0x240449ca) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000006300)={0x0, 0x100}, &(0x7f0000006340)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000006380)={r8, 0x9}, &(0x7f00000063c0)=0x8) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000006440)='mptcp_pm\x00') ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000007900)={0x0, @in={0x2, 0x4e20, @loopback}, @ax25={0x3, @default, 0x3}, @can={0x1d, 0x0}, 0x3, 0x0, 0x0, 0x0, 0x4, &(0x7f00000078c0)='wg0\x00', 0xfffffffffffffffb, 0x3, 0x1000}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000007ac0)={&(0x7f0000006400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000007a80)={&(0x7f0000007980)={0xec, r9, 0x808, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000800}, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000007b00)=@assoc_id=0x0, &(0x7f0000007b40)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000007b80)={r11}, 0x8) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000007bc0)='wg1\x00', 0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000007c40)={r8, @in6={{0xa, 0x4e22, 0x800, @mcast2, 0x7}}, 0x1}, 0x90) 04:16:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x30, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e50009216cf96ce64002dc2e81441fa9c74d2fc43f9c891d415a2c81c5388c167fa710c3dc901e7b26eebee1a4d6b20ce0b522294c60cf47dd64bf16213fedd4e00ef36a049db55f003b0260fbf620ab483929808b0e0f8890098cc2fa5425e870a8a439459afff8d", @ANYRES32=r0], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000440)={0x3}, 0x4) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1000000eb) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xd86dac9, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000042c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000004280), 0xc, &(0x7f00000043c0)={&(0x7f0000004300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000025bd7000000000000100000008000800dfffffff08000400000000000b00010062617461647600000800040000000000080004000200000008000700e0000001170001002d776c616e3147504c47504c5e3aa1292b2d0000"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000200)={0x0, 0x5}, 0x2) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380802001ff104857698df40809f8b643186099313f64b589fb1aca676447e03f89e68b2893549b88c3dac7885abbe5fdc9f54899c8ea99eccb5ec24e541000000000000", @ANYRES16=r4, @ANYBLOB="ad1b79008100000000fcdbdf2505000000050001000800005d66910008000400ffffffff1400060000000000000000000000dc39d1071f23f9438b17757b46ad44f18266716b0cbf4b23825e0f5b8ce1d690000007c1647f856de6d9cc597701a9544034377a2ca563ce93b751913f66a5cb64a04bfb03fca778b7cfcb44857f6e12a3057e3618d93c19f550201930048633d3b1468305713910bf83aaf562012c15d1b3781ccc2d159f8f5e62c2cea7da4463aa44cd27197e46e5a5277dc1467f7fe05a570b"], 0x38}, 0x1, 0x0, 0x0, 0x48811}, 0x20008040) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x98, r4, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, 'cgroup.controllers\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x6000000}, 0x1) 04:16:33 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa6f25dd05dd5300000000140600fe80003af0ad621fe3ff8d00000002bb018000000000000000000000000000aa00009f09", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r3, 0x0, r1, 0x0, 0xd86dac9, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000042c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000004280), 0xc, &(0x7f00000043c0)={&(0x7f0000004300)={0x60, r4, 0x0, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'batadv\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, '-wlan1GPLGPL^:\xa1)+-\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000200)={0x0, 0x5}, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x1c4, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x35}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x10000, @private1={0xfc, 0x1, [], 0x1}, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf9f0}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @remote, 0x20}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe882}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc8d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xde}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x58081}, 0x80) sendfile(r6, r5, 0x0, 0x100000001) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000180)={0x0, 0x1d, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="380802001ff104857698df40809f8b643186099313f64b589fb1aca676447e03f89e68b2893549b88c3dac7885abbe5fdc9f54899c8ea99eccb5ec24e541000000000000", @ANYRES32=r6, @ANYBLOB="ad1b79008100000000fcdbdf2505000000050001000800005d66910008000400ffffffff1400060000000000000000000000dc39d1071f23f9438b17757b46ad44f18266716b0cbf4b23825e0f5b8ce1d690000007c1647f856de6d9cc597701a9544034377a2ca563ce93b751913f66a5cb64a04bfb03fca778b7cfcb44857f6e12a3057e3618d93c19ab7dfe5f034d09f275aa6273f550201930048633d3b1468305713910bf83aaf562012c15d1b3781ccc2d159f8f5e62c2cea7da4463aa44cd27197e46e5a5277dc1467f7fe05a570b"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)={0x6c, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x27c68f7be9c279fe}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40c5}, 0x1) [ 2147.609799][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 2147.609815][ T29] audit: type=1804 audit(1595564193.705:4641): pid=24920 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1402/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 2147.714062][ T29] audit: type=1804 audit(1595564193.735:4642): pid=24921 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1402/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 2147.820411][ T29] audit: type=1804 audit(1595564193.735:4643): pid=24927 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1402/cgroup.controllers" dev="sda1" ino=16381 res=1 04:16:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219efdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mmap(&(0x7f000026e000/0x2000)=nil, 0x2000, 0x0, 0x8010, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x1000000eb) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0)=0x3, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={&(0x7f0000000240)="4d54c1d2b713b3b53d2bc502d320cbef5bbda1e90f067a891f8cbbcfd0245c259f496617cb2d22103114027c14798085feeaffd4567001bc82d9ae946d336483f6219dd6f64e7d0a19df3348e8748978deee2a5f07633082a68d8c160150394992cb7692802941a2f54d10eac5c76083c8a24a0fda92222ad51da5028a9101e2851de398039cb2d2a7d2d64706cbd5e499adf31794ab5fe36333a8", &(0x7f0000000300)=""/136, &(0x7f00000003c0)="917a8306cef5ae9bec2202c41c6d845aa34647f0dd0f87a9b6c32d2c8d2b90da1b137321516e64ec0705917b91992ae45ddd9086453d2a185618b6141e4d781c5c508db08bf432000123fe0f3614e16236", &(0x7f0000000440)="319c65251d203341cd7f8210c273c3c3d04b024071dd0f6c206d2a558eda193421060b3297c5df4412a2faff129293291d844a22834f660677033efff987a76b7c26315b925ddc343c2653fa3ca6495b30cce8a41d6d692186532746aad9dd1684dcad6ebf19063a098f57a93e27c3d97bf754f77b0c70e81297b56f578434089e9deedc601e446363bcec7ecd7f998b3a52dbd5c74eb684659b129c904359261bacc21a3c6790ad7d2dc01218", 0xd5, 0x1}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) 04:16:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=0x60) write$binfmt_script(r3, &(0x7f0000000280)=ANY=[], 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000180)=0xcf, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @remote}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendfile(r4, r0, 0x0, 0x8000000000004) shutdown(0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x24008041) recvmmsg(0xffffffffffffffff, &(0x7f0000003480), 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 2148.337581][ T29] audit: type=1804 audit(1595564194.425:4644): pid=24930 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1403/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 2148.462090][ T29] audit: type=1804 audit(1595564194.505:4645): pid=24931 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1403/cgroup.controllers" dev="sda1" ino=16381 res=1 04:16:37 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x3c8, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:16:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16e48fbd6f5bd3e300b10ebd9c92002a7f5d1782ce46d5a7c1eedbf2d15da32d81deb5f9462a4d85395268ce24e3239a205881f908afeec4ac6657f914347c48b1e81a6b89bbc30adabf73efcc59de504d7b1e457443640a997e344a5360b1b0cd71ce08b01e2b06dc85089f7421cc537099af4e29b46b4cfe7491d26b140e8a7e", @ANYRES16=r1], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) vmsplice(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="82fe3d65854777e211f78386ce2f112c8f098bc70282c907455254", 0x1b}, {&(0x7f0000000240)="efee6844e7bd1b58a3ec39efcde532b43b401ed33fbd490018e7a144027ce53c2723b2c73f6b000c74615236dd52d99365de59fe11d33b28b89516c810814c71ca8141918cbbf28142a0b4daa77f35697708a3145d1d41b744eddead9a31ab489b3e713fdc31cb2587d2f92d12205a7a3768b723a3367c18b4f19a4214ccae4ebb103500d4cf3285a0ff76eac2a46b8b5e816137fbbe1a39d649a610fd80eef977", 0xa1}, {&(0x7f0000000300)="84610dde57a3c9fb40d57e1846f3e6e8a6036a4c7ddcef4649f7e528dbea341654e9bfcbe36ef06bb08c6b63eac712cfccd4a1f9d58fba95fd67820ffe3152b9578052cfee4288d238a2007a2f43bb35f2da3c6f951996d875ecfa3716ebd4705fe42ef36226a790056ce4570db03e44d6777eac2cd004c63c19647a8f4a7b5eccbdf923c2ebfb8f2eb55ef6e4674518218401854723672087125926223ed84d9f4995979ee50b3ab5032a24581b3c38", 0xb0}, {&(0x7f0000000100)}], 0x4, 0x6) sendfile(r4, r3, 0x0, 0x1000000eb) 04:16:37 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "73ac8bcfcd2778be66e96be685"}, @NL80211_ATTR_KEY={0x64, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9932dcd30c"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "ceb6efa6ad"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 04:16:37 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0x98]}, &(0x7f0000000000)=0x54) 04:16:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r0, 0xffffffffffffffff, 0x0, 0x5) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000140)={{0x2, 0x0, @reserved="be4f14d0c8f5402af3f6693c89eedcd1154df126225422f05a1b8449b1abb148"}, 0x4f, 0x0, [], "ac0cb7407ee64294d2866f5ad05e94c1c0ced579c1fa7ae32d9071738f737c40d44c977559e8d91e7e3515b23f110c7ffb673c8874ebe42fecbabe58e33b5e536d2b8521bdb101400bd8cc410fc046"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000000000000eb1bdc33f50ba4675460beb64088d904f1c48c35586a4201a93835f82982cae1b7000000", @ANYRES32=r2, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000006ba4f39eafd8e330c2bbde72b88735ab410d1a0ca36e57d2dc82f3498f03d5a6dd7280702dae6260be94fbb20aaf91988e2645ab8e91904c38a7f94c9e47f155429c528241f16760bfcea93652825b0844da12f194a3019646d1ac4373641ea49c6bae04e60fd29c26374eea860e3f9281b698e08d1f97490d84c7794af912d26921b0d41c5c46a25e2e4a69210a1f867752576e1b417adb9f8cf518008e20b8737cd7da5934615334f1c82e5c884ce1c09d56fe46e6f8b9ebca1026119a88d67364e227fc9f0df7def9721f5cba722c"]) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000a, 0x4000010, r4, 0xbdc7e000) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e23, 0x7fffffff, @remote, 0x8}, {0xa, 0x4e21, 0x800, @private1, 0xce0}, 0xfffb, [0x7fffffff, 0x0, 0xd22, 0x400100, 0x7, 0x4, 0x400, 0x17fff]}, 0xfffffcdb) setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1010, r0, 0x2000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001200)=ANY=[], 0x24}}, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100000b35) 04:16:37 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x4000000, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) [ 2151.129624][ T29] audit: type=1804 audit(1595564197.226:4646): pid=24952 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1374/cgroup.controllers" dev="sda1" ino=16374 res=1 [ 2151.139194][T24953] IPVS: ftp: loaded support on port[0] = 21 [ 2151.197170][T24956] IPVS: ftp: loaded support on port[0] = 21 [ 2151.273420][T24956] lo speed is unknown, defaulting to 1000 [ 2151.275673][T24962] IPVS: ftp: loaded support on port[0] = 21 [ 2151.286768][ T29] audit: type=1804 audit(1595564197.306:4647): pid=24961 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1404/cgroup.controllers" dev="sda1" ino=16371 res=1 [ 2151.323765][T24957] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:16:37 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x352, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) [ 2151.430982][T24953] lo speed is unknown, defaulting to 1000 [ 2151.461561][T24962] lo speed is unknown, defaulting to 1000 [ 2151.508445][ T29] audit: type=1804 audit(1595564197.376:4648): pid=24961 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1404/cgroup.controllers" dev="sda1" ino=16371 res=1 [ 2151.603506][T24999] IPVS: ftp: loaded support on port[0] = 21 [ 2151.793019][T24999] lo speed is unknown, defaulting to 1000 [ 2151.934203][ T29] audit: type=1804 audit(1595564198.026:4649): pid=24961 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1404/cgroup.controllers" dev="sda1" ino=16371 res=1 [ 2152.076495][ T29] audit: type=1804 audit(1595564198.066:4650): pid=24960 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1374/cgroup.controllers" dev="sda1" ino=16374 res=1 [ 2152.112825][T24953] IPVS: ftp: loaded support on port[0] = 21 [ 2152.204676][T24956] IPVS: ftp: loaded support on port[0] = 21 [ 2152.233424][T24962] IPVS: ftp: loaded support on port[0] = 21 [ 2152.248848][T24953] lo speed is unknown, defaulting to 1000 04:16:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x100000001) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@canfd={{0x3, 0x1}, 0x40, 0x1, 0x0, 0x0, "79be5704381446a2e4dfc63eb6c62dd93395e50ce48e168541296db166ab9ebbf6880ef1ca17325e992d69702094d82342da78a8220e97641df6fac7750c1308"}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4004094) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) getsockname$ax25(r1, &(0x7f0000000180)={{0x3, @default}, [@bcast, @rose, @rose, @remote, @null, @netrom, @remote, @rose]}, &(0x7f0000000100)=0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1000000eb) [ 2152.315622][T24956] lo speed is unknown, defaulting to 1000 04:16:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) getsockname(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000b35) [ 2152.404313][T24962] lo speed is unknown, defaulting to 1000 04:16:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f00000002c0)=0x8, r1, &(0x7f0000000300)=0x4, 0x7, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r2, 0xe0e, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x46041}, 0x40c0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1000000eb) [ 2152.656652][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 2152.656667][ T29] audit: type=1804 audit(1595564198.746:4655): pid=25110 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1375/cgroup.controllers" dev="sda1" ino=16345 res=1 04:16:38 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x3d2, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:16:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) bind$packet(r4, &(0x7f0000000100)={0x11, 0xf8, r6}, 0x14) preadv(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) mmap(&(0x7f000036a000/0x2000)=nil, 0x2000, 0x4, 0x810, 0xffffffffffffffff, 0x9a0f8000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', r6, 0x20, 0x7800, 0x7f, 0x80000000, {{0x27, 0x4, 0x0, 0x1c, 0x9c, 0x66, 0x0, 0x7f, 0x2f, 0x0, @empty, @broadcast, {[@cipso={0x86, 0x4a, 0xffffffffffffffff, [{0x6, 0x3, "f5"}, {0x7, 0x8, "def6d09ff693"}, {0x0, 0x12, "04663264dc0ce70fdf8876a7fcda6185"}, {0x7, 0x7, "02ab6b6d73"}, {0xe13389fdc0463e8d, 0x11, "9f9523aa2bedc24587112e0b02c04f"}, {0x2, 0xf, "bbb4e3be2c49ad932bc4e8cdb3"}]}, @timestamp_prespec={0x44, 0x3c, 0xa9, 0x3, 0x1, [{@private=0xa010102, 0xff}, {@broadcast, 0x8}, {@multicast2, 0x401}, {@loopback, 0x74f}, {@rand_addr=0x640100ff, 0x6205319d}, {@remote, 0xf60}, {@broadcast, 0x6}]}]}}}}}) sendfile(r2, r1, 0x0, 0x1000000eb) [ 2152.923357][T25142] IPVS: ftp: loaded support on port[0] = 21 [ 2152.975035][T25142] lo speed is unknown, defaulting to 1000 [ 2153.072317][ T29] audit: type=1804 audit(1595564199.166:4656): pid=25150 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1407/cgroup.controllers" dev="sda1" ino=16374 res=1 [ 2153.170048][ T29] audit: type=1804 audit(1595564199.196:4657): pid=25150 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1407/cgroup.controllers" dev="sda1" ino=16374 res=1 04:16:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) write$binfmt_script(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="6b74864ec08246fd063f463c8975901527ccd96c8fdecdb013ff2d3cbb2cbe276f0d56c64ad5f5c41e018852e7a5762539d5755a84f3274c4cc38af79760788c70c7f44605b2e18b7dcc55f13305e8b520b4a5745c4b2d6e33ea636a07f0af53f88374e3363d90a48902aaccb3bc2e3628c636062d2198135469362dea8b62ffd25a5816199d166df37f6df6bda6903db686a2f29f492e1c92dc94ac683fa0c8c939d3e31db30120df34b486d04148737c2bebad81ccd8673bcc3c7e8989cc99ca2962", @ANYBLOB="a29cd08cbaeee8f1aeba48a017597f31a042d71972d12cd61cce247215749f7cff34da3afda441dd63377ef7fe411549dae3ff6097efe4a08dfc954e6973f350b3b16409e87f2135a0c006409505a3da3c2c8ee5e11e0e98fbe9b11b65c7e340b0119d71575f941d370fc6cb415536f830a1396cdb647cd1058f45e537df7c9d2538184d19fa074805c0e1129710d70bfbae0efcb097fa9a883bbe556ba3dbbe3236ff4ac5f8fe3378fc8e5070c54d7c48c5d0907313ec66"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={r7, 0x58, &(0x7f0000000180)=[@in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e23, 0xfffffff8, @private0={0xfc, 0x0, [], 0x1}, 0x2}, @in6={0xa, 0x4e23, 0x781e2976, @private1={0xfc, 0x1, [], 0x1}, 0x8}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000000240)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 04:16:39 executing program 0: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xffc}, {0x80000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840), 0x6) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x2d}, 0x20000d}, 0x1c) socketpair(0x0, 0x80000, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfdef) sendto$inet6(r1, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 04:16:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea08d219b3dad0d6b50100c423ab8e4a0b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) [ 2153.512840][ T29] audit: type=1804 audit(1595564199.606:4658): pid=25176 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1376/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 2153.597008][T25179] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2153.672566][ T29] audit: type=1804 audit(1595564199.606:4659): pid=25176 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1376/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 2153.745492][T25142] IPVS: ftp: loaded support on port[0] = 21 [ 2153.765973][T25142] lo speed is unknown, defaulting to 1000 [ 2153.773788][ T29] audit: type=1804 audit(1595564199.686:4660): pid=25181 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1408/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 2154.828089][ T486] tipc: TX() has been purged, node left! [ 2154.988132][ T486] tipc: TX() has been purged, node left! 04:16:41 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0x130]}, &(0x7f0000000000)=0x54) 04:16:41 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e232e725839c97b910000", 0xfffffffffffffe21}], 0x1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x810, 0xffffffffffffffff, 0xe4465000) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000140)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e232e725839c97b910000", 0x48}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x10) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e232e725839c97b910000", 0x104}], 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000340)={0x24, 0x100000, 0x6, 0x20, 0x3}) socketpair(0x3, 0x3, 0xd, &(0x7f0000000180)={0xffffffffffffffff}) close(r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x6, &(0x7f0000000140)=0x800fd1, 0x4) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.events\x00', 0x2761, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r6}) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x1, 0x0, @link_local}, 0x10) listen(r7, 0x2) listen(r7, 0x1001) 04:16:41 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x6000000, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:16:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f48dce5af87efffd050001000700"/33], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000b35) 04:16:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) r5 = accept4(r4, &(0x7f00000000c0)=@ethernet={0x0, @local}, &(0x7f0000000180)=0x80, 0xc0000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x10) [ 2155.147680][ T486] tipc: TX() has been purged, node left! 04:16:41 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x3d4, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) [ 2155.256239][T25212] IPVS: ftp: loaded support on port[0] = 21 [ 2155.301066][T25217] IPVS: ftp: loaded support on port[0] = 21 [ 2155.317094][T25220] IPVS: ftp: loaded support on port[0] = 21 [ 2155.323532][ T486] tipc: TX() has been purged, node left! [ 2155.353946][ T29] audit: type=1804 audit(1595564201.446:4661): pid=25218 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1409/cgroup.controllers" dev="sda1" ino=16370 res=1 [ 2155.370679][T25212] lo speed is unknown, defaulting to 1000 [ 2155.391425][T25218] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2155.406535][T25228] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2155.438921][ T486] tipc: TX() has been purged, node left! [ 2155.462437][T25217] lo speed is unknown, defaulting to 1000 [ 2155.479124][T25220] lo speed is unknown, defaulting to 1000 04:16:41 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x3d2, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) [ 2155.539132][ T29] audit: type=1804 audit(1595564201.526:4662): pid=25224 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1409/cgroup.controllers" dev="sda1" ino=16370 res=1 [ 2155.588444][ T486] tipc: TX() has been purged, node left! [ 2155.628653][ T486] tipc: TX() has been purged, node left! [ 2155.663304][ T486] tipc: TX() has been purged, node left! [ 2155.703028][ T486] tipc: TX() has been purged, node left! [ 2155.775084][T25298] IPVS: ftp: loaded support on port[0] = 21 [ 2155.844167][ T486] tipc: TX() has been purged, node left! [ 2155.860984][T25298] lo speed is unknown, defaulting to 1000 04:16:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6df0d7ea10d219afdad0d6b5399cc423ab8e4a8b16", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) pipe(&(0x7f00000013c0)={0xffffffffffffffff}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x80000001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x1000000eb) [ 2155.925234][ T486] tipc: TX() has been purged, node left! [ 2156.013699][T25212] IPVS: ftp: loaded support on port[0] = 21 [ 2156.122487][T25212] lo speed is unknown, defaulting to 1000 [ 2156.144864][T25328] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2156.191799][ T29] audit: type=1804 audit(1595564202.286:4663): pid=25323 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1410/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 2156.199121][T25217] IPVS: ftp: loaded support on port[0] = 21 [ 2156.229684][T25323] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2156.247156][T25220] IPVS: ftp: loaded support on port[0] = 21 04:16:42 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x4000000, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) [ 2156.355527][T25220] lo speed is unknown, defaulting to 1000 [ 2156.411358][T25217] lo speed is unknown, defaulting to 1000 [ 2156.484154][T25361] IPVS: ftp: loaded support on port[0] = 21 [ 2156.645201][T25361] lo speed is unknown, defaulting to 1000 04:16:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1bbd000000db1c00010000000000006d3a09ffc2c65400"}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="309d5200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r3, &(0x7f00000002c0), 0x4000000000000d7, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x44, 0x1, 0x4, 0x300, 0x0, 0x0, {0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4885}, 0x4040000) sendfile(r2, 0xffffffffffffffff, &(0x7f00000002c0)=0x80, 0x5) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendfile(r5, r1, &(0x7f0000000000)=0x800, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 04:16:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="5a00762d48435b6e9fe7d5be5c98e9e734341c9a0a795980872c33f67770f7196b1abcbb45f718babb5d1ec7c3311cd325935966248207a58bc54f11d6c2d0635c244d4739b840747101e92b9f0e915db46a4d2e8928113b80db51dc3b4b5e1e629fb556bf28d4a9ae503fdf6ea0ba9d334995cbb69f148b64e51b9a80cadeae680d33b7dd893b34506d5e8f631b1116309272449ddd79be73b9bb87dcc7e18db21d18729079f195522bcc847aa76753863acb3933c7562f3052df9c", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010063616b65000000001400020008000d00010000000800030003000000"], 0x44}}, 0x0) bind$packet(r3, &(0x7f0000000100)={0x11, 0xf8, r5}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', r5, 0x29, 0x9, 0x5, 0x100, 0x28, @dev={0xfe, 0x80, [], 0x16}, @mcast2, 0x10, 0x700, 0x40, 0xffffffc0}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040)=ANY=[], 0x7c774aac) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="000000000100686673630000000008000200000000000e7b6c376cd4843882954c9547c60000000013750ff8834bbc206203340852cb3fd5ede8ea827aa4"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="00000000000000080000c767011a0100726f7574650000000800020004001a750300"], 0x38}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000380)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev={0xfe, 0x80, [], 0x2c}, 0x4e20, 0xfff, 0x4e24, 0x0, 0x2, 0x20, 0xa0, 0x0, r9, r10}, {0x1, 0x1ff, 0x7f6, 0x3, 0x1000, 0x4, 0xfa3d, 0x3}, {0x6, 0x5, 0x9, 0xffffffff}, 0x0, 0x6e6bb8, 0x2, 0x1, 0x1}, {{@in6=@loopback, 0x4d2, 0xab}, 0xa, @in6=@local, 0x0, 0x1, 0x3, 0x0, 0x9, 0x10001}}, 0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@migrate={0x160, 0x21, 0x4, 0x70bd2d, 0x25dfdbff, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, 0x4e22, 0x0, 0x4e24, 0x3, 0x2, 0x20, 0x20, 0x5e, r7, r10}, 0x6e6bb8, 0x1}, [@XFRMA_SET_MARK={0x8}, @algo_aead={0x108, 0x12, {{'rfc4106(rfc4106(gcm(aes)))\x00'}, 0x5e0, 0x180, "cb7c0ea33297688d21e033e5867f239a3d65f35fc5bccf3b07de77a236264b7763754a27259aa3cae4496ef4d25c62205c6c2acd467460f1a64d3b65361cc658e74cfca9840be7511f356c2195caae7d18c5d9940d6581a8f4453544faf6c916dbd1b524b3181d294df743f0178117d79df68d3ae65cbe379a5f115424f6a96fac848939de52ccaae4a6e4951865183c7df0fa6a8126ddcda99089ed741e7e30ee4095084b42d2c1acf1a51618cffbfc3cc0c6e89f4874f9f3f83ade"}}]}, 0x160}}, 0x0) 04:16:43 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0x276]}, &(0x7f0000000000)=0x54) 04:16:43 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x8, &(0x7f0000001380)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x80000006}, {0x1f, 0x1, 0x5, 0x8008}, {0x4c99, 0x7, 0x3b, 0x1f}, {0x1000, 0x4, 0x81, 0x3}, {0x2, 0x96, 0x1, 0xfaa7}, {0x6, 0x0, 0x1, 0x80}, {0x58e, 0x70, 0x9, 0xc27}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4088, 0xff8}], 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x84, 0x81, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000001) getsockopt$inet6_buf(r3, 0x29, 0x2e, &(0x7f0000001200)=""/234, &(0x7f0000001340)=0xea) accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) accept(r4, &(0x7f0000000a00)=@x25, &(0x7f00000001c0)=0x80) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000003) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x200, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x4008040) [ 2157.583799][T25437] IPVS: ftp: loaded support on port[0] = 21 04:16:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000000) [ 2157.811150][T25437] lo speed is unknown, defaulting to 1000 [ 2157.887049][ T29] audit: type=1804 audit(1595564203.977:4664): pid=25453 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1435/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 2158.263218][T25437] IPVS: ftp: loaded support on port[0] = 21 04:16:47 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x8020000, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:16:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000100)=0x30) socket$kcm(0x10, 0x2, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cfe8b00", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000002) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x100000001) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000140)=@ethtool_modinfo={0x42, 0x85, 0xa04}}) 04:16:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) close(r1) [ 2161.189332][T25488] IPVS: ftp: loaded support on port[0] = 21 [ 2161.207927][ T29] audit: type=1804 audit(1595564207.307:4665): pid=25489 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1436/cgroup.controllers" dev="sda1" ino=16376 res=1 04:16:47 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x3fc, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:16:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) write$binfmt_elf64(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x0, 0x2, 0x80, 0x0, 0x3, 0x6, 0x2d4482ce, 0x3ac, 0x40, 0x1b3, 0x200, 0xa1d9, 0x38, 0x2, 0x3, 0x4, 0xf001}, [{0x60000000, 0x2d74, 0x200, 0x3f8, 0x1, 0x0, 0x9, 0x1ff}], "e8ee8b4c8db898bdc062ebacbdfa360db4a7fd3d0074bac107969449868905a297e2499b", [[], [], [], [], [], [], [], [], []]}, 0x99c) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2022, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005500)={&(0x7f0000000040), 0xc, &(0x7f0000000100)=[{&(0x7f00000013c0)={0x6bc, 0x2a, 0x4, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x3d1, 0x36, 0x0, 0x1, [@generic="64cb98d2140bf65ba95fbf108609490e4834b99e217cd0ca7ec2e22c126dfded34e4583326666b4412d2682cd9e680b80148370d54bdb377097806773e08db1d44096d20abc9a52e5a3dd6e9773e46cac794b4e7ce65b27a1c0c5a33c36c5fad0555a539a77ef9eef942fd8cdf44929c988f223570a1aa76691d52fa97a617419ef4e099880f39b90c75fa047a52af0e7c683cc32e059d55e8f754af544aef869fb4db5b4d991b22d0231d7bbb9e013c16097e3f09d382ccc32410ae928ea13c8505f6e72fe7aca5d4afc3a60656262f8cca30bc97cfe1c54ba866bf22a2", @generic="80d335364153726a51a78bca982ef94ef1a3d818bfa20076041deb79afc61e6bfb4c39ef29ed29b120e5cbe54f62d152c2cb2e0161c31d17d3a188e4d6585d9c9e388960ee7785604cf618c0fdd2269dc0dbd7671748786aa0064dc80685e3d3cf673d14de4afe4940ca66f385fc96072a40369cd03cdb0efbf69f2eff67ee", @generic="1cca35670e6ea595", @generic="4f32badb762f1dabb7e528eb204495d0ff56316987d5604e8d3b78255beb632ac523041f57889ecd71dfc18880e4a6b873bc63ccdde7cf8e743e0fd99351b23755131633cc6ec7763ccc8752c664761b916581509c099f3e84abaa9adcfeb2515cdc242ec80effaf86961c019264", @generic="920e264567a781ce3e5fbea20e8035f0ce6ca57367f4512c039e469780363d1f9905ef2602a0", @generic="028e6a26336577fbe11ed29e8a511910ac2873c09662bf9920cd19d692070a76a202197bb9da09c46b99601c7db2741add60c94e6bd7e7a3398b390200f191dbdf28e445632963232a00592a6361619ffc5541922ce53acd0c7ca9780daf2307642a182624158af74671eeb19ff7748cff7447e186a640b85f94c2f7e71ff3eef27ca9d4bc9e4805cd707163f3a457fa5c24ef0019bd689b0c7c5d9e53656125c78fee325ec2c5cef027393d95d4e41977b6588d40ac7a529ff6785f0a5f055e02f8f370dae039e45f18f7b44b3e32644532aa16b8bec757e19f81771c7b17c35a4b0630ba83e27a41627134ee4636a999ac58bd", @typed={0x8, 0x3, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="3e2662eedb327516cb08143ba1e774f8cd161b4acc43f75485e10a2659426f49481287deacd9446cee232bb05035318f16cba317f2f51f6c4fe1db058eb33b00216becde15ce52d16e144a48ee104fbbfcb5242ccefeb605af44b9db55f05301d5aa4e5b90c41990ab8561800f076fc0d73cb75064668b8f59f1464706279a48dabbef5b2c065bf3d205df136cc1f56ef9facf9731f8f42bdb27b95e3b3b7bc48ca02b6ac11de985fb73dd244fa4d8fccec9a032f9edf8ecfb90de352e1625960ac1442e4a233c88", @typed={0x8, 0x72, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x9, 0x0, 0x0, @pid}]}, @nested={0x167, 0x74, 0x0, 0x1, [@generic="1eaf6e55b7d60264b91b145a356596b349beffa1512ba5942836858d383bb8fa43a98331efd2bfd978e9ca6fd59e823c9b54868cf792c433b0b294016c893a2f261f840906e88d224a8023f26a9a0933949206d9fb48ca404632d53cfb674c134de1e2401c7f5ec9d2166c97ac75fbe538625479f6ef3647edd654b0223573c9f850dbf7231ab60fc6d76876bdb484c95d2a2d3c15a919bf86c1e44bd250f5d2676efcaf71ffb3f5aa3f7d332cf88d23bd9b02969c2928c361706df610238b1eea84e727faf505d441243982ef8e306627ecbf551f", @typed={0x8, 0x85, 0x0, 0x0, @uid}, @typed={0x8, 0x87, 0x0, 0x0, @uid}, @typed={0x3d, 0x7f, 0x0, 0x0, @binary="fa7f29e712c3f3bcf063a2ca59af4787096267b83ce301e22263e5038ac68d074d8eb520d85cf84fa50874dcdc1e0347ba4a85d296828376b7"}, @typed={0x14, 0x4e, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @generic="e50a1a7813660b6f5936a1f35bebb4415d2e60837fc4052dbc", @generic="dec12abf3b407d849832a716af3afcd2d5"]}, @generic="c5ec82261e249b49d7032e69d61ce513b4f904c11ede003d536be8d8f056e5e7112589e8e61a3ac5ad203fe95f5af1d7f1672f6d6004b6a480d50479e6dbf0b0cc70a36638f938dad6a173d8902613cb0c278a583c00c75dfe6cc2c5ecfbd17aa2f3b04ee93fb0de3bbfd95d48a13132141700b7daec5258dd8b7293d7e60e86c887a9fa76729d42043872e40f2efa0a7a6cff28f78a04a4ba7459ca5e7c45534a", @generic="d5f155e85005f4d4cda5e754c39e99f0de8e0f1b60ff4d85460a5dc77fedd2395fd709067ca3ec6fb39e84676236a1f8f8e35e722b70181706d7d01c84ee27194b4b19ba084a16ad0345d16ad406338da1d7ab10c026c456468bebb1da664d072b713881bca455f0d8483624cecc67fdec5f15111bdc2be4bfd007f9896e", @typed={0x4f, 0x1b, 0x0, 0x0, @binary="81157b8c744fd1948aaaa003fca36209d063b132eb086d6924551c5373e3ec1ef588f68791e7e4d688179d123a18b875299668af8347ad02f9838a0d3e4c92b91c07fe77cacc5a63e38c9d"}]}, 0x6bc}, {&(0x7f0000005540)={0x22bc, 0x1e, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@generic, @generic="51ecf7c20d64c60d3c9bbc3413f7db31c196f79422e6c30bbdc47e6e6eeb46c6f878df92be696dbf90b3fab8c8d3f3b56628064b15f1da595d323681fe369f1f8655eb0c79544d8ead57b8bebb9f66a859941ca82b311c821f16bb36df", @nested={0xeb, 0x45, 0x0, 0x1, [@typed={0x14, 0x8, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, [], 0x1}}, @typed={0x8, 0x3a, 0x0, 0x0, @u32=0x10000}, @typed={0x4, 0x31}, @generic="1c9c89612ebcdea38655fbe3d901b7a865f72b9a6c86454ac0bb7579aeaf0b7f20601acb7b10349d89de906d71a125ad3f4cee72e52ea377a12d2d875fb1e7942991acdda5eafdb28d39c53384424a6da4b3d6088ade3d27ce9f5925d1fb5fb5e9a82e3017d76e2d394075e7aa28f7896a6332cf0187b8058d99cee10f7f3644002182e41a0c209fa1005ec7b052cce51746f932248be0c64e9b7b5f619e79e958f512cc4141647b08b10b1faf4c75111d0fc2e877b635040ee90edfd7690efe13812276f4e361"]}, @generic="0a874a13212fc9c3a3127347fb8716fd40791772f33bcbe778b776d78f4176702a3d3c4783beaec7d61d9ae6", @generic="09c52aaac137c9fda85ead56a4800bc7ce3379b8d8dcc34db77447ca5561bb49eb0473f029229c808a45cf7b6f8f87dd779a0e", @nested={0x2004, 0x3, 0x0, 0x1, [@generic="a5412eb0394ff3149af07a248c1cb9a1d73145723fca94a98008f3ce163f6cb03bf1ab6fc3c00649ec77fd33b0c526ea0db5d2e8cc86ba6849d04d97c4a1f0f92f572bf10cf470701c9441d40d8c1199ae6ae319d19ede0d87dbc268fda4173f0d6851ffe51c58f1945ba9b3afd0063ec5ddad4b7516345a145baf99ca6602f7167159d9d72a4b5da4acca2ddf3faba4d66c8cf4c11f3ee6f563524d64fa2491b7bfc9f0b8d3b2e3c37c6ce666fc61af1d49566bf2cc506e026876ee15f71696617ca3928ad63016678692bd018fc90350b2f05cc64356dfb9df3e15d0e1bd37c0092b39e8531a2056cdf3c36599259cebf970e988089961997db5fd864406b9385570666e27eb0d8c7904ccbda303c6df36485d2f204a4e7c1e292629215d4b44e3f8620fc92bc2655fab7a23122246b2f39a1167ef5a73d031c2beef253ed49a1935f249e65136797e6dd675540f619b55046b3efa67559fbf0be2013a13704a96fe0caa7d7b84f8858e50a2c2d89b8257d6f5b2bb24e3d0d282785309f6d73a259297f4a4474b328289e8d93f4eac200efac43d0af94de55db158c7ae21bb240db18d16440459f21602f34dc2c2d5e383a4e137b205d66ea442bb82e15cc24e9632ae60059892af67e47f9f2016c5e3d78ec0a14cbea8cd9d8aa0a6106ea06d5fb004dee9ba4bc31afd7241eab8ea4248543f5b181ddec469403abeecb023dc6510e2ddc4d481d950f38c8dc7bb76e37592b8e92dd5b3e4a914ea3c2cd60c8c0ae00995f81ef2ac2a75cda734e82b7fbd9bd13fd217e336ad2a00dbdf5c0d4b25e3c334036fe5b89fac324d7702b56fa939c72d862d01705bba04e9c254b5a3ca053dba310f014619e498ffbbdbeaa290083ed63f26fc8deb53a48f0f73148d2dc79ab6b905115ace06323d7af3038d0c0e5f1dae0d901b7f1a4d8aca397d044cff07b9ad7b16e12631bee4d848cf250727822bf5528b34b57e00976402cf3d35828afd8fa49a311858f28b882022a0fbe2a8c5945facee5e00aee5a2182d363db166eaedaa635498ca6adf52b4440df95372231dcfafae1567616d657b6faa0c380d120dfce15a3050a637209ccd6c32d003ae2d32d6e9503f0884a35e1cf386081c8f1a443c3976661679053027be7c66a74decd8d7d1eb3f46af656ca934aaf7842459f26eb02a708f9a007c4707bb0f6bccce6409626d9d327654303a0be00fa8ee1994b97b742777a8ec8934ebec27355e05808c206f400db95d0620ce9bf3170802018c5b386576b7b2552507273f2e89112cd5421d8cf5587c4f8e1dc2fe57456fe5870e895690a29a2cd4d208b73e0220031ad5ed0932f8f74993652414d2ffa67a4a10c20621c370008426132a35462172746cb490acfc825f5a473393d64c0ce0912f7746daee334f393b3101ee70e43b8fc006f09218000ed952be866ab72776c2c5b108b4232f3a5ef24fed6fbf18e36b859debd28894e3ea639ee1300947c0e13ececfde299b6942f48147aa684ec312d9c3160d26e7a69d866f81459007379cf1ce5e8030674faef189e9529d4237b6d7f1652f7b4a2359ad189eec2fa04f3d5956fa2afa31ca13b09d98f9d6c4cc78638f5f64a47ff9153eccf5bc2e7cf82db6953de741a28885dd6a6c32e91fe638398539405613c0a04beaeb7331f9f7e475ef4fda6c5b32bf3757892cde737056e2c98e4053f64fcf9ed846727012214934ba8609edd4e2eb236e63eb1126a307366467953036848db2eeade1ee4c33cc4373e7ce26ef86ed665692b0845a9dfb114ac5d1a427b053853b39ba9cebfa1cb6f2c5d56b61d033e17940b26009b3aa7744b1a01926ff789475daeafe63b21583de90775ba9b683e64547a6c568f3ae403e7db58042c8a07fa5e7319812b118aaa42ef560db2cb497dae1a46260b7e5b25930cbe6acd7fabb2a96fc60992392e628989c4f18178f8b7d1b4d1a6177398e985e7fce594ebe9ab9b928131b0006eecaa5d86ad4a6b791a57343a90754ca18f6dcec4cae4cbd2fd5ee918cdc8e9662aa15d341d25ac75b5a56b741950259521222c52e9d953d9f47ff7845722debcb0940362cdc2b3bbbc60da577f09e41b974c84067f4f4b08617866bee13b3ff3f9cdb1e48855c8cb5f11c37f21b2175eacf683f4b767ea3af65aed8206ae1ac8567db676bd1fc835b3d7a3cda9f06d00ac024becdb5f43558f54c4059da54c46d7d65741119aa268bbfaa210c71d81fc9148a8cf9bb03feb7791c94b3a5fa232687196be9cf7b04d280935816d3a2721e9b3747f66eb47e721e4498ccd9227c96bb0e54fb210bca49a89a55154404a92fd2fb203132027b2e6dae2494da43b5075e77871a379b423fe1642176d72edaca05d8cbc011722c2612ea044be0a3459976760c549c5d3e4619278cd3c4936688c7d9901e642b08dffa46855890d35caf4d3c1df7f9b046da3840d63c12eb917b2a6ee5b526f16a07b1833b21701e55d7f65c0ae3ef79d21af249708bd44bec8479dd31310826a777a0654d30eaff966539aad59a7d35b5fa39918c4c90c0c37513a82e5ebaa19a5ba2afea4efce93b8b90ca1293afa018a4bce15d67fce18a28d41396ab96a75d1439a0996d3f3e1b92b0e3b17c80a86a544a2aa0ee50a10b6deb58be939a2201400b3b2f4411f05964e470a2a8c6a295f8b3d0a4a280839ac0485b277afb999f3f249399b8c7598887bf4956cae7b6e9c17514748d888984f48413f7cae2d71ae82713fc3428efd87ff8fb38a7ecc5090608b74d6502c5559fc9425db82b961869dc168825f656798e206428a836f4b786fb4760e7cfc962f50ecc0a7646b74b00936054f23d18da5b2003d8b95cdd83107bf52c42753a364bb3e2a8b830ada9a70983d54c196bae96994d1e048ccf8201cd58a6e3324352a987ffd87230bad4fcfab2d7ff797c8bcdb64ad50a89f55d61684727dbed3da2af53d131078860272f2a27cf711afb212603f25b1b07225d4f307093b48eb528ebfbf02e27fa2358cf03224a0ad0fd26734852c38f901d7e3eba4716cf4ae2fa1989a23d579dfcfb8b44f4297ef645f01826bc6d412521245eea45a00a90e7239c124b4311cee66e63dd09c71987abaf0b0ef0fdc745e7a99b7c7f29d0d69a0e73b63ff1a75b6b37284ba18426887e5c10ad1d3e7ec4f5e0c003322bcc2a9f854b8941955babb22224341fdb3b2b85d1c06c96e6421189f72c64b5d62b2018e3df33ecc3e92b880496fa80400ce6bbd3adc2bf3645156ff4c3cf955799df7ff376702a6b822f94af7c4853b037b78ef39fe5a4f6d22376950c3dd1eee9eb0af7b53c9b00fbfbf4fd0fe4a46997f94215980b5db421805a7b1a799ab3a3bd07809a0335236442ae99feb47ea07db3251b6195d08aac5cb01e92618f6edbcb94723a1b77b07e302a7821eea59612b8856d8be39c36ecf8b5a1b76ca25c2560806dc52cbc6703e982355efe83b2e048ac79d47fc3c7c3b9393bb88d7ef818bb93199b64cc8397ea4627b4d7abc33bc02ffff2e359e8b849f164ebf8f04305aa233fa46cd4983917633504549ceaf325b2274595df0b7d1294749839a9ad63c4af7955d46460c9192c711e4061e9fe1af997dbda6b93b0ae358f0c4d48e542d23c5a9def1f7861db2dd8d1da57bb4def590e13da98d3a276e71aaac3a93a7f011983026cf01b3d896e77296d91c42b02c56618b814545cd87e04790410e7dfd22f8dc87bb415e4ce2a02849e4ee7cd0e6b9e1ae82139af34c4b066565b61d3c106cea2606d42bb6731ac1844388fe85756612984f0813a748e8be169158083505b35c05c15a3be4d20e5cbdf3c13762181a771b788d86f2646d266ce92374195709775c5aeeac1e712083edad789c815e10662ed285c13b46985e2fced7b0e1dbb49899521b185b4457ca8e0226e3a4a9b3b6561da16be5a3cc11f49f4a77bdb494f3991d8f1d96380f751a100c2340f74bb8846d12ca6b1c2c8ed9e6a31c099296c4e1bcc13ef1be65ddbadd26e6ec12e4d08bb2e9d3d57bceedc030623e6ed75a5975470f47f54990c4fca9ee46604d2d9f09952322dc6819bdbde44bce443e5a499057bfd80e5dc14fff9441dcd9ba5dd4f88b1f92a53c3eed11af5e8c74d02e20e4454a46943e340f8ba06931862b5a6b44757406632fc3ee9ea32217bf34e0b9ec484eb7c2e719d7085d3ad79c565f3401e11362419c83a5e6692dfd17ea11caaa7dbec1a1dc04486e46f10eb66b0d22c454f5a477205a46ace49b2545c871b22d99ea68d3e2d8b7387920034948b462d25cb0ea93b55fce84a3c48cfbbb8606821c9dd0041909ac0a3fcd4ef27551ecefd589bab129e3885d099187dc8290f1f54ca6816edd8779f9961a5f2f0991c50a803845ce07fd255cbf1d7189100d3badd5367b4a08dc14279eef9499815bb3a775fed0614c83145f87702a9167e28ad54f91c4c59389fdb3cc842d7dddbc07f05992bacb574e96247df87ef0af643cd6f0113d5582c94c829d643d8205b15bca718f61b505e8e03a1f4859431e6b812a56294c9d4a925ab7aae5e23405967c4b219e0c4fb33eba1806db37fa9532d6ef533f6054f1b4dd9ad4e5fee3c1cbb04cce08b20decd269ae24543d1f23553339a880bc1781e1ee8a25d310aaabeb0a0135bd81a1bca0ef4890816508fc94ca342c98a5bc92121db245eb36950622a18f0fa38044613f66953da3d6a60becae37ce81a82bd1bdc135d5a622d5fce8cfd47b1de1d8072bb748c156fc3ad3a22b171598938a25d28b2783a2c22b3cd663494f311c2f162ad0b362069d592e74e4c13683950860c1ad345bbac121ed1066e7e80a0cd0e22263e466e89dc004a2adc4b18884793124f9735b64d491e57fefefb0c3e6b91460897ce4cbc314dc6f2692c9b974bb45dad58a2865b8a670bd65165d88f5b4b6f8404ef3793a209e5f26c3fb099c6a11032e4e69d3b4f2486a2b620ee5e4ac83ded68ce9515acf01e2b0058704acf041ec6e0a0755ea58798ea9b8adaee3dbdb608081ac4d92459b65c7524ffd8078cb83b94c73681dbb6830a6ab479eea324047f886e042f310a6c0dd1f3dc1456c48b99dad963c6a41b33eb0f32d62f8c876186aa5c10afbeb57bf1669bee3e1c4a0be643078d49034ef467487d8003c58e9e4573eec009e7da143588fd72f352528b2350070b10912ab1b64ca5ae134cefbf91ea6d5e39743c2ef15b39e7978da686c1bf9feb607a761c9bd2e0cf7569c765681b890ccfde49f111dc5262c1dff853898285c8965546090169c91aa2ab13e6a2a6d0a530710990b82a4b8224e993ea4bc1cc320e707dca65f8056b5d4e3a8a727ac46e8d4545685311b733c3b7765c05163e126d360706dbd2184e8c9a2d922267d5260a908b3fab8ffd1ea4c2e6e36183b679e8197dc07a0f8e05c3d33a775abb017bb52b2ee4f2ff9eab7e3dbf71dd2dd6cdf36c4ec570dab17efdf223eb267c201c35b8d96e6685983e97a7aba64a28088e1a597d661b04c174095ae759ff6f4b1dddd9cd9a97aa1107dbcce6af7a6ad1a229594a042c258236763a6648f5762b44757050f4943334bf31d168ccd2ee45cf8c9843c82b390c1705170062fa4ed50faf0db498ce0d2b690817c6ef17e055b52e83abb025a6d06425b241a65ebfa2ef9d283d955514d2036b29b72eb9e8617db74e4310ff37abeb4f330bb928912f560f0ebba7a6b0118eb3f0618a22a73011b7ab9c44664f1ef69f55fd7ff4d462fb43bbfcfa70086eb09940f8dbeb", @generic="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"]}, @generic="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"]}, 0x22bc}, {&(0x7f0000003680)={0x70c, 0x24, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x4, 0x71}, @nested={0x16, 0x3b, 0x0, 0x1, [@generic="0c622b915e84", @typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}]}, @nested={0xdc, 0x42, 0x0, 0x1, [@generic="16bf49d74293248a14d84f177222b9216807784b9263da940618ee370108e4b1221ec0c854243c7de67708b1aa061388efa09f46a8a05a96f0588d7ff504d09358bd2c949972e85f854debdf38c440ddad5fc06ef642c51110b0b3dfd7e842f42cb32903af93450aae51098613fa6ddfc405e887ce71e597bbd13f", @generic="96dd2cfeaec3b00adafc04090209dd2ef906796afa23d34261259963289d7dd4e0bab3a5f766ccb324cfa39f575934698e352487270b4133f690ebca16a2a2409f30e6147a2cffa18a02607983a211a7d506201d848d401466bbc84932"]}, @nested={0x1c5, 0x6d, 0x0, 0x1, [@generic="aba66e3862cf9725fabdf289855f163ac2173e28367f778e5f33850d89fe92ea166a82d175e1a2bc004946bf5bd5e54d4dc0e189690256b3dda0a033e14e9ee12dc779266bd2d68a5fbc7d3279650bb4966dc7d17bf54e64f5408d81fdf70014d164eab2e69a36f702e3e04eaff99294a94302b238080e87c66f89", @generic="3be93f148669b55a17956ef689a951b88527dddfc9ea43b4bba052fb6a1a9f1c10e24152f15b942b454f9249bf975e55920d121e022592eb781c52f172b39b20ead84eb1e44af8c2f69970c9ef8e89a4af9f8ef9", @generic, @generic="e70b734d055a16201b49a487a8401ecb9160a76f5aaebefb6f24c9c6a2716e7bed9b08347d46b29ddf516b9910a4ea84a38c8754b1926f8f66f3367fb9dc8aaa66ae5d55e36b58ffd2a024ed95b87f240d14a56e57ae73b0f92a6ddc144f28b6312eb7afc282542ab72ba4f6edc389620d4b0e8a3aeeb1c9728b4c3287f5d1201bf425e5027e70a8ee8ea3f23e2c72ed54d6b10ffc077bae3217e1301d61b1f641da2674723a0d6be4c0b6246b597115ff1102edabfa5a53d877168f4e", @generic="55374aaee5cf9efc2f8e89d0fdcba35b3f99a40b75350d696fc148f52c2784037c27e2327fbedbdff9f156c6666f98d7dcc0e8b578"]}, @nested={0x32a, 0x7c, 0x0, 0x1, [@generic="82d3945201a8140c8058c4625ca66ed9e5329c15e76038f5011d856c1c7a5411b14a57b2c8fe7901f8c0a8ead876106e4b95a2e016c57dce3f7aca578f7b0a583a7880360fe6bf28a00eee0112d271f0914c735623157442648cc69e939f3a1447f8590eec349c3c15b11b6f453abe6ecc157e4a9d5c6cce7f", @generic="c0c6c7048564bc695d6fe1c4af011e1bcbde0d7dab4418b932c02db7da71b5bbd120d9e43b0e8ff29218b5e95712c01eb23f8799814958875b2cc54a2027c20d4eb5a044e33b49db881b519d816125f0dcf2d369c313f183356af76004c54b30989ccd1ba2037649dfce59742f90631f87e65d76922b12528423fba38f", @typed={0x8, 0x14, 0x0, 0x0, @str='gtp\x00'}, @generic="825ca04b1dca3a58bb2fe172fe50351365b55811897802437e573a51938a2d63d5ff653aeb6f07dc65c5e6009e94e338c43ccae8c30a6b807a2ec7aac7c6027163c8596b98e1de2820c4086daa0d3e65ace81d45bef5ec6294716dbafbeba4aa922ff446a96ff6b7557e10fd63de861f975de143f3eb13c81b2aefc806df23a930214c4d1bb518d34ccf50a6607d8c8cc9817a3c6361169d178bd3e41a4d92f1dac8e6", @typed={0x8, 0x30, 0x0, 0x0, @uid}, @typed={0x8, 0x2d, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="186946eea8ed6f90eeda8db61a515c9ea409fa3c85d208f77ac861400139e61860e3a82911aabe51a88952c26ea6bd6d816705848eb2bd342a58c32c3ce4083bd66136133f82fe947d8b9687126e80fb244479a8575839d9bac43ca587c2691a687981362c2b42499894c73539e060577a51a2fba4d661acb68fbebefc4af75ead41f9fcb6e6606d", @generic="0dffd3506c86ede9b2f268261ff10220a73dc33fb40d1b2e0c100f47a805ce474d9be41f6aa65260ec4f607c958260ff48870b65e88f10c87db26e1c57cd27192d4bedf143c127d000bd39e554c8f2cf22410cb37617e6cab171c1ddfe76f36e2476a061fd76db9a7fee28a33c3e30cd5134fd72d88c193c2b2b7261e774751ddc36e59f6f0112b4729fa0255d4bae94f35f21676122f7a737d8a3b8e302d8f40f1cb181db53dfb69b64a1ad6245faf279854807d10579ed62effdb5b920ac02fa50040efed3d6cf98a68d7db54fa63738f2f4c5a90aa17d74d0c184c977a222b0da5c40934b00d180a7336df9"]}, @nested={0x14, 0x52, 0x0, 0x1, [@typed={0x8, 0x6b, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x2e, 0x0, 0x0, @u32=0x6}]}, @generic="c2e1025ff9e8885944bc8ee9ffa237b1eaf71e28efe99ed4f6bb7f997358d1e35fea0318bc45d22a6dc1dce29c264362bd7f9f86e5670b6701b30d684b4bdaaa3c79fab5f5b6d5af4e7ff5240e5d9802603d9984509c7baa06a2fd371719877f372a1bfa59f1b91eb3ef28ed30e4ae689f9022eaf2d43510ccc85bd57d41c0487a98600b3cc1fbf7ceda0dba0a0b76e5e18182093842ef87a897e3dac542ebb4a4d42731b1e8a63875b401d371eeb1485d7f8d26671ac47786151e6b90dd5c52894e936ab305de0247d9b8ff91d9e223e9c075a077f329e22b658416835a7d99eb68379222021f2d94502510db66637b5b0698", @typed={0x8, 0x6, 0x0, 0x0, @uid}]}, 0x70c}, {&(0x7f0000003dc0)={0x1338, 0x25, 0x200, 0x70bd2a, 0x25dfdbfd, "", [@typed={0xa, 0x74, 0x0, 0x0, @str=')[d^!\x00'}, @typed={0x83, 0x1c, 0x0, 0x0, @binary="01c8be8921f3455d9f7a7ad61308a0498b74c40c480fd3c18f9fcf556b31466e90dfa7ba6d34d235e962596c14732f1791e4f914376a5d343339564f5fa089ba39e3001fab06e5268ca6ed7d018010c67512955f93a29c805e60b326f2655d4a8fc7dab5118911a75f8cf86caecaa154ffe3f1ea256b44395e53ed1c487631"}, @typed={0x14, 0x35, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="38b56f8fb9d189ece6fe4ecde571767475fc62399c61dc34ba2f5a7ece019de741df4d9e", @generic="0c49bcef6a251bdb26440c4eee136ee816d56adcce2c2c43ed9991b99815bf15a11971b2be2e38a1c885d154b0b9e3e69203d8e6f9170684bf6d663c927e49eb50ad05b7857f64a8309197c8635fafb711d6262d95951b8c924926badc3e8f8b4f2cb310a4a8b56d8e8f0e3fd29f4a96390466dab125e68ecbdc02a686c62ab86873102d5f", @nested={0x11d8, 0x10, 0x0, 0x1, [@generic="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", @generic="23361a7ed7ca59b99b44e570295ee1eaad7bc8d60c996543d45ae7ebd9a131022e021bb8de272b8265f302ff0b2ec4ce33e6a6da3ed07f41d7beb2b8b4fd397367f7cce187ad82c1bff0998c580f8f9f1650bf66de3f27d5243b26439e150d3a004cd34f5b5f191f9d9deb3c11519de29f8d9f604ee69a7c829e8c7ad28501b970f4116af518e9477ebaa16751db27dbf63ab562d8a4eb587277de9b82dedece22bed1d4549a25a20949912741903775be1acb92a139146b6e950f2134212d2425e869ab3d600c01", @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x15}}}, @generic, @generic="7c329c8ca922e1ec19d78ecd9ee21ff5191b43a4cb38057547be04a67dadbd115f4effd5f27e62d3d54e97c458877496ba13b099eee4de34f8713f508a875d7d5554111ba491827372ab9d01f2334e05063f345cf2b88ff08b8fec04d372c4edcd21100303b1b4ecb79c8fd4b8437694d3e8ceda0a267287abe6f25e32a11086a356d75a3f44e1f77d9735b49730fc8c1d32b8220ab47f4f2805c33384b1c5fa10fc0a6da7f8d14173883884dfb3944950b03ba8ba93280a070019b22d62ad1ae9ff40291c32923ee44000f51fc57ce7ecf37225d6721e3b8e02387cbfa7311870aa1ec4c502599a33507a5f2f175f86ad5f82770dfdc54f"]}]}, 0x1338}], 0x4, &(0x7f0000005400)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, r3, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, r0]}}, @cred={{0x1c}}], 0x100, 0x4000}, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x800000000080002, 0x0) 04:16:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r1, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, &(0x7f0000001080)=""/129, 0x81}, 0x40}, {{&(0x7f0000001140)=@tipc=@name, 0x80, &(0x7f0000002540)=[{&(0x7f00000011c0)=""/52, 0x34}, {&(0x7f0000001200)=""/29, 0x1d}, {&(0x7f0000001240)=""/159, 0x9f}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/229, 0xe5}, {&(0x7f0000002400)=""/65, 0x41}, {&(0x7f0000002480)=""/154, 0x9a}], 0x7, &(0x7f00000025c0)=""/4096, 0x1000}, 0x9}, {{&(0x7f00000035c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000004b00)=[{&(0x7f0000003640)=""/8, 0x8}, {&(0x7f0000003680)=""/199, 0xc7}, {&(0x7f0000003780)=""/134, 0x86}, {&(0x7f0000003840)=""/25, 0x19}, {&(0x7f0000003880)=""/164, 0xa4}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/96, 0x60}, {&(0x7f00000049c0)=""/12, 0xc}, {&(0x7f0000004a00)=""/193, 0xc1}], 0x9, &(0x7f0000004bc0)=""/139, 0x8b}, 0x6}, {{&(0x7f0000004c80)=@generic, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004d00)=""/184, 0xb8}], 0x1, &(0x7f0000004e00)=""/211, 0xd3}}, {{&(0x7f0000004f00)=@caif, 0x80, &(0x7f0000005180)=[{&(0x7f0000004f80)=""/231, 0xe7}, {&(0x7f0000005080)=""/42, 0x2a}, {&(0x7f00000050c0)=""/41, 0x29}, {&(0x7f0000005100)=""/81, 0x51}], 0x4, &(0x7f00000051c0)=""/93, 0x5d}}, {{&(0x7f0000005240)=@ax25={{0x3, @null}, [@bcast, @remote, @rose, @null, @netrom, @default, @bcast, @rose]}, 0x80, &(0x7f0000005480)=[{&(0x7f00000052c0)=""/46, 0x2e}, {&(0x7f0000005300)=""/76, 0x4c}, {&(0x7f0000005380)=""/120, 0x78}, {&(0x7f0000005400)=""/32, 0x20}, {&(0x7f0000005440)=""/46, 0x2e}], 0x5, &(0x7f0000005500)=""/188, 0xbc}, 0x3}, {{&(0x7f00000055c0)=@ax25={{0x3, @rose}, [@bcast, @remote, @bcast, @netrom, @netrom, @rose, @netrom, @bcast]}, 0x80, &(0x7f0000005900)=[{&(0x7f0000005640)=""/183, 0xb7}, {&(0x7f0000005700)=""/46, 0x2e}, {&(0x7f0000005740)=""/71, 0x47}, {&(0x7f00000057c0)}, {&(0x7f0000005800)=""/126, 0x7e}, {&(0x7f0000005880)=""/86, 0x56}], 0x6}, 0x57f6}], 0x7, 0x40000003, &(0x7f0000005b40)={0x0, 0x3938700}) bind$netlink(r0, &(0x7f0000705ff4)={0x10, 0x0, 0xffffffff, 0x400000000006}, 0xc) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xf8, r3}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000005e00)={'gretap0\x00', &(0x7f0000005d40)={'syztnl2\x00', r3, 0x7800, 0x10, 0x1c000, 0x0, {{0x25, 0x4, 0x2, 0x5, 0x94, 0x65, 0x0, 0x4, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x40}, {[@ssrr={0x89, 0x13, 0x72, [@multicast2, @dev={0xac, 0x14, 0x14, 0x43}, @loopback, @broadcast]}, @timestamp_addr={0x44, 0x14, 0xa6, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x14}, 0x5}, {@multicast1, 0x6}]}, @timestamp={0x44, 0x8, 0x63, 0x0, 0x9, [0x8001]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@multicast2, 0x9}, {@multicast1, 0x5}, {@local, 0x10001}, {@local, 0x4}, {@multicast2, 0x7}]}, @ssrr={0x89, 0xb, 0xf9, [@remote, @multicast2]}, @end, @timestamp={0x44, 0x10, 0x2d, 0x0, 0x6, [0x1b2, 0xa00000, 0x3]}]}}}}}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) bind$packet(r6, &(0x7f0000000100)={0x11, 0xf8, r8}, 0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000006080)={&(0x7f00000057c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000006040)={&(0x7f0000005e40)={0x1c4, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc826049f89b923da}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000000)=""/8, &(0x7f0000706ffc)=0x7) [ 2161.299211][T25488] lo speed is unknown, defaulting to 1000 [ 2161.318748][ T29] audit: type=1804 audit(1595564207.387:4666): pid=25489 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1436/cgroup.controllers" dev="sda1" ino=16376 res=1 [ 2161.549258][T25515] IPVS: ftp: loaded support on port[0] = 21 [ 2161.666699][T25515] lo speed is unknown, defaulting to 1000 04:16:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000100)={0x0, 0x2000, 0x2be20000}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x100000001) connect$phonet_pipe(r6, &(0x7f00000000c0)={0x23, 0x0, 0x1, 0x1}, 0x10) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000140)=""/72, &(0x7f00000001c0)=0x48) sendfile(r2, r4, 0x0, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r8, r7, 0x0, 0x100000001) openat$cgroup_ro(r7, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 04:16:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x7, 0x6, 0xc05, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3a}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000040)) sendfile(r2, r1, 0x0, 0x100000001) 04:16:47 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0x298]}, &(0x7f0000000000)=0x54) [ 2162.005587][T25488] IPVS: ftp: loaded support on port[0] = 21 [ 2162.014064][ T29] audit: type=1804 audit(1595564208.107:4667): pid=25539 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1414/memory.events" dev="sda1" ino=16376 res=1 [ 2162.043466][T25552] IPVS: ftp: loaded support on port[0] = 21 04:16:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x8cf5b}, 0xfffffffffffffe59) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3ff900"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a10b", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 2162.170308][ T29] audit: type=1804 audit(1595564208.117:4668): pid=25539 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1414/memory.events" dev="sda1" ino=16376 res=1 [ 2162.198426][T25488] lo speed is unknown, defaulting to 1000 [ 2162.270149][T25552] lo speed is unknown, defaulting to 1000 [ 2162.369642][ T29] audit: type=1804 audit(1595564208.117:4669): pid=25539 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1414/memory.events" dev="sda1" ino=16376 res=1 [ 2162.569977][ T29] audit: type=1804 audit(1595564208.267:4670): pid=25557 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1437/cgroup.controllers" dev="sda1" ino=16366 res=1 [ 2162.583032][T25515] IPVS: ftp: loaded support on port[0] = 21 04:16:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xf8}, 0x14) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) bind$packet(r6, &(0x7f0000000100)={0x11, 0xf8, r8}, 0x14) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)={0x5f8, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_SOPASS={0x9f, 0x3, "c0727fd706283bfb9f6774a665f2880965217698e3c8216f7933166730e834d99a52f7a68462fe38f0b97dd80de5a3e0c0f96874fd019c4bb496377fe637a31931b3ac8b377794c7b24a2ab8faf093b8950ac6873f3170c567ffe8cca31877c57e47f95548e07f007bcdd3657c3820b59687aa4b54aa16e2ae6301dd97a019594a0ed123cbf1a82e10ed05421ac94cf2303e18cbac1a57e7860c20"}, @ETHTOOL_A_WOL_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0xdf, 0x3, "a1f6b7e0a534cd5b9ef7d930d08872c6f273c3f1ffcbd8988f08452bb222db7878ab71aed47ba686f46c2755bf4daa4527d338af6f2ca0e24a8f25bbd1888a31cf0ea27a2b5bafa8cfb44310550c7c169c6e6d70ea5316c7e933cf5895995d28bfb7929a259f65dc4578d002d7aab2d5c56bff3553220e9384c0e1ebb0499025583b4ecaea16492dbb57de0e0b99d776cdb06919812bfff902f3217cc5856df42c2f3a8e764985b89ea57e25e494ac35350a5d8726c5c13dddc41120f533ed4bc0181f2cc73431c77add8e796591b2f64a4e122a543c95b2a97699"}, @ETHTOOL_A_WOL_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_SOPASS={0x71, 0x3, "f4a1fa6dbfa1e78f4cd3baf405d2644c91433faa9292a52e1f64db3f6a66df85204bfb4a166bb783f69f5a1a81f29289bcce8eada03b981e654e8417186b881c1073d834ea5df613c0cf60b49a85e7dbc216f11075a512a8de724ae106558816ffd945ae636ebf6b326f0d9dbd"}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_WOL_MODES={0x2fc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xdd, 0x4, "bbc355d780e00e63abf79d830ee6aee58fdda61ee4a9e85f2ff77ada4cdde9283f5928f6b526ab4fcfdc5cfc61bec1a5d1925700f460989ab9627a5dc5deee5bd077bf5c1124f919f574c32b7878afcde30d574125f8369b6c0a58540379ed2fa519fb88f87af242e1a3f8992f719a1dc20d0f1298cf2dc2cac388edbde564b4ea5b0738f306f914067fd9fdfd412900587c7a98a0690d68898edfe63294f48a8d9fb3a41fae48ce36b2e690f7e605a1b88ca161875df859fb2eb94c2e417e7945cb388c447de5e2486382508f7d6ee4056d92c14bb91502fc"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0xe6, 0x4, "0b029dfa02ae7fbf83528808886d07596f45dd0aa27290e125fbb06444036fca7941f47b4908721b369de25041e41eb566c51ebce887dff9f783474f10330a7db1671aefb3a77c3b943f69f132dbb7f252f2657c03437a2da105ffcb8d9e1079c242744a4e0fbb0d4c4c1f95eb328df53f802f93d7eaaea4538a1037c17a2da3cbc5a6a34bf399757af6218d9383c6d69454c55dcda51ce70420f1df0d47570878acc9f1cb9ae61350eccb637f7a7a07c9620ae24409af8e331864fd74bcf5a5bf4a11ead318b1d93f29bb52ec25aaed818216f4380a683692cf6cd8dcd8a7680080"}, @ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7922761c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/\x90{/-%*\xa3^/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^s\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd799}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '}{\\.()-\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x7a, 0x4, "030044554cc3e80149bda4b282bf81cc073d8f77d3b497a09f96248d6f3d482de2e1877c2afbb8e36634d3f96d3059524008698d552a332eb558cd542204f9ac1a49b69a90b8611bbc09fe00016c6a70c037d5d6adadc8cdacae266f9396cd065ecd0e91207e7bea4d94540aa217922aa22b476fa5d0"}]}, @ETHTOOL_A_WOL_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_WOL_SOPASS={0x17, 0x3, "39e4cf407dbbd60911190a00e148412e4de790"}, @ETHTOOL_A_WOL_MODES={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000050) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r10}}, 0x20}}, 0x0) [ 2162.739109][ T29] audit: type=1804 audit(1595564208.267:4671): pid=25554 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1437/cgroup.controllers" dev="sda1" ino=16366 res=1 04:16:48 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x9, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x100000001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x18, r3, 0x301, 0x0, 0x0, {0x13}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) [ 2162.845009][T25605] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2162.953180][T25552] IPVS: ftp: loaded support on port[0] = 21 [ 2162.972328][T25609] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2162.992465][T25609] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2163.118932][T25605] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2163.199601][T25615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2163.211682][T25615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:16:52 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x1a010000, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:16:52 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000040601020700000000de0000018000000000000007bc0b686f5ffb"], 0x1}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendfile(r5, r3, 0x0, 0x100000001) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000ffffc924cd160d6b11061498fdef84a118b71bb7e8058a74c8ef45f08ee65cf1f8812bca366b0bfc93e8", @ANYRES16=r7, @ANYBLOB="050000000000000000000100000004000400050005000900005505000600000000000800030003000000"], 0x30}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2e268711", @ANYRES16=r7, @ANYBLOB="200027bd7000ffdbdf25040000001800040006000000ff0f0000f0000000010000000100000008000400270d000005000600d7000000050005000200000005000600ff000000"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x404b840) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r1, 0x0, 0x12b000000) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000040)) 04:16:52 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) sendto$rose(r1, &(0x7f0000000080)="a88ec6a834d0acba738f1de4559073bfb40c374e7bddf58aebbd9932c55006c59fc2a90e569e664c914fd71a9d5f65a92fc30eb2", 0x34, 0x54, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002100)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x5}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=[@hopopts={{0x10, 0x29, 0x3}}], 0x18}}], 0x2, 0x0) 04:16:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x551001, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001480)='NLBL_CIPSOv4\x00') socket$qrtr(0x2a, 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000001540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x30, r6, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000240)) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) close(r2) 04:16:52 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x3fe, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:16:52 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0x300]}, &(0x7f0000000000)=0x54) [ 2166.315550][T25702] IPVS: ftp: loaded support on port[0] = 21 [ 2166.338161][T25705] IPVS: ftp: loaded support on port[0] = 21 [ 2166.356649][ T486] tipc: TX() has been purged, node left! 04:16:52 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0x298]}, &(0x7f0000000000)=0x54) [ 2166.373855][ T29] audit: type=1804 audit(1595564212.467:4672): pid=25700 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1439/cgroup.controllers" dev="sda1" ino=15954 res=1 04:16:52 executing program 1: socketpair(0x1e, 0x2, 0x1095, &(0x7f0000000180)) [ 2166.418585][T25711] IPVS: ftp: loaded support on port[0] = 21 [ 2166.440115][T25702] lo speed is unknown, defaulting to 1000 [ 2166.478017][T25705] lo speed is unknown, defaulting to 1000 04:16:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f00000001c0)="5d812018a96a0eb50aa4deb870e878401ff87df371f3832779cbb9d6f59f4e180645a29368401c70d12023db06da9bcc689b00c0cd70cf3e571e7aada650c4009ae20890d1a3189e5752ebdfd490615688b888cc67baa66d3c61b05acb56de4e4b572ed43ec1b95d3e3341bb821e6dd38702ac1d42fdcc2a1ea08dc2c545c1e710555d81a829e6cd3f7804d7c609d90481fbd0d1dc847ef0871cb7b9c9dfac873c209d5cb6c05be24a885a7e62cc85441d3999fb5986c44f32fa53c58757693abf4549a906bd39a28a0fd43d2886d0536a98e99e3859e41e719b2bf09ff7c27955945d0528acd6323ca683", 0xeb) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f0000000080)) [ 2166.509301][ T29] audit: type=1804 audit(1595564212.497:4673): pid=25700 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1439/cgroup.controllers" dev="sda1" ino=15954 res=1 [ 2166.525918][T25719] IPVS: ftp: loaded support on port[0] = 21 [ 2166.546440][ T486] tipc: TX() has been purged, node left! [ 2166.559490][ T486] tipc: TX() has been purged, node left! [ 2166.607406][T25711] lo speed is unknown, defaulting to 1000 [ 2166.614623][ T486] tipc: TX() has been purged, node left! [ 2166.640656][ T486] tipc: TX() has been purged, node left! 04:16:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x18, r4, 0x301, 0x0, 0x0, {0x13}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r4, 0x311, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xffffff7b}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x40}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x2}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x9}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x80000000}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x2f06}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040011}, 0x44044) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001540)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000100)="57fe06a9f7", 0x5}, {0x0}, {&(0x7f0000000640)="bd93a952c3d02e847178dcb8495bfeb29388fc514e7ededff3bd59a32d3c596c3891b48fd5405317c3dcd5b798f14c53440a5d", 0x20000673}, {&(0x7f00000001c0)="0c0a582f9b43bf27ff", 0x9}], 0x4}], 0x1, 0x0) [ 2166.722195][ T29] audit: type=1804 audit(1595564212.497:4674): pid=25700 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1439/cgroup.controllers" dev="sda1" ino=15954 res=1 [ 2166.790464][T25719] lo speed is unknown, defaulting to 1000 04:16:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c1f02800500240001000000"], 0x3c}}, 0x0) [ 2166.833397][ T486] tipc: TX() has been purged, node left! [ 2166.893508][ T486] tipc: TX() has been purged, node left! [ 2166.932873][ T29] audit: type=1804 audit(1595564212.507:4675): pid=25700 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1439/cgroup.controllers" dev="sda1" ino=15954 res=1 [ 2166.958207][ T486] tipc: TX() has been purged, node left! [ 2167.040562][T25805] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2167.056645][ T486] tipc: TX() has been purged, node left! 04:16:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000005b47b4b04fed4e2a21ad8beb06b167de4283ffaec56d159e56a166c9db835a8808a86292f4bea321847a42767a7b89b65e4841c9695825a4b10dd5cb8b24f89f29ceef0a428124dcefb40b6b8ce6222864e92d22b053bda211a0aa613e4d66c8a0490480cbaca2b1216ca5637c028cbe0af4fd21ed36a2ddd56830044f3ead6d80d6f3f39955a2bb6662c29c913e8356d5a58ddb4293241f2ed955ffa0b9"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xf}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x14, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xd82f}, @TCA_TCINDEX_MASK={0x6}]}}]}, 0x44}}, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@caif=@util, &(0x7f00000001c0)=0x80, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x18, r5, 0x301, 0x0, 0x0, {0x13}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r5, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x80000000}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xfffffffc}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xf8e}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x80000000}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008001}, 0x4000040) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 2167.247660][T25705] IPVS: ftp: loaded support on port[0] = 21 [ 2167.290588][T25702] IPVS: ftp: loaded support on port[0] = 21 [ 2167.323499][T25711] IPVS: ftp: loaded support on port[0] = 21 [ 2167.352340][T25705] lo speed is unknown, defaulting to 1000 04:16:55 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x1c020000, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:16:55 executing program 1: r0 = socket(0x9, 0x6, 0x7) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r1, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x191) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x800) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="97eb26bd7000fddbdf250400000008000100010000000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x40c40d5) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x40110}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="08202cbd7000fde3df25030000000800090002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x8000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x44, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000400)=0x21, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000010453930000000000000000000075a69f0c53145280748518d3869e300a2b40727c51337c37355bf0e0dd6052597d9635d3ac6c71e800", @ANYRES32=r8, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00e4e4550414000008000a00", @ANYRES32=r8], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000b0400f87f769d53ef4a9aebc12b", @ANYRES32=r8, @ANYBLOB="00000002"], 0x3c}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x4000000000002bc, 0x0) 04:16:55 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001880)={0x0, 0x2c, &(0x7f0000000380)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, @in6={0xa, 0x4e22, 0x2, @mcast1, 0x10000}]}, &(0x7f00000018c0)=0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x3ff, @loopback, 0x368a}, 0x1c, &(0x7f0000001800)=[{&(0x7f00000001c0)="3163b9b78b849fdc727baa34d2b48d4da79193659b1e29f388244b36da27a0a9cac0848847fc0368a0e4d86ae89616642b9471de53e5279080b66efc1df9505b932d69fd47d2509d7407c6f2472e4d8e1b333c8b96d29ea183fc758153a8ed5220b5751d6b58e3755a73bdf40ddd78b4ffba42771a30e0553f5479c6e04764b85d1036b6007b956122161884d9083580581ab97894f02bf207fb9dca34b65e889e1699546f061ccde533070919b009768e6417754fc21c4a", 0xb8}, {&(0x7f0000000280)="11f766689685c0ab647530180544f65a765b0278cc056e9f6344b16dd732dcd69857941357c8df449f0b31015672a0982344fb8fb001bdf25402a4c648d13258c08f09403b89faf101d06501e72eb2bf55dbcd47b3f445f7517c3b3ab0381804816fefeba1a87544e839c49c690b8569a1a11aaeab5cbdf8ba19802553a76f04264ac4ef6476f5ee2023554fb4bc1bbc4015da71f18674a6b5c3bcd95bf0805a2666fbb1dc58be465e3fd0861304650c90365190553aa9895c42e5cb096a84d9c0375d3b637aa8d13b229c1c239a9ccb2bedfbc13460bd2c53f6cfae84673a86b82c", 0xe2}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000000400)="9f0247c39945cd92387e483a617901bdf442a5ad5f62e7d61b87ccd21ba8723cdec620495914e8c2a79d6c352b97ff5204bd3c2fbb1b24fc04e34e0fdd60bd2dd8527dfea66d11f9f7a6a95fda463a3365a2384b11b69082daf9efa6546e64044487371960ad168c46dbc52658f38b72", 0x70}, {&(0x7f0000000480)="0f0b40c9ffff99a2bf5876bc351f717e812b1d6c7630e1b7fba7716d805034bc65f9b95a689e795e96a318ca9bed1d082ca68257917de0267ae58ff47c5cb4dbb9e4ca643cabc9a0056ea32099ef4e30ff9e6b3ba13863ec1da2f14e032cf9f6b2070c1ec4d9d91f7c7e37d3724e78b5799a8131e568bdb383ca056653981b95302212c8572fe636d579c7bb50045b911cc062d2ee62a66a504994dd8f423d925894c87a9c09d1ff2aded4b0dd4b225a2a2bf60c053d104649a77db8a6ff5ba4173c9488fb361f26267e2a1ec78c3fd5c03997e05576f8835d038bf7257c3b4381c48908d8b3a8f9b22f682509f25e", 0xef}, {&(0x7f0000000580)="4cdf61a7bebb15e95855576a330bc370546869b64294e4b718f15de29e3526557c298713f91db9c45ab4252652d8045ab593a63d7e1664990e3be81674e42d5a9fcdd6c985bfa652319baa50823112e202e1cd76e95c7a38b52ee27dff704e51fc245fff3f17c53320923a8da42d26a8516a51cfacfd72845d220d7b95143ea9ae71314aa3b04352b1bcec16c9c905ae126eb4389fbf72aa75c4fd8ce7d45232", 0xa0}, {&(0x7f0000000640)="8ab96833bde0ecf9b27dae11b8f5bfe03d9bea33f71dc32f082bd0720bacb51db84d9b6847a0aed5ab54c8846c2300ab4369fd23fef4b94bc0886a406e5410fbf6ae28c9672c93f944a0523a74ae41491ddf1b7de124fc9728c4ffdcc6911b4057fce35a2c30251a4b970bc8188822fae87491d6be5c94341d8b7c65d7581610072277bf7cb66af61b1ecef14279792d6a6109fb1981878c78a3507f716caf8a4ce6def1", 0xa4}, {&(0x7f0000000700)="a08a4fbff6e4ea21a8d0b82b1315b736e031879c92c0f88f28a93b0fb56ec327c54a6c0e7c8f1afb24f9a1fe703cf055b2ac0c26584415c89b3286a7a5e4f2de72", 0x41}], 0x8, &(0x7f0000001900)=[@sndinfo={0x20, 0x84, 0x2, {0x101, 0xa, 0x10000, 0x7ff, r4}}, @authinfo={0x18, 0x84, 0x6, {0x5}}], 0x38, 0x20040090}, 0x2) bind$packet(r0, &(0x7f0000000100)={0x11, 0xf8, r2}, 0x14) r5 = accept4$inet6(r1, &(0x7f0000001e40)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000001e80)=0x1c, 0x40800) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r8}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000001ec0)={r8, 0x7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff61a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000012000000b7020000000000006a0a08fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}, 0x10}, 0x78) 04:16:55 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) readv(r1, &(0x7f0000001640)=[{&(0x7f0000000040)=""/56, 0x38}, {&(0x7f0000000100)=""/111, 0x6f}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000001380)=""/151, 0x97}, {&(0x7f0000000200)=""/31, 0x1f}, {&(0x7f0000001440)=""/107, 0x6b}, {&(0x7f00000014c0)=""/83, 0x53}, {&(0x7f0000001540)=""/250, 0xfa}], 0x9) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x6c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x40000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @empty, 0xcbf}}}}]}]}, 0x6c}}, 0x0) 04:16:56 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x600, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:16:56 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0x600]}, &(0x7f0000000000)=0x54) [ 2169.884639][T25860] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2169.910769][T25859] IPVS: ftp: loaded support on port[0] = 21 [ 2169.942137][T25860] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2169.948902][T25862] IPVS: ftp: loaded support on port[0] = 21 [ 2169.976435][T25865] IPVS: ftp: loaded support on port[0] = 21 [ 2170.015514][T25859] lo speed is unknown, defaulting to 1000 [ 2170.039137][T25869] IPVS: ftp: loaded support on port[0] = 21 [ 2170.075505][T25874] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2170.119422][T25862] lo speed is unknown, defaulting to 1000 [ 2170.151905][T25865] lo speed is unknown, defaulting to 1000 04:16:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = accept4$alg(r1, 0x0, 0x0, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r3, 0x5, 0x82, 0x8008}) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth0_to_batadv\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r9], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0xfffffffffffffffc) r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) readv(r10, &(0x7f0000002480)=[{&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000001200)=""/162, 0xa2}, {&(0x7f0000002340)=""/78, 0x4e}, {&(0x7f00000023c0)=""/67, 0x43}, {&(0x7f00000012c0)=""/28, 0x1c}, {&(0x7f0000002440)=""/28, 0x1c}], 0x6) [ 2170.198243][T25869] lo speed is unknown, defaulting to 1000 [ 2170.484867][T25949] bridge13: port 1(veth0_to_batadv) entered blocking state [ 2170.519610][T25949] bridge13: port 1(veth0_to_batadv) entered disabled state [ 2170.556487][T25949] device veth0_to_batadv entered promiscuous mode [ 2170.599457][T25929] device veth0_to_batadv left promiscuous mode [ 2170.614020][T25929] bridge13: port 1(veth0_to_batadv) entered disabled state [ 2170.737874][T25869] IPVS: ftp: loaded support on port[0] = 21 [ 2170.789586][T25859] tipc: Started in network mode [ 2170.794692][T25859] tipc: Own node identity 20010000000000000000000000000002, cluster identity 4711 [ 2170.817205][T25862] IPVS: ftp: loaded support on port[0] = 21 04:16:56 executing program 0: sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040025bd7000369445c40645f34f"], 0x6d}}, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_sctp(0xa, 0x0, 0x84) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="0100f7e796a737e1a4e94ba0b01b831101bc62995d81f0f08be7750efbde44c91d2abfc30de2c0038502aba3cca3e8b728c3bb8a9fdbd2fd287fb8bbb43d9f55829fa4a9539149387965bc320084f2da6e41fdd19be4e73b102759b4eb3d294027d8d1ea90d8b9ef8c5886b3e7c649aaf50ce74184d6dcfb9b6a94db8ed4773ba93096234c9db58cabca31f9469b9d75ea82441c624541132d8b4c6b28223d2c7bd2e9472351e91cccd845071648547ef36f79b85648ab909c48d0d3c374d34e3a4c3b0fd3d791832e8ad5d78a74010fe33eab2e60ee1ad64148be47aefe93f73abeb730770800cf5a64c120dc", @ANYRES32=0x0], &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={r6, 0x4}, &(0x7f0000000180)=0x8) socket$packet(0x11, 0x3, 0x300) [ 2170.838045][T25865] IPVS: ftp: loaded support on port[0] = 21 [ 2170.852310][T25859] tipc: Enabling of bearer rejected, failed to enable media [ 2170.948923][T25859] IPVS: ftp: loaded support on port[0] = 21 [ 2170.956497][T25862] lo speed is unknown, defaulting to 1000 [ 2171.037841][T25865] lo speed is unknown, defaulting to 1000 04:16:57 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5) sendmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)}, {&(0x7f0000001500)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2d6ca8af4ec79cae5c78430ea32a266856c8260e4de581475abdd2153aa8fea34789320ee2514903088dfd546a136d4", 0xb7}, {&(0x7f0000000100)="dc61a0108843d2279aceb4ce8146ab10c18d59855355e9cf8decdd1621743e89070286fe3830c860ee4154bdaf5091c97485b95db2d466f46d36d128fce3a66ae088027ff250aea299b7d3833a2cef9f6d9e3f1ec4fbfe58f0ff2c2f161a1caa8a4217ab99cd8842f884abb79c6addb6ca174ffd7daa9d44732cdef79cf7f4e4e85cf6db8c4d5300e8ed586fb22cd274062cbe58d65c53667788bad4b4951c412bb0decf4c22c65f26bbd4c99d447c2c7c591a11a733f19c3250234e6cfcd19df155d54e480f3d98f962d4b35ab8e8e671f06d", 0xd3}, {&(0x7f0000000200)="9bb8a4b42376cf32d943c3c21e02b3c0c42e066479b968a4a1a485c6a3bea02198335a5b188117640529ceae257ff55bae2885c73b2a31b4ec4fe603a4433a8da6695fe5e8", 0x45}, {&(0x7f0000000280)="b85029caa0d26e4d2416564161", 0xd}, {&(0x7f00000002c0)="e972bb9485bcad0f339590d17ffd835a30844686", 0x14}, {&(0x7f0000000340)="d1cf5934335a", 0x6}], 0x7}}], 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xf8}, 0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000040)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in=@broadcast, @in6=@private0, 0x4e20, 0x0, 0x4e23, 0x5, 0xe210f83ab420c18d, 0x20, 0x60, 0x2f, 0x0, r3}, {0x4, 0x2, 0x7fffffff, 0x401, 0x91, 0x4, 0x2}, {0x2, 0xe5f3, 0x800, 0x8}, 0x3, 0x6e6bb9, 0x2, 0x1, 0x3, 0x2}, {{@in=@rand_addr=0x64010101, 0x4d2, 0x33}, 0xa, @in=@private=0xa010100, 0x3503, 0x0, 0x3, 0x7f, 0x10000, 0x8e, 0x2}}, 0xe8) sendfile(r2, r1, 0x0, 0x100000001) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="00005d18d7b2a2140bd8c93d2d9c89240000", @ANYRES32=0x0], &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYBLOB="1c00000020a77231dea9bbff0c2bd09608fa56bba338637135c5a7e06d4ec3d969aa700f3e7b42cbe47a62ad46cfb0b65a41ea9c52f07438c56da6bd2b84d694"], &(0x7f0000000080)=0x24) [ 2171.104533][T25859] lo speed is unknown, defaulting to 1000 [ 2171.111126][T25987] tipc: Started in network mode [ 2171.152308][T25987] tipc: Own node identity 20010000000000000000000000000002, cluster identity 4711 [ 2171.192690][T25987] tipc: Enabling of bearer rejected, failed to enable media 04:16:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf251b00000007002100626200001c00228008000400080000000800050009000000080006000500000008000100030000000700210061610000cef9"], 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) r3 = socket(0x1000000010, 0x80002, 0x0) r4 = socket(0x11, 0x4, 0xfffffffc) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$inet(r3, &(0x7f0000000740)={&(0x7f0000000300)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000440)="23e4e8a0a61f166a3782a2c814ca4c55dc399a0fbba46938eb99b8e7502522591b48c604f926f91ab5eec10dd116a60390b95ad5044a65fb2a6460358517b241e1502ecc1c69b5da756ad742cccc16acef0e71be37c560e8491ea2ed2ae5124705cc21c6a4be2d154d8c232be51c881efbe42527eb65ec4ecdabf050dadd59c3d56476c87a8bb409cfcf226e47c63bafac54092017d3e8957cc0c001d88742adb4766de3c3", 0xa5}, {&(0x7f0000000340)="6a60d17255c992e9f661a83d4389195b8668bf169ca2b058f41313a7c92b77ef5e18f05d5df63af9311cee60ca54332ebc0d8ce56dcddb9290225f17197071294f34879dde610265e1aec9d9c2bc", 0x4e}, {&(0x7f0000000500)="39a97571f0cdd04b", 0x8}, {&(0x7f0000000540)="2155b1b50f3bdd", 0x7}, {&(0x7f0000000580)="01332f3153a38d050abf951e926fb251a066c692404d9e5c57ea6f2b26aa2b9d3c08bd", 0x23}], 0x5, &(0x7f0000000680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xb95}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}], 0xa0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}}], 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000280)) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@deltfilter={0x54, 0x2d, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe62b805b70949c33, 0x6}, {0x3}, {0x1, 0xffe0}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0xbb, 0x3}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x3f, 0x8}}]}, 0x54}, 0x1, 0x6000}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc6004000d000a00030e0200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x80) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x1400, 0x0, 0x0) [ 2171.622190][T26044] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 04:16:57 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @rose, @null]}, 0x48) listen(r0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x24, 0x6c, 0x705, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x4}]}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r4 = socket$tipc(0x1e, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r3, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8}]}, 0x24}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000100)={0x7, 'wg0\x00', {0x1000}, 0x2}) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000080)={0x0, @random="d1d8e618824c"}) recvfrom(r0, 0x0, 0x0, 0x41, 0x0, 0x0) 04:16:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, 0x8) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000000)={0x7, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @random}]}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r2 = socket(0x2, 0x1, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000024c0)={r5, 0x7, 0x96, 0x7f, 0x80, 0x5}, 0x14) 04:17:01 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) r2 = socket(0x10, 0x80002, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x8) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000180)={0x3, @null}) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0xc0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) 04:17:01 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) sendmsg$AUDIT_DEL_RULE(r5, &(0x7f0000001200)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000001340)={0x434, 0x3f4, 0x10, 0x70bd2c, 0x25dfdbfd, {0x5, 0x2, 0x27, [0x3, 0x2, 0x1, 0xfffffff8, 0x800, 0x5, 0xf0d, 0x42, 0x8a2, 0x100, 0x3, 0x1, 0x0, 0x100, 0x1, 0x7fff, 0x1, 0x81, 0xfffffc01, 0x4, 0x8, 0x0, 0x9, 0x6, 0x0, 0x7, 0x8, 0x8, 0x401, 0x7, 0x44, 0x3, 0x9, 0xffffff3a, 0xfffff34b, 0xffff, 0x3, 0x6, 0x9, 0x4, 0x5, 0x7, 0x0, 0x0, 0x9, 0x20, 0xed, 0x6, 0xa8, 0x81, 0x1, 0x3, 0x800, 0x0, 0x0, 0x80, 0xffff, 0xfffff1db, 0x10000000, 0x0, 0x3, 0x1, 0x8, 0x100], [0x10001, 0x7, 0x2, 0x0, 0x27, 0x4, 0x3ff, 0x800, 0x400, 0x0, 0x6, 0x23e3a7fd, 0x0, 0x7f, 0x7014be2e, 0x80, 0x1ff, 0x0, 0x6, 0x6, 0xffffffff, 0x6, 0x4, 0x2, 0x1, 0x7fffffff, 0x20, 0x3f, 0xff, 0x1, 0xf19, 0x6, 0x9, 0x5, 0x1ff, 0x7ff, 0x5, 0x9, 0x10000, 0x8, 0xfffffff9, 0xc2f, 0x6, 0x80000000, 0x4, 0x5, 0x100, 0xa04, 0x4, 0x8, 0x3f, 0x200, 0x5, 0x2, 0x3, 0x400, 0x8, 0x80000001, 0x198a, 0x4, 0x1ff, 0xfffffffd, 0x3, 0x4a], [0x200, 0x20, 0x65, 0x893d, 0x0, 0x3, 0x8, 0x1, 0x0, 0x2, 0x4, 0x20, 0x800, 0x6, 0x5, 0x2dd, 0xe2ab, 0x7, 0x200, 0x8, 0x2, 0xff, 0x800, 0x7, 0x0, 0x8, 0x1f, 0x8, 0xffff, 0x8000, 0x1, 0x8, 0x2, 0xcdd3, 0x3ff, 0xff, 0x8020000, 0xd692, 0x8, 0x10001, 0x9, 0x401, 0x9dc, 0xffff4d43, 0x2, 0x8001, 0x4b4, 0xffff, 0xffff, 0xff, 0x0, 0x628, 0xfffffffc, 0x80, 0x5, 0x7, 0xfffffff7, 0x2, 0xd30c, 0x2, 0x1, 0x8, 0x7, 0x6], [0x3ff, 0x20b2, 0x4, 0x80, 0x7, 0x4, 0x100, 0x9efb, 0x8, 0xc0, 0x5, 0x2, 0x3, 0x0, 0x4, 0x5, 0x7ff, 0x0, 0x7ff, 0x1, 0x2000, 0x4, 0x7fffffff, 0xb5f3, 0x1, 0x12, 0x4, 0xfffffe01, 0x80000000, 0xbc, 0x80, 0x3, 0x5, 0x7ff, 0x6, 0xd33, 0x7, 0x6, 0x3, 0x5, 0x80000001, 0x0, 0x1ff, 0x0, 0x5, 0x3, 0xe5, 0x8000, 0x2, 0x2, 0xfffffffa, 0xd86, 0x2, 0x2, 0x2, 0x5b, 0xfffffffc, 0xfffffffa, 0x4, 0x1, 0x0, 0x1, 0x4, 0x7f], 0x13, ['cgroup.controllers\x00']}, ["", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 04:17:01 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0xf03, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:17:01 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x1c030000, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:17:01 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="956500000000030000003e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400050083000000ca00"], 0x58}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000ffe0c057436b865650f02138d11b366ca08a27", @ANYRES16=r3, @ANYBLOB="04002cad7000fcdbdf250b000000080001007063690011000200303030303a30303a31302e300000000008000b00010000800e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0001000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x24000840) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c020000000000000000000000210000000000a3715b5821cc9b41750681122247087731b7a4bebf21d8d6fdcb5719d5d098562e38f6c7dc55d6ba211e479b86a44bb46ddf55e637bd8be9063c5679b09292a164a28dbb1a34702c842b8f565996886414fac54f166df84743fa3ad62eeaf0649010607283ee8dda3e8ba42ff9b4a80ae96c47236a4804354f1bf8947f00000000000000c71fcd944c203c7b38888d50bb32ca3e8d8ac150bdadadcae045c6b5a54d08da0a3b08d0dcd07d4ae4935d465ba1ddb2e1c920bebe49b8d3a70809bf9a298c7db69affd2937fe69850ac14d99ef51d35bf0000", @ANYRES32=r8, @ANYBLOB="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"], 0x21c}}, 0x0) 04:17:02 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0x1d00]}, &(0x7f0000000000)=0x54) [ 2175.920900][T26114] IPVS: ftp: loaded support on port[0] = 21 [ 2175.994911][T26120] IPVS: ftp: loaded support on port[0] = 21 [ 2176.007547][T26114] lo speed is unknown, defaulting to 1000 [ 2176.019794][ T29] audit: type=1804 audit(1595564222.119:4676): pid=26123 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1391/cgroup.controllers" dev="sda1" ino=16312 res=1 [ 2176.041577][T26127] IPVS: ftp: loaded support on port[0] = 21 [ 2176.079203][T26120] lo speed is unknown, defaulting to 1000 [ 2176.173286][T26127] lo speed is unknown, defaulting to 1000 [ 2176.230945][ T29] audit: type=1804 audit(1595564222.209:4677): pid=26123 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1391/memory.events" dev="sda1" ino=16242 res=1 04:17:02 executing program 3: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000eff4)) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0x1e7000)=nil, 0x1e7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)={0x1c, r4, 0xb29}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00042b7000fedb4b723c9a209dc6b28cd1f0fb82df25010000000000000089f362ae070053ee000000117fffff00"], 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x0) shutdown(r0, 0x1) shutdown(r0, 0x0) 04:17:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000500)="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", 0xfc) [ 2176.402123][ T29] audit: type=1800 audit(1595564222.209:4678): pid=26123 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16242 res=0 04:17:02 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='$\x00\x00\x00Z\x00C', 0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x4bc, 0x1, 0x5, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [{{0x254, 0x1, {{0x3, 0x101}, 0x7, 0x5, 0x7000, 0x9, 0x10, 'syz0\x00', "13122fb4aaecd11de7dad22a8051c6a093e2da97c8b5a670850f296a1601ebe2", "1bc277921329f0ebc806d448df6f4e70b23369363f712fe4e6b8a14d3c8e5119", [{0x3, 0xfffa, {0x0, 0x27}}, {0x2, 0xfff, {0x1, 0x401}}, {0x9e72, 0xfffb, {0x0, 0x1d50}}, {0x2, 0x99ca, {0x0, 0xfe3}}, {0x3f, 0x0, {0x2, 0x7}}, {0x7, 0x7, {0x1, 0xc54}}, {0x5, 0x40, {0x2, 0x5}}, {0x92a3, 0x6, {0x3, 0x5}}, {0x2, 0x1000, {0x1}}, {0x140, 0x400, {0x2, 0x8}}, {0xf0, 0x0, {0x2, 0x5}}, {0x8001, 0x8001, {0x3, 0x7ff}}, {0xfd2, 0xf00f, {0x2, 0xfa}}, {0xf, 0x4, {0x1, 0xb05}}, {0x6, 0x8, {0x2, 0x1}}, {0x0, 0x7, {0x3}}, {0x2813, 0x4, {0x3, 0x1}}, {0x1, 0x81, {0x3, 0x6}}, {0x4c9, 0x800, {0x0, 0x8}}, {0xad, 0x7, {0x1, 0x1ff}}, {0x400, 0x8001, {0x2, 0x5}}, {0xffff, 0x80, {0x3, 0x80}}, {0x3, 0x0, {0x3, 0x80}}, {0x6, 0x3, {0x3, 0xed}}, {0x200, 0x9d, {0x2, 0x2}}, {0x7, 0x0, {0x0, 0x8}}, {0x4, 0x0, {0x0, 0x5}}, {0x5, 0x9, {0x3, 0x2}}, {0x0, 0xffc0, {0x3, 0x3}}, {0x7, 0x7, {0x3, 0x10001}}, {0x8, 0x6ead, {0x1, 0x1}}, {0xffd, 0x0, {0x2, 0x9}}, {0x3, 0xa07, {0x2, 0x1f}}, {0x1f2, 0x1, {0x0, 0x8}}, {0x7, 0x6, {0x0, 0x1}}, {0x8c00, 0x401, {0x1, 0x1f}}, {0xfed, 0x20, {0x3, 0xc000000}}, {0x6, 0x401, {0x3, 0x1}}, {0x9039, 0xd91e}, {0x1, 0x80, {0x3, 0x80000000}}]}}}, {{0x254, 0x1, {{0x0, 0x1786}, 0x7, 0xff, 0x5, 0x6d, 0x24, 'syz1\x00', "35ebb4f21e14c97448d763670ff93908db609d7edf5b38bb912fe041394e7669", "e24257c6083e19bcc28571f4c19b504341be61c1bed0b0b9ad8885d16c403e65", [{0x3, 0x1, {0x3, 0x5d04}}, {0x6, 0x450d, {0x1, 0x7c7b}}, {0x80, 0xffff, {0x1, 0xfffffff8}}, {0x7, 0x7f, {0x1, 0x200}}, {0x80, 0x9, {0x2, 0x90660000}}, {0x5, 0x9, {0x0, 0x8}}, {0x1, 0x4, {0x2, 0x4}}, {0x5, 0x7b96, {0x3, 0x8}}, {0x8, 0x4, {0x0, 0x100}}, {0x2, 0x0, {0x2, 0xfff}}, {0x1, 0x52, {0x2, 0xfffffffe}}, {0x1, 0x8, {0x0, 0x4}}, {0xffff, 0x3, {0x0, 0x7}}, {0xffd, 0x5, {0x3, 0x2}}, {0x100, 0x4e5, {0x1, 0x3ff}}, {0xa184, 0x80, {0x0, 0x5}}, {0x3, 0x9, {0x3, 0xfffffff7}}, {0xff, 0x0, {0x1, 0x7}}, {0x29, 0x6, {0x1, 0x9}}, {0x2, 0xe1c2, {0x2, 0x4}}, {0x7fff, 0x3, {0x3, 0x3f}}, {0x1000, 0x1ff, {0x2, 0x5}}, {0x0, 0xc, {0x0, 0x7ff}}, {0x101, 0x3, {0x0, 0x6}}, {0x3f, 0xa41b, {0x0, 0x2}}, {0x7ff, 0x8, {0x1, 0x3ff}}, {0x8, 0x93, {0x1, 0x5}}, {0x7, 0x85, {0x6, 0x7}}, {0x3, 0xfffe, {0x1, 0xff}}, {0x6, 0x1000, {0x3, 0x8}}, {0x1, 0x6, {0x2, 0x8}}, {0x7, 0x7fff, {0x0, 0x4}}, {0x3, 0xfff, {0x2, 0x800}}, {0x800, 0x5a, {0x0, 0x8}}, {0x2a3, 0x898, {0x2, 0xfffffffc}}, {0x2, 0x200, {0x2, 0x2000000}}, {0xff00, 0xfff, {0x2, 0x11c}}, {0x0, 0x6, {0x2, 0x4}}, {0x2, 0x100, {0x0, 0x6e}}, {0x0, 0x5, {0x0, 0x13d}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x10}, 0x20000810) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r3, 0x0, 0x53f74f62, 0x0) [ 2176.531906][ T29] audit: type=1804 audit(1595564222.209:4679): pid=26123 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1391/memory.events" dev="sda1" ino=16242 res=1 04:17:02 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@tclass={{0x14}}], 0x18}}], 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) sendmmsg$inet6(r1, &(0x7f0000000c00)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@tclass={{0x14}}], 0x18}}], 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) r4 = accept4$inet(r2, &(0x7f0000000100), &(0x7f0000000240)=0x10, 0x0) sendmmsg(r0, &(0x7f0000000700)=[{{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @private=0xa010100}, 0x2, 0x3, 0x0, 0x3}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000880)="abeca4eabf01f762f32cac757b8bbf9feb0ba1b54e6702e37a21163f40f8f19aa25aeabe1c8df08701721935765e71f4e874df47b053d8bb7cce7e7faa75335ab5b2ce5e452d54fcb47cdf40a843e7a1b0b1120fd8616e5387d604ae1884b3129778a4c4597e0d31dfcafd91471026c923d810098d3ecf9a69e722074e2743195c1ee9b0b30f960f6e698d3f2de093c4d3006e32b7aa36480d7ad901f5db745fcd9927f83353f02339fbcde833a56e4c4772da92b8f66d047d6f761cab292f8235c3caf3892e38e896470236", 0xcc}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)="e9c6ac7855f87ab185c988d5baca69c5eedaa0b91de3a89261d85e89a235b96463977dba218c3998718149335c14bf9f195719274a74a5514471b0833f0fa0af686c307e75988a37b10c7b2e766368a14a9d40698186469ee39d59529d4ac71bbf2be56693223c003d806f95af1b384999ff90250159", 0x76}, {&(0x7f00000003c0)="23dc25a66e7ec4b9c3d2c6dca193abceb40df7a92a17b81e925ce21015510ee534927b57cfff102581e682157581a703f54eef8842fe31c15db6f461b0d38381fdd4c9f2e1b33941dfdb72d6c1efec5ebc671b2f89c7138bed32a4621a9ab9642a23b78e93044bb890762e29dee0b5d097e2720277e114ae6312ef493919c1f6898e3177726b081409e0350f56a39ab8fa53c4156dacd39f1f584b92a94f9e4b3daa3dcf4be8b595389a2288a52a72326ab3ae7ccfa362a16ab4739f19fe10b0a31d9d3355ad84979deb7b32cfd8af32", 0xd0}, {&(0x7f00000004c0)="0a1f462d123b068676c20845e693d274c41aa4ea3347514e0e18d56faff136cc3c7710c74fde066cf9ba7ea1f0c871d4730655f42e4b8f1d12a42993cdeb360c", 0x40}, {&(0x7f0000000500)="160444545afff787dc1b198cd3f8790ed2e5817c59fb7a11313155699fc374570387b90eac7afa7fdb172d6f5620fec94e619fe7d6d02109ef26c3313eb3e7e576252a77047b17cca3dccc0bbffa33e07e8712f0a899b8f43a8cf8d5bb5182a029edaf5a7ef750acbf8485fa14a86a4994dad7d33c7c51e7585ef07687e57916938e1cfbc499735229c3c311a48313e614d7dd38a085fffb0fcfeb6d55dec040abeb742bf17a81d6978f72fb25198ec1eceb639f96b4308ce43b67f1580b5e11593ae4c2cab8", 0xc6}, {&(0x7f0000000600)="e31a912a0f", 0x5}], 0x5, &(0x7f00000006c0)}}], 0x2, 0x41) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0xb871, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r5], 0x50}}, 0x0) sendto$unix(r3, &(0x7f0000000200)="d91302e8d8ac31ab9f39f8f053a60ec39a58e9c3b5ea11ebff10e4f401bdebc6d96e1e742c8a5193c5aad43270f478f8b0", 0x31, 0x355d5ad38eca23a9, 0x0, 0x0) [ 2176.691679][ T29] audit: type=1800 audit(1595564222.209:4680): pid=26123 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16242 res=0 [ 2176.748019][T26203] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2176.818068][ T29] audit: type=1804 audit(1595564222.209:4681): pid=26123 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir286356979/syzkaller.7xgrYT/1391/cgroup.controllers" dev="sda1" ino=16312 res=1 [ 2176.822035][T26114] IPVS: ftp: loaded support on port[0] = 21 [ 2176.868441][T26127] IPVS: ftp: loaded support on port[0] = 21 [ 2176.926685][T26204] IPVS: ftp: loaded support on port[0] = 21 [ 2176.952660][T26120] IPVS: ftp: loaded support on port[0] = 21 [ 2177.034136][T26127] lo speed is unknown, defaulting to 1000 [ 2177.148838][T26204] lo speed is unknown, defaulting to 1000 [ 2177.168834][T26120] lo speed is unknown, defaulting to 1000 [ 2177.175918][ T486] tipc: TX() has been purged, node left! [ 2177.196005][ T486] tipc: TX() has been purged, node left! [ 2177.293311][ T486] tipc: Left network mode 04:17:03 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000023000511d25a80648c63940d0524fc60100006400a0003000200000037153e370a00018002000000d1bd", 0x33fe0}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100), 0xc) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001440)={0x0, 0x0, 0x18}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001480)={&(0x7f0000001180)="b867ed5ea587d931a8aa4ec9376604", &(0x7f00000011c0)=""/107, &(0x7f0000001340)="e897652b2fa1225825d1816340e2a387a583a6d8292356d39212b1f4d8536291afbe16b5ff72cb7851a669c3b57f40111037f5344bb65e0939d388f60e58cfa540e787498d78afb96964d7a2461571ac26a7d226c9bf26d6f425764b081d13a1724f2fa3e30e352531f8032f02975736d7322f072b01bedc067a221ecbac3bcb30eeb1f94e226ee90106aac19f7d0215e62a5969182bb283c7515a9db299a22d6a401d2d8fca4a6c9b29b58562fb3c65901e329162123f5e7c4cf09e96500081b0a7f358a7ccde22b1d010bd99564edba3dfb48101ad6ee3c4a6034242bd202a120baba66614d34366ffaa", &(0x7f0000001240)="36318520c9d72e643e39537163ba93ec96d2cc12a93f2fef778cdc806dbcc4b2e97412fd80f722b43509cd7bf88af1a8e57f0a1e1c475cf7154c887e5c039b0331d22f3dd18e52aa57232b107166daddc07452dda28bc4c1e78917a81407238f4676fe3d3d66e221a4b6b4405884b49d4915330948f80b08809a60930482aa001cbf97dd667d1894352e9612a398590b6d6604cbc1621112", 0x4, r2, 0x4}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x100000001) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='devices.list\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x100000001) preadv(r6, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000140)=@netrom={'nr', 0x0}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r9, r8, 0x0, 0x100000001) r10 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r4, r10}) [ 2177.322065][ T486] tipc: TX(20010000000000000000000000000002) has been purged, node left! [ 2177.393908][ T486] tipc: TX() has been purged, node left! [ 2177.433529][T26256] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2177.443826][ T486] tipc: TX() has been purged, node left! [ 2177.469532][ T486] tipc: TX() has been purged, node left! 04:17:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010003b0e000000000fc207fad59c0000cf12e2d94073cbed5359c34534bf48144166eda50735c98c834a018f0f7db91eac21823bec7abd0e", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120005001600020000000600180000000000"], 0x48}}, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xf8, r2}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) bind$packet(r4, &(0x7f0000000100)={0x11, 0xf8, r6}, 0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)={0x3bc, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1dc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_VALUE={0xf0, 0x4, "2a3fac15d99991ed6dd75782d6bcd2191e4c589dac64fa867a94ac9917550041825ce97ffbf73ce42e26eb18f5581cbac6c2536dd9d3c8e1359731c31e1d216d15e784d69e0ee1e2ba84b16742b179ea37f6995dec3f31a7eff06aa45231abb1c4bcdbccc6d6b80c99504448113e78a51d6ef8b7ddb78f760e90032b7f1eb83385f5ec69d2f71da2fff5676ef28060a61c4bcb613bb5e2517de3cfc99cd37d6cb14031c3777699f4996e243c27718cbd1710e4ab517229e9d3c6a000d8773a7b46c938ac06fd62cefa56158fcbe5ed2a9d4c5d663492d241eb0c2e87b047a45d9dd3c2c4529b852369895e68"}, @ETHTOOL_A_BITSET_VALUE={0x11, 0x4, "ebc9d3152edf54a3245e9fdca4"}, @ETHTOOL_A_BITSET_VALUE={0x12, 0x4, "4885a5b773e8a6b5835f33956a04"}, @ETHTOOL_A_BITSET_VALUE={0x19, 0x4, "1e4379449af98e0dabd500cf0996295f44edce7ea8"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x600000}, @ETHTOOL_A_BITSET_MASK={0x2c, 0x5, "1694e6020e878fcd7057b30bc269ae5b755c0f8f6455b722f941db30c672d7fab4733b7f3526fe03"}, @ETHTOOL_A_BITSET_MASK={0x1e, 0x5, "eb8fd3383ef56895408c6782c8b07dce38a23350f887da537070"}, @ETHTOOL_A_BITSET_VALUE={0x42, 0x4, "3b3e88b629c0c30d872985a83e79e1a68551bed9d5a2b66b9f2dcf112c007b8371ca972eac96bc6699902414aef72c1e417b68572cda5ad540e13a566a72"}]}, @ETHTOOL_A_FEATURES_WANTED={0x100, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x57, 0x5, "e254d9eef7aeac3735f4606c23f13d42535c9302a025345d7e9b4d200c03909f06d817ceb1d1b7565cd9778f9d5e7f5d1aa42468cd4713e66868ed0b078a37a08ac0fee2bf46e65bf218a30031705006677c54"}, @ETHTOOL_A_BITSET_VALUE={0x97, 0x4, "21cb6766d3f607c2435dd9536f3be99667da313c66380793432a0c031d5b8f8af38af9647a377646065d82f3b8d74348ec62cae6e7e72b74f512602789631f3bf43aeecf2bcf3e5303c956e18ca515e3cbb76665e1808a99a821488b04eaa70c6b15858fb89e728e92e64ea86bb0dd4a206a70ad722b4f38a26fe035123f93c48365c8c60c5bbed1d880d5e8dc484a4882a3c8"}, @ETHTOOL_A_BITSET_MASK={0xc, 0x5, "ca311cf0e4fcf80a"}]}, @ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xff}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x800}, 0x814) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r8, 0x800443d2, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {@fixed}]}) [ 2177.615440][ T486] tipc: TX() has been purged, node left! 04:17:03 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) syz_genetlink_get_family_id$nl80211(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r2 = socket(0x2000000000000021, 0x2, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000180), 0x4) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000024000b0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000001400020008000b00000000000800110001000000"], 0x44}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000040)={@empty, 0x72, r4}) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000c00) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x120933, 0x1000}, 0x20) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_to_bond\x00', r4}) [ 2177.664554][ T486] tipc: TX() has been purged, node left! [ 2177.671047][T26275] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2177.689772][ T486] tipc: TX() has been purged, node left! [ 2177.742784][ T486] tipc: TX() has been purged, node left! [ 2177.754437][ T486] tipc: TX() has been purged, node left! [ 2177.850927][T26204] IPVS: ftp: loaded support on port[0] = 21 [ 2177.929326][ T29] audit: type=1804 audit(1595564224.029:4682): pid=26284 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1447/cgroup.controllers" dev="sda1" ino=16378 res=1 04:17:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x9, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}}, 0x0) socketpair(0x22, 0x1, 0x0, &(0x7f0000004c40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000280)={0x0, 'vlan1\x00', {}, 0x8001}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x40, 0x1, 0x9, 0x3, 0x0, 0x0, {0xa}, [@NFCTH_TUPLE={0x4}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8001}]}, 0x40}}, 0x24000000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000004e00)={&(0x7f0000004c80)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f0000004dc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="dc0004004a5e0ddbf1849859c43d0fee367fe94e8577292267fe020d6cd49b00979f786c8d9638579501838278aaf6bbd1db99c1182bf74320267d2f5cb6bde908b4bd2734d5e6a823f2073608ad9badc1f2a752f99ad752d562daa3a57bf67db55222c491b4e7b74dabf51796d3244b11439bd8f811e71a5260acd001b4bbf0fbb3c7c86fd9feadcf7f79ce3bf716c7af3d058b0d63e217500b9e81ce426d12a294198ee2fc7c676b7a77d3f8500dfd26d04d068293ceb46b727094d1fced874ece562703ca48016d7c597cc2ef15ed998ab3adff92ebcadf43", @ANYRES16=r3, @ANYBLOB="00022abd7000fbdbdf25020000000800050006000000040003800800050009000000080005007ccc00001c00018008000b0073697000080009002600000008000b007369700008000500030000000c000180060002003a000000080006000006000040000380060007004e22000006000400fdff000008000300000000001400020073797a6b616c6c6572300000000000000500080004000000060007004e230000340001800c0007002800000038000000090006006e6f6e650000000008000b007369700008000b007369700007000600666f0000"], 0xdc}, 0x1, 0x0, 0x0, 0xc001}, 0x20040881) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x5, 0x6, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x4048040) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f00000001c0)) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x808, 0x0, 0x0, "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"}, 0x808}], 0x1, 0x0) sendfile(r6, r5, 0x0, 0x100080737) [ 2178.036147][T26204] lo speed is unknown, defaulting to 1000 [ 2178.304445][ T29] audit: type=1804 audit(1595564224.399:4683): pid=26309 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir689366817/syzkaller.5qdHqz/1423/cgroup.controllers" dev="sda1" ino=16381 res=1 04:17:07 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x1100, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:17:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a5900df00000000e9000500010007"], 0x1}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x120, r5, 0x20, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r1, 0x0, 0x100000001) socket$packet(0x11, 0x3, 0x300) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000e40)="cfd063443cdc858551", 0x9}], 0x1, 0x0, 0x2a}}, {{&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x0, {0x2, 0x4e20, @multicast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)="16199e1716929b7f448c7d6aec9bc9d79d2e2dd74a9427591fc97a2fc04d07b90a7f552b41e6785a2d819853cd481dc16e3e1f440e10f6b8cefc08baf8c292cd03a1ec0b2dc067da051555c3b6e9168e583e62a75a95476467f3878b24c47d1b70f31beed984674e9e1302d0407e3bd3528f5e745487ccf7c3b08f9f279c16fce09c6d03504ec488adc2"}], 0x0, &(0x7f0000000700)=[{0x0, 0x115, 0x800, "c93a0eb81bf4087678d9791cf0f29545f8d3ed6a703cdeb28bbf2fd1208b3f1534282df61c1a16d097a5a2bcf20c4b41a7da77381dca7d5f33ad7b0371f033593f0b067ddf94e6778d"}, {0x0, 0x118, 0xfffffff7, "61dbd0d9634a92c3a6eccfbd23c1ee85247d2be5d35b1edd6f3e7b40a57654262706240bc27b686cdff99ac305ba520fe3b85d792eaea3c3442ecb231c3a069ec8209e835beab9efb6616f86fe66476728c995bd023178638bb46758281762fbcef543dbe9b5085290d3a257eab34a7f2d3bac3da2e1cd1d15c70d25bc00eb70f5b7cb695879d5aeb3cd9e957e427d0992d25ed7e35ecc700d56ad1e2bdf8028b460973be209429d218318fa94f92bc27296805bb9d18f3a45a48058a1a9e3c7bdf5dc64889a9793"}, {0x0, 0x10d, 0x100, "fb06b9c15314128e0781902826216b0045ac12a612cabc25d25d3eb00afec67ed6c7df0ee942f36ed950008d79434f78db23eead23f063e5d788b57cc5ab3ad0a58e72ae211989e0cbd9655b01934d6e5b034a43cce801b37e2a6d71b88a385b1b22cbca19c71832262a59dc6ce9d9898b98dedd533e40f550f1392f4f2ca527c4e9ba114dbb71eacc19d1d58628351d5691408cb59b11da2e01535a4758"}, {0x0, 0x116, 0xffffffff}, {0x0, 0x114, 0x726b4d9, "3978aec14bbf83bbbb270dfb202ed10fc52754409cf7276cdc66c625aa26e6d743bb81633828ee370304fb882e5058b014d800efbfbd602b2481a90b73df2ccda744d866cf7f77731bfb27d4067002cc9a206d32b9fc6f5b408d4ad8c21ea6a82d3f2302086e48fc606b9b787fffa134dbf66743a86528bb25b3b18bbda9e7081b8181b9c852543fdfa0b9355bb8c4f325b9a35ec590d45f9239602fbe09f8cf82751764e513fdc03c4f172aa88df6638a3c36ea6c0897263cba4c20583e2ca7"}]}}, {{&(0x7f00000005c0)=@can={0x1d, r8}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000640)="b105408c420229ba4c19323287599a83a49e8e8ea65859a70a965a455184c169f1dd4378a93a8d1340be1fdae7e155f590a817d9746914fe4e9c"}, {&(0x7f0000000a00)="2a91e9e5eb26c07ed5d7575683c4d3279b9eafbd3b86bd6b67a5285009a2d08e3d7b130e492b63a28a3472fd07d7d938de2485a7cd673aa8364025e8ea42f5992af7118c63a516898f73ea59bbbf1cf37c981f89ec407a57"}]}}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000b40), 0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000000c0)={0x5, {{0x2, 0x4e22, @broadcast}}}, 0x88) 04:17:07 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @val={@val={0x9100, 0x1, 0x1, 0x3}, {0x8100, 0x6, 0x1, 0x2}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2d}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x100000001) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) openat$cgroup(r1, &(0x7f0000001200)='syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000200)=@add_del={0x2, &(0x7f00000001c0)='geneve1\x00'}) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44051}, 0x10000000) 04:17:07 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0x3001]}, &(0x7f0000000000)=0x54) 04:17:07 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x1d000000, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 04:17:07 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0xf03, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) [ 2181.260902][T26351] IPVS: ftp: loaded support on port[0] = 21 [ 2181.283042][T26349] IPVS: ftp: loaded support on port[0] = 21 [ 2181.288011][ T29] audit: type=1804 audit(1595564227.389:4684): pid=26347 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1448/cgroup.controllers" dev="sda1" ino=16384 res=1 [ 2181.332956][T26357] IPVS: ftp: loaded support on port[0] = 21 [ 2181.397594][T26349] lo speed is unknown, defaulting to 1000 [ 2181.447185][T26365] IPVS: ftp: loaded support on port[0] = 21 [ 2181.456410][T26351] lo speed is unknown, defaulting to 1000 [ 2181.463634][ T29] audit: type=1804 audit(1595564227.419:4685): pid=26347 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1448/cgroup.controllers" dev="sda1" ino=16384 res=1 [ 2181.464583][T26357] lo speed is unknown, defaulting to 1000 [ 2181.657457][T26365] lo speed is unknown, defaulting to 1000 04:17:08 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/250, 0xfa}], 0x1, 0x1000000000001) 04:17:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xf8, r5}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000640)={'gre0\x00', r5, 0x8, 0x7, 0x0, 0x2, {{0x26, 0x4, 0x1, 0x1b, 0x98, 0x66, 0x0, 0x2, 0x9bc928c49d6faea1, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @remote, {[@ssrr={0x89, 0x1f, 0x75, [@multicast1, @multicast2, @loopback, @private=0xa010102, @rand_addr=0x64010102, @multicast1, @local]}, @end, @noop, @rr={0x7, 0xb, 0x1e, [@private=0xa010102, @private=0xa010102]}, @rr={0x7, 0xb, 0xf2, [@local, @private=0xa010100]}, @cipso={0x86, 0x3a, 0x2, [{0x1, 0x3, "b5"}, {0x6, 0xe, "15a650e843a1d11fb7249dd3"}, {0x5, 0x5, "854c15"}, {0x1, 0x9, "b7a181e89bef5a"}, {0x7, 0xb, "c7e810176f49c6642b"}, {0x5, 0xa, "245f0bb815631ceb"}]}, @timestamp={0x44, 0x10, 0x1b, 0x0, 0x9, [0x100, 0x6, 0x4]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'ip6_vti0\x00', r7, 0x29, 0x1, 0x7f, 0xfff, 0x0, @mcast2, @dev={0xfe, 0x80, [], 0x1a}, 0x20, 0x80, 0x7ff, 0xfffffff7}}) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={@remote={[], 0x2}, 0x3, 'veth1_to_bridge\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r9, r8, 0x0, 0x100000001) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000000)=0x2) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) sendfile(r1, r0, 0x0, 0x800000000000e) 04:17:08 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="68fb5e000c06010100000000000000000a0000040900020073797a000000ff03000000000000000900020073797a31000000000900020073797a3200000000050001000700000005000100070000000900020073797a3000"/104], 0x68}, 0x1, 0x0, 0x0, 0x24048890}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffff}) pwrite64(r3, &(0x7f0000000200)="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", 0x200, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 2182.133735][T26351] IPVS: ftp: loaded support on port[0] = 21 [ 2182.192705][T26349] IPVS: ftp: loaded support on port[0] = 21 [ 2182.255157][T26357] IPVS: ftp: loaded support on port[0] = 21 [ 2182.292404][T26351] lo speed is unknown, defaulting to 1000 [ 2182.368813][ T29] audit: type=1804 audit(1595564228.469:4686): pid=26461 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1450/memory.events" dev="sda1" ino=16242 res=1 [ 2182.413563][T26349] lo speed is unknown, defaulting to 1000 04:17:08 executing program 1: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x8000002}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$sock_netdev_private(r4, 0x89fc, &(0x7f0000000180)="9b994af926a5b7a83fab46d98c9c7f20cf4ec2af7b761c5c5b5ae883c8c16934ffbe46ea68c05f9f9030b228c056786946b266c2e6a9e745b6") preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000080)="ad2c95b120ab5c0b549886b9bb76272ab2beb45a2fc99c5a41dbc9db57acbe1f632d2785247f3208fc6ae370fce8048dc756591ae0548f225905b9a50b8867a560e7aac68a7b445403f4cba32345338b332693e5bfd551c760291823038e575063fb7a9dd419e26e31b13d55674a74e184a0ec3232f97aafff531268c97ff2f14f1915c7e439d05fb97bc92a21caeadc5a84d8056893083b9830c39f9f7ca9d8d09d7504c3930b39d8493391d6246fc4d315c1e873da68860e1c1eba5b534ca9e802f396", 0xc4) bind(r0, 0x0, 0x0) [ 2182.493757][T26357] lo speed is unknown, defaulting to 1000 [ 2182.579141][ T29] audit: type=1800 audit(1595564228.509:4687): pid=26461 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16242 res=0 04:17:08 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000000c0)) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000001) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000100)=0xffffffff, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cfe8b00", @ANYRES16=0x0, @ANYBLOB="00000000001b000000000f10000008000300", @ANYRES32=r6], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="45010000", @ANYRES16=r2, @ANYBLOB="ff830a0000000000001b", @ANYRES32=r4], 0x4}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r7, r1, 0x0, 0x100000000) [ 2182.705637][ T29] audit: type=1804 audit(1595564228.509:4688): pid=26461 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1450/memory.events" dev="sda1" ino=16242 res=1 04:17:08 executing program 3: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x0, 0x2]}, &(0x7f00000000c0)=0x54) [ 2182.826245][ T29] audit: type=1804 audit(1595564228.559:4689): pid=26461 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1450/memory.events" dev="sda1" ino=16242 res=1 [ 2182.992669][ T29] audit: type=1804 audit(1595564228.629:4690): pid=26472 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1450/memory.events" dev="sda1" ino=16242 res=1 [ 2183.101712][ T29] audit: type=1804 audit(1595564228.959:4691): pid=26528 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1451/cgroup.controllers" dev="sda1" ino=16379 res=1 [ 2183.149459][ T29] audit: type=1804 audit(1595564229.189:4692): pid=26528 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1451/cgroup.controllers" dev="sda1" ino=16379 res=1 [ 2183.210007][ T29] audit: type=1804 audit(1595564229.199:4693): pid=26519 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1451/cgroup.controllers" dev="sda1" ino=16379 res=1 04:17:12 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x1402, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:17:12 executing program 1: unshare(0x40000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x100000001) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0xa792, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0xa, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) socket$packet(0x11, 0x3, 0x300) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) sendto(r2, &(0x7f0000000180)="121b0356cbaf8f03f98627547100bcfcd8ae7942c778efac3b85589119b39f8cea56047d70113b113dd2dbd4b37c2fc5d96df0f6e48261fb01d44a78e8b03de06951211857219a71331167872db7e42d75f0bcc7001642864bd1124aa6bf41fb901ad25d1de88f7d1ef9b558eff118117cc0a805224f2c204fa44d2ed5b850a600aacfa7bc1cfec633a8be07147e14fc4bfc3a52fa727ed21d17bb6b78bda0ca39962b4d6274fad6732f2c049decf3698b78b3d5492261a651b15256bf613923a8bfad0cf319543bf9a5966802d642bd2093abe030ea", 0xd6, 0x0, &(0x7f0000000100)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80) socket$inet(0x2, 0x3, 0x10001) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000200), 0x1) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet_udp(0x2, 0x2, 0x0) 04:17:12 executing program 3: r0 = socket(0x10, 0x80002, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002020104000000000000000000000000440002802c00018014000300a907695e38c0036bcc4714996689507714000400e43f0000000000000000ffffe000000206000348000000000c00028005000100000000009c02aa43edcfb3d795de2205bbac2b79ba785b32a4a6cec706d313c346adb8e336b1fa710322c18b10983fac4f70f41c721334c2f531828036a5112513e8ad20eee54176ae3a29199968c9e2169998879d04a3e2651efe27ec509241f4c279c0d0cc29097742e8e1c7c98619e62a046fc80333c0bb0edba514424309495a65e3cdb1283f00"/230], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) [ 2186.211648][T26574] IPVS: ftp: loaded support on port[0] = 21 [ 2186.315347][T26574] lo speed is unknown, defaulting to 1000 [ 2186.322875][T26583] IPVS: ftp: loaded support on port[0] = 21 [ 2186.398273][T26583] lo speed is unknown, defaulting to 1000 04:17:12 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0x3f00]}, &(0x7f0000000000)=0x54) 04:17:12 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x1100, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:17:12 executing program 0: socket(0x2, 0x3, 0x67) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x400443c8, &(0x7f0000000000)={0x4, 0x0}) 04:17:12 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x1e010000, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) [ 2186.606883][T26628] IPVS: ftp: loaded support on port[0] = 21 [ 2186.632208][T26629] IPVS: ftp: loaded support on port[0] = 21 [ 2186.662914][T26632] IPVS: ftp: loaded support on port[0] = 21 04:17:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f00000000c0)=@buf={0xd3, &(0x7f0000000240)="db7eb7464b210071e4c320c27e3e70b8890465d104c392e9a322566108224120a756ea5bc90bcf72099b579775c6025927b770fbd402c41d71e38a1e3fedb52a6a7ffcdf862dc5cda7ba600ab7b7a3aa1b473507c78f8755a61f8d8013d6195002a229bf0ad9c352f677c4e714221c0e2a2e89982750ca6f8cc588835ced9ccf4ea6e8c5a7452a115963d699944b80dbc5edc3c7a7b578121ab41c3410e7538beaaeab1da36f156a9464016060147dfd51955e9b0bcf3dd74f73fb542637d9d7de705921b93cac5ca348a151dc52856d184a64"}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000140)={&(0x7f0000000400)=@ipv6_getmulticast={0x14, 0x3a, 0x28, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}}, 0x0) [ 2186.711721][T26628] lo speed is unknown, defaulting to 1000 [ 2186.791449][T26629] lo speed is unknown, defaulting to 1000 [ 2186.848627][T26632] lo speed is unknown, defaulting to 1000 [ 2186.905665][T26658] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:17:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c05058005001e0000000000"], 0x44}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xa, 0x0) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f00000002c0)=0x1, &(0x7f00000003c0)=0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r3, 0x0, 0x100000001) connect$nfc_raw(r3, &(0x7f0000000000)={0x27, 0x1, 0x0, 0x2}, 0x10) r6 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) recvfrom(r6, &(0x7f0000000040)=""/5, 0x5, 0x100, &(0x7f0000000340)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0xa4, 0x10000000, @dev={0xfe, 0x80, [], 0x14}, 0xacbd}}, 0x80) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f00000001c0)) [ 2187.152629][T26574] IPVS: ftp: loaded support on port[0] = 21 [ 2187.232698][T26583] IPVS: ftp: loaded support on port[0] = 21 [ 2187.294079][T26574] lo speed is unknown, defaulting to 1000 [ 2187.350732][T26718] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2187.387675][T26583] lo speed is unknown, defaulting to 1000 [ 2187.429045][T26722] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2187.548366][T26628] IPVS: ftp: loaded support on port[0] = 21 04:17:13 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r5, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000180)=0x6, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x50, 0x1412, 0x100, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x48080) splice(r4, 0x0, r2, 0x0, 0x400fffe, 0x0) sendfile(r4, r0, 0x0, 0x80000001) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) accept$alg(r6, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket$phonet_pipe(0x23, 0x5, 0x2) [ 2187.598515][T26632] IPVS: ftp: loaded support on port[0] = 21 [ 2187.683749][T26628] lo speed is unknown, defaulting to 1000 [ 2187.694295][T26632] lo speed is unknown, defaulting to 1000 [ 2187.800094][ T29] audit: type=1804 audit(1595564233.900:4694): pid=26774 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1455/memory.events" dev="sda1" ino=16365 res=1 [ 2187.994961][ T29] audit: type=1800 audit(1595564233.900:4695): pid=26774 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16365 res=0 [ 2188.113692][ T29] audit: type=1804 audit(1595564233.910:4696): pid=26774 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1455/memory.events" dev="sda1" ino=16365 res=1 [ 2188.212500][ T29] audit: type=1804 audit(1595564234.060:4697): pid=26788 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1455/memory.events" dev="sda1" ino=16365 res=1 04:17:14 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)='+', 0x1}], 0x1) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xf8}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0xfffffffffffffcaf) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000024000b0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000001400020008000d00010000000800030003000000d99b190de323f1154a3b2dbf9b9ccfb8c86a6e630fdedbb1ae1d58c60b18fb120235c2bbab5d961fa7d6acd8cfc859ab32c2fbcb1a136e3c444ee05804b6e2b60f21431f447a1bcaa0230d87b2af4b002529504207271f26bbc0f8917848bf979b738fc7ece6506c0a1954ecfcb0ded5bec3437560a307df2e69eeb52cabdd9a441ed51d91fba0e39bc73ad03d0e1ced3a52492a604be0aaa32eddf6f66e96effb12afbb2c9f82"], 0x44}}, 0x0) bind$packet(r2, &(0x7f0000000100)={0x11, 0xf8, r4}, 0x14) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) bind$packet(r6, &(0x7f0000000100)={0x11, 0xf8, r8}, 0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb4, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) 04:17:14 executing program 1: r0 = socket(0x8, 0x800000003, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000100), &(0x7f0000000140)=0x8) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) sendmsg$inet(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="7b59f011a96bd9ad8b74706adbe7c57143a7ff0ca4b0cddc061066592b7ad98a5084b6b5dc8d8ed883eb69aabf72f2e380d1e35f68e2d78d2f87f0188aa3ac75dc0d832b5cd7e473eb937124e787c8c361554c1e0c789182fe8432e7ac85c7ef6d78069a8af5a2d0c12248e6609de4ef28ddc12d5a6fc8558a232b0a872199b9e9feece9eee63fee6825e639c687e6ebab954b009d07da5c78b993cc432e86fbeabc843ffa5a0341807c288690f80ecfb6256e542b6cea8df9d3b9f05d6adab98e7e6d193a36cdf5d8579acfa4b34d41df8450cf531e646ebb149720f39336af10946f", 0xe3}, {&(0x7f0000000440)="38ae6d9a7fc954a0be519a10d00861486cc795bc1dd0255859987392deeffc203beea0910350f5650577a05be393c023782223931ae4741055f580ced77403a572e85f189445efd04b59bf480ece08ef5f12f73f7543e2d8ea1aefb025b8c0ad8a17839d89ef3bdb201f", 0x6a}, {&(0x7f00000001c0)="09152421cbacf342a5a657a3338c888c03810106dd6e8ecc0d", 0x19}, {&(0x7f00000004c0)="442c5450ed73d9f2dd915a12fa17f8d967d01e48e88916c4b2686f4073db048ae84caaa920cab9139ca018dfeb8efa7e630b73b27014a6166b3c76cd0f75be507f6a2209809a00034ad85baa7dc7da0ad4f95b1a52990ed86668", 0x5a}, {&(0x7f0000000540)="bf8225ca2a68c29648e61cd69cf5cc09b7bd68abe811f48db94cf3a2840ee9e59282c6accd7e457800294a5d7d6e55c0b04f84af77c7441f6b86c9ec9e60303e6b68f58420be7e10e740b112462a4dd9deb3ef2cb23c46bb7707955230df48fc2e109a58c8a5bb70874a01fc078edff1dd64a0ad8a46c1bd47cce39a41a9befd1cd3dd516e0d703df8783c22284935cfae0abf9c78ad39c274eed1ac401c5e1d8d6bc8", 0xa3}], 0x5, &(0x7f0000000680)=[@ip_ttl={{0x14, 0x0, 0x2, 0x20}}], 0x18}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=ANY=[@ANYBLOB="bc00000024000b0f000000000000e1ffffff0000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff001000000800010072656400900002080800030089c30000140001007f0000000100000018eb00000105210608000300ffffffff0c000400b55997f9d125666f2d2aab77c008000000000400000000040010000000000000000000000100010006000081d7d200071b0406140001000100000005000000010000000e09000114000100fa00000000002000000000001c08d22db25f01001f00000000527ca97c2738a8b7d2b0529b58ef466bc8331215af5af6e776ca8d43ca81d96d769c32f2581d4e521e609150eb166dbd84bc29da4bf1a48497ab932ab1158a7ce72bca7e170a4d428ba472b2dd5d611c18135ce8528e9b231fd0ad89a83e6a3ee7995e9b5130deb306fc28fe7caf3e020101d7c25da48eaddae22c342535e89735f346b8fb24191ce84544bc771ac1b1410d39a8f7e93301940077"], 0xbc}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)=@assoc_value, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000005f80)=@assoc_value={0x0, 0x75}, &(0x7f0000005fc0)=0x8) sendfile(r8, r7, 0x0, 0x100000001) recvfrom(r8, &(0x7f0000000880)=""/188, 0xbc, 0x0, &(0x7f00000002c0)=@ax25={{0x3, @null, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null, @bcast]}, 0x80) [ 2188.474924][T26831] INFO: trying to register non-static key. [ 2188.480773][T26831] the code is fine but needs lockdep annotation. [ 2188.487077][T26831] turning off the locking correctness validator. [ 2188.493388][T26831] CPU: 1 PID: 26831 Comm: syz-executor.1 Not tainted 5.8.0-rc4-syzkaller #0 [ 2188.502051][T26831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2188.512092][T26831] Call Trace: [ 2188.515381][T26831] dump_stack+0x18f/0x20d [ 2188.519712][T26831] register_lock_class+0x157d/0x1630 [ 2188.524996][T26831] ? stack_trace_consume_entry+0x160/0x160 [ 2188.530800][T26831] ? save_stack+0x1b/0x40 [ 2188.535124][T26831] ? is_dynamic_key+0x1a0/0x1a0 [ 2188.539967][T26831] ? save_stack+0x32/0x40 [ 2188.544292][T26831] __lock_acquire+0xfa/0x56e0 [ 2188.548965][T26831] ? sock_sendmsg+0xcf/0x120 [ 2188.553546][T26831] ? ____sys_sendmsg+0x6e8/0x810 [ 2188.558482][T26831] ? do_syscall_64+0x60/0xe0 [ 2188.563068][T26831] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2188.569147][T26831] ? lock_acquire+0x1f1/0xad0 [ 2188.573823][T26831] ? fs_reclaim_acquire+0xf/0x40 [ 2188.578762][T26831] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2188.584741][T26831] ? mark_lock+0xbc/0x1710 [ 2188.589156][T26831] lock_acquire+0x1f1/0xad0 [ 2188.593657][T26831] ? del_timer_sync+0x75/0x270 [ 2188.598417][T26831] ? lock_release+0x8d0/0x8d0 [ 2188.603091][T26831] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 2188.608732][T26831] ? red_init+0x191/0x2e0 [ 2188.613060][T26831] ? red_change+0x1c0/0x1c0 [ 2188.617558][T26831] ? lockdep_init_map_waits+0x26a/0x890 [ 2188.623103][T26831] ? __raw_spin_lock_init+0x34/0x100 [ 2188.628380][T26831] ? lockdep_hardirqs_off+0x66/0xa0 [ 2188.633570][T26831] del_timer_sync+0xab/0x270 [ 2188.638151][T26831] ? del_timer_sync+0x75/0x270 [ 2188.642902][T26831] red_destroy+0x33/0x70 [ 2188.647139][T26831] ? red_offload.isra.0+0x480/0x480 [ 2188.652476][T26831] qdisc_create+0xcd9/0x12e0 [ 2188.657062][T26831] ? tc_get_qdisc+0xad0/0xad0 [ 2188.661730][T26831] ? __nla_parse+0x3d/0x4a [ 2188.666137][T26831] tc_modify_qdisc+0x4c8/0x1990 [ 2188.670993][T26831] ? qdisc_create+0x12e0/0x12e0 [ 2188.675839][T26831] ? lock_is_held_type+0xb0/0xe0 [ 2188.680765][T26831] ? qdisc_create+0x12e0/0x12e0 [ 2188.685607][T26831] rtnetlink_rcv_msg+0x44e/0xad0 [ 2188.690533][T26831] ? rtnetlink_put_metrics+0x510/0x510 [ 2188.695984][T26831] ? lock_acquire+0x1f1/0xad0 [ 2188.700653][T26831] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2188.705928][T26831] netlink_rcv_skb+0x15a/0x430 [ 2188.710683][T26831] ? rtnetlink_put_metrics+0x510/0x510 [ 2188.716134][T26831] ? netlink_ack+0xa10/0xa10 [ 2188.720717][T26831] netlink_unicast+0x533/0x7d0 [ 2188.725469][T26831] ? netlink_attachskb+0x810/0x810 [ 2188.730569][T26831] ? _copy_from_iter_full+0x247/0x890 [ 2188.735930][T26831] ? __phys_addr+0x9a/0x110 [ 2188.740423][T26831] ? __phys_addr_symbol+0x2c/0x70 [ 2188.745436][T26831] ? __check_object_size+0x171/0x3e4 [ 2188.750710][T26831] netlink_sendmsg+0x856/0xd90 [ 2188.755463][T26831] ? netlink_unicast+0x7d0/0x7d0 [ 2188.760392][T26831] ? netlink_unicast+0x7d0/0x7d0 [ 2188.765326][T26831] sock_sendmsg+0xcf/0x120 [ 2188.769731][T26831] ____sys_sendmsg+0x6e8/0x810 [ 2188.774482][T26831] ? kernel_sendmsg+0x50/0x50 [ 2188.779146][T26831] ? do_recvmmsg+0x6d0/0x6d0 [ 2188.783724][T26831] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2188.789697][T26831] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2188.795677][T26831] ? __lock_acquire+0xc1e/0x56e0 [ 2188.800613][T26831] ___sys_sendmsg+0xf3/0x170 [ 2188.805200][T26831] ? sendmsg_copy_msghdr+0x160/0x160 [ 2188.810478][T26831] ? __fget_files+0x272/0x400 [ 2188.815153][T26831] ? lock_downgrade+0x820/0x820 [ 2188.819999][T26831] ? find_held_lock+0x2d/0x110 [ 2188.824766][T26831] ? __might_fault+0x11f/0x1d0 [ 2188.829531][T26831] ? __fget_files+0x294/0x400 [ 2188.834206][T26831] ? __fget_light+0xea/0x280 [ 2188.838794][T26831] __sys_sendmsg+0xe5/0x1b0 [ 2188.843293][T26831] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2188.848313][T26831] ? __x64_sys_futex+0x382/0x4e0 [ 2188.853250][T26831] ? do_syscall_64+0x1c/0xe0 [ 2188.857835][T26831] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2188.863810][T26831] do_syscall_64+0x60/0xe0 [ 2188.868225][T26831] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2188.874118][T26831] RIP: 0033:0x45c1f9 [ 2188.877996][T26831] Code: Bad RIP value. [ 2188.882056][T26831] RSP: 002b:00007f6058906c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2188.890459][T26831] RAX: ffffffffffffffda RBX: 000000000002b5c0 RCX: 000000000045c1f9 [ 2188.898423][T26831] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 [ 2188.906381][T26831] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 2188.914342][T26831] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 2188.922298][T26831] R13: 00007ffddd39963f R14: 00007f60589079c0 R15: 000000000078bf0c [ 2188.949327][T26831] ------------[ cut here ]------------ [ 2188.954924][T26831] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: 0x0 [ 2188.966256][ T29] audit: type=1800 audit(1595564235.070:4698): pid=26788 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16365 res=0 [ 2188.986999][T26831] WARNING: CPU: 1 PID: 26831 at lib/debugobjects.c:485 debug_print_object+0x160/0x250 [ 2188.999195][ T29] audit: type=1804 audit(1595564235.070:4699): pid=26840 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1455/memory.events" dev="sda1" ino=16365 res=1 [ 2189.000451][T26831] Kernel panic - not syncing: panic_on_warn set ... [ 2189.029245][T26831] CPU: 0 PID: 26831 Comm: syz-executor.1 Not tainted 5.8.0-rc4-syzkaller #0 [ 2189.037914][T26831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2189.046152][ T29] audit: type=1804 audit(1595564235.100:4700): pid=26841 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir276669538/syzkaller.nqQwiy/1455/memory.events" dev="sda1" ino=16365 res=1 [ 2189.047970][T26831] Call Trace: [ 2189.047990][T26831] dump_stack+0x18f/0x20d [ 2189.048006][T26831] panic+0x2e3/0x75c [ 2189.048025][T26831] ? __warn_printk+0xf3/0xf3 [ 2189.087456][T26831] ? __warn.cold+0x5/0x45 [ 2189.091765][T26831] ? debug_print_object+0x160/0x250 [ 2189.096942][T26831] __warn.cold+0x20/0x45 [ 2189.101169][T26831] ? wake_up_klogd.part.0+0x8c/0xc0 [ 2189.106344][T26831] ? debug_print_object+0x160/0x250 [ 2189.111637][T26831] report_bug+0x1bd/0x210 [ 2189.115963][T26831] handle_bug+0x38/0x90 [ 2189.120103][T26831] exc_invalid_op+0x13/0x40 [ 2189.124602][T26831] asm_exc_invalid_op+0x12/0x20 [ 2189.129454][T26831] RIP: 0010:debug_print_object+0x160/0x250 [ 2189.135255][T26831] Code: dd 40 ab 93 88 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bf 00 00 00 48 8b 14 dd 40 ab 93 88 48 c7 c7 a0 a0 93 88 e8 12 94 a9 fd <0f> 0b 83 05 fb f0 13 07 01 48 83 c4 20 5b 5d 41 5c 41 5d c3 48 89 [ 2189.154869][T26831] RSP: 0018:ffffc900086272e8 EFLAGS: 00010282 [ 2189.160948][T26831] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000 [ 2189.168919][T26831] RDX: 0000000000040000 RSI: ffffffff815d4077 RDI: fffff520010c4e4f [ 2189.176887][T26831] RBP: 0000000000000001 R08: 0000000000000001 R09: ffff8880ae7318e7 [ 2189.184854][T26831] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff89bcc240 [ 2189.192823][T26831] R13: ffffffff8162fd80 R14: ffff888065fd82c8 R15: 1ffff920010c4e68 [ 2189.200803][T26831] ? calc_wheel_index+0x220/0x220 [ 2189.205835][T26831] ? vprintk_func+0x97/0x1a6 [ 2189.210448][T26831] ? debug_print_object+0x160/0x250 [ 2189.215650][T26831] debug_object_assert_init+0x1f4/0x2e0 [ 2189.221195][T26831] ? debug_object_init_on_stack+0x20/0x20 [ 2189.226927][T26831] ? trace_hardirqs_on+0x5f/0x220 [ 2189.231929][T26831] try_to_del_timer_sync+0x6d/0x110 [ 2189.237127][T26831] ? del_timer+0x110/0x110 [ 2189.241542][T26831] ? del_timer_sync+0x118/0x270 [ 2189.246398][T26831] del_timer_sync+0x192/0x270 [ 2189.251050][T26831] red_destroy+0x33/0x70 [ 2189.255286][T26831] ? red_offload.isra.0+0x480/0x480 [ 2189.260458][T26831] qdisc_create+0xcd9/0x12e0 [ 2189.265078][T26831] ? tc_get_qdisc+0xad0/0xad0 [ 2189.269731][T26831] ? __nla_parse+0x3d/0x4a [ 2189.274130][T26831] tc_modify_qdisc+0x4c8/0x1990 [ 2189.278970][T26831] ? qdisc_create+0x12e0/0x12e0 [ 2189.283821][T26831] ? lock_is_held_type+0xb0/0xe0 [ 2189.288763][T26831] ? qdisc_create+0x12e0/0x12e0 [ 2189.293602][T26831] rtnetlink_rcv_msg+0x44e/0xad0 [ 2189.298522][T26831] ? rtnetlink_put_metrics+0x510/0x510 [ 2189.303967][T26831] ? lock_acquire+0x1f1/0xad0 [ 2189.308750][T26831] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2189.314012][T26831] netlink_rcv_skb+0x15a/0x430 [ 2189.318751][T26831] ? rtnetlink_put_metrics+0x510/0x510 [ 2189.324192][T26831] ? netlink_ack+0xa10/0xa10 [ 2189.328772][T26831] netlink_unicast+0x533/0x7d0 [ 2189.333521][T26831] ? netlink_attachskb+0x810/0x810 [ 2189.338618][T26831] ? _copy_from_iter_full+0x247/0x890 [ 2189.343976][T26831] ? __phys_addr+0x9a/0x110 [ 2189.348461][T26831] ? __phys_addr_symbol+0x2c/0x70 [ 2189.353470][T26831] ? __check_object_size+0x171/0x3e4 [ 2189.358731][T26831] netlink_sendmsg+0x856/0xd90 [ 2189.363469][T26831] ? netlink_unicast+0x7d0/0x7d0 [ 2189.368382][T26831] ? netlink_unicast+0x7d0/0x7d0 [ 2189.373294][T26831] sock_sendmsg+0xcf/0x120 [ 2189.377686][T26831] ____sys_sendmsg+0x6e8/0x810 [ 2189.382437][T26831] ? kernel_sendmsg+0x50/0x50 [ 2189.387096][T26831] ? do_recvmmsg+0x6d0/0x6d0 [ 2189.391674][T26831] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2189.397656][T26831] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2189.403612][T26831] ? __lock_acquire+0xc1e/0x56e0 [ 2189.408525][T26831] ___sys_sendmsg+0xf3/0x170 [ 2189.413109][T26831] ? sendmsg_copy_msghdr+0x160/0x160 [ 2189.418371][T26831] ? __fget_files+0x272/0x400 [ 2189.423022][T26831] ? lock_downgrade+0x820/0x820 [ 2189.427846][T26831] ? find_held_lock+0x2d/0x110 [ 2189.432597][T26831] ? __might_fault+0x11f/0x1d0 [ 2189.437363][T26831] ? __fget_files+0x294/0x400 [ 2189.442016][T26831] ? __fget_light+0xea/0x280 [ 2189.446591][T26831] __sys_sendmsg+0xe5/0x1b0 [ 2189.451068][T26831] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2189.456068][T26831] ? __x64_sys_futex+0x382/0x4e0 [ 2189.460993][T26831] ? do_syscall_64+0x1c/0xe0 [ 2189.465565][T26831] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2189.471546][T26831] do_syscall_64+0x60/0xe0 [ 2189.475942][T26831] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2189.481808][T26831] RIP: 0033:0x45c1f9 [ 2189.485671][T26831] Code: Bad RIP value. [ 2189.489729][T26831] RSP: 002b:00007f6058906c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2189.498111][T26831] RAX: ffffffffffffffda RBX: 000000000002b5c0 RCX: 000000000045c1f9 [ 2189.506062][T26831] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 [ 2189.514006][T26831] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 2189.521954][T26831] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 2189.529907][T26831] R13: 00007ffddd39963f R14: 00007f60589079c0 R15: 000000000078bf0c [ 2189.539251][T26831] Kernel Offset: disabled [ 2189.543590][T26831] Rebooting in 86400 seconds..