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"}, @NFTA_DATA_VALUE={0xb7, 0x1, "380895e034af51079f13ba442697e0d83ba2848bd8dbdb4167d70830512f3dddbd1e61dffdc42d015d64f945ad2abea39d043e04af38d9d88bdbe06e9b65921a03fd92c8bf7cc1d6505064b8a82148aff3127dd9eb249ed854ebc5bb6d867c50f05f67574b70aeff08e6c104e0b835e31bea0ac99db5e37384c425a512f2a7034c4552a5a7225fa45d3f53f9cf84452ebb9eeff091e08840794ea50a6cbf560423673c7fed1dccb94ab059a5db2a37be7fec85"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_BITWISE_MASK={0x108, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x75, 0x1, "4e9b29e75cb77e774e7051232768b0160d6e36e2061eecdd379fcf44e0c707b609afdb58814827cc3888cae4260c2aef42985c8d44d825c4230f8f9e60ba395605530f76e7ac9b0a2058f7c70372f4753a88a711d0d6fcd1ff6b4311bbc438d3989b33e5f98297f9161936a9cf1ed55692"}, @NFTA_DATA_VALUE={0x46, 0x1, "c225930e01fa0c6ed2a33f1c8b4e0304d3ac9b130ffcf17e07b22763ac5175d4bdbf36b31e713757dbe1e5dcf68c8d3a86be78da18c91d23056f9a027fd82be77409"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x15, 0x1, "9757a312b17821696bc31562922ba9ece3"}, @NFTA_DATA_VALUE={0x1e, 0x1, "0870a757af3edebe4b403b10fa67c8446e848d61801f70352320"}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_BITWISE_XOR={0x110, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xd7, 0x1, "03afa9f63213f93757d7d7bed3f2acdb657b4179e33639387b3c7b89566f37f8196fe9b715250324eaf767bc5f70770f2761599f29684873878c3c3735900f8dc5841d3b07d2becca59811acd75377f663d9dfe5424701a52affee10cf71a42583a2c639766757fbce644ad4b4cd097bcee17800422bfe5769b97d8b5dbb0bb07ee112a879e9aa63c085703c06a0d09b79d6e19100362c9c15e49df6b7589a800dc802695b62b0ee1a9fa0f85f6c93a349e9f5fcb9ab9e155064a34d7a54e51028ce3ebb26fb9b6de19f24ad247769df512050"}]}]}}, @fib={{0x8, 0x1, 'fib\x00'}, @void}]}, {0x74, 0x1, 0x0, 0x1, [@osf={{0x8, 0x1, 'osf\x00'}, @void}, @limit={{0xa, 0x1, 'limit\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffeff}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3f}]}}, @hash={{0x9, 0x1, 'hash\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0xfbd}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x100}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x3f}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x4}]}}]}, {0x954, 0x1, 0x0, 0x1, [@socket={{0xb, 0x1, 'socket\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_KEY={0x8}]}}, @reject={{0xb, 0x1, 'reject\x00'}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xff}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2b}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}]}}, @log={{0x8, 0x1, 'log\x00'}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '\x0f\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x18}, @NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '[/\x00'}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x6}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x3ff}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x2}]}}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}, @flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @void}, @range={{0xa, 0x1, 'range\x00'}, @val={0x798, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x20c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "93a8cc98d0709be4e53789eba8de630a28c49653e8f8da64570504f762ec5d5bb276459fe54b43b686fcab0afa54903d81db2e68f3188ff87e63ecd52eba70297b"}, @NFTA_DATA_VALUE={0x8d, 0x1, "8ebd1cfc28f60b4f856f462f4fe7b73102a984b3e073eb2e21b0ffc7cef22e52a04db8bc3158b999896451e2c79877f791de4f7cabe1632f9e3ae28f3cbbce224bd39071c1d85e87b61c36c36b15486421fd214a226f55cc01cbb1099dd3b596d85354362f4f9f68d51871d7d71adb701411315d729bfe824132080be0e1f33f17e5d60ef80c5f9f4f"}, @NFTA_DATA_VALUE={0xdd, 0x1, "c80d476866b2fb528f948a383b3ad6891b7bb9d45f019d49ea9c1683da3e7c91bb8725f07f55d79e26fa3d85f7bfe3b55412cd7462fb8fd714b7941ca05aea0e87a032068e6e558cca56b89830d11de04f2892e92ef944d26c0fd73146d7bd39b22effc746427b18db6f2c98db153252bb8edc7ea126e433d38e9fa43e3343373d090283c1b6a209cc56bd52b71702ebb597dd389e2bb642606d31bfd6854c2497134485f5431cfe29c8e178cd05f2b616763b6b7c90f10bf1c38a89ffaa42a7c505d1952f8142fa84f9309e13ffcd3679e791b195dee6d788"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_RANGE_TO_DATA={0x180, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xe3, 0x1, "1b22408c6f6a950514f41a54a59f10dc500c9de1300018139d13e4775fbbd090da1e10ef8ff097ac3baaa310e1c01d82ae95d92740ab4b61346d68464ac2eccb368322cebe268c9280f44060edfbb7ff38226b449109c914f9383f32ac8cb5c3323e5ed7cb5b44a1def7cd9407d12b4c66b67d0c31c889baf3d650a953e52818b097f79e06d8ddedd8f71377a094fe3fc3de0de9e0aafbfa9a45a52c70fa943db7f10ac11cd832f0a75620274d4fb2ce8563a4710105371295d18ee55430d02d5eb205683d59a70438223d4c0329f21e236565eb66a1463aebc0166c2dc0ba"}]}, @NFTA_RANGE_TO_DATA={0x30, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x318, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x79, 0x1, "d3842275442a4f1df583bedae657320a09721c67427f251312d8108b137b4d25df1ef0d412a67a8ef929d43906e484602f59e83e46f878f0e66c97155b0970474c2a822bf815b7f8b14cd776c3541be8596d69bf709a99fa8842c3a122f99d22d47a7e7e605054958ced1e822c261f49d261e70995"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xeb, 0x1, "b83e499594948bf704e6a37c82e1ec58bc02decbd30bc1249f91953ac02e0e943d4cd5a058870f2c3c7ebae141e2c9ad522edfdd746c7af11dc76047c8be17bf0fe19bcb0b5ace3e61b0032ddcee634b42f11c3c3b270402cfc3a51b2c3d8dc0777cdbcb063f911367862353f41e9fb835bb8dfc3245ce5402e2444e17ad2856e407fd753f78162ec794e694548526404fb51e6d154b15c6754e1a66444d0392eb9788cc367834f78b0a895aea3d66a258d188898c6be7665344b29495180dd0515ab77c37d79cc963a5e88408e8e7c5aa124060c3704050ea4cacdc5355286a83222e6e039a93"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xad, 0x1, "d0593a9d6662462b8b29feddc390557af464f850001e8fb219aa04498d8fd406d43b0437e113584a91d04914b0aa899702f0faa2e0ad63d811ebf322fe72dd994cfd133fb1c82abd60367bbb570766fe2cb04e6ce33a5fa08df0697109df06ed54faee3837ad4f45f47e45768a57cd2b3cf739a2dd866394f85e25f60c7b8d636d2c03684528e9388c7fcd0b8693bb5d09fe0676d249ec6274e4c13a457ac211db4eb8ae18e8d2196e"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_RANGE_TO_DATA={0xa8, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}}, @log={{0x8, 0x1, 'log\x00'}, @void}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x1}]}}, @target={{0xb, 0x1, 'target\x00'}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x6f56}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x400}, @NFTA_TARGET_NAME={0x6, 0x1, '#\x00'}, @NFTA_TARGET_INFO={0x20, 0x3, "4a435da621b54ac3ec73efb1c053c82487b86a4040133a1181a894c3"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x4465f6a8}]}}]}, {0x64, 0x1, 0x0, 0x1, [@synproxy={{0xd, 0x1, 'synproxy\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xad}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x400}, @NFTA_SYNPROXY_WSCALE={0x5}]}}, @dup={{0x8, 0x1, 'dup\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}]}}]}, {0x48, 0x1, 0x0, 0x1, [@rt={{0x7, 0x1, 'rt\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}, @tunnel={{0xb, 0x1, 'tunnel\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xa}]}}]}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x58}, @NFTA_SET_ID={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x59d6}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x210, 0x18, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x10c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb6bf}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc1c}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1ff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xcc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'macsec0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x81}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x6288}, 0x1, 0x0, 0x0, 0x4010}, 0x20000080) 02:08:29 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b4000000000000006e0a0000000000007b0a00ff000000009500000000000000d4d91ba1c59141301a93b6bf24bf31b962ba2457a25bdfde48262c574fb9b39c75241688bda4202eba0f89bdbae52235050ba1d9e81ff5c05930ea2f2caae424ea9c8a1562166c523a2f67b9d8df5a504af584cdc890a3939a1d186f9a3a953cdcf829c80fc4ce40aa84c94732bc7a1e1b14851b476c1a143b9fd0022106b83afd6abd23d4ad81cce2328847fc10842ec45c49d0d8304ad5ce45f7073f04e6fea4a311f41d781bb48f9afcca4607886528654c423627a9"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x78) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$FIONCLEX(r0, 0x5450) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000080)={{r2}, 0x4b, 0x0, 0x2}) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(r4, &(0x7f0000000140)="bf67df704dce61f68f3dd258080000000000000061311e6fa61f0958b8fead67", 0x20, 0x44080, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000b00)="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", 0x1bd) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14f700000000ac39e712ac10e42c0c0e898af353b79a450d05e964b232698ec883dd23c2298beede627a847430007344510482673d9aa0e71ad3b5c148c76c18700a627e0d772da26e9830b1b363988078dfd45cf1921b6128e526d9914f4a56ce3ae565c4964b29efbad64f843b265699411a13fbb3eb30e8c9074cd48b3db3c140f2777e85e491425c206485e660adc3fe314ab4781eaa83eb52070998e8912fe28d4bfaffc95e50dbe6f03866098bcd7ce6869cca463c74367176de2005530ea8b7eec450dc7b65be0a68edd1a006d4143fd0594edac1940161000000"], 0x14}}, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4091, 0x7ffff000}], 0x1}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 2201.607514][ T28] audit: type=1804 audit(1593396509.492:2426): pid=2546 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1780/cgroup.controllers" dev="sda1" ino=16338 res=1 02:08:29 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002600) [ 2201.752549][ T2545] IPVS: ftp: loaded support on port[0] = 21 02:08:29 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) sendto$inet6(r3, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r3, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20044880}, 0x4000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000000002000000", @ANYRES32=r6, @ANYBLOB="08080200ac1414aa"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) 02:08:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x100, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000180)=[{0x8, 0x1, 0xcf, 0xf7aa}]}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1e, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000004b80)={&(0x7f0000004840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000004a80)=[{&(0x7f00000048c0)=""/247, 0xf7}, {&(0x7f00000049c0)=""/156, 0x9c}], 0x2, &(0x7f0000004ac0)=""/146, 0x92}, 0x40000000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000280)={0x0, {{0xa, 0x4e22, 0x2, @empty, 0x80}}, {{0xa, 0x4e24, 0xfff, @empty, 0x8}}}, 0x108) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r10, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000004cc0)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004c80)={&(0x7f0000004c00)={0x50, r10, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x543}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="240000006500090000000000006d51005772d8ed", @ANYRES32=r5, @ANYBLOB="000000000200ffff"], 0x24}}, 0x0) 02:08:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0)=0x7, 0x4) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070700000000000000000000000014000200776730"], 0x28}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100000002) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x60, 0x9, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xff}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_ADT={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xe, 0x1a, 'wireguard\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040}, 0x40) [ 2201.974866][ T28] audit: type=1804 audit(1593396509.853:2427): pid=2613 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1781/cgroup.controllers" dev="sda1" ino=16327 res=1 02:08:29 executing program 5: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044941a4976e252922cb1996e2e34ba800000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3fedb1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005070c022d640000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0xe00, 0x0, {0x0, 0x0, 0x0, r5, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x3a, 0x4, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x40884) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) sendto$inet(r1, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 2202.091610][ T2621] IPVS: ftp: loaded support on port[0] = 21 02:08:30 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002700) [ 2202.148502][ T2625] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2202.265088][ T2545] virt_wifi0 speed is unknown, defaulting to 1000 [ 2202.295262][ T2635] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2202.315322][ T28] audit: type=1804 audit(1593396510.193:2428): pid=2641 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1654/cgroup.controllers" dev="sda1" ino=16325 res=1 [ 2202.442474][ T28] audit: type=1804 audit(1593396510.323:2429): pid=2651 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1782/cgroup.controllers" dev="sda1" ino=16384 res=1 [ 2202.557910][ T2668] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2202.692897][ T28] audit: type=1804 audit(1593396510.573:2430): pid=2657 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1782/cgroup.controllers" dev="sda1" ino=16384 res=1 [ 2203.034824][ T2701] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2203.116920][ T2624] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2203.172881][ T2621] virt_wifi0 speed is unknown, defaulting to 1000 [ 2203.292095][ T2624] IPVS: ftp: loaded support on port[0] = 21 [ 2203.432533][ T2707] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2203.468168][ T2732] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2203.480965][ T21] tipc: TX() has been purged, node left! [ 2203.592805][ T2624] virt_wifi0 speed is unknown, defaulting to 1000 02:08:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="45fe0d6b732186ffff000031e1f39cf50000009159086c50f5194e00010074797a3000f133380000000021"], 0x20}}, 0x20000094) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, 0x2, 0x8, 0x401, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4090}, 0x4050) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000000c0), &(0x7f0000000140)=0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0200cb76ea7211439a321f589f32be513a25de0b608088ed10ecd8f255705addfd40df1c69c799b0f81ab8b65617dc8fcd27806270570411ab4971f9166617a497a18603807eeab93d20ca8f83d9cced9e34e7d843976e821bd4c9e34997ea210181451b143521435cb49840b0f6127442ea5997c3648665ff981c9e5dc445758addf261"], 0x48}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'veth1_to_team\x00', &(0x7f00000005c0)=@ethtool_regs={0x4, 0x2, 0xe5, "1ba181856242198a58b34dcfabc98e9f3e1c7d4ff316b160a763e1a25c3fba6bf4385e1d074e9b7a4fe7fb35a3ac7d1148799f39b8b1801894726be28b71e87296601beb3afc568e71fee4da3614eae97e06dbd9239844bd814eb02a4bc2db7b1caa9c3ffe133b92d5a0c1e0a38f57d81f3506749b44e660de3dffa3af2ad3e2dc9f3debf409ff4db458aaf9b08262c0402b51c4d8f0ba1a9315f43d3ecd690f4041465b3c56f8b49e0e8263c8f271f7c1a8479424c689f3d1127d64be5ffd085fb4ed80d9985a551d6c5faa7f92f560f6d9b6117bbd5b53716f3d1666869eec31b1aebef9"}}) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x3, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}]}, 0x38}}, 0x0) 02:08:33 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x319}, 0x14}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd85e}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x8, 0x10001, 0xf8d0, 0x7f03]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0xffffffff, 0x0]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x8]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x3, 0x6, 0x1, 0x0, 0x6]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40040}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_PROTO_DOWN={0x5}]}, 0x50}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') recvmsg$qrtr(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/14, 0xe}, {&(0x7f00000004c0)=""/228, 0xe4}, {&(0x7f00000005c0)=""/215, 0xd7}], 0x3, &(0x7f00000006c0)=[{0xc8, 0x0, 0x0, ""/179}], 0xc8, 0x40}, 0x38, 0x40000000) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000140)='SMC_PNETID\x00') 02:08:33 executing program 5: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044941a4976e252922cb1996e2e34ba800000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3fedb1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005070c022d640000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0xe00, 0x0, {0x0, 0x0, 0x0, r5, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x3a, 0x4, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x40884) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) sendto$inet(r1, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 02:08:33 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000feffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000026c6f0000000000000000000000000001000000000000000000000000100000fa620000e00000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a00000004155444954000000000000d5eeeb610b56fc19000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) socket(0x10, 0x3, 0x0) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r5, 0x0, r3, 0x0, 0xd86dac9, 0x0) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000140)={'veth0_to_batadv\x00', 0xb9, 0xffffffff}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x10, 0x70bd2d, 0x0, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f00000000c0)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r6, 0x0, 0x42, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) 02:08:33 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002800) 02:08:33 executing program 2: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000001700)=[{&(0x7f00000001c0)="ea", 0x1}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) sendto$inet6(r1, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r1, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x1, 0x20}, 0xc) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_TIOCOUTQ(r3, 0x8953, &(0x7f0000000100)) [ 2205.554443][ T2782] IPVS: ftp: loaded support on port[0] = 21 [ 2205.607442][ T2784] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:08:33 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x20, r4, 0x1, 0x0, 0x0, {0x13}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r6, 0x6, 0xe, &(0x7f0000000180)=""/22, &(0x7f0000000340)=0x16) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x44, r8, 0x1, 0x0, 0x0, {0x21}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x120, r8, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5ad}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x6}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000801}, 0x80) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 2205.736230][ T2782] virt_wifi0 speed is unknown, defaulting to 1000 02:08:33 executing program 5: unshare(0x40000000) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e35, 0x0, @ipv4={[], [], @rand_addr=0x7fffffff}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x0, 0x36, 0xea, &(0x7f0000000080)="eef8f3207dc9cb6798d986a9fddd1fa46b024e092d96d936848cc966f06f1ee1414a9724c3578c0004862a1f6dcd221edbd56c096eb9", &(0x7f00000001c0)=""/234, 0x8, 0x0, 0x66, 0xbe, &(0x7f00000002c0)="f281d873a2aff388e9a897a4798c2ead6208142d0b1ea0090e4a784c5b205ddf39d05c45034c88818cadde859696d8078d3a23052139f8cb00b11b786a82abf19f191da9b47f3f9ae618f60a4e9826ddeef84b40475d821707ced185c21071c324300dcc6698", &(0x7f0000000340)="a7baf33deacb623dbdf5ab2a864f4f1d1c4da7092d29e36add419eb5c9b5a8684d03c169bfd53550a4b501ff6cd525272274df0d910d7e6ec066559ccbeaa7f40624cc3efe2f1cae224ef7f4af321c1788971f444993b4dc7f3a20255532b254ef3863433d12f227ee13dc064d406132fc1c24d7dad78cea11b83a5922bc0696135f03d207da9ea660fc7609f56d90359b6afb3bf07b39852e93ff04cb91b10c27b4f3fa902a26b3b74b04d4c23acfc9c53e25bfd20e436256e4c386cfd4"}, 0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@local, 0x0, 0x0, 0x0, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) r5 = accept4$bt_l2cap(r4, &(0x7f0000000800), &(0x7f0000000840)=0xe, 0x80800) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000880)=0x400, 0x2) accept$alg(0xffffffffffffffff, 0x0, 0x0) [ 2205.952695][ T2788] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 2205.983819][ T2788] device ipvlan4 entered promiscuous mode 02:08:33 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) sendto$inet6(r1, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r1, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x6, @private2, 0x5}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x82, &(0x7f0000000340)={r5}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r5, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={r5, @in6={{0xa, 0x4e23, 0x1000, @private1={0xfc, 0x1, [], 0x1}, 0x9}}, 0x4, 0xdcb0}, &(0x7f0000000180)=0x90) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @local}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000001180)=""/4104, &(0x7f0000001140)=0x1008) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r7, 0x0) 02:08:33 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002900) [ 2206.184353][ T2830] IPVS: ftp: loaded support on port[0] = 21 02:08:34 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x2, 0x3, 0x2a8, 0xf0, 0x0, 0xf0, 0xf0, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {0x6020000}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x0, 0x60}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'vlan0\x00', 'nr0\x00'}, 0x0, 0xb8, 0x120, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'snmp\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000000), {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0xffffffff, 0x3, 0x7, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@dev={[], 0x2e}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x9, 0x6, 0x7, 0x5, 0x0, 0x20, 'lo\x00', 'macvtap0\x00', {}, {}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7f, 0x3}}}, {{@arp={@local, @broadcast, 0xffffff00, 0x0, 0x3, 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@dev={[], 0x20}, {[0xff]}}, 0x3, 0x4, 0x4, 0x8, 0x0, 0x2, 'geneve0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x0, 0x110}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000810500000000000000ffffffe900", @ANYRES32=0x0, @ANYBLOB="000000000000000008002e000200000008000f000080000008002e0004000000"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a9ec8a3a63673a36d66b103e1fdbb4678731c44d5772a8b52f88132613f2ab9faa48e75b0508e2367018dc4479c6757b0a5622107e780a52d43a222d4aa8fa0c3e961e2401d5dbb22107ce4584d22a35c2ff5c7069779f3a8e888a8ac94312cdb43f7907ebfcf3dc4ad1f5e7577c5c2c9146439e6910c437a8213e177dfca08fb12f6c6a8343821e53d1f0ef24575797141dd16b8065042500017c0bab7265ba185fa61404145c500be7e57f2af455765c675c710da30fb915abbfcb8fe5e5a54f998aeb8ecb869537d7ddb529a8d66a4905586c9dd0d81d4841e2c90bd8fa2bf3802bf963edaae01ebd125510bbe75beac077af773d5d2a34b256e8369f68b0fcab87c7ee033997f53b635b59ac5aa1456d0b35e1dd734149dbcf541d744962b2bd0ece4c267760c3a6d4bce9b03000000cfa703a1a48b59700f8c902e46ae26e6e31185a19c07959edcb6bfc88c9e6bc124147521f6eb327231e35785951377c40b713a4f6854b02c428bef068f9494aa8fc9f99ddff40ef4fdc9360eb1bc2a25ac491f2bc9c7a23fe5662170feb55b3999b45b8b80a8438df19e183d854691a1f2b34352fed522c4265e4ece52f35d351a1676982ce0f2eb2c454b9df04b976179611f1be4deac0dd4c79a122f3d33e52bcce38808809820094c31af5cca2d79bf783bb87588d8c21bad663bbde2644cab2b605d0ca91b5c2417ab7c7bba5173b0bfddfd1d87ce6d257c0526fc051adaf783cb44e5f09899886b26ca746f8d2b392e0871bca6f1cb40c5ac1bf5ca80b934424deddfb547d8f9a38a25aa39752cac866986bb0faaf07ffeecd27bd736fa1a058ee5b17adbde605eb5f3648b4ee013640d018b42ef6b"], 0x48}}, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$netlink(r7, 0x10e, 0xa, &(0x7f0000000980)=""/161, &(0x7f0000000a40)=0xa1) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00128009000100766c616e000000008c0002800600010000000000100004800c00010000000000000000000600050081000000340003800c000100da000000000000000c00010000000000000000000c00010000400000000000000c0001000000000000000000280004800c00010000000000000000000c00010000000000000000000c00010000000000000000000c000200000000000000000008000500", @ANYRES32, @ANYBLOB], 0xc4}}, 0x0) [ 2206.320665][ T2828] IPVS: ftp: loaded support on port[0] = 21 [ 2206.354325][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 2206.354342][ T28] audit: type=1804 audit(1593396514.233:2433): pid=2837 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1784/cgroup.controllers" dev="sda1" ino=16367 res=1 [ 2206.474989][ T2847] Unknown options in mask 60 02:08:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x1040c) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) write$binfmt_elf64(r1, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x39, 0x8, 0x5, 0x1, 0x0, 0x3, 0x3, 0x81, 0x40, 0x2cb, 0x1f, 0x4ff4, 0x38, 0x2, 0x9b, 0x0, 0x8}, [{0x60000000, 0xffffbfa5, 0x1000, 0x0, 0xff, 0x1, 0x9, 0x1}, {0x5, 0x8001, 0x4, 0x2, 0x1ff, 0xcee1, 0x7, 0x6}], "0ebc33c9ded12d313b96dfea6e48f83e246732208b2ab95d52ade6b258f9401903a252d08b8a766b6f9c645d07a5aa9682bb1f4d62ca85be7d5bb760cede8948", [[], []]}, 0x2f0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xfe6f) socket$unix(0x1, 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x0, r0, 0x5}) [ 2206.502716][ T2847] x_tables: duplicate underflow at hook 1 02:08:34 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002300)={0x0, 'bond0\x00', {}, 0x7}) pipe(0x0) r4 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYBLOB="00012cbd7000fbdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000009180)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB], 0x3}}, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x50, r5, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x80}, 0x80) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000580)="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", 0x1000}], 0x1) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 2206.689399][ T28] audit: type=1804 audit(1593396514.573:2434): pid=2840 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1784/cgroup.controllers" dev="sda1" ino=16367 res=1 [ 2206.801481][ T28] audit: type=1804 audit(1593396514.603:2435): pid=2837 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1784/cgroup.controllers" dev="sda1" ino=16367 res=1 [ 2206.924869][ T2835] IPVS: ftp: loaded support on port[0] = 21 [ 2206.953368][ T28] audit: type=1804 audit(1593396514.713:2436): pid=2856 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1657/memory.events" dev="sda1" ino=16365 res=1 [ 2207.072447][ T28] audit: type=1800 audit(1593396514.713:2437): pid=2856 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16365 res=0 [ 2207.185149][ T2847] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2207.198751][ T28] audit: type=1804 audit(1593396514.733:2438): pid=2856 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1657/memory.events" dev="sda1" ino=16365 res=1 [ 2207.262166][ T2849] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2207.281190][ T2879] Unknown options in mask 60 [ 2207.293829][ T2847] x_tables: duplicate underflow at hook 1 [ 2207.302735][ T28] audit: type=1804 audit(1593396514.983:2439): pid=2858 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1657/memory.events" dev="sda1" ino=16365 res=1 [ 2207.334952][ T2831] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 2207.353535][ T2831] device ipvlan4 entered promiscuous mode [ 2207.590938][ T28] audit: type=1804 audit(1593396515.473:2440): pid=2858 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1657/memory.events" dev="sda1" ino=16365 res=1 [ 2207.593836][ T28] audit: type=1804 audit(1593396515.473:2441): pid=2862 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1657/memory.events" dev="sda1" ino=16365 res=1 [ 2207.736736][ T2879] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2207.752479][ T2851] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2208.054906][ T21] tipc: TX() has been purged, node left! [ 2208.081021][ T21] tipc: TX() has been purged, node left! 02:08:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x80002, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000780)) r3 = accept$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0xfffffffffffffcd5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r3, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000140)=0xffffffff, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000700)=0x6, 0x4) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x1, 'bridge0\x00', {}, 0xfc}) unshare(0x4060000) sendfile(r2, r1, 0x0, 0x100000001) 02:08:39 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 02:08:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000240)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000180)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) sendto$inet6(r1, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r1, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000000)={0x101, {{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, {{0xa, 0x4e21, 0x9, @private1, 0x7}}}, 0x108) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) sendto$inet6(r4, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r4, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x20, 0x140b, 0x400, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 02:08:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="64000000020605000000008b000000000000c4b686f9e86fcb760100000000000000006269746d61703a706f72740005000400000000000900020073797a30000000000500000005000106001f26ae380780080008000000000006000440000000000600ce5331eeeaecde6262e4a171054000000000c23bb8b4938d03000000ddf5a7ddddf520f34b9c892a3185f7ad09000088637f624157031e6ec800f42ded0000000063b30413"], 0x64}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) sendto$inet6(r3, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r3, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x3, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x80000000, 0xfff, 0x8, 0x0]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x4004000) r6 = socket$netlink(0x10, 0x3, 0xb) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x148, 0x0, 0x2, 0x101, 0x0, 0x0, {0xc, 0x0, 0x3}, [@CTA_EXPECT_NAT={0x78, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_MASK={0xac, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1b}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8f}]}, 0x148}, 0x1, 0x0, 0x0, 0xc0c5}, 0x4004800) sendfile(r2, r1, 0x0, 0x100000001) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x44, r8, 0x1, 0x0, 0x0, {0x21}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x94, r8, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x608e}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6}}]}, 0x94}, 0x1, 0x0, 0x0, 0x88c4}, 0x20044044) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 02:08:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40073bea9feeab05c450000000000007a0a00ff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) pipe(&(0x7f0000000240)) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "038af1b3b2bb4214", "47ab90a52f0ade5606415eb18fdf3fbf", '&AL\t', "16fcda1c1c7c8104"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000280)={0x0, 0x7}, 0x8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x100, 0x1403, 0x100, 0x70bd25, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0xffffffffffffff3d, 0x33, 'macvlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'erspan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg0\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) socket$can_bcm(0x1d, 0x2, 0x2) 02:08:40 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') connect$vsock_stream(r1, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e21, 0x10000, @ipv4={[], [], @private=0xa010105}, 0x2}, 0x1c) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x9, 0x4) recvfrom$phonet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) [ 2212.168328][ T2934] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2212.267882][ T28] audit: type=1804 audit(1593396520.154:2442): pid=2940 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1785/cgroup.controllers" dev="sda1" ino=16369 res=1 02:08:40 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="d6c07d3f59513100890194dd615ca08a05a96a24e995cc0bf558418eb05a7c79bc4edcf7fcef74972002db1ef69d69d3750cb41fe5ef92a187cac63f78ae5b9ded3dd340c0882ddb2bad94e58ee77d2c90b0187db91112f60506cb827f81099e9a4239a5fba3311397dce5e307a521e36f79bb514234124073aeaecba9915d7fcd13d0ae816a77ee0eb0f7c841554edfb6bfaa1b2aad2fce9ef6fb7d883b01f9119e41829bc0a526049921558a9e4674f0b2374c730583bc3ca38e64c3457e6dc28d6671e05b9b646fe53dd837ff7b"], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000008012005fffff0000550214f9f407", 0x11) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) accept4$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000340)={r5}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r5, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={r5, 0x6, 0x10, 0x8, 0x6}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={r6, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f0000000300)=0x84) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0x8, 0x8d, 0xffffffff}, 0xc) [ 2212.358790][ T28] audit: type=1804 audit(1593396520.234:2443): pid=2941 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir145771254/syzkaller.hoJ3z6/1004/cgroup.controllers" dev="sda1" ino=16367 res=1 02:08:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000140)=0x9, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000000000)=@nfc, 0x80, 0x0}}], 0x1, 0x2022, &(0x7f0000000100)={0x0, 0x989680}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000001484b92265f6dc284795380bcb153cbf252f55c63d6246ed47ba314d7bb15d8a56d02a647579b42504df99f19432df312b0dc8252b56e74fe2f92541b77fa36a084c00ced0e6f7b040b98179f2410a07ff", @ANYRES32=0x0, @ANYBLOB="0f0000000000000008001c00ef000000"], 0x28}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x12c, 0x13, 0x8, 0x70bd28, 0x25dfdbfe, {0x2b, 0x81, 0x4, 0x80, {0x4e20, 0x4c24, [0x452, 0x7, 0x0, 0x2], [0x8, 0x9, 0x7, 0x4], 0x0, [0x986a, 0x5]}, 0x80, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xdd, 0x1, "12e040922890094c958aef40ddaee0701438e96e649f57c8b02963ad60bde06171b543014729180663705a6636467afa2709623e8dd7fedcba71e12804096a6c1af22132d236f3f999ad50ddc7ebc9594f384343544ed39642f08771290603b8bd8de9fc53b878676b1b9903b76e78de4d105d5ba4a23d235ba0a04262f5824339134a8474634ba907c1954f812470e11edd2484e36c7de36b0a2e1cbca233bf814f5f3ff71794d39e1fff717c067a825e6703c315fcb75d5aaaa46d5d39f1b65a244ad8888af03186947b02afc2cf5367ff0f7c0e53a9b6cb"}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) [ 2212.536614][ T28] audit: type=1804 audit(1593396520.274:2444): pid=2949 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir572905914/syzkaller.nYoq3G/2321/cgroup.controllers" dev="sda1" ino=16363 res=1 02:08:40 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xfe9e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x1, 'veth1_macvtap\x00', {}, 0x2}) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x0, 0x1f4, @dev}, 0x1c) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000180)) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x1000) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000080)=0x505, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "cddf018312d6d75b", "c0f711a359a5b7215aeb47f891eb668a642577d10642dcf00350e63e6b940232", "9b6795d9", "36a83ebf3f0d54f0"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 02:08:40 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002b00) [ 2212.699231][ T28] audit: type=1804 audit(1593396520.314:2445): pid=2948 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir145771254/syzkaller.hoJ3z6/1004/memory.events" dev="sda1" ino=16368 res=1 02:08:40 executing program 0: unshare(0x6c060000) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190016000300000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x0, 0x1f4, @dev}, 0x1c) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) splice(r2, &(0x7f0000000000)=0xfff, r3, &(0x7f0000000080)=0x9a, 0x101, 0x1) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, r1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000001740)="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", 0x1000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000180)="c1485b9f1364e473afd449e0dcc83bed9d2357889c3c0f42ee3b4caace2e7a3bead31d712e688d608de5a63f0111e44789e187d24128cfbaee51349d82bd98270d1440fb20fbb3b78e19608f2e0834facb09a3220657ffaef44d1dadae626b84cb84c0cc09e503186aad0b3f5d95940138f712f611f1737cdd60f1ed4cb164f0b5e83ce5bd2739239ebf6e9c1516", &(0x7f0000000240)=""/253, &(0x7f0000000340)="48b617439c74d5ff35b4afdb6530ba920c026f4955244b3f7e35df266f86a0ac667f1aaaf7d58f140a81a64a5b53c2928b955ebce680abc99324bb53f9238872407a7ee86d5b58d6a06cbcb836df792e11e60799e58c27ec0a5d74f702cea482c765acd4ca3bd49534fc40ad4367607cd045f522dcf785e25f0c34d0ea2d8dd019affb396e4581e4b6c90e3f9cd370dfe3069fad07fdada88625b5fd90abafa71a9285fdff937a262fa0508c50fc7f52c8a95175bb305cb1151ff45a5d0b57f2def6fff3312d2acf106ce277de41bc1d74e41cdbea71749d436b61bcda1c3fe894c9ada554", &(0x7f00000004c0)="b0993acb040ba34392e5563218320dd606e435425f454c88fed26f0671435678d70ff80559dcee39bf87a8d5b76bde2c3c850c24444a6a251a178e9183b430a8dd2aa706379176ba94953afea50d47d79fc31e7996dd16c2ec8c6feaf7c956c31d9711aa3afc1055eb296928541887a306282940952526263fc2341b1332187d086dab8a6934d2752be79b9d892eab85f26c58a461d8b075382cf95f12b421a416cd4ceac787a511424db26bb9775432aad32105d2c3145ac2ccb14abaea21999d97e79a5692ab2bc67dc5d16b5ac6f6df48a2d0", 0xf}, 0x38) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ab8000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x14) [ 2212.815523][ T28] audit: type=1800 audit(1593396520.314:2446): pid=2948 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16368 res=0 02:08:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) sendto$inet6(r3, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r3, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000780)=0x6, &(0x7f00000007c0)=0x2) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="44000b9d76ad168a410b000e2cdd0040f2d213de3f408ef97fd6d7bdc44855a3a4aabb2fe293cc437f53f0df37da7fe44a", @ANYRES16=r6, @ANYBLOB="01000000000000000000210000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000600040000000000"], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)={0x230, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0xfffe}, {0x8, 0xb, 0x400}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfe}, {0x6, 0x16, 0x401}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x400}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x5b}, {0x8, 0xb, 0x10000}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x564}, {0x8, 0xb, 0x4}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x8000}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6}, {0x5}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x43e}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xc85d}, {0x8}}]}, 0x230}}, 0x4) sendfile(r2, r1, 0x0, 0x100000001) accept$nfc_llcp(r2, &(0x7f00000003c0), &(0x7f0000000440)=0x60) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="14005d0000000000000000000000000000000020"], 0x14}}, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="62266f39edf5cbcb0d06b1ffbd7a5e5372b95c72e445d47f16fbb7fa15862739b8f969e03e14f9be272f2d90c9aed12a9e1a885b27d00ad1d69a11049921958997542ab8db5d438ccece14ed2f51c967ffb6c6e396612191f06ce77ad610f519b5fd622acf853c1abdc6f11e8612c41abd8120c71326f40be8d4dd83c00f80c62cba7f9890705b38016c66cfe4849f0db8d5ad164468a614b2242d2255543c8215ac422f34aa5ef26d13cbfaff5557214d53f6725f524219ce56937a1a853b91450761f8d225e98cb83085bd081dffcf6202fa2f45a84f91d79d83fb2c2065c632188802ca6422cb939990faa143a9", 0xef}, {&(0x7f00000001c0)="1f29d7b6641869e2535614cc931ad13a0ad3a7539f628f3dbbbaea7d31f77fe4a59d1599a3b22ce628c2080c39e1162a24", 0x31}, {&(0x7f0000000280)="c2bfd9001b02503cedd89c6638946a35324d67de1916138bb0b4059bdb571a962d3250e63fb49d99984c7e87d62a2ec4755a03e2ad098ce288e00c7ee41259088b21379e87b03352a4fe1e4a5855b5dbe1bd0d0b1f0dc56601f0dd4e6ae912b9c33475d8fed841ea2ff2f180b90f59b8014a39a084ab559ca1f8ea6907961498866db65d676d3e9c92145bdf6c7fbb26e69531e9e65d9fb3b7c581dade9761", 0x9f}], 0x3, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}], 0x18}, 0x4000001) [ 2212.926074][ T28] audit: type=1804 audit(1593396520.374:2447): pid=2941 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir145771254/syzkaller.hoJ3z6/1004/cgroup.controllers" dev="sda1" ino=16367 res=1 02:08:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0xbfffffff) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) 02:08:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xb1d000) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x0, 0x1f4, @dev}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f02b57cdcde0000000001000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0xfffffff0}, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x0, 0x1f4, @dev}, 0x1c) r6 = accept$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @default}, [@bcast, @rose, @null, @default, @null, @default, @rose, @default]}, &(0x7f0000000040)=0x48) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000200)={0x5f2, 0xef, 0x6, 0x0, 0x0, [{{r0}, 0x7}, {{}, 0xa8}, {{r2}, 0xfd3}, {{r3}, 0x2}, {{r5}, 0x7}, {{r6}, 0x7}]}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r8 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendfile(r8, r7, 0x0, 0xffffffff880) [ 2213.080651][ T28] audit: type=1804 audit(1593396520.504:2448): pid=2945 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1785/cgroup.controllers" dev="sda1" ino=16369 res=1 [ 2213.110607][ T2981] IPVS: ftp: loaded support on port[0] = 21 02:08:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8}]}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) r1 = socket(0x1d, 0x4, 0xfffffffa) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x34, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24004011}, 0x20000001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f02b57cdcde0000000001000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0xfffffff0}, 0x0) tee(r2, r4, 0x3, 0x0) sendfile(r3, r2, 0x0, 0x100000001) sendto$inet6(r2, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r2, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/65, 0x41}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000640)=""/81, 0x51}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40010102) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x2000800) ioctl(r0, 0x8b32, &(0x7f0000000040)) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f00000004c0)=""/143, 0x8f}, {&(0x7f0000000200)=""/31, 0x1f}, {&(0x7f00000005c0)}], 0x4, 0x80) 02:08:41 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002c00) [ 2213.229340][ T2981] virt_wifi0 speed is unknown, defaulting to 1000 [ 2213.253717][ T28] audit: type=1804 audit(1593396520.864:2449): pid=2972 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1786/cgroup.controllers" dev="sda1" ino=16374 res=1 02:08:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000440)={'team0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005070c022d640000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2801000000000108000e0000000000009d0ed3750b8e280b9a4c6ee4d139e4887d38f898686836ddffff006c88ac", @ANYRES32=r5, @ANYBLOB="0f0000000000000008001c00ef000000"], 0x28}}, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x100000001) sendto$inet6(r6, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r6, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="840000001100000626bd7000fddbdf2507000000", @ANYRES32=r5, @ANYBLOB="820007000000007a8493a900070000000000000002000000000000e907002c00b080000008001c00"/56, @ANYRES32=r6, @ANYBLOB="0a000100aaaaaaaaaa3300000500110001000000040004000010000008001e00ffffff7f080023000000010004001400"], 0x84}}, 0x0) [ 2213.417145][ T28] audit: type=1804 audit(1593396521.044:2450): pid=2977 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1786/cgroup.controllers" dev="sda1" ino=16374 res=1 [ 2213.464037][ T3004] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2213.600301][ T3004] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2213.620990][ T28] audit: type=1804 audit(1593396521.344:2451): pid=2999 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir563944432/syzkaller.tN78Vu/1789/memory.events" dev="sda1" ino=16369 res=1 02:08:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)=ANY=[@ANYBLOB="580000000206010000000000000000000000000014100300686173683a69702c706f72742c69700005000400000000000900020091797a31000000000c000780080008000000000005000500020000000500010007000000"], 0x58}}, 0x0) pwrite64(r0, &(0x7f0000000000)="734315f4e063f007decff240dd56737b8123890ccdc85927e79c714a78709714c4b23e8ffd667fdec35120a45bded1fe60e0f5b2fb02ce88d990e30202bafe30b24c4c844831dec64cc290a46c97016d0b702a6cf5bfcd6c709795cbcb49f963df736b58bca67c9416a723f4550fbac1a2fc69", 0x73, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f02b57cdcde0000000001000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 02:08:41 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1) [ 2213.813737][ T2988] IPVS: ftp: loaded support on port[0] = 21 02:08:41 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002d00) [ 2213.915927][ T3021] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 02:08:41 executing program 2: unshare(0x40000000) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r1) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x44, r2, 0xef8c987201b6e653, 0x0, 0x0, {0x35}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffffa}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x5c, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x20}}]}, 0x5c}}, 0x40000050) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}}, 0x20000040) [ 2213.998783][ T3021] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 02:08:42 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000680)=""/223, 0xdf}, {&(0x7f0000000a40)=""/189, 0xbd}, {&(0x7f0000000480)=""/1, 0x1}], 0x4, &(0x7f0000000600)=""/107, 0x6b}, 0x40000103) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) r3 = getpid() r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000380)=0x0) r7 = gettid() r8 = getuid() r9 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={r7, r8, r9}, 0xc) sendmsg$unix(r2, &(0x7f0000000400)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000180)="cca98f190d6ac5cbd1", 0x9}, {&(0x7f00000001c0)="287576918348a8693c56371b7f059b9c8c3915e478e189be424914ccbec4df329fac333d21d0e793ca1539fa559e16c1ccf1bddb09dd8348a22e84eccf0a1eba84689d7f667ce94ec9bdfd62b4d274d41aeeb48a39d5cae22cbd7c930828e44ed0580e1850145f06fc05c429d240aa4880d87ae923151efea52d5950138e8019e74489f2a498a1320881558e50b2acd4be6ce10be880f0e5e58b63baa3aedb02740dfeddb22d61a34612d6327b6156", 0xaf}, {&(0x7f0000000280)="c983d17590cc32870e9d354b3d86701207247476b3b9ac525beb33dd94882faf90af44b6c80ede5b70a3714ba5a3e1637768e4a496f21d9d24a07f508e366224fc6fe8533f16c434a60e0d57a279876c1de99d67ec97ca4dbe4a7ac031775c202a220c6861e807e1ef91b219e1d9114ba506b0d1899c174e84f1e2f88e70221b37a0d60ac7e49f6b5e8e8afe068023684e30", 0x92}], 0x3, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r6, r9}}}], 0x20, 0x20000014}, 0x1) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 2214.170715][ T2988] virt_wifi0 speed is unknown, defaulting to 1000 [ 2214.202927][ T3035] IPVS: ftp: loaded support on port[0] = 21 [ 2214.219091][ T3038] device geneve4 entered promiscuous mode [ 2214.906672][ T3035] virt_wifi0 speed is unknown, defaulting to 1000 [ 2214.927812][ T3062] IPVS: ftp: loaded support on port[0] = 21 [ 2215.045637][ T3062] virt_wifi0 speed is unknown, defaulting to 1000 [ 2215.224520][ T2871] tipc: TX() has been purged, node left! 02:08:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x1001, @empty, 'gretap0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8937, &(0x7f00000004c0)={'veth0_to_bond\x00', r3}) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x0, @dev, 'batadv_slave_1\x00'}}, 0x1e) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000001) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, 0xffffffffffffffff, 0x0, 0x100000001) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000900)=r5, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x100000001) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r7, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x1e4, r8, 0x310, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xdc, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25d9641f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f209f0d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42662184}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b8281f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x553c2d7a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66abc7e5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b39d6a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3193b5cc}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e77ebb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x427a592c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75012186}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c1ca3da}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe73843e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa4, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1eafed91}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xce49f55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c3eaee9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ee1648b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6acc0f44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb3e9c0c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cba1971}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5576e86f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33d5f569}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x3c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9349}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3e6}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e2f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x17ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ff7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c26}]}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x15}, 0x44) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/800], 0x330) 02:08:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x1, 0x0, 0x9}, @ipv6=@udp={0x0, 0x6, "ecb604", 0x8, 0x11, 0x0, @mcast2, @private1, {[], {0x0, 0x0, 0x8}}}}, 0x3a) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, [], [{0x7, 0x5, 0x6, 0x0, 0x9541, 0xffffffff}, {0x81, 0x8001, 0x0, 0x1, 0x9, 0x7a0}], [[], [], [], []]}) 02:08:46 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000eeda6f6a4cea5e98b43fcf73b93933d503", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e00000018000280140001"], 0x48}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005070c022d640000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0xe00, 0x0, {0x0, 0x0, 0x0, r4, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00', r4}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020023000535d25a80648c63940d0324fc60100002400a000000051a82c137153e670902018003000000d1bd", 0x33fe0}], 0x1}, 0x0) 02:08:46 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002e00) 02:08:46 executing program 0: socket$netlink(0x10, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x100000001) r7 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r7, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r7, &(0x7f0000419000)={0xa, 0x0, 0x1f4, @dev}, 0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRESDEC=r0, @ANYRESDEC=r4], 0x4}, 0x1, 0x0, 0x0, 0x84}, 0x40400) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000240)=ANY=[@ANYBLOB="4604d700fbcac6df116d8d1492065e600dab6a8dfd49f03fc35f87e7f26ea493276397946a6f622ed142d0097f5cb045a039fb4bc590ab999e8a0df35d709610c99d49f989fe1598b0b929fa021da352b0a52c1f9cdf770d80f2bdfd2c72eab513c8179e10f3ff255b887febe1ff7d45a61fccb89e3c295ef1782c5d6be0de8593963409679ddb2ab76a6b5698677402393a084d997c8d59d7874ff1bae757d87b8b3154c8cb1b96a267faee82ee9749e8ea5ab91933d34b90ac6c32b08ac20d015aa1eaa851beea95067ad90876", @ANYRES16=r4, @ANYBLOB="ff832800000016000a00", @ANYRES32=r1], 0x4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) [ 2218.651330][ T3153] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2218.684355][ T3153] netlink: 131046 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2218.699835][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 2218.699849][ T28] audit: type=1804 audit(1593396526.584:2464): pid=3163 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1789/cgroup.controllers" dev="sda1" ino=16367 res=1 [ 2218.711503][ T3153] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2218.773288][ T28] audit: type=1804 audit(1593396526.654:2465): pid=3162 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1661/cgroup.controllers" dev="sda1" ino=16363 res=1 [ 2218.821610][ T28] audit: type=1804 audit(1593396526.704:2466): pid=3164 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1661/cgroup.controllers" dev="sda1" ino=16363 res=1 02:08:46 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002f00) [ 2218.917840][ T28] audit: type=1804 audit(1593396526.804:2467): pid=3163 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1789/cgroup.controllers" dev="sda1" ino=16367 res=1 [ 2219.103147][ T28] audit: type=1804 audit(1593396526.984:2468): pid=3166 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1790/cgroup.controllers" dev="sda1" ino=15795 res=1 [ 2219.169347][ T3172] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 02:08:47 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed6}, 0x56) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x50, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x3a, 0xe, "0c9944192c3a3c5930c49f0aa27320c525998ce17ad80d954ae2ff6ef226a0a90bf67797000ed8e86e4300e72eea21e252851a256110"}]}, 0x50}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005070c022d640000000000000000", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x300, 0xe00, 0x0, {0x0, 0x0, 0x0, r10, 0xb}, [@IFLA_PROTO_DOWN={0x5, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x94, r6, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xf4}, @NL80211_STA_WME_MAX_SP={0x13, 0x2, "02b015e803c1a43132663abd4cdfe4"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xe29, 0x1}}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x20}, @NL80211_STA_WME_MAX_SP={0x1f, 0x2, "fde27ff3de55d0aa0e6e894ef2a3e45e2120f46619b6a07edcae06"}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_STA_WME_MAX_SP={0xd, 0x2, "5d5387cf7dd44f6fca"}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xf}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x6}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040081}, 0x48040) [ 2219.253961][ T3172] netlink: 131046 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2219.315875][ T3172] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 02:08:47 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100003000) [ 2219.588310][ T28] audit: type=1804 audit(1593396527.474:2469): pid=3167 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1790/cgroup.controllers" dev="sda1" ino=15795 res=1 [ 2219.683216][ T3180] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 02:08:47 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0x10, 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) close(r1) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r2 = socket(0x0, 0x4, 0x8) r3 = socket$kcm(0x10, 0x2, 0x10) bind$unix(r2, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0xffffffffffffffc5}, 0x2000c0c4) 02:08:47 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400", 0x6}], 0x1) write$binfmt_elf64(r3, &(0x7f00000015c0)=ANY=[@ANYBLOB="8100635b36dd2f5e31032c05f6"], 0xd) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000003b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20800}, 0x0) pipe(&(0x7f0000008f40)={0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x24, 0x0, 0xcc53e968416caf73, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xed}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4080) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r7, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="f42e037e06aca06e61700eeff17ada7076a693f87643981f24575b19d10feb276112c23b7fc756b724f31d80cdae7f0bd1cd83f3ea3da86146b062491516faf9d554e5311a65", @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000009180)={&(0x7f0000001800)=ANY=[@ANYBLOB="a283016ef0de3d7d0abbcd28f320ed9b80000000", @ANYRES16=0x0, @ANYBLOB="b5452bbd7000fedbdf25100000000400028040000180060002000c000000060004004e2200000c000700090000000400000008000b00736970000600040000000000070006006e71000008000b007369700008000400020000000800060000000000040002800c000180060004004e21000008000400fdffffff"], 0x80}}, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES16=r8, @ANYBLOB="00002bbd7000fddbdf250a000000080004000c040000040003801800028014000100ff0200000d00000000000000000000010c00018008000900760000000800050000feffff0800060008000000"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001640)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES64], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x24040805) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 2219.941292][ T3203] IPVS: ftp: loaded support on port[0] = 21 [ 2219.948068][ T28] audit: type=1804 audit(1593396527.834:2470): pid=3196 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1791/cgroup.controllers" dev="sda1" ino=15938 res=1 [ 2220.023538][ T28] audit: type=1804 audit(1593396527.864:2471): pid=3206 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir145771254/syzkaller.hoJ3z6/1007/memory.events" dev="sda1" ino=16034 res=1 [ 2220.064784][ T3203] virt_wifi0 speed is unknown, defaulting to 1000 [ 2220.165173][ T28] audit: type=1800 audit(1593396527.864:2472): pid=3206 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16034 res=0 [ 2220.348453][ T28] audit: type=1804 audit(1593396527.864:2473): pid=3206 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir145771254/syzkaller.hoJ3z6/1007/memory.events" dev="sda1" ino=16034 res=1 02:08:48 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x35}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) sendto$inet6(r1, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r1, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88840}, 0x40000000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@cgroup, r0, 0x11}, 0x10) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000100)={@cgroup, 0xffffffffffffffff, 0x11}, 0x10) 02:08:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d28000000000000", @ANYRES32=r3, @ANYBLOB="0000fcffffffffff2700120076657468788e96016ac059726679a092eb5a52db81867e11d1ef44a05f976714120081805cbedfa86c"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000016c0)=ANY=[@ANYBLOB="740000002400fbc70000004c3df62c693c444c1c00000000de80000000c68f9441a6c7fad0c781eae678a056ec9dcfc0a70e6580ab801964d5292b938491c347f1f4d37a9643a4e1afbc55ee1b264208b08680f7d6e337814065aa5ff92cf2e1021bab48085f239ec01a61a83ce2456637540c4e8bc1de2343a4c4f10be901c2b3dcf7fbf0473e05553fbcb1b6a3ead576a1aa84f77e162733cc86622fb5f2884026476b1f37791aab460804a2bc6061dfbc4c7a8f131ade8b6a4356beb519b32a63b2a7977485e2271a8d14ca7287701950a81ca41f87d37b3074cf0a6961aa265fe44f07960287ab751bc37d9d28a50984f5e648f7568834", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x74}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) sendto$inet6(r4, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r4, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0x1000, 0x2, &(0x7f00000006c0)="9fcd4970527ac070d94621179f09e772e9fedddc4b97ca1114915f58940ecf39448f6fb11e850f8e0489308b93eb7c3e8aa5180bd5ee136a7fc3622ecab577e148121f262e56275210cec1c7ebead9c3d75feec8e39c688eb4a27098bcb500fc62828430a0bf0921127c2fe403cc880c464ccd5f37d6635a8a9a447f4c557d26225d41e4867c92502244d3ad4d3947080b2143cecc66ea5e8d52468c15c217d9ccf0aab300db35192f15191948714f08f41d61d999bce327266b3f11b36a1126e4d060a570b6771c0ccf036dab3be8019ae21542c9e28a2e0a8914f2604bb2fc2b6e61d126a5f284a5e346db7aed7ea2c3c03bb417a60397e1b226822b4f1768a5e9e0c489d4b88ffd151ca7a896757d74342d858182aa779b7a4c211e55456c94bcb9db56c558d4c39af7937c42607757071296f5db2029615590822b5270d948ea5d75784b01a5d1bb56f7613d57952dd11667b55912140ec722044c05e44ec312159b20cd852c7acce2675cf76a6d2574794bf799ecc2bf17e02897894e49f1e5d2ae50d87fe49a527e8f7d7d0bf117dea4f12ae692b496832bd8187339ce6f08b88b44c11ed533c46d05983462eb599cab285c3c2d3b7d26884eb8f4fe71930d9f617d9784a261b18df56744b34efea0e1de36dc12cbdaee6c75ed660e812fcac71702c28aa976c3993a824af23995b291075f6c38d1f4991dd4136f62eeffd8922afaa26d83c00acecd4f40bf664ccd74219dc2084b95099361cd0fedb46c61c45a8fc06b070811dd12f2ee4a83fadc1dac6f48a346d2b1cb1a332466d4f86a8a9dcd8dfb4df721f2780b10db580d98d54446f05eef59f26b7e43449df762764168e276caeb5a2fdec20d3478ce4ca1ef6132eadf99bed92576752b30aefd952598d00628f14cf0a2741314c7d9ef09f0a89c6442ffa8fd804945f55e53043704d3485239a383584a17c3f137112e5dd09c28ac50d378a35c29ba9831c56dddcd4ce7655d40b7ac0b8c1a400044bd616dd638e0f20e3ca530d94ae56bd5ac3f84675ac92c340fad9bbaae346e1aa37399947eec2018fbbc50aefd9a23be293f6692e2948667e70db366466378560b61b22ce6ddc993efff1b82386167a337ac73e5d715df141b98773e9cb611879782a48e3d1aee76901c043e5da5ea75f25bae445262cd482a188d4607b1c72994341fa143d024dd001ea41ec823798142ed5d5e18ff7f5c04769a1415b9c2112c8ffcc3eb8ced6566a751fd1753a00c8b067c46268bbfa333b56da1b9d5a287b5102b1b73f12f8a47dc72cec684ed10c44c7f69f39e0914bafff4e2869d8a8b241a9fb92d5a66476aa65d971da840fa2343f9f06aadd9caa05a0ab92024065639e728c4e5d4281d5798d4a315698af129900fbdafb7c58d61bb35ae5755d682b35030ae4eed7dc3b83b86b42ee803dd225bffdd569cc153dc68c1e8e35f857c5bd568c3ce10cf038d6f5b6c5a44d40b64abc230c36a7f2a457cf483c6ebaf6543188baac1eae0b903880e64a4ab3841525f99a650c7c3643a2957878850de7f2883620db08a34c2e248eca1b66a9fc602275e1944b154e5e7ceebf35e8789c64fb70efa21204a146698d76823036d2e73f1ea8c835793f57743b944eb61d79ae9a8b3ec8ec9d29154ffcfa0c61fa99bf240adf8a96f3f27ac39547edea2ddfba89990c659528d6306267e38262494ec0266838130f746c17749686bcb95768d9b13a42cdb494797a4c5d180e551d303eb5f7ff9cb0dc5750dfa0ce8b8dd4279fb1938ac22f2b76e8ae1047ba3b5a9dbbab72479008891011b02534aa565f9323bf3f8278aa66f3af639927c811424f35a28214f292c5086b099fb76ac5a88926cd182fa10b679bcd075563f6832c05ca5c780e673ee1ef0669e42bd9912c6dbb4ebf3189371dfbe208ad85521ac0e07bf8e1645a137f11bcf96ae32052fc1ab27b45344f70d4443e503512454c52ac172c29ce610003566adddd7741e358a05b0177f27a672ce24127b8217e9d5d7c9f698ec054e5c12fda9e246d7528d483ed011e2f1c9cd4c3f4550571da158231fe905f8a9c5d8ae92daa13a94f1e835c07cfe296e0d1d5dac68c8467fbe6ba202931859cbb89aec7a4c11678a5588d98913167af3eafa980d5180c8d36da6ed06c67a832c4a2c06726e7fc38a182d41cdf6597151d366cffba7789970f2e6601d7535e362d464710f9501f2b3a1876a5edb83ed07245149a71e843d10df374cb2227c8f31b2d643da770624ad953fb474add676cfd4f1b1d72ced5271a69df0e936b3c949b455c4bb27e273bbb4a7296add2751e555713b7f8a2b020877da3b2656eae417af76388ac0d986170f042b6ed9fe6c5ed0f1b938eebb427c205676dc644abed0ef69d7084d6a020b67c755ff4d59a59d8f831ef5459683fd42f2544a652e2b26a21db3340d3043b6a42b1e73d6f80019c910ec142bb1095e975f17a9b2678aadc5a113d4f0220d31e195068cab4704e7958a2c417a1cb22daaff24cbc9c10e246329214446a6ffa7754aa195a05640dc7ed88f0d98ecb7eaafad1a433479daa1481928474410e364056973fb301a61beab1cfb15d56681d804758b55bd5b7cb815eac757a22b6cf5ed21b147cc5b28b2236945cebb7c82c7623e1b6f2bd14f775765f2ccd97f37f8d6a0cf2cdc2eda53ef248fbbf5b95ff4d0d99b8392fe777a12a5f8eb1886a1af62ff6ca8f8d9e5f5cd283309001619ef49d061d0365ae4df4defe120d73179dc8ee6312ac858625141ce28f79325bf24b776cf148e639e47d5819eee8bf3c9882c039d7cffb9732233e76198375f54987ccfec913573de1019fe7699f2022627932165c8c1318f311f93c52550723af607b95ffc24984c5343a887d623c0f304bbf23ef4ddabb2d7f1b06967949ec3a000996a8a9b99ff05b42d6b6aaed380a9d3e56e96425de8e8bfa6c690108b8fa2d0a86b071389e51959979648273df1d760ddfe9f6c384f67b2adf718d76afeda9bdb2877c14f8773de2adbb34d7f079af5a30c11c89d2222de26609a4573ef29df36be4561c091afb7613424bce86c007c3a3776067f059bcc5c4d1670559781e6aeb28f24870a97cb1102ab0f24c3ae2efe440ea7ac29b8d0fec60e0d2aa21f797fd068de91a117a6068a50da06e174cce0e0ac3be049f4b8100029198efc40626729f467e4d022996c712171bd76649da83dc690a2d2ae01d3376455357e467d0afeca137f027e9bf69c1390537da2bd5cb9ac56ca35dcd6629dcc6da6be35f6103da42308d254f5a4e47797d85567cc1e0c40829bb2c915a142961bb7321708eb8e20fdcc0bae8ad27bb6b21dbd7137d734174e18717ba485d91165d96a9bd784a9c8607a5cb291d4f13ebed71174243c70c9cd012b054b6e37749f056ab6480fe7408aa33e6b3c066ea5aa29d8f5935232ee5fc37e3ccbb3760a8b3ec071750890f5d183371a8693b3ef41dd4b85a397f67eea4d392e0110dfbe2791eb26ec4a6e70e0f624801dc3cba08d452379bf49acac97b8e4913c35c17f093afbb14d676473abb35a5b9ab0fc19afbb3d5f40ce0f21cd4cd99e4bcd7671378badc034fe79732074821f9ee3f30e95ce110d2daf34c62276d0444cc3ee2f384f7835188d714710f4110b5d755029c0362eeb39948c3d5d962b063b563d1bd6ec71d136b8b042b461abccc88c3b349842dfc6396eb450528cfd2a424ff8cb28ec13c52a96d459af9a6bb5232b5cfcd259dd268e1578867413514e63fa3b86dc8178110d8ec70b62cd07e033b6d8e5481fae3e9bb7a5299e728cfe1102977e313acba99eff59467844ddd8d462fc9d477c16204f74a8fc2d21eaeac87dac8b5940b7e660cb0fb7cd72c01858ddc32d3e2e2ce1caf95b360d031902a77e5e11147d6f02b07d8e0e6c28689cf2715a7e67763a78ec85de6bf2b14f27b7e7c76c6f463c240ef25e34a9d8e4a5af4e788595fb39dbbf790d2020492d521d64f1013838ee8a8cfd171257c38e774ad613c9361ac34415f939ad2759e8ca1b5e9e6ab7bc7791526388f4212db9c572ad77afd94d510f7a747f40e48610ad9ffff0906916885cd03738c7cf550a9821de62881fa68ed121e3432a23e5774217c0f8c9a2908ed436ccba9c8f466846f34771d35f32e944301acf4aa714961d81754cf49d7a37b7292ad7a3f6a92116d08db9499ceeac0380d216a75eeabf815dad736177b218eda5f83c087789d37cbfbabb6a626bb4db23d195ddb9f9780c8690526332a9e575f0b139e6da4c6e56081524083aec730254e26cedd1eb653350687be5bc28e7b0807d7ab0ee2accd5bb6bd60949bacbe0bc04714881e306e5b68f0ca017812126262de9ed1644ca4b16e9057f465bb1add439aaafcb3c54cbad0b561d0331cc11ac7a6ce56082b5837b18774e26f51cb76062845640facb0492e81eaf3a860d850df3e79fb566a6ae90920e865f7b23b50c04fe5a3ea099575c0f0e9bd898dba75e932b531e35f0d5b868eab900d17bc868c3091732bb4ca49d306347c0d10420fde15d84ab52e05fa9bca9e5367c417025dd7a2a30f4d46366c959e236afb3d69a542cc642ca9fe3adbaa946ba54d8a7031e7fb01cc9d73776fb4098ecda7dc26aebddf7aac1d9abc35f759a83e1e7802c95dbd859664a8058a094554306961101ad28e532afc339964d06c362d2483625287aa7d1d915945267f6304a00a12cabcbbb3eba42fb5fc27abc4bcf4462eb208164f6f0304671ca74fa19fdb55e612b624717d734d9463c078abe933ea9b9968ae55f96afa96d6a4384e69563192aaabe962e2e24a07b520b6eb4aa7362cdff1a1308e9e3b9c313829347be4d05b0b32417551dcc18e32e70d944b69cdcf1a0984053ad07ff0c3356d3a2767763ce2bf1b72b45ec80bf5114df3c9411e07e947c21410abcff805e9a4d13fbbed911a85da54a7f3b8cf541c9527888c581d5badd7e4fabba0cb7a4a5834cd649280f73bdba0ef78410cb7ee8cea0cbd61faedd3a35840c41de5a2010531315ba9811ab0439d1827a7c1b0d11ea3044ef0916e4185586cff23021e70aaf7d757bc0ee2f6131f131a555d44e0ed1599cfedcc4fd41a87537324e82ef14ddeff5b4ba529d59673e425f864f86ee7d350670b7b243985019033c682aafb8ed46e67aee2a36113ad38a638464d8414ccda16143d62e1b071811350a560a5fac8635cb9a88fbe8072a4cb32ed0ad1901d9a370fbdae95dd3e3927297c5ef848ddc7582ae886b0d7ea0d5638a7b24aaa5f998922fc331b047f82611f113a86fc319c3a297ed717c1bd7a8b16a90126c21ac8e1f74e516a6b7e3ea1992e9054f652a11646de068e6319d849c8fc4208e5f831e521291d27dd5edca4328adfbe2308f71cff61c8f3abee1d7eda08817caf5898f562bbdef252f69c556dde2e466f420e0f8c6a46b11de97506fd5dddb915069d24e22c30cae124dba09dccbcf8fa6be341ac146b0da38533610dd12e164af60d0dc35e7e87832c0a48ddfdfef1b44c13b9c82b9606c7d82c8c676fe77b67b50192fb11352b0b80bac9ff7d7cccf7197ce428defa1ea5ac15a0d94cdd0c7ab7bcb98b7ba0960dff75a9324f845a832fe8f01d1273c3175aa176bb9d4cd7943211a1f3b4412516c15507fd0f5bea9913b5cb1bcd982c8df761dc68d441f16246d8d25709608858405ba62747e12a6b4e0f994cf280a2dfcd5b002fcc05ade941bc7ed550e78a939dea584a8c21bf331d5fb81213d828aa91b", &(0x7f0000000080)=""/2, 0x32, 0x0, 0x0, 0x7c, &(0x7f0000000340), &(0x7f0000000380)="c99dd66dfe2264def0486967d41b946fafa4524c1eab36df7ce661cd8182ea6089525d277a835fdd27b3fb5d9681c7bd09d2cad45bb39e2f719453c99e81e55f4494156bfe223578c51b68eee0ec224ab43a21a8edf1d94b89b045b367d1b6f34d75f9e85d082633f1cbda1de07584a2eab0027446e59e280e95aa07"}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="840000002c0001cdd63fe14b3b3d120000000000", @ANYRES32=r3, @ANYBLOB="00080080000000000300000008000100753332"], 0x84}}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x50, r7, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x3a, 0xe, "0c9944192c3a3c5930c49f0aa27320c525998ce17ad80d954ae2ff6ef226a0a90bf67797000ed8e86e4300e72eea21e252851a256110"}]}, 0x50}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003b00)={{{@in=@private, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000003c00)=0xe8) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000003cc0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003c80)={&(0x7f0000003c40)={0x30, r7, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x1}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000c}, 0x40000) sendmmsg$alg(r6, &(0x7f0000000140), 0xcc, 0x0) 02:08:48 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='t', @ANYBLOB="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"], 0x74}}, 0x0) r0 = socket$packet(0x11, 0xa, 0x300) r1 = socket$pppoe(0x18, 0x1, 0x0) recvmsg(r1, &(0x7f00000004c0)={&(0x7f00000002c0)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/234, 0xea}], 0x1, &(0x7f0000000440)=""/80, 0x50}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006, 0x0, 0x0, 0xe0}]}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0x5}, 0x1c) sendto$inet6(r2, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 02:08:48 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100003100) [ 2220.820061][ T3235] netlink: 35 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2220.865593][ T3208] IPVS: ftp: loaded support on port[0] = 21 [ 2220.867695][ T3235] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2220.938691][ T3241] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2220.997416][ T3208] virt_wifi0 speed is unknown, defaulting to 1000 [ 2221.006214][ T3241] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. 02:08:49 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x50, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x3a, 0xe, "0c9944192c3a3c5930c49f0aa27320c525998ce17ad80d954ae2ff6ef226a0a90bf67797000ed8e86e4300e72eea21e252851a256110"}]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c880) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0x9, 0x1}]}}}]}, 0x3c}}, 0x0) [ 2221.099109][ T3235] netlink: 35 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2221.128077][ T3241] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. 02:08:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 02:08:49 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100003200) 02:08:49 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r3, &(0x7f0000000000)="7f3ca1fd5866a3e108d97a95ede7e47c29955f5b69b6", 0x16, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r5, 0x0, 0x100000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x7, 0x1000, 0xfbed, 0x6, 0x0, 0xffffffffffffffff, 0x1000, [], 0x0, r2, 0x0, 0x0, 0x4}, 0x40) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0) [ 2221.397557][ T3281] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2221.506478][ T3284] device veth217 entered promiscuous mode [ 2221.529426][ T3284] team0: Port device veth217 added [ 2221.567409][ T3281] device veth217 left promiscuous mode 02:08:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b0005000100079ddf31d1aa10097222396ca9f807ade769211a9ca699b63e5b8ed206f418da4a8f08fcb89d0627a81c9e06bbeb9c1cf082eb35238c2fff8fc0dab61203683e26e7dd68f71e916bba07a691fd1dabf1071ddfab8155593ad311be346930235b47138a4dc9e767444a3873c0fd0397cc662c9108dd28b79cf2c5339a77e0ba50ca674529e946861daff5bf0621e4403301550b7523d33a6767037c681ae3da336df73603f040e6bfc35777d1872048dd24c29e43ae7177f2de5066ee8b27f6be825469e59fc6ea951db655916ef54dc1126163c283fd1b891325d72923bc6f90fb77f02dcace43e7db7812e7897e"], 0x1}}, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 02:08:49 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x164, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2, 0x0, "000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebffffff00"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) openat$cgroup(r1, 0x0, 0x200002, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/186}, {&(0x7f0000000380)=""/217}], 0x1, &(0x7f00000000c0)=""/34, 0x48}, 0x1) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 2222.118715][ T3281] team0: Port device veth217 removed [ 2222.150286][ T3281] device veth217 entered promiscuous mode [ 2222.183111][ T3281] team0: Port device veth217 added [ 2222.201792][T22712] tipc: TX() has been purged, node left! [ 2222.223406][ T3284] device veth217 left promiscuous mode [ 2222.509974][ T3284] team0: Port device veth217 removed 02:08:53 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="0b6e23a063eea4ac13dc11d100000000", 0x10}], 0x1, 0xb) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) accept4$alg(r3, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) sendto$inet6(r4, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r4, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) splice(r0, 0x0, r6, 0x0, 0x20000000003, 0x0) 02:08:53 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100003300) 02:08:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 02:08:53 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) sendto$inet6(r1, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r1, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) recvfrom$x25(r2, &(0x7f00000005c0)=""/227, 0xe3, 0x101, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000d40)={0x168, 0x3, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7fff}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_ORIG={0xac, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x2e}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x81}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_TUPLE_MASTER={0x14, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x800}, 0x40000c0) read(r0, &(0x7f0000000140)=""/74, 0x4a) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r4, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x18, 0x14, 0x200, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@nested={0x4}]}, 0x18}}, 0x0) r5 = socket(0x9, 0x6, 0x7) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000fbdbdf25030000000800010002000000080001000200000008e100000100000008000117e40000000800020002000000606b1e47dafe47dc0efab4fbdecd"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x191) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x800) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r6, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x40c40d5) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x40110}, 0xc, &(0x7f00000020c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="08002cbd7000fddb33594bdf25030093e4a500000800010002"], 0x1c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x8000) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x3c, r6, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x80) 02:08:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000100005070c022d640000000000000000e472b15bb022c804f21299e8cc21", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000e008c0000000000000000", @ANYRES32=r4, @ANYBLOB="0f0000000000000008001c00ef000000"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_deladdr={0x84, 0x15, 0x20, 0x70bd2d, 0x25dfdbff, {0xa, 0x78, 0x2, 0xfe, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0x3ff, 0x8001, 0x4, 0x31d}}, @IFA_CACHEINFO={0x14, 0x6, {0x7fff, 0x1, 0x7, 0xadb}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0xfffffffb, 0x0, 0xfffffffe}}, @IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @rand_addr=0x64010102}}, @IFA_FLAGS={0x8, 0x8, 0x240}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x9, 0xe30, 0x7}}]}, 0x84}}, 0x0) socketpair(0x1a, 0x800, 0x9, &(0x7f0000000040)) [ 2226.052286][ T3364] __nla_validate_parse: 1 callbacks suppressed [ 2226.052296][ T3364] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2226.138847][ T3367] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2226.154371][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 2226.154390][ T28] audit: type=1804 audit(1593396534.045:2489): pid=3366 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1794/cgroup.controllers" dev="sda1" ino=16257 res=1 [ 2226.188243][ T3369] device veth219 entered promiscuous mode [ 2226.207571][ T3369] team0: Port device veth219 added [ 2226.225092][ T3377] device veth219 left promiscuous mode 02:08:54 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000085000000270000009500000009000000ea74ec8cebae2778212caea6af470041d9ef444718f3bad530e4f0d9cc19211c6d7ebc95b66ad7a5b036c5c96a3b5c92ae3b6c4960379931a9d21f0e911cb8e35bd3a642b2acd9968ce3cb0a9d650d1e9ded49cb7c841e5733e6024ed1b8de11e185415d24de89409c793c157c8610e688"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x5d06a6062f96ca6c, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "025ba8d847490d31", "02cceec078591108cf502d10e99d36dc", "bf9f33a8", "2a6c5b943e51e394"}, 0xffc7) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f00000006c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0xadfb36f347d3f0f5, 0x0, 0x3}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x4800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x82, &(0x7f0000000340)={r5}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r5, 0x9}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)={&(0x7f0000000540)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000006000000000000000180000018280000", @ANYRES32, @ANYBLOB="0d5f0000050000fc85000000200078af0d24fcff290000107c490100fcffffff18180000", @ANYRES32, @ANYBLOB="000000000000000085100000020000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x4, 0x53, &(0x7f0000000400)=""/83, 0x41000, 0x2, [], r6, 0x21, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xf, 0x7fff, 0x6}, 0x10, 0xffffffffffffffff, r7}, 0x78) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={r5, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000180)=0x10) [ 2226.479765][ T3377] team0: Port device veth219 removed [ 2226.503364][ T3367] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 02:08:54 executing program 1: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x100000001) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x8000056) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xdc, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff0800000000000000000a0000001800000014000200e088080096140000cf60970024740000000000"], 0x2c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180), 0x4924924924924de, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 02:08:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 02:08:54 executing program 0: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005070c022d640000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0xe00, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000200)=""/180, 0xb4, 0x0, &(0x7f00000002c0)={0x11, 0x3, 0x0, 0x1, 0x3, 0x6, @remote}, 0x14) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r2 = socket$inet(0x2, 0x4, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x82, &(0x7f0000000340)={r5}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r5, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={r5, 0x7f3}, 0x8) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x7b, 0x0}, 0x0) close(r0) [ 2226.769938][ T28] audit: type=1804 audit(1593396534.655:2490): pid=3372 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1794/cgroup.controllers" dev="sda1" ino=16257 res=1 02:08:54 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100003400) [ 2226.911130][ T3397] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2227.035896][ T3403] device veth221 entered promiscuous mode [ 2227.053694][ T3403] team0: Port device veth221 added [ 2227.064639][ T3408] device veth221 left promiscuous mode 02:08:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff38, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="1100000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x7ff}, 0x8) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400043, r2}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) 02:08:55 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x3ff800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000080)=0x3f, 0x1d5) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_mtu(r2, 0x0, 0x4, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) sendto$inet6(r3, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r3, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000000), 0x4) sendfile(r2, r1, 0x0, 0x10000aa00) [ 2227.220687][ T28] audit: type=1804 audit(1593396535.105:2491): pid=3418 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1795/cgroup.controllers" dev="sda1" ino=16356 res=1 [ 2227.400807][ T28] audit: type=1804 audit(1593396535.285:2492): pid=3428 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1666/memory.events" dev="sda1" ino=16381 res=1 [ 2227.516480][ T28] audit: type=1800 audit(1593396535.315:2493): pid=3428 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16381 res=0 02:08:55 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100003500) 02:08:55 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'veth1_to_bond\x00', {0x4000}, 0x6}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001380)={'bridge_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) sendto$inet6(r2, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r2, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x78, 0xc, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x10020054}, 0x20000000) r5 = accept(r1, &(0x7f0000000040)=@ax25={{0x3, @rose}, [@rose, @rose, @netrom, @null, @bcast, @bcast, @null, @default]}, &(0x7f0000000140)=0x80) sendmsg$AUDIT_DEL_RULE(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="30040000f403200027bd7000fbdbdf2502000000000000001d000000ff070000ffffff7f04000000030000000300000000100000ff01000000020000030000007f000000f8ffffff080000000500000009000000010000000100008009000000ffffffff970e000000000080010000001b080000070000000200000004000000010400000000000009000000060000000100000018000000060000000000000007000000ff0300000900000002000000848b0000a30e000000000000070000000c1c00000500000001000000ffffffff4b03000000040000ffff000000096c455c31c47129000000060000007f000000de00000007000000090000008000000003000000060000000800000001000000ff07000003000000000400000300000004000400020000000100010000000000eb0a00000300000000000000040000000300000b10c5bc9ddb0000000000050000003f0c000000100000080000000000000009000000f8ffffff0700000000040000000000008a0b0000060000000800000006000000080000000000000001010000020000003f00000009000000040000007f0000020000009705000008000000af60000007000000010400007f000000d50000000100010008000000b40001007f000000000000080200000007000000001000000000000006000000200000000700000009000000030000000500000007000000020000000300000000080000080000007c0000000400000000000000792a0000ff7f000008000000040000000080000006000000040000002500000002000000040000000100000005000000a10d0000ff7f000000100000ff0f0000200000000700000004000000ffffff7f0900000000000000000000000000000000100000a58c000007000000020000000000000000000000fcffffff00100000050000000000000005000000ff07000009000000070000000100000007000000800000000900000001000000eea22269d900000002000000de0000000900000022ffffff6f00000007000000ffffffffffffff7fffff00000500000004000000ff00000004000000270f0000ff0f000000ffff00ff070000829500000900000007000000010001006e2f000008000000000100009dcd000003000000d6840000ffffffff000000001f000000200000000100000003000000400000000800000000040000faffffff5400000000000000050000000800000007000000ff070000010000007f00000003000000070000000600000017fcffff40c38730ff0f0000ffff0000ff7f0000030000000500000003000000d400000002000000ff01000006000000030000000900000001000000889c000001000100080000000400000040000000ac070000bc00000006000000ffffff7f2c0c0000010000000180000005000000000000800400000003000000000000005400000004000000030000000f0000006272696467655f736c6176655f310000"], 0x430}, 0x1, 0x0, 0x0, 0x8000}, 0xc0004) [ 2227.596755][ T3408] team0: Port device veth221 removed [ 2227.604272][ T28] audit: type=1804 audit(1593396535.325:2494): pid=3428 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1666/memory.events" dev="sda1" ino=16381 res=1 [ 2227.635441][ T3424] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:08:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2227.752547][ T3429] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2227.792387][ T28] audit: type=1804 audit(1593396535.345:2495): pid=3428 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1666/memory.events" dev="sda1" ino=16381 res=1 [ 2227.879136][ T3449] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2227.917542][ T28] audit: type=1800 audit(1593396535.345:2496): pid=3428 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16381 res=0 [ 2227.971038][ T3450] device veth223 entered promiscuous mode [ 2227.995410][ T3450] team0: Port device veth223 added [ 2228.012026][ T28] audit: type=1804 audit(1593396535.365:2497): pid=3418 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1795/cgroup.controllers" dev="sda1" ino=16356 res=1 02:08:56 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000350b) 02:08:56 executing program 0: unshare(0x40000000) accept4$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{}, [@null, @rose, @remote, @rose, @bcast, @rose, @bcast, @default]}, &(0x7f0000000000)=0x48, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) socket$kcm(0x10, 0x2, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x100000001) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000004e80)={0x6, 'bond_slave_1\x00', {0xb}, 0x2}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="79e605b5c16857463948cfd7ffba7c6b2886e8ec86fa53f26069cb32be6ced9e305148a5036ae44760762272b2db6b8fbb8bcce58fa002aa5fa913cf7a2ffa2bdd95df45625bd3866b572ec4fb75cd19f277c96cbfdb997e9fd94595192418d51c3408ffa5b5a521dda9ad90b61abb512992b9f19a75f89ff8fdf145727c8d551c5e03f001a03606da673295ed11f2f371e4213765abfbb2d552b6506634592abf76b9206a5a4e8aadb2366c72a5ba1a9c9424e176f557373a8dc037d80c466761b6829fe50fab39c693079ab12d0b322a9502cd", @ANYRES16=r4, @ANYBLOB="3f02b57cdcde0000000001000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0xfffffff0}, 0x0) sendmmsg$sock(r1, &(0x7f0000004cc0)=[{{&(0x7f0000000300)=@sco={0x1f, @none}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000005c0)="c10b2ca52a1d357bc69bcddc9d893b11313f1b40080a045f4443cc1422afa20627b03e3e41d2e462835d6188d404f4dde5c580fd0f6f4be458696e922c1380680105b6cab82765afd17efd6603598a95721f72a1a08f9824515e87ae7e2035a88a0782e866d0233d6d8239bec1761f38ebbff75b2b367f220677acae6ccfdc8580899642b1efdc150dc52d55c5a019714938af90a5af766b145976f7b47d3a74f0556b1949347cfe553bbb392b730ef2f32b1e8a51a80a131db3ee40bb8d10597fd7babad41c92a5120eea91e60fcd19e1f7a53cbd91b4fbc1326db052bf6f591f", 0xe1}, {&(0x7f0000000380)="622588ff284fabcc8349a06905f6f2c52055e008e1831733f93cb553d3362bee7cb4", 0x22}], 0x2, &(0x7f0000000500)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x3a}}], 0x30}}, {{&(0x7f00000006c0)=@nl=@unspec, 0x80, &(0x7f0000001900)=[{&(0x7f0000000740)="44821ae2bd1abdd138023d165346764969db737c25153bb1fc7ef571ffccd7eb82d33f88258b4455fbbbecc21955294fd5f8ed10a5e6aa1bf147d753387704c2928c106c383510d6d223c47ad69ad6a759d374a1bf5ee09b32e512f0cf126cccf4f30a18dd631062da3e747edae80a819939280b50a00d47b09e2f18a45b9294f74953a51f43bd680d63effc08a4b15fd6ef1c98a0d56c7cb70acdf9839ee976d36fc475f4257ded81367bd95e3cbdd515c655dd51ff59f1ee361cea87a8568f02db121f0bd48d354608b052d2c2120c1966e76e7a4ec5be56c464c2f4115c9fb9f11e18d20688b6f1dd51e1f097fa7543968e0cccb7eb100a3c43c1eff4b01e549d4ac0642882803c198c0a21732442cf1333c6770f52cbe9363c382d3454b5593086272759d157e23ea300e011dc3de27232629558ad7aa048f446603f080530970319b5cf03e096b8e3a430d5013fd4c4cb2cad414015351666908ff94978ad8084b3df0031c4fdb6427478a31761aad9b98a16edd25c4733a7e31007fc8ae99b3eded509c773f6811c2d7ea8b41c2a6968c547c0d3568d5ec176ab87c4e70861f69e8007a58fb9258d07b8441408afbf2ebcd01f5cfd1087ad2888ca0c995b9550ec2003ee3507fcfb49404d4870004b13c1afb18404a15a62274a87404d8009bb5387c48341bdabff1ffb20846a92ad1c3ca224af92ca0f914022ac250acec26d48c6a0d47db61c4b2d52d5047d373695f0fc21ba377bfe4cf9ba7332939befc019e9d935dacb1286e805b17df51f5f2678ec48afb15fc3c2bb34da4e9190b6a85e50110d50b0a1a2068ea34e3092a7bf78622b0cf8d1244e5ced678e46c1eea688466a127817732cbad70542b35321fda9c81bb12d43f32842414f8f9935ea61df155a42cd1733f5c1383a56d282d7abe4c58024b9bacdd555a4826a46a83ad5a1fb5796a57951d99811812e1dbb7c02b5fd61a2d774cc155c19251109fcb9d70c1fe182373b85068810924ca5d384a1a18c2d4a9ed33714a0a4d2e140b954f133056d19916791566bcbfbe6163c9ca25c28f3403a4b8aa583bee59658da57221062201130c945e9f07de0813ad124a0bf471f92c2b3d207d3d5a96406584955a0c48a57003f2c501fbccd7f4cf9835d3a68ae978b9f2fd57af9625137e63d77f97f75fea18eb1a5b3532e4f91281ec275153b22178df36292fb3ec1a2cedd6823a1e4ab49125d2e70d011a95e59f4b51d979936fcae53ab5aee2cbb9ce3da4824039a72946ce7f408531e8d720b684cf737c2d5e3160c7a55004140876986f061b3c960bb719e72052aa6c23f0a736782e23b6ccbbce0e268915bfadc9e4030e2b62e26a08eb7408d003086bce2b644edfaf13dc96ae368168f0d1d3640126377aa53a04120f064934859ee0ba9211a38f3d8c3a7f0290801f290e3ef77333b2363cd83fa5fd9915dc8d3ee45170913f330bf1d22b8766e71ba897addd02110c0c235559abeaf1b47201e1965526b0a0451488ef95aa2539aa6fc1b0055b5d6e5feebef54369e4fd09b7ecde3e4027a1a1e2e08c8b120f1c75f79381e5495678916e9b9d833d820b567ffbcf8d963cd64455b1b27475e57e9e403a4454d190e9ef6cc73010f353cb10b6c21dafb0a53346cb34bd2572ea228e3a2b01e28b4c69c0944138584b91309f94f71d22f28ff528cc0c131dfc0fb5f6cb9ec832eb1fcadedf4b3833fe99bb96ed40e4efd9be9f9fd685b6993b6f982dd90c9bba7449559473dbf55fd60a4a151e6dfa00decf628f7cf0d5b0ff6450916b39f97467fc2158f8a7e3df8c9c21a8321ae9e6c7ae9398406a5f8c67535aa82dadceafeef1532d4b3f659a7beff7f04072f4d6272c29ded0cd428d1d34fc019025ed2b9439f10726bdaf68ab00d1e968d12579df811ffd93f253bdfdc220db531d6a73a0713dd3a2f5ed10e9a106ea8e1b40a42f454afa9a9ab6dab3bacf65ecc0614422e0391ef9d5b5b53987d13b7644f9ec9ab54764d8e581231e4af35135ca308187304d2aa6a54d983fde1f6573334d83ceb29dbd82c5ca178e74b0e48baf140af974ca037380ad38f0e30cb7016174678e3ce934723f162d7eb4389e52970f22945bfed936ffcc75187bf4da06a02d524f33bcc1c1d20d56177b6a5e2916e4927fe4da9f2578a7ef981fb70afd8f2aa0bad02a550fc563a1ddb3253757dfd4cde9c5c9f67aaa733af070336db0996bfa042dc0f24117c603c0fd58f8c223d705fc5e96df18e4ef41835679819080e08f3d47c92e83512ca2093b100ae7a7c8a8bd81b75cc5c3985147039eae1a476eeb04efb439c575217487c0bcbf822be842b53b417e5fe436a1cc782cd14773159804c3355d97d96b5fda632230fd264a553a09052623ce38fb181b44ab3e040880a938d2201b23306fa75c5406f9051886ea47540c49105907a999db20e04b3caa37cfc91fc525f5132e6f714ce155c65608782c560ba250097139c4ff607046cfc7c7a2ba0de4254f6f4b0a2f050882b89ea90451130a2a48e7580aff454649d712751da6ab389693ff5e068299c5c205c075bf09a03809523b994a02784ccfbe7c8955907c3143be9a989e1c6a4c43e03359c244ce36779c0e1b126756bc24b5d55eee03cfee95dea5e3e7d4bb99f5587b6e90c1d67730b94e2ad34215c18e8047412a07c7155fffb4a1bbcc5bd8e75ddc681cff792b0f9d547fc10d2286f21f7eef0a224b927143d6c879cd07249eb9c1f5da5c1b37321650bc4c9b0222a019d659f69918778c26bd38f6a7c8a887b901e70c752608342a00ae36d21239a947dc3541ee970ffb0cb268ffb7f1518f5f9a70deb2e57aeb3eab0f9ae781eb32510b4fecf53b9cd56e44749b0ac990f1ddf004f2496f5b8c551d7ea08d52428c516b3c568716dd11b8cd983c86ae6941334bdc88813748719776fc0517f41e2d4042b9ba2148b65578066427aca9876f540a7b528c9048b65c3a8f7294cc879e9313f02b9416db9c8f1778793b8e3b4ea49abffe038c67de3dfe6ceee563e64aa038a5c390873a191e6c73523b21fa9f7856013794b24a50407fe80f6c55c7c2fb8bad6a5e173f2ed09aad788321099cfe6e05be13072ae404aa504a1a4de7a3dbf19b246dbd37e93b4170c73432dacb5dab9da6bc6cb0d8d33a5be700ef37938c98b620c1ea477cbbeabd5dc8fe0a8c5e831da391d2cda1c774ef3a373b06e99422cfde768c50cab591cd30981ddc306c6a006600c37487ed89991fc91ec211ab06c2250d6c9fbb23a16185a9827ad966a8bf38afa76fe4bb4298c92cd1eb13890304fc4db73c6baff6f848f66dba6425c86f0fc5d398bfd6b1db63881ce047272bbd356060b58815a734be779d4f303d3c28414e9e311473e72267ce81c8026119a856a94c22fbcd9c04ff78ab25ec1b25f7af63d8908c44a7b675da77f1a90c01aba1b3d5f5f8fae90df479b8a9a806554de238948edb3cfbad14df4f55cf624d5c197e01acf999e8822505b443402f4a825cfad4edf1376624c2ed05c16b129ec5957dd1bca08d84e61832d9d6857ff4b5a599fcf9e4c13bbbba804ff019fb4d8d4fef344411888ffeac316bd9c0bb99fd2be9bdce672b71ee5842babdf616c650a98e885fab45267040e871967b138213375b05a0b9bbc1e843a7d32bc2a59beaaddfaf927c97144250ca8e613aae09d1b7d1b8926b06af91dfdad1901b6f75a5644b52b907044b4cd62d291ebe473c1df694cbfd1aa59447b200ca19a0ab7982bf582bbff9e21c13b91637d30b4e4da2399de1cdba72c9a11ce396d8763ec4d028e81a3e0892b8df531f61d745b3876438420c8c52237a6ba2b0f1473cbbf670e1f904211de2b564e8931a9dfa5a124b6fa5d5dfeaf806c77798ebfef378c50e22e434edfc5daab85ff4d79549b123d66a47b8320d207594526dfaacd2111d5f03ccd92bda7f6eb43eeb99dcee8800fba0570a1848bbd8da08ea290fb5b246be6ad9219709b89c39129b2d860b91a47d1d063f5122d5910d713010051313d9b2e52192726ca4792fb141a26f8a45b33f7c709d4159e1765e898bc167f56d7dd858342283580cd3e029edb7120c757fdba637bfea96809d5b15e4ef4ab9c519612b63347710cc1729f1448b9380596aa22256c8006b4c7ae5408af14b5c0e5339efe0ca5d6da16b12977aae0b0e3eadc495fc80da04ba7e1c677fffa90e6160bcd4a8f794a1f96828d33000318468e437cf803a2894f5151d336a6b1d0f140278e4abc8d19d76fcf64012ced80a197074720b74b13294141092c7e680914b6cc59a404da12ce62e6a0e0b0792a3275eff97984ba468c62c73837e31594f3bd41a69a20403b2213e0ddfbd3d692ef044a3b93fb712de6fdd6f26185c88a8aa6749eafeb2efeea7cba9405b06a57517c97f4cd22b7733985033b00131cc5ac7d2f32eb0b4aed9e9e0129fe56592238f6a99c2060299aed9eb3c22d4abad28c2d6196a3e875b2fcd00de43878b6a6e4bd840bc2103fe32e2a45ac1d4605e391c340871d1f934a78f8edbafceec3bf965e00b1ba88325540d434aed791ac97a73e4021ff8a597ee4ff74449808ebdf04a8f67519096123a46411a399d59b0ecfdfb939feb30340ab118ce336b3d766b4cb63c06c6798344672809e9e6fb3506dee9996c9c498d53eb63673ff4af2c3428bf950796dcafd4a741c12b0f52345e99a840f89bc969971e3b15169e1c2bb3517743b04f71ef0bc8f8a596cbbc20e1f40e7797ee1db37079182d53fdbd9639cc80d191a320b000544c1e074af7d8b69276dd4c15fdf5f6a24c9f1f49ee20446bc3835a38c90d5ab2b3e90cb8e51b446a4dc572e3ad0c423b030dc7506aa74edd3fe31fa99faa30b0da721e539cae8e37febd725ea360a2bc02659c6433faa3ec5bb0891f2353261dee18577136e199774e384f4e2bdb3227ed6d38a48b274eea5f9a39dfd34c287bab1d3928db387309abaaca8617a6de4160326ec520ea0a47a02dfa67ebab7085a6694924b69974be86a62cd113d724bf79bf8497e20973a4a38f95fd664e47c207cad73fadad9d94d5844e0f3b7e993cc025012b40d6ad32d167c132c46e6eac3b7e7f81bb1b3fb5da6bff89211f65f8bf48c86593c63a527870730caf40578499baf53a7e4ee1a6921b11df444da63ece4a191edd9b0005820e7597ca66cc2325d01d40a32d6c28863d355e4c8b3e98b093a64a22140b891e06f529f68b6c2faa292613d90351b6272ad1d2897e51fc5a1add14f911b647b74b9fadd5e70902efc266de309ec276ef7a614dcdfd4d06307dfdbd035a610411004e41d7caa51d641041d441b3ea14f3c9c8c13af3192959ee94c49339844b5a67dbde844a99829c2206df1359f64e5021ffe39c833b0f5146283550a00f64c9a24ea00677d477fa67389f515c8d57b6b3883b85449e4f16415b65ed9df81d0c2714d41165b4ea5709c25adc2dd498d67142f166cf1f777a6ed9bcf82657f5f1e122690c65768df2a92fc3aaaa9523fbd50cbc99f33bbafbd9af9466b277913b99b1ee8f18e4f7ffe9596b533c34a8568aaa3ef1617507384c6e297c568ee36c367cb74d4844374e575f626b141819f0a5f512ed76f4845cfe26d3ba12cfd287b8cdf29299d29e1a6155d4fdafa42d24f3619da3cc9955a20f0c450e74fa860a49b33a4b18aff0ff4d36e2c857c4bec983f3fb4e2a05b82b2b60ac8b80912a081363587b6ba3e3ab6842316311617308dcb67f4f36f69be838964ac9b7465", 0x1000}, {&(0x7f0000001740)="11346b2a11917b8c75f16fa174dad08e06a8b38afc1d5330bc3c69036ecf1f0835b87bdc0495c5f7a26ae60a7a3c7d6bd3c8affa7252cb5cef334e67574c6c0d93eacd754c5d0b38380567ce4ee9c2eb246303124f04d873111dd1e5f38b381c2730ad1b54385d3094d4204574d1589a8ed6d1855b52d01049a41f07f061017bd6e9d500da075b7de1934bc1c594f6bcf9dc6b", 0x93}, {&(0x7f0000000540)="016bcf338a576809a73b29453350b9e3f4238a5229bb961eda998124038c890e8337033600db5362b9a8b2bf46fffbf35bf4fbf626aad7", 0x37}, {&(0x7f0000001800)="7ffc589b1609495875906d3d0d2b5cebdea76aa49afe1414f49bfdd36b844e9f5ecd6cd680e0e788d4b43196918ce987a9c665839e66e4f06c6d98c3e35cc7026ff1083b8e1870565dab987fe285deb4ac835305603d217074d77a0b53aa6bab1ce5e90d72a37e1141d5022abf20b93b54177147243573384e25d3b34c596b6a465c1d7e6a60c08f8e43055d1ae90eacec8ce14a92f577626826e5a7605fc3bcd57c7a910cb94e138f6eb3a1153743a5dca532202acbeef6be0b8169945776319143dbcd7880f5f74c63f9ca21e4a71c4cc034d3133acafda57adddd9626597204c979efff777eee69f579a3cf50baf98173b3530c87a31aed", 0xf9}], 0x4, &(0x7f0000001940)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x48}}, {{&(0x7f00000019c0)=@pppoe={0x18, 0x0, {0x1, @random="d1eedd188aad", 'tunl0\x00'}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001a40)="e1824f95c8fafce7112ec8886a96b826f644d8aeaf7368e1c20261e58ffbddbe57a94054bd412487f7fba7217b084a82ecdf83e227e36c7bc41d688e23af8713f42c382de08dabd5e0a132d39f28482927a12773ec1a5b4cec212f4787db06a7bed7e5ea9a38d33aed7d", 0x6a}, {&(0x7f0000001ac0)="2e0fe5ed3680fde57937ea7714559f16dd67e526339ed22a54767f68f97450597e26d1b0f07d75782dde92a3166e8b9fa473f628de2a0d73d9b60165091b5fb8272a84b92efcb43248b4e3cfcb7f50d384d8ebaedb1b775fd168ce4381a3b2e4cd275ca713c3893aee7527ea49cf53f80ea5dd98edbe0d3eebac6237e3466dc9b09fcefd9bd0d7", 0x87}], 0x2}}, {{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x9, 0x0, 0x0, {0xa, 0x4e20, 0xb5, @local, 0x4}}}, 0x80, &(0x7f0000003080)=[{&(0x7f0000001c40)="fbb096c177c80d86f2e85ae4551bbbff2fa07799bc53894ada7982370b6ed0037c05fa0f41d78fb545c0183fefdcba1da50e2e6f6b81e8df08def0d7f012841784bfbad3f67d139729dda6cde7f60211a6fbc956dfa0e36f81f475348efe46799f9de116d59ea12ec2c51a3bf065ec5bd8285bf1aaa90178c6c7b7b44b374d2f83ea13c6eabb7badc23e8eb056b034229e1d4ae9f83fd8f0e1b1edbbea8780f86af3197985419e4e55f381125d2cc15b10a0687988bedd58e11026d795d809341c158672311dbb0258a096aa8a321fd9b96ce632469c5a", 0xd7}, {&(0x7f0000001d40)="2a999516cfec4380cc516f5b4c63425b8d7b8c458979b86525b7c5745201aa8683aa4a950d27d0f8d9cd392d352f00e875fc763bfcbf237841d589064218db170e1d381ea3ba67381a2c074b4a8482e60d9fa4b7337d5645aa4a44858ef3546a7c2e44f8c2806fc7071ea5431aa7d9492f1b46d72eed575854ecf49185331ed37fc3ea661f58f231c2813b10c3ab577021b91272e33e3a05e8423da6d5175202b3be8ecd274ed86e89facb1a045584dacce1f0fc5dbcb96c6af00143017397eaaa409e51160e373a7a3e50acd905a447acaf31c236d9691946dafe", 0xdb}, {&(0x7f0000001e40)="90681b86d6b5595c3e3c801ba79a5206deddc1bad3e7", 0x16}, {&(0x7f0000001e80)="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", 0x1000}, {&(0x7f0000002e80)="2245478e8a6ad3aa1b8c95e5c12ecdf28a706762a6f6ca4c312c8e9c9631c0ea6866dc985411456ee56afadd4ce2ff885635ce0c2cb9c6e155a6a047b4deaff9f9907743dd7a6c65602b4a041a01620c02dcb5b7b6e5abff0a13f97ce21c617ad090f7f3be7e42a0767059c2523181bcb6089cb812b43895001aa200ff5b731c43f3ca143c0d497e1605eea7f7fc5a1cdf1f66d0778d049ab4", 0x99}, {&(0x7f0000002f40)="687ad3fee661c1c91b740ee1ada31731e2f47058917dd911e91f58a89f83a79184a76fd7e0a79121cb8152ea065e238f4595688ae311cc836e07162a4531230eac26b110190bfb7e7a5824b653fc990017745e04e7813062a8a717d5bdb3dccb3e25fe40c070c67e915c9fa6b234a62bf2669b3fbf0073bc0abe4aac6544e4de5a", 0x81}, {&(0x7f0000003000)="cdf615bc413b49c7653d18d9f48e21e7ca4562801d983aaa6e899df6ce2d6240abb06451938584ebf4324106d8f866ad43af0c298853e1a5fa4a08f94b2dd4dc2d3591b5a99d4d2f0995968b2028286bd45c4072e6a46dc4324390", 0x5b}], 0x7, &(0x7f0000003100)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x18}}, {{&(0x7f0000003140)=@generic={0x21, "919018c1f0eb58ce2d259d5132120d988851daeb4b5b288cdc0edcf709aa05db4b72f3893f33f503c208435819521f9789ccab965cc67e07f72e4affc5d139eebc35760f48ee02e8e3d2ec4da8d8d0ef39396de61159864fb63828108cb5c344b2ce246e708dc6b0b79058eee1a96eef94401f1bdf6ab978c0324c2e9a1b"}, 0x80, &(0x7f0000004600)=[{&(0x7f00000031c0)="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", 0x1000}, {&(0x7f00000041c0)="9dc1278a8e69092243cebec22497d3bcdf00d4b31de8b80dbd341f407af90a08138de388c7a8dd8c796881aa3742bbafd0acc10c69c56640f04c9e12c483b088002e2ba0713d4c95b0ea3b35e20f2a9a3246ae73d8dcecf4674307654e591c25d826a16ba93cda1fd701cdf550bd7dab48fa3a069665", 0x76}, {&(0x7f0000004240)='>', 0x1}, {&(0x7f0000004280)="d93fee7e0275e20cffc18a88502c665f7dd2d1ab4f29f653cc5b42ceaec426098142a26f5a582d41a9ac940a608cbea61c35d51f67c136aace1629287eadb5f6af931074dad4bffd2eadbf90589bd823e7b1c24804540c4658f5836a1dfe4359b7b046e1fb8f82f1ac25d9e5aca4cb3e03caae51de150e8afa66e4811cb0885f174469ec88d4c7ab6bd39352bf0c791d005541dc975b629a236e017ac676e0178c37fcb79f311577a6997a98dc298c517fa4341cb7c8f743dbfc994923f9a4b0af4bc7a3aa4fc65ce9", 0xc9}, {&(0x7f0000004380)="7e03d3dd9377c870b0f6931b72bac86d04f66a45680fe15ee986182e28c5e15b0e76a93c1813f55922aae10697aefb2ac4c61486ca4cf05817dd4857742d45ccdb51f6fbc21c183d85e05807b9365e1dd8b091b80509a5e1e84495d611b770a8a3139fce984ea685e451b6ce56b1f85950fe0253a65b89c2e3dd90004a648e5c8efde44d93eaf635bb51bbe6cfc300901a978c302e7bebc3b35aa4aadfec96bbe354b1179c357bb6488d124b3b70b23b4b120fbf9db9634ad2e67db61a9403aec9ed890f341147b0315cf0f20503e6eb073853473a2a", 0xd6}, {&(0x7f0000004480)="59871e8146590efce05168e8a75018d87a9fafb7103b677ca9a88a3a5cacb575cf3d1a3dc1c72d2620ddf6128f60a5c44f632c4902fe48e0881319d10a1489973b85fc2495fe972cc71a021825efe2339da300e73683157b4ef0a3472127833caa728ae3242863ac6ffe5642791c9c1a24460dbeb51d916bee167aac4b1c4669265196544fe748590e93a1e2a03cec905b1d72c3051eb4b00861f8eabd26cc264ffaf2a87689fa27454ebfd152a384fde974f5b86065cc5081c6bd8d8269f8aa9e5dbaa7594c50bd81f70a03ff273aec", 0xd0}, {&(0x7f0000004580)="0521ba4580095e33593fa4d50f75cebcf8d07a13c80ab82bf473d9ca0c09914ccc44bc825b7ee438a245852285f15a1ea0c4943f87e05b3af8fd737f65dca0df1304b0770c403908182f894ba85a6b4bd490f6e80c48e7ab54e9ae8bcb835937802143e3deaf7ff53b7b7be97a8cfacf00", 0x71}], 0x7, &(0x7f0000004680)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x1f}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x1f}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x20}}, @timestamping={{0x14, 0x1, 0x25, 0x965}}], 0xd8}}, {{&(0x7f0000004780)=@pppoe={0x18, 0x0, {0x1, @broadcast, 'veth0_to_team\x00'}}, 0x80, &(0x7f00000048c0)=[{&(0x7f0000004800)="cc3cfc41c4511cbceb3ec453fbb0c4ff2672a98a4538a4612c2a59457a0ce0174877085691a1a4a04dc03ccb190cc1aabb624541e923fe2c411e477c89d9a5c0efd903a617f1067724014e39fc13a9e10f7e8280bf2876ca5d581fd8f78100c58826c544256df129cb11cb5d5f877e36bca89c0adbb05ba14a7f40cc7823997b417340d829e2a054afd614118ab6e4c026da0a867fcca9c094ccbe58d63e94e6d1d8bba6a7bc86cc41fb1b078565b8348171483a74cc84cf0cd167be", 0xbc}], 0x1, &(0x7f0000004900)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x800}}], 0x48}}, {{&(0x7f0000004980)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000004a00)="2db408b2f7cc5ad6c94a08e792daccf331b3ae894f2b0f4daa936c3a47323d03afe217500ccb326e396b24a8589db406fe5408c1f965594fb3e8b358c66b20a0a632c316aa717bbbbadc7b1bfc8d9c336354f3e9923ab6ca074dbdbf930e93285dc4e0a853ff9e4190972f35c129d5f6eb29152a99fa66d84ed13394ef1c9d5096726b9cf543c5472a", 0x89}, {&(0x7f0000004ac0)="18c3b5a7cdecd821b8ed9bf6eb50105f8a2eb12a0233a51c92c23b1627f2cb46fd5afa8d9225dfd1fb80832ef11230ce1e148add1fadd1887c8ca086ee409e2af1b116e269f547a7779e773799944bb447fcf83e82408b039407b988062b8ab5a061fa8ca5b19fa08a1fc46726503d50e399deb26b8a93a54c2c5b9f3c414dde678df7d8d4d50f73fecb5d50bed593f092e7c47b7ffc3708c0d04c52318842ec2f83aeb9ec296e111f0ca8882b8ec4cabcc7b09bb1e34edd6a64", 0xba}, {&(0x7f0000004b80)="c1f592ff0080fd2eb97bd85f44d34a1bfae31b8b", 0x14}], 0x3, &(0x7f0000004c00)=[@mark={{0x14, 0x1, 0x24, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x90}}], 0x7, 0x1) recvmsg$can_raw(r0, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) accept$netrom(r0, &(0x7f0000000140)={{}, [@remote, @remote, @remote, @remote, @default, @remote, @netrom, @netrom]}, &(0x7f0000000200)=0x48) 02:08:56 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b4050000d6730200601018020203730000000000000007000000000000000000000097808afe7da0d9eb9d53351b2b546d2fde5f8c07298368741d7dd1c18522fb96da485c878f9e36ea06723dee09dc0ba14619dd95530749bee96d8da6fb9c4cc06497884fa9d6"], &(0x7f0000000280)='syzkaller\x00', 0x20000005, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x2}, 0x10}, 0x78) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private2}}, &(0x7f00000006c0)=0xe8) connect$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0xf5, r0, 0x1, 0x32, 0x6, @local}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = accept4(r1, 0x0, &(0x7f0000001900), 0x80000) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000001940)=0x1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000340)={r6}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r6, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={r6, 0x4}, 0xc) sendfile(r4, r3, 0x0, 0x100000001) ioctl$sock_qrtr_TIOCINQ(r4, 0x541b, &(0x7f0000000040)) [ 2228.074427][ T3449] device veth223 left promiscuous mode [ 2228.080752][ T28] audit: type=1804 audit(1593396535.365:2498): pid=3435 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1666/memory.events" dev="sda1" ino=16381 res=1 02:08:56 executing program 1: setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000200)=0x2, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) sendto$inet6(r1, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000300)=""/81, 0x51}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) write$binfmt_script(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="2bc2fc3fd6e79185bb81b1a5e81883fed51289036bf534f5b1a1cd22d1332e49a0bb1b5898a31a1eed62f3b1da79a4edf4333c1b93814b3c10db8ce90264776ce282d79de3cb7846239d93c01b5871fea6a3d32f1d333dc09bf36bfd06cb4afd6d56e80edb8189d911b11aa4c5db49a55a3b6b9466692487942cf8e52f9760516977e017eb3a92b9cd15af1a07e1756f8eab2766021ae9c89b258b02fa0e22f8181f4e1ab024efe6cdbb031555714f27ff01c84ac231d6599992000000", @ANYRESHEX=r1, @ANYRESOCT, @ANYRESOCT], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000080)) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x1}, 0x1, 0x0, 0x0, 0x810}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, 0xffffffffffffffff, 0x0, 0x100000001) r6 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r6, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r6, &(0x7f0000419000)={0xa, 0x0, 0x1f4, @dev}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000000180)) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x100, 0x4d6d}, 0xc) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x10) [ 2228.260690][ T3464] IPVS: ftp: loaded support on port[0] = 21 02:08:56 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2209895f348f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa0cb9e4cafe0569942f464de7188b"}, 0x60) getsockopt$nfc_llcp(r0, 0x118, 0x0, &(0x7f0000000100)=""/149, 0x207a0cb3) 02:08:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8178000000000000"], 0x3ff800) write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) [ 2228.549391][ T3449] team0: Port device veth223 removed [ 2228.581032][ T3464] virt_wifi0 speed is unknown, defaulting to 1000 02:08:56 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100003600) 02:08:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2228.861878][ T3484] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:08:56 executing program 1: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28ec00000000001500007520041f2200000000000000000000140b37f07f82d08c6e0c556fc5993a3c3086868ea83451d961878d44beba3df806720f63abb70f72ccb9565e5eb3c38e1de30dd40c881c4191b39ea800"/98], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) sendmmsg$alg(r0, &(0x7f00000012c0)=[{0x0, 0x0, 0x0}, {0x0, 0x0, &(0x7f0000000e00)=[{0x0}, {0x0}], 0x2, &(0x7f0000000e80)=[@op={0x18}], 0x18}, {0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000001000)="d3", 0x1}], 0x1, &(0x7f00000010c0)=ANY=[@ANYBLOB="18000000000000001701000004000000ff010000000000001800000000000000170100000300000000000000000000006800000000000000170100000200000051000000b62745e0f2b3a6044f2fc38339efb72f155e5c4456347b7ddce140587b7ff12c5421642b9ab70c89b70ad43a8c9b1ea77b258c3696420225e32a14b009b23076956764aa0b8301a211f1e537af4e0f176000000018000000000007001701000004000000080000000000000018000000000000001701000004000000ffffff7f00000000"], 0xc8, 0x14000}], 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) bind$xdp(0xffffffffffffffff, 0x0, 0x0) connect$can_j1939(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000015c0)='tls\x00', 0x4) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a5800000100"], 0x1}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000001) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000240)=""/75, &(0x7f0000000200)=0x4b) r4 = socket(0x840000000002, 0x3, 0xff) bind$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) recvmsg$can_bcm(r4, 0x0, 0x100) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r1, 0x0, 0x1000000eb) 02:08:56 executing program 2: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, r1, 0x0, 0xffffffff806) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) sendto$inet6(r4, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r4, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) r6 = getpid() syz_open_procfs$namespace(r6, &(0x7f0000000040)='ns/user\x00') getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000005b80)={0x0, 0x0}, &(0x7f0000005bc0)=0xc) r8 = gettid() r9 = getuid() r10 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={r8, r9, r10}, 0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005c80)=[{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)="206af1744f0db85a017da9b5117063df336f1f3b81143ed07ca72a63b25b76970db5670abb", 0x25}, {&(0x7f0000000100)="0d3aaf", 0x3}, {&(0x7f0000000580)="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", 0x1000}], 0x3, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r2]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r3]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110, 0x40000c5}, {&(0x7f0000001580)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001600)="a36d34803ec0f04972e3378cd7bd5b6018a20145a337e98296e10777b9cf2c4145b364f1c83cd69f82450d5b5c18f546bd5289d61156cb5f75ff6028f2b38fda3e072ca74a289da1ab39ac3a46c9a831ec35327a92128187a7c56d9a0fbf7fb3da41eedd14d8c0ef28d5395e2f15d7b2b5c4d0dd20bab59bf070bfb19dac130f17889f10b0cfe88c772bbffb876ae53ece941d1653ba6d57e9f22736211b3ad70fba9940f930a7f8f1bdf372b02336a4831c5a330eabcaa56660aaaf", 0xbc}, {&(0x7f00000016c0)="3a7fa2e6dda8ba16c26ba4634626cd74c0dc758476c1cc26602ddf612b1cc38a2059500fd959946faaac41a1073b5440c103a0b56d47676a21f2062191a4b5038bd488a3d809f6d6f26dd794b321c934664c909c348d68c171a8716be757e27164ff6528094632a20973b950cf8f79f2e7e70289d6e94c4512dd1e40a7fdd538e0feecab76948085f94a4ddd98c3ff0249681e797fa7b7ea986daaaff8a778ac9a8a887161b6c734427685ca27f526e881b2bf371a6fe0e9ba931bbd61d0da60838193e1339568503baca20d1ca0cc234fdf7ac2e281562a5d82899b7aacee48524cb6f41b6bc1de6b5ec36d0034af946571ed067dbc8f771df38c9e7e8e", 0xfe}, {&(0x7f0000000500)="d1a97e10a4cde79d105ff3800a75d322f134e0a3269bbf021087d57716289d71707261c3cb340638a2fb62630ed023a76df165a4e7baf040bb2e586bcb0c", 0x3e}, {&(0x7f00000017c0)="9dc3abae68b7542f224cb4f2878d0fd4ae", 0x11}], 0x4, &(0x7f0000001840)=[@rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r3, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}], 0xb0, 0x80}, {&(0x7f0000001900)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001980)="de87c2d1741bb9c39821765d79c81212a67f9a930500a9135f22446326c3849cbdf16c016df3fcba6436dbdbe0c235a69ddda9bde3ff3c3381da78d9d850afa016c69eddb3760a93c9b9cb3a1f62c83dd60ae888cd481ae9ad23ac96f6fa4f01c519a8a613546596d20e1e7d5ba960e8b8d640069c834313e31d9cd86372fbf5f47de04760ae14a59f03d7fb1291", 0x8e}, {&(0x7f0000001a40)="1d4f21240845049bc182f336a5c50694e3140644701349baae5846616ada494843547caddfa639c2", 0x28}], 0x2, &(0x7f0000001ac0)=[@cred={{0x1c}}], 0x20, 0x40c0}, {&(0x7f0000001b00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001b80)="61b111e9f4b3ecb6c49b8fe1c03ff7f43afa072119c51693ca6ac313220722ce44ee883577463a17bc6f558ceaecb506a09f2bb6391079fc32181468ca41e6fa583811dcb3b2a7118afdce305141f81b9ecfa2c325707e76fc96147f94eda55a792443ffbd60defb7c6503b80fc917e0f1b720c40d1e132c4e4be335a0cb0d64979cf5cabf6c574fe27c5b5184cde187dd80456500e260aa3a384c5a16", 0x9d}, {&(0x7f0000001c40)="2a4c7a54d786424413d7de44c6dbc40b793cbb8b5488269faf3b8b26fea02aa3f5c65313693d95587887d91c3cfaf76337fe186700d936e8498c4fe6e2c550c8b936b9", 0x43}, {&(0x7f0000001cc0)="fd0a5077d4ed0b9873617c4cb9c947", 0xf}, {&(0x7f0000001d00)="d0e55c6e135eb40b62baecc38939f704f86f89ad6a343ea43437a18c6d4334e77d1e63e1739155f8a8b5b326aec3", 0x2e}, {&(0x7f0000001d40)}, {&(0x7f0000001d80)="cec228b1219002addcfa7af0d2fd8feae120e3db2933a06172a6a00fa8053589c19346ffe1d59f33df47e567ad9959fd18", 0x31}], 0x6, &(0x7f0000002000)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r3, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0, 0x40000}, {&(0x7f0000002100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000025c0)=[{&(0x7f0000002180)="0cb60f6679216f141f8909796b623d99a14b00b6253366456b82d069258adc70f8cf04a18ebc55ea7f7f1d66d5057bb46fd74dbfe6f2f4beec35c323c81bdee4035acd0bad7340fd328c2a7bc6d41ed914d36a730fee801bfa0e8e1d771ade4fab480ef88e815df318f948ef28808ff0f429a17227f7b7392188641b8f0c69d6433106c2264f08633bcab3a5981fd28d4648b0d7e1", 0x95}, {&(0x7f0000002240)="9d09767700463a86f28a74457406e9bec02048c94dd5f06a18e78f112639ab40c2d5bd3e6491481c9747310593d4864e38a1ac3a17e8b65a02ccd32b6f016aa35c621228fa86be2165b448bc2afd17257846af71a4cc71c3f88d209c1564896a0377e3c998dd840028da96ff8e6747293c8c76e8af699f0707b013a66056282076689b8843d0b6efc25b7bb8cfdbb77d7967243302a021be828302eca7ffa8a1cc605ec229fb1b2b0adcafe5575b20cf9acd2308d31463f637f344dd7582a88cffb5bbdc6874ea2d9d4bd784eb54c2ebbd5559f227ab83b508831a4da32c1aa30f44831652dbf95281c1", 0xea}, {&(0x7f0000002340)="f71c01349d29addacd03e7239fa39119ed9da22eeff73501ce3c683d17c7e096cae1e532c40cd4bb33d439306021e7db8d7b2e6260882e0b460f63b508d8b0e66112e2778e31b4a484664dbb08dbd93df699181e531596142737c1d212ac178d97cdf3485b41183cf0c988299c88302f2fbba06971042bb4cf11733e09ad1e9fdcc0f2d4bc5db92340f28ea7e226099e976d1e02c0fa03e4acc59af668ab", 0x9e}, {&(0x7f0000002400)="497d42ca6aa682c1ec2b2426e43f1976d6929e72459dd3b2f3e6a128b94543189f1298e003830df8dba68f5f23142ba6ce550deddbde5592aa6fac465abdfee597c716082f263fa50d8c799e02fdb751992d6d8ebf7e7c041c7c840d25a90af81699232daa591ccd90692acf80bb8f93b60936f8c1f1c8b8b20642f0ab51055aead02e586bbd0920a8513ba88ad6cf17e6dbf4c1e283ee99837f823e59b06838819327ab4fb0ae9b37048d577a00a79d9b346bdbaac0c00e", 0xb8}, {&(0x7f00000024c0)="c1cb0229455ad5e2d2f9adb6e7b47d0a83ea8d0be9816bfdbfd3415f7677bc139de2fd3719ed7bc1b23a5200a4392a5bcd1bd3584b1c82c892fac14b6c5c8ad6d9e8badd25e6a5c0aefb11ec9a07c867c9941b7d495ba6e054f2652c40e252e06ce30e3c319c4fd84de3ea6a4576eb74c2c4cfa9cd83a38a7caa9c6092f804", 0x7f}, {&(0x7f0000002540)="b27b72cf0be183d68a47f49ab120c0ecba1427060d30b29173f7f594cfe8f456d1d86fcf129592c1c11f9dc29f0086f9cca9b299e3fa81efd45437f99a45d9b5d717b06250d6590094062cafe9fa86ce21d4ade7e986e934d332f44e459c12", 0x5f}], 0x6, &(0x7f0000002700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}], 0x40}, {&(0x7f0000002740)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003c40)=[{&(0x7f00000027c0)="28ded2561b19ce557cddd2f1df5c428121f152bafb06686066b2dc1e9f02b585ac8afad4caa83f7ec79de59153b7f1e3df8d231fc7fe76a8d5da4a88c0fa736e74cc1dbc9547983e", 0x48}, {&(0x7f0000002840)="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", 0x1000}, {&(0x7f0000003840)="fe6cc088e198c3b3323b59d5b7756be8cb36f74313bb95035fb650925e7afe04c4ac7a25308dce4442db93090e391d7ca6968ed7ba2b4915af9528b2f9472b547e061ff7ad68a5aede015fb45a1cc699fa8581", 0x53}, {&(0x7f00000038c0)="da2155acbe524eb30c94f8127e45896d981a6a113ab85bce00eb19f2f1393468816a2c6ed6860a2e94645e7e00de55663f32220905fb6b4b1116c7776581f485a2cfbd83df113dbbded32a346849e77334c2d2c6e45788763707fd7462df5fb981227234fb469fc4dbc27501a14280fbc71697c59a051e19511905e4e39b0514eb9a0f55addfb483aee6e2029eb39ac168ed33ae81e280ff30257d78b7b0e0ca", 0xa0}, {&(0x7f0000003980)="0460f1cf586a84faf282c7ed2b039e033ed6f0f91024fc80f53849e6ed774978b57d25ad29d36d893dd8b9b0602c293dc105c586452e0f610883cc8aab81e7d5a1e6887e43af27bf7bc024ff4868f5f7c727105062d0f96ab39b278dc2441d743f4eecccef2c39a60b502ec19ec4813b9a8aa075165fb6f6547299947fc0c5c6eea9c65344c4d58c2654969c79ae1cee486581cd638dd9bd772d99390d5570fc5638753acf43522bbf33fe153d73e426f2d52d8e6af6b4d83a13458fe15792fff8930975", 0xc4}, {&(0x7f0000003a80)="6cad59c00059831d16a85886a878660eecd35f1384c09fe96971155b24e5f40fed5bd3e3f2027ea56ccb473842b1387bb9d31af9d70702b4ef676171412badb8e9ae6f961f7db9d257912f73e5c7595419cf88274d986e21f1bd11e62a9d81558d63d7fa15b4152bfd2f244aca92bcb2bc79061eb977b319256ecc6390d0b4fb71c63d4951c028ffc6ca47784c75e9d67da37c6ccda6b172fefe088e9889b6cf652a3b7cbf51767659ce140662", 0xad}, {&(0x7f0000003b40)="6f9e4e64e957a123388c2ce91b741a23627079a32663c402a159f8b80070c16a6c1afd0ec2e68f5db116fa5fc9f9b70be0dc6edb01dfbc33725c0a929100693ed7ad11c79fef5ec890e54524e09bfeeec7577f9cb328fbc1a43ab0eed775d39aa05ee68e2981c4af8bec2e62b53cdcc48dedb2b479c4f3c2f26f6d81a635fbbb8753dcc86994d13c294cdd84f4208562b0221d016c0ccad47bd3bfe9e77932aa2d4c8dce4fa19f2b0752d7cf38c089cf55ba12082315ae06e78bc32f007cb7863970fedd0e014f2480ab0ed8ce79799eb55a2ca0e02164e7c8a6514d62c0f6317429771e1369f8ed0327bc16d1b7f9e3c8006b6997d144b4", 0xf8}], 0x7, &(0x7f0000003cc0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x24000000}, {&(0x7f0000003d00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004000)=[{&(0x7f0000003d80)}, {&(0x7f0000003dc0)="04b6d262d614f69a5572482b603e502685174257b21297d5eafd655b404439d7b1b5edc7091a6194990ee8fd782bf8d15c2652f142b715ad52e3bfdee7f27886ad7b019c4beff47b8a81dd8c19d20b83b9b25ef4bd898613206e", 0x5a}, {&(0x7f0000003e40)="4d5770fa72f837453dfacf64a709d3eb9a08c6b88c1c70681c5b2edfb6fe1aaf4568cc8e4a86481d0730c7cd42e37102f17fd1472db3e396492bd37618ba0b29cb1879310c78e6263fc5fb64", 0x4c}, {&(0x7f0000003ec0)}, {&(0x7f0000003f00)="cfb7a36d02abba3b2df334db4bdaf02e02bcaffd56d148395d3477c838fe62e2e7dfe2016043db3acc0e0249c9c5ac0f5efd9491346aea5f1d5c5a5b5ed66d1ab7c4cb8e312253245570fd8a2d5a87cf0837461fb49dfa0f314b1ffd383f76c6087eb92fde2e1631c00883a6cddf65201bb8527978c1c513cb8f861773d86a688c01e3484cb8ea52f0e7f9ec9e0f4988559e1ac40359f75680ebddce72931069cd5a33c9208a4923cde9edf152148cca8d435fab5d75464f4ee6ac3ad6ef8073dd", 0xc1}], 0x5, &(0x7f00000041c0)=[@rights={{0x28, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, r3, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}], 0x130, 0x8000}, {&(0x7f0000004300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004680)=[{&(0x7f0000004380)="ba4b397a86f4b3f8213251e5ce6858120090eecfddc1bcc96c1bc67a6e41e86a62fa6c471b1afc84cc387c1fa87be68f8379058536e5b982e6", 0x39}, {&(0x7f00000043c0)="e7ee586d3004211df98a153cf80479d6bc379d4a42a732511f513e39773aeae8270a8ad8d251cac8178a1d8df65922a890c48d3257b6a3550f07ba2662772b7528d65e85267c06b862dbabfba89c42c183609152c0c8c3cc72cbd530413d5e27b95e291cb373aba46c4100f7d4dfc8fe6c10426cdfc295d0013e85890dc029e3e00c8f61911cb08c3f64fddc1ef282ce40afded604b4b69041e383dbdb079fa71be6ee8070498ed6e3228f3575403afa473d53dc5a300ca9a8ef7cd24fae0d9ada3a8f0ed3cdde7b529a5809b75ab4fdda9ac681cc7797cea2", 0xd9}, {&(0x7f00000044c0)="7c3d1b46aa4226395f3dc8f09eac3b1d6854ac93a45cbd7cc7add1ba16c24b1fc44ddc7fe27cdbd2a72cf52493ffb3e06f53b926ae637fe85ff93b84ae4dae0712fd01b69a", 0x45}, {&(0x7f0000004540)="39def0204ef0f98f8bf89703712d7d7634ec4d9cc7f6d5375e940a", 0x1b}, {&(0x7f0000004580)="1c3d3185d209b79c143bc7dc3f2e90bcca6ca06a59ee9b7cc9e363dc44ca9d214c0a6ae90561b7b5cf641a369e0511cc27cd936ef0143dd2c731de1189cf910c830c34fb048a141ea23425a8ee7b478f0e6d5fa428fe87fa693a50418ed3da586d2093f6a722efb5d44beb2914a2c73d040a293994378a3c0818b82aba843744627230fba231fc03bd7f3dcdfe0d1cc62b4dfdd706caf117598836517d57e1b02634f3aa8d476f87e3a05586a20a5e1a77d2650cbdfc96d94ca764d901968317aa1208b4e7d4843809815d64261e707fa438b8a6a695d1", 0xd7}], 0x5, &(0x7f0000004940)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x40001}, {&(0x7f0000004980)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000005b40)=[{&(0x7f0000004a00)="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", 0x1000}, {&(0x7f0000005a00)="ae3fd4c016e7ee58590840cb01c2619a48111620c0bf9132c5c1887ff5f8ed49b8d7a2cbc008a6", 0x27}, {&(0x7f0000005a40)="1729324f6906051f9b857b8acef7be6071806ebcc73fc5d4c1d7cbca5b97e8c584e6cb0aa9d5eb2c4e805474e48ed7d78f820074823e43098ec3437f71f3d371a2e4fbc7d6a92f850610cea74cfdfbaeaba22d2c21b1f3f9fb82215b83f4a40df8a185510b27e174732d6de42347f1f7005578170d764e95cc071d5a5ec366714c9024e6cfb0b7373dfa5e2b63fb9196f5021d13646a5141323935fb9301231d74f284cab235738f083837078fdc754b2e19c5", 0xb3}, {&(0x7f0000005b00)="007cc0a8a9339a0b9d2af1c47e9f441d99cec02841fc2d2f10782e48", 0x1c}], 0x4, &(0x7f0000005c00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r3, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r10}}}], 0x80, 0x800}], 0x9, 0x20008040) [ 2228.978658][ T3486] device veth225 entered promiscuous mode [ 2228.999737][ T3486] team0: Port device veth225 added [ 2229.049538][ T3489] device veth225 left promiscuous mode 02:08:57 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x9, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) socket(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) socket(0x0, 0x803, 0x0) socket(0x2c, 0x5, 0x1) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x2, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x120933, 0x1000}, 0x20) 02:08:57 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100003700) [ 2229.463715][ T3489] team0: Port device veth225 removed 02:08:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2229.783803][ T3536] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2229.879984][ T3537] device veth227 entered promiscuous mode [ 2229.899535][ T3537] team0: Port device veth227 added [ 2230.112888][ T7] tipc: TX() has been purged, node left! 02:08:59 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000100)={{0x1, 0x0, @descriptor="7f0e79bde371cb78"}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000000)=0x3, 0x4) mmap(&(0x7f0000a09000/0xb000)=nil, 0xb000, 0xc, 0x2011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x1e0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, 0x0, 0x0}, 0x258) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) mmap(&(0x7f0000f44000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0) 02:08:59 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000005c0)={'netdevsim0\x00', 0x800}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000019c0)=@updpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 02:08:59 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100003800) 02:08:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:08:59 executing program 2: r0 = socket$inet6(0xa, 0xa, 0x1000) socketpair(0xa, 0x800, 0xc, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @local}], 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="480000001400e702095f9f95274b0a000a840200400402000000000000006fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b0c89", 0x48}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) sendto$inet6(r1, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r1, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "eec77db10099b349", "14e4ab2e4f79e83aa1426feb27ab8773b46ba10a04f0345c9dcae8a23c25311e", "f2608e7d", "ffba8c1003ffe2f2"}, 0x38) 02:08:59 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x100000001) sendto$inet6(r6, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r6, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) r8 = openat$cgroup_ro(r6, &(0x7f0000000140)='cgroup.events\x00', 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x3, 0x3, 0x702, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0xff}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xcc3}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x8}}, @NFQA_MARK={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x10) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'geneve1\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000340)={{0x0, 0x0, @identifier="923e716443e09589fe59f70329cb0ddb"}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2231.856522][ T3560] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2231.901649][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 2231.901664][ T28] audit: type=1804 audit(1593396539.786:2516): pid=3556 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1800/cgroup.controllers" dev="sda1" ino=16367 res=1 02:08:59 executing program 2: socket$inet(0x10, 0x80003, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x100000001) r2 = accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x80000) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000200030a1f0700080010080008001e0012000000", 0x24}], 0x1, 0x0, 0xfffffeee}, 0x0) [ 2231.984750][ T3569] device veth229 entered promiscuous mode [ 2231.991454][ T3569] team0: Port device veth229 added 02:09:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:00 executing program 5: unshare(0x40000000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x100000001) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4ea3, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80000, 0x78) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x82, &(0x7f0000000340)={r5}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r5, 0x9}, 0x8) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x19c}, 0x1, 0x0, 0x0, 0x80}, 0x40) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={r5, 0x3, 0x8}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={r5, 0x40, 0x3, 0x801}, 0x10) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) 02:09:00 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="0000001f00000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) sendto$ax25(r0, &(0x7f0000000100)="b0f4b89d8124e0d33ed626feb9926f81f28c0d260ffc26a4e8792c12a1ce604cb8648c5488e0c0dce160cc79009bffb873d120f30d1ccdbbdd80622775034f5164e49e1b1605fb619089f5d2105eec2dbed1144ce61d2286ba5fc70a3335696f816fecd5b1714fbcdaab2f1d82c3e643c0", 0x71, 0x1, 0x0, 0x0) [ 2232.193938][ T28] audit: type=1804 audit(1593396540.086:2517): pid=3566 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1800/cgroup.controllers" dev="sda1" ino=16367 res=1 02:09:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x100000001) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r0, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x20}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000380), 0x1040c) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x271}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000000000)='t', 0x1}], 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4, 0x0, 0x10}) 02:09:00 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100003900) [ 2232.312775][ T3594] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2232.346165][ T3596] IPVS: ftp: loaded support on port[0] = 21 [ 2232.398552][ T3599] device veth231 entered promiscuous mode [ 2232.415823][ T3599] team0: Port device veth231 added 02:09:00 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x10000}]}}}]}, 0x44}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 2232.429873][ T28] audit: type=1800 audit(1593396540.316:2518): pid=3604 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=16384 res=0 [ 2232.474958][ T3607] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2232.503418][ T3596] virt_wifi0 speed is unknown, defaulting to 1000 02:09:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2232.551895][ T28] audit: type=1804 audit(1593396540.326:2519): pid=3610 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir834134059/syzkaller.j6s4N7/1550/cgroup.controllers" dev="sda1" ino=16384 res=1 02:09:00 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100003a00) [ 2232.636923][ T3622] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2232.722986][ T3627] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2232.788237][ T28] audit: type=1804 audit(1593396540.676:2520): pid=3630 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1802/cgroup.controllers" dev="sda1" ino=16382 res=1 02:09:00 executing program 2: syz_emit_ethernet(0x122a, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x11f4, 0x2b, 0x0, @local, @local, {[@hopopts={0x89, 0x23b, [], [@ra={0x5, 0x2, 0x7f}, @generic={0x5, 0xfa, "b6a08b4046489d0e0c0e9d16d52acbbb64fd9e8e2569df5e59958078725302e441ac902fb47918c4cc77babb72017cbe52d5e14e2bb36d71b800b4f5c866b6e9f7954ae08278d1cf1a2bc9fd36634fdbe9b943ccd7feda5d81ed1ce3d4a680d6511e9c2d35bfaf281fb7fbafeae7432103254b2a30de268b55738bef0c6970baf2bbe86997c6c99b73b1f38d694286c3a3147b7dabd1a5c9a152e45faf0b6fa4e6a1418e2b8704dd7003940b4db9a85650b1b2107df1c24e82d561fd53359feb8e35d6e279ad7029492a730ad7bfa60315cfda5e27b7022d9269d2516a5f81752dcbd43a220c01cd53d560bcbd7e9d916648d3e90bb4bad71cd8"}, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0x20}, @hao={0xc9, 0x10, @loopback}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0xf5, 0x1000, "a7f40a9513e321d23b71a99aa26b11eef21accfca826c4617a6bb2ea949c611b41a1eb0c9158d5cc1d97fa254fe549c19219e5ba4db94a92b92345e82979a630c0b2f526808709c789c4ad75b557618cd68805ea135b9974a5800daa2037b812064a9b006f12ebdf8c5a08335a5eacaaf867673a8e0203ab12ab7c1f28b9c17c8db6bd056817c328c6b53f3d8fc4ce274fff88eb6151ef933f0c9a4a926439341dbc0c5d27b3fc6c6224832f356659530cb7329d1ca6c1dd1171e0ae64148f70059fb9a65a0ba3e11cbe6f00a3d31ff904433656bddb88a91c955c8040f731a0064256c3fc612363adf1b5eef7a708d5ffde00117e0de4ef5770c073817ee3f7beace663ef02b1c1c371a15d09235a55d3918dca60decc7bdd90e8f9488e5324bc2e7516f2c4e39e06354a16e482d476581be91d961dc310cf703a7423283cc22f93e1008d7dab444959af862e7116b43cce4f0bfcab53c52b87633b9a1e37bfe66c087e5c675d7db651113d5f99507ddf7e055672708ea931613c575f0ecc1d63f81c5d03f5b9eca3a7f65ca2a18b9096b880ba3ccc669e127ff80c148d9e2ba93c1b6bc008d1c5e45ea8c88052136254d5b7bb480ff61e6f8870ae60148ce4a8804322a985167ccfcd594a452add2be3b79247109d916684303aecac7579e89b56279505c84a2d8fbed7ebabc7fb0e110ad66210b60a7ab35ea4c66ce8695657d440fd65b4acd07e8c46a3ec2fee0d41e91ff13baea8b5d7924c0085c02588e83d63df35c06041a8a964231c55902178928e32d3706274054e093321983dac93317f6fbd9a63fef982cb26c6300ea4955e7df1f975780200c7acbc59c5f0bea9476463ef1d7d8e37d52105a6ac0d29d9b268b1a521c9d7e8683ca5d9c1b5921fca8b96ae483dac412b878c3da8d05f3648b36a164d887310e98f1fd648d24b438bde00414593f063bff5ae63751a75b4af262fc6597c7746f108c8ff39641aadefd527ce34ee837978bbcb0c0cbf844c0fbbd224ad3128274bec820307a76ae2a0bcfb5ed4c5581cc46ec9b07b9cc8e8234289e7f45b8a392a09694fe5fc19cb1d68fe150d226d9e368eda2cc63b760e8a725ca42792be415e3baab87c9ff4acfb8f7afcde90c4734693f0d3a4ba29cc1e9321babe697cd70529a51a4df59663ce568b93f7d30f66bb3d00db2a6d3c8b9443fe7da189bb6fbaf54ca4aa28cd507bc16df3aa363b73a224b5e0b31bc44f3712c442bb985a1f1fcf6994fad0ca584fc95b7688c0cf0d337e2028ae370ead08e721b472580c1d7ca0aab4796a00f2184940e8c292d1ccbf6fbe90edfc0f1a9297dbab940abf77c7fa8fcd9a3500e2bc2d839723d633c9572f686150b74398b24548985cde1fe5b6d01adad929227d686cbec7de99d5cf1ea88e238e983d23635bf8c7c573d8d715d082574fa74604048f0291b9ba40e8e1f28abc624750ee82d9b00d0c2b92f50fe4efeeb9aae3f651ac1be2baa4618b9ba880d595a883ab3f42a0178e4514f5ae3240654c8d5580f4b399ea05ebf83baef0d56c165b06a0393066419e71876e0b81a9e94480c510cb92a9b329720748b55ee27b93b769b6706cfc1b9c600ecebfa2a975053c0302b3164784a2fd41048343ebbe241b485de6819dccd8fdc61d1667a0b9655bcb3f2d78a4bb1771528fe8a266dbc21e005f700942b660c49298797cc88481aba6567ef686f82823419499cda13bdac40fb34b6ed3a560fbbf9b06fd082916e2d60e2448f490d5091f4b6c420dc2aa38606a30d3830b4f51a9be5f3d7fd7f5d9dbc902639d3e5ab6d697ccc334f871c55bf52b33555c0e300032f1a9f2c3207df43fc4aaa8e5fc90a40bb0daf1fcae3ef7f3b124d1c813e3ccad771dab887d008a24683aa174dde662d96377e3bc02157579c27d9b8e458f2423441840ba692f262409384673640b10befde5ae6f24bb8f4f832836d045e8b4658360165e1b87646446eb69dbab61d45462af764d2f2f082196d4d005ee1fd4462e285e39b3ba7f17b3711594a0e864815a1642ca27a1e65f832cf54644d3e00d84354710038f6e7b20ddfdeded9b3735bc2e5c7c9f45fadd69433841918342616302619c0ca51c5e7ca6e45c653008f31a2625b761258fdef545fc66e9e2269beb17f6872dab2b79b371bb459e211e692e1ece6cd404f46d60dd0e3248192d9e925c90cf2e71a71822afcb793341f95861590b437b6416a6850c4205c31c755adbcab4ca25d0bb605f70ecaf62e8b2ea5606413920ba24ed80610267e7b5be77aae6ce326448197908c40f544886780616ced5a301b91da9feb946539ff7011fa3ecd4671a08b1e1fc9e0af175a773500e0436ac069f33a3a7e602f720c0568286a314c3da84affcd52fbed5f1e75a833703957494ba5bb9481ab3b30627576f0304ff864becb2b2f12cdf1eb94c1b956b67b1dbc86c46dfe81df89a4dfb6af6d765a462b8a248aef3b0c8db3fd287c6a44fc086b7540203e01973bd5a2c4d1e5abae08a122d64bc569a0014d73c710f3e52f2b9a52d0a9b83f6271b0931ba97e6f6a24f177a5b7364e7d637558aaec76b34986b933d24f286f6552b75f3ddff556a83222552723aef799d180ee367e29de98d5e03863bec33e37c3b010ca71227d5dd3613fb8326511d9f5c1dbe4d8a3bdedf40f7bf3d45ad5e211e8549b869af0992f520f6f9e254a69f42e34402b1f994e982a511fc6305cd671ed44155eb6dba8cb3ad91c39bde485adfde839abafa6a5f16d850fd717a71bd0465150a9e9c77befea3bbdf64f18f8d17bf17e65455b1742442da3c35da28fd25076eb19ef682c5cd622cd08cca52f8a4fb224fcca54eb3d391c1c4de83c4b6b6fa1419b6ef02887441366cb575f5ae13a5beada8349d85072cf98ce8e94ce045e8b749f6448662f64814a92b7880e314b7406676c5427341951257c4b69c2967bb97ec12c9cdd0a410b09ba1996b52ba5b7de6f7267a21e547b430687fecdf86fa357f53f99371ba0a2effee5dee281a5d1f75d530f541b13b0869e404604fe8764b5cdfe7ccad0db29fd860f478d8545f7fa119c3bb4c0d5a369c7eee97ab625f599fde7cad5f0e5361715bd4f17dc907872babf1aef4ad6dd17f44fce0af42959cfa44a1c99cc35ef1c9063689c5058bdd1b206d711abfb8c165dd1e37e22d0ec13689412a198e2df4bb39d4e51972cd7abec0a32c2ecb6c96d07873cd4a196552a4d66fba118d5840bd9a0d429aa79d559750b984771d2f9df0b4cf28a9b53bfc2eb0ad3424d0f4dfac7e14c86b9a91034db55df6612a628ff49148711b311021363edc6aa52be4ddc04b757e77683a425d90618a5487f912b37cbb0d28ace7a99b41b207053412ac7187028001b7c26b44bda5ec4c17e814c982e5850a314b17b65bccd245592c977bcdccda98a5722412c8137f38414ad7925f5649a44d473d7ff78447dd715fcd718cf78bafb946c63b3cc8090c63958e4da53f502d7ed6ae9a5380cfe508a8f1f8d0619b3dcd00e2273623800994839c37776457a74b4f4347cb2aff673ab6b1a3ba83bd7ac6711172301d2aadbfa02957c1073c03eeb422652b7a2fdfdb5d3031aec0cead289cff0c9e40cfd0e9de56b2370bca46ffbda8f434c777831ad90e01e1435d4069cc21518462215866ab301587a712ee720843a2433722c3c457331bbfe44116165360eedc8c8f3d36eda8bb44102c35727c53f84c93e9ff95be65c828716a20cd6b9452d0de370e312e9f945bd3e3c5e96e0c61894408e2952c913f4203c89ac271b18d7c9e3f14da6c845b326af542533c5e36db96e32348f1e6782ccaa904ffca2d34a671a52c25269035f178d712a9efc51a35cf39c41691957dab93676a8a9e4c84ca49c281211012d6fc31b184b3185dc10e03d08dbb335cfc2cef3cab07caf15d0b86760dc171532f92512f20d91f10efefde7d39002012852cb284050a76e0cd57da6edc4daddc742e8f701042c59744ad67dd932fdba85de8c1d1d0d1dcd9c961a5e2373cdc3feb2019268a4f2a03aa92af7bb0855a676ae96cc185bbecc603456f65ee2f5a27ab8e8d2e5a7b68f7365e969d1d9677aa42c886aad4d3c714a4b2d10a072e32ae1997511a1f5cca9a45ff0402080211da1ea9233e7e56edbbc1bf80a6334524202388b31efaaae4a8f06ae6436bf8b72ccfd1b0e15e7c9599ef9866ea6b1d5ba5623439f356eba9666ee7ad77da3ed1981838717a8ed5153383bf221c51ac2b5b1762309e98b6a255a8509d8f1badb88cdfa2d7c956f6d82b25d58e3b12d892c5bb53759389f34449e8e15264e76d8fe2df271e00e966a05a4db7f9ebe0cf8f6eb7c47ce003dcb910344d26c076853ea5acd5cacd3d1124ecce672d707117cb121fc140681c201524a4f3610d1ceded80f96fde93ecfc609c33c8bd5c3a50aeb228712570af39dd52f27e754e414b5f8bd56c5c3a56f77b7596772e6787fbed29e24e93cda9917bbb496c295425e03d34905df49183eb7d1b1ea8215c68b4332662c5bc12b1869990fff8e2436a8a7840e007c9ca354d0ad2857cfa247a58a17370e0fde653dbd08ee6828265802a8223cdd49e5ac0c280fb364c1ebba808de66f3ec1c3664fce277bdc7c805b17d3e6a9d1b2bca600a6830d14690b169873114be4998191c93540e07bcb9b28403be0af286fc7a93542179ef5a877e890efec4d358fe31aad82bba901cf1bd0272640c194b2be76ba2283ddb7d10a8e1879715a2dd874e80566ee6fbd138bb2ca573c73e0efeec6fe611722f2b696fcf8e401d134a9fff6d0b0d508c1245f75d5b6233dedbf62b7a261aaba9cced529bee28d4ba65dc6d7d1c8ebf22fd55c19662a34a11a31f649f866b441cee4e6191021f2855a9837fe0adef28aecd23d1e2c21b9e10ce8641ce9d4d9dd56e5ed172c4b124cf6d3524459d4541311b1a17bbf103e43bf78ad2b91af07541b78d8994b2d99cba1eefbdb68b5cc6fb3b4f27beb9e2fc10172b9a8d51b8a3363d6dfb4ad69d61f2513a257544b3589ab88afbaa21b401e66f2bf796b22d44a76da625cfdfa8213e2b7953663cba8f609cd161bd5aa617fd45d38c06bf0caf7ab239426a2dcd7c6f4ae9c49e0df7d08d780c2c559a1377b87aa6de44598194bc8a0d4a93be6b2e1ab4a288dfb42ff954818f51dd5e712045314b88650d665a0885fd26c6edca1af75bbcfa0733374ef9d08d64d8da94d5aa84321a7ea2085c26506ec7d86175c20c510b3b84b4aa0f387efc6b4f7e821898333d707c414a22f06c2a5e229074440f363e367bacef3f1b4bbd9f1cd25087902ba78c1bc112dbb95f82a213a81ae532cfc4336335d639e16b0cb26ad1e76af9afb072a934a67a6e1c98b7dbf2e044c1cc29dc2027e1b79b1881d786c3167d69bc1c6f727f1738d594dd05544b9425e1e4557fd3674113c729d32650510276f5dd853915e738f1dc7f587a699bc19a03197c3789e936ca7642b7eac0a9986b979a154ace063dc9171e2a76b387afd1c15193c37199688950753c914d52c95db4172f35dc002d1f53db001860db2345794362f56191c7f677fa43ff982af9e3652242279c307112cb09786eeb6fef36b231d2b371ec88042e5f0b9b6c4b28b4d10b3e7b219627d93ba1eecbf9909c95633832aa7b8992d735366388ba85c453200561b95d9557990c089e598d45a60aec6d9925a9aa8135d90e211804b6f32c88513463b9ce7af3282fcc9db489fa3d137d2f9120985c554892ed7a7af790f013"}, @generic={0x7, 0xb7, "25f9e9f39c37e8e5eb9fe0620db8c14853f0ac98f65730d01c6cb60f99c3dc82cb54b267d92aeebd94e49a3bc571ad332c2ca617334c98d1b12fb30988428c6c07e43e02c05d0a8abdd2bf8a8f815fd782a219d49768899540ec482a759ede0ff6f69a0c70f67308892d6b967297908ebc253dbe7307f3208a4cd069b56d4042a8b03dae2d66a7682e4fe6e1349400ff8bd835ce09ffe6a8b0590f170cf381448e3ba99f59d87a436874931d30518f7c5bcaf3cb296ab0"}]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 02:09:00 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x4000, 0x6, 0x8000, 0x6}, 0x1c) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) sendto$inet6(r1, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r1, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000000)={{0x3, 0x0, @identifier="9ee3eaf305c04cde53716d8850965980"}}) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000003800)) [ 2233.109118][ T3609] IPVS: ftp: loaded support on port[0] = 21 [ 2233.187229][ T28] audit: type=1804 audit(1593396541.076:2521): pid=3636 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1802/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 2233.311799][ T28] audit: type=1804 audit(1593396541.076:2522): pid=3630 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1802/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 2233.469224][ T3634] device veth233 entered promiscuous mode [ 2233.491586][ T3634] team0: Port device veth233 added 02:09:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffde6) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="02006dbd7000fddbdf6d6e4ad7cec9bf5fd9252000000008000100020000000c0099"], 0x28}}, 0x48000) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x2}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040014}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x1, 0x0, 0xa080}, 0x10}, 0x78) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x1040c) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005070c022d640000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0xe00, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0xb0, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @ETHTOOL_A_LINKMODES_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4004820}, 0x4080) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={0x0}}, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000001340)='~', 0x1}], 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x80}) 02:09:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000003000)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESHEX=r0], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff835}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f00000001c0)={0x7, [0x3, 0x9], 0x4}, 0x10) shutdown(0xffffffffffffffff, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000fff0) 02:09:01 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100003b00) [ 2233.688041][ T28] audit: type=1804 audit(1593396541.576:2523): pid=3673 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir572905914/syzkaller.nYoq3G/2338/cgroup.controllers" dev="sda1" ino=16367 res=1 [ 2233.796861][ T28] audit: type=1804 audit(1593396541.626:2524): pid=3680 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir572905914/syzkaller.nYoq3G/2338/memory.events" dev="sda1" ino=15729 res=1 [ 2233.931741][ T28] audit: type=1800 audit(1593396541.626:2525): pid=3680 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=15729 res=0 [ 2233.962567][T22712] tipc: TX() has been purged, node left! 02:09:03 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 02:09:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:03 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) setsockopt$CAIFSO_LINK_SELECT(r4, 0x116, 0x7f, &(0x7f0000000300)=0x4, 0x4) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0xbc, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4baf}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4e28}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x93c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5bd0df3d}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3532}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x40011) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 02:09:03 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) splice(r3, 0x0, r2, &(0x7f0000000580), 0x6b37, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) openat$cgroup(r1, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) splice(r7, 0x0, r6, &(0x7f0000000580)=0xfffffffffffffffc, 0x6b33, 0x1) ioctl$int_out(r6, 0x2, &(0x7f0000000200)) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000000c0)={r5, @in={{0x2, 0x4e21, @broadcast}}}, 0x84) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) 02:09:03 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100003c00) 02:09:03 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x1}, 0xc) getsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xcb, &(0x7f0000000000), 0x3) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) [ 2235.673653][ T3709] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2235.690183][ T3708] IPVS: ftp: loaded support on port[0] = 21 [ 2235.697074][ T3706] IPVS: ftp: loaded support on port[0] = 21 [ 2235.736090][ T3710] IPVS: ftp: loaded support on port[0] = 21 [ 2235.789543][ T3715] device veth235 entered promiscuous mode [ 2235.813790][ T3715] team0: Port device veth235 added [ 2235.868044][ T3710] virt_wifi0 speed is unknown, defaulting to 1000 02:09:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:04 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100003d00) [ 2236.140341][ T3731] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2236.271117][ T3732] device veth237 entered promiscuous mode [ 2236.304270][ T3732] team0: Port device veth237 added 02:09:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2236.622538][ T3745] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2236.707287][ T3751] device veth239 entered promiscuous mode [ 2236.744606][ T3751] team0: Port device veth239 added [ 2236.761619][ T3748] IPVS: Error connecting to the multicast addr 02:09:04 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100003e00) 02:09:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2236.840682][ T3714] IPVS: ftp: loaded support on port[0] = 21 02:09:04 executing program 5: pipe(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x200080c4) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000003dc0)=@ethernet={0x0, @random}, &(0x7f0000003e40)=0x80) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x944fafb69b30ee5}, 0xc, &(0x7f0000003f40)={&(0x7f0000003e80)={0x9c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="007f0000000000000025020000000c000800f4e1050000000000000c0008000000000000002000c925cdaf0afbcd3bf1faa4a758fc2f87a1433ae191b549b23b09e653c8737f83952c148d9f68ba8c95ed8a128b5fe49bb885d77c8af09f8039cfdf0b2b6741212b9b81ee222472d0b6d54ee117b4cc9dfe"], 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x48000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8943, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000380)=0x4, 0x4) [ 2237.071079][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 2237.071097][ T28] audit: type=1804 audit(1593396544.956:2532): pid=3765 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1806/cgroup.controllers" dev="sda1" ino=16383 res=1 [ 2237.176646][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2237.254401][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2237.265760][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2237.525952][ T3706] virt_wifi0 speed is unknown, defaulting to 1000 [ 2237.557315][ T3712] IPVS: ftp: loaded support on port[0] = 21 [ 2237.668435][ T28] audit: type=1804 audit(1593396545.556:2533): pid=3768 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1806/cgroup.controllers" dev="sda1" ino=16383 res=1 02:09:05 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100003f00) [ 2237.789201][ T28] audit: type=1804 audit(1593396545.556:2534): pid=3765 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1806/cgroup.controllers" dev="sda1" ino=16383 res=1 [ 2238.013707][ T28] audit: type=1804 audit(1593396545.906:2535): pid=3802 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1807/cgroup.controllers" dev="sda1" ino=16383 res=1 [ 2238.231567][ T3762] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2238.274774][ T3766] device veth241 entered promiscuous mode [ 2238.278610][ T3713] IPVS: ftp: loaded support on port[0] = 21 [ 2238.281714][ T3766] team0: Port device veth241 added 02:09:06 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100004000) [ 2238.355680][ T3708] virt_wifi0 speed is unknown, defaulting to 1000 [ 2238.624018][ T28] audit: type=1804 audit(1593396546.516:2536): pid=3845 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1808/cgroup.controllers" dev="sda1" ino=16365 res=1 [ 2238.862445][ T3714] virt_wifi0 speed is unknown, defaulting to 1000 [ 2239.192606][ T3712] virt_wifi0 speed is unknown, defaulting to 1000 [ 2239.316531][ T3713] virt_wifi0 speed is unknown, defaulting to 1000 [ 2239.482290][ T2771] tipc: TX() has been purged, node left! 02:09:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x17c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x45}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xffffffff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7fff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x15}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x98, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3ff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}}, {0x14, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xf, 0x1a, 'tunnel_key\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}]}, @IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_batadv\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_hsr\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3f}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40080}, 0x40010) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r2, 0x0, 0x100000001) sendto$inet6(r2, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r2, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(gcm(des-generic))\x00'}, 0x58) 02:09:11 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffff}) pwrite64(r3, &(0x7f0000000200)="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", 0x200, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r4 = accept(r0, &(0x7f0000000180)=@ax25={{}, [@netrom, @netrom, @rose, @netrom, @remote, @null, @netrom, @netrom]}, &(0x7f0000000100)=0x80) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r5, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)={0x444, 0x3f4, 0x800, 0x70bd2b, 0x25dfdbfc, {0x3, 0x0, 0x3b, [0x3, 0x8001, 0x6, 0x3, 0x800, 0x5, 0x400, 0x2, 0x9, 0x8, 0x53, 0x3, 0x80000000, 0x81, 0xc000000, 0x1, 0xd1, 0x9aa, 0x10001, 0xc00, 0x2, 0x4, 0x72ac, 0x100, 0x3, 0x7fffffff, 0x6, 0xc4, 0x1000, 0x101, 0x7fffffff, 0x8, 0x7fffffff, 0x4, 0x53, 0x3, 0x8, 0x2a3b, 0x3f, 0x7, 0x8, 0x3, 0x6, 0x5, 0x3f0, 0x10001, 0x10001, 0x0, 0x0, 0x200, 0x1, 0x3f, 0x4c3a, 0x6, 0x2, 0x2c, 0x401, 0x5, 0x6, 0x20, 0x7fff, 0x7ff, 0x2, 0x80000001], [0x81, 0x6, 0x9, 0x1679, 0xffffffff, 0x80, 0xd6, 0x101, 0x5, 0x1ff, 0x5da6, 0x9, 0x0, 0x791, 0x7, 0x9, 0x0, 0x5, 0x7f, 0x5, 0x7, 0x5, 0x1f, 0x7f, 0x9, 0x1f, 0x7, 0x5d19bb62, 0x3, 0x8, 0x4178, 0x2e, 0x9, 0x2, 0x2d8d, 0x7fff, 0x0, 0x0, 0x8, 0x8, 0x5, 0x9, 0x5d60, 0x3f, 0x9, 0x20, 0x2, 0x1ff, 0x10000, 0x6, 0x401, 0x5, 0x7fffffff, 0x10000, 0x20a, 0x9dd1, 0x1, 0xfffffffc, 0x8, 0x1, 0x7, 0x6, 0x7, 0x2], [0x6, 0x1, 0x3, 0x6, 0x34, 0x2e9fe2a1, 0x80, 0x1, 0x40000, 0xdc, 0x3, 0x9, 0xbaf1, 0x7fffffff, 0x3, 0x80, 0xfffffffc, 0x7, 0x60000, 0x8, 0x200, 0x4, 0x5, 0x4, 0x5, 0xffffffff, 0x80000000, 0x5, 0xffffff42, 0xd4, 0x5, 0x9, 0x8, 0x200, 0x6a, 0x0, 0x7, 0x6, 0x20, 0x6, 0x100000, 0x3f, 0x7, 0x1, 0x55c, 0x8, 0x80, 0x4, 0x7, 0x0, 0xc, 0x8, 0x9, 0x9, 0xcfbc, 0x9, 0x0, 0x6f, 0x1, 0x5, 0x50, 0x6, 0x7fffffff], [0x7fff, 0x5, 0x9, 0x8000, 0x3ff, 0x400, 0x2, 0x80000000, 0x8, 0x6, 0x40, 0x27, 0x20, 0x6198, 0xc3c, 0x6, 0xfffffffe, 0x9, 0x9, 0x3, 0x2, 0x9, 0xffff0001, 0xfa39, 0xfffffffa, 0x101, 0x100, 0x1, 0x400, 0x2, 0x9, 0x9, 0x800, 0x10001, 0x10000, 0x7fffffff, 0xfffffff9, 0x6, 0x7fff, 0xe94, 0x5, 0x0, 0x4, 0x100, 0x6, 0x10001, 0xa279, 0x9, 0x80000001, 0x8, 0x9, 0x8001, 0x10000000, 0x80000000, 0x3ff, 0x1, 0x4, 0x5, 0x7f, 0x9, 0x0, 0xb86, 0x0, 0x8], 0x22, ['$\x00', 'ip6erspan0\x00', '^/@\\\'&\x00', 'ip6erspan0\x00', '(\x00', '\x00']}, ["", "", "", "", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000400)={{0x2, 0x4e23, @broadcast}, {0x306, @multicast}, 0x44, {0x2, 0x4e21, @remote}, 'ip6erspan0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 02:09:11 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100006000) 02:09:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:11 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) 02:09:11 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r2, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) write$binfmt_script(r0, 0x0, 0x1) sendfile(r0, r1, 0x0, 0xf03b0000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x82, &(0x7f0000000340)={r5}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r5, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000000)={r5, 0x26, "55a4a9e0024dbc2aa19a46ab9b854e952722766390ebd6682ff55990d9cda6a959c179e78c1d"}, &(0x7f0000000080)=0x2e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 02:09:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00', 0x100}) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000000000000000", @ANYRES32], 0x48}}, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @remote}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) write(r2, &(0x7f0000000140)="e15092a1249c4cc54546a1573b78fe10a70743940ffb61ef66bd2bf0855e844d2a50ef9988e906260608dd4864d63b4e1b8bf6272356877ecdcd049c289b27cd9bc65967b3f73979fa6a722b074e08091e78c01f1724ac0767d0b8535f71f1266ff72012aa2932a45cc987f08253dfee522276fd3234c42b92094a3840de723c347241d66677175b2bb55d82fecf", 0x8e) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f00000000c0), 0x10) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0000010100000002"], 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) bind$pptp(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x44, 0x0, 0x1, 0x0, 0x0, {0x21}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xf4, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xffffffff}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf979}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7eed}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x809}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000080}, 0x50) socket(0x0, 0x0, 0x0) [ 2244.031520][ T3981] device lo entered promiscuous mode 02:09:12 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x82, &(0x7f0000000340)={r3}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r3, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000300)={0x4, 0x8200, 0x9, 0x9, r3}, 0x10) unshare(0x40000000) r4 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000200), 0x8) [ 2244.108199][ T28] audit: type=1804 audit(1593396551.997:2537): pid=3989 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir572905914/syzkaller.nYoq3G/2340/memory.events" dev="sda1" ino=16365 res=1 [ 2244.269032][ T28] audit: type=1800 audit(1593396551.997:2538): pid=3989 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16365 res=0 [ 2244.422504][ T4003] IPVS: ftp: loaded support on port[0] = 21 [ 2244.443025][ T3984] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:12 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r2, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) write$binfmt_script(r0, 0x0, 0x1) sendfile(r0, r1, 0x0, 0xf03b0000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x82, &(0x7f0000000340)={r5}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r5, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000000)={r5, 0x26, "55a4a9e0024dbc2aa19a46ab9b854e952722766390ebd6682ff55990d9cda6a959c179e78c1d"}, &(0x7f0000000080)=0x2e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 2244.460950][ T28] audit: type=1804 audit(1593396551.997:2539): pid=3989 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir572905914/syzkaller.nYoq3G/2340/memory.events" dev="sda1" ino=16365 res=1 [ 2244.575861][ T3990] device veth243 entered promiscuous mode [ 2244.601094][ T3990] team0: Port device veth243 added 02:09:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}]}]}, 0x3c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000080)={'bridge_slave_0\x00', @random="37c056e940d7"}) [ 2244.636142][ T28] audit: type=1804 audit(1593396551.997:2540): pid=3989 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir572905914/syzkaller.nYoq3G/2340/memory.events" dev="sda1" ino=16365 res=1 [ 2244.671104][ T4003] virt_wifi0 speed is unknown, defaulting to 1000 02:09:12 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100007900) 02:09:12 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2244.849404][ T28] audit: type=1804 audit(1593396552.047:2541): pid=3994 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1809/cgroup.controllers" dev="sda1" ino=16374 res=1 02:09:12 executing program 5: sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xfca) 02:09:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) sendto$inet6(r2, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r2, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/177, 0xb1}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) getsockname$netrom(r4, &(0x7f0000000200)={{0x3, @rose}, [@default, @bcast, @null, @rose, @default, @bcast, @rose, @rose]}, &(0x7f0000000280)=0x48) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @empty}, {0x2, 0x4e24, @remote}, 0x40, 0x0, 0x0, 0x0, 0x5d, &(0x7f0000000140)='bridge_slave_0\x00', 0xffff, 0x6, 0x7}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="06007c15", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000100)=0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r1, 0x0, 0xffffffff) [ 2245.053387][ T4025] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2245.060581][ T28] audit: type=1804 audit(1593396552.137:2542): pid=3997 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir572905914/syzkaller.nYoq3G/2340/memory.events" dev="sda1" ino=16365 res=1 [ 2245.209605][ T28] audit: type=1804 audit(1593396552.507:2543): pid=3991 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1809/cgroup.controllers" dev="sda1" ino=16374 res=1 02:09:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f02b57cdcde0000000001000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, r4, 0x300, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x44004) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0xfffc}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2fc0}}]}]}}]}, 0x5c}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x492492492492570, 0x0) 02:09:13 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2245.368472][ T4035] IPVS: ftp: loaded support on port[0] = 21 [ 2245.424277][ T28] audit: type=1804 audit(1593396552.797:2544): pid=3997 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir572905914/syzkaller.nYoq3G/2340/memory.events" dev="sda1" ino=16365 res=1 02:09:13 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140)=0xff, 0x4) sendto$inet6(r3, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r3, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=r5], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x47fe5, 0x0) 02:09:13 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000d80f) [ 2245.523901][ T4046] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:09:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) sendto$inet6(r1, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r1, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) r5 = openat$cgroup_ro(r3, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000100)='pids.current\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601033b0e0000a4df00000052e9000500010007"], 0x1}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) [ 2245.635183][ T28] audit: type=1804 audit(1593396552.807:2545): pid=4018 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir572905914/syzkaller.nYoq3G/2340/memory.events" dev="sda1" ino=16365 res=1 [ 2245.659421][ T4049] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2245.746283][ T4051] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2245.790710][ T28] audit: type=1804 audit(1593396552.867:2546): pid=3997 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir572905914/syzkaller.nYoq3G/2340/memory.events" dev="sda1" ino=16365 res=1 [ 2245.850938][ T4035] virt_wifi0 speed is unknown, defaulting to 1000 [ 2245.874282][ T2771] tipc: TX() has been purged, node left! 02:09:16 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') syz_genetlink_get_family_id$fou(0x0) syz_genetlink_get_family_id$ipvs(0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0xffffffff}, @mss, @mss={0x2, 0x3df1}, @sack_perm], 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 02:09:16 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:16 executing program 1: socket(0x40000000015, 0x805, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={0x2}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$kcm(0x10, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x12) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00'}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYRES32, @ANYRES16], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000040)=ANY=[@ANYBLOB="46539200", @ANYRES16=r3, @ANYBLOB="ff830a00040016000a0ca8db670dbf6f1e93b64a6e37ca3bcce3d9d809b123620700", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:09:16 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000ef00) 02:09:16 executing program 2: unshare(0x66000480) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @broadcast}, 0x16, {0x2, 0x0, @local}, 'tunl0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) sendto$inet6(r1, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r1, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x43}, 0x10) sendmmsg$alg(r3, &(0x7f00000000c0), 0x49249249249265a, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012abd7000fddbdf251400000044000980080001000000090008000100020000000800020051ab00000800626052a1000008000100ffffff7f0800010001000000080002000100000008000200ff7f00000c000980080001000900000010000680080001000600000004000200"], 0x74}, 0x1, 0x0, 0x0, 0x48004}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe8, r4, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff1eaf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xad}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0xe8}}, 0x50) 02:09:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000d40)=ANY=[@ANYBLOB="e40200002000040026bd7000fedbdf253c000000ff020000000000000000000000000001000000000000000000000000000000004e2100004e2380010a0080202b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000ef000000000000000000000000000004d43200000000000000000000000000ffff000000070200000000000000ff0f00000000000001800000000000008809000000000000e5"], 0x6}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a5900df00000000e9000500010007"], 0x1}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x20045890, &(0x7f0000000040)={0xa, 0x4e23, 0x10004, @ipv4={[], [], @multicast2}, 0x2}, 0xfffffffffffffe61) recvmsg$can_raw(r2, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='syzkaller1\x00', r0}, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}], 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r1, 0x0, 0x100000001) recvmmsg(r5, &(0x7f0000000e00), 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000440)={{0x2, 0x4e21, @multicast1}, {0x1, @local}, 0xc, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'syzkaller1\x00'}) [ 2248.674103][ T4124] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2248.694777][ T2771] tipc: TX() has been purged, node left! [ 2248.715276][ T4125] IPVS: ftp: loaded support on port[0] = 21 [ 2248.831921][ T4125] virt_wifi0 speed is unknown, defaulting to 1000 02:09:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r2, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:17 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000180)='l', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x3, 0x3ff, 0x8001, 0x6, 0x0, 0xffffffffffffffff, 0x20, [], 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x40) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x4, 0x7ba8706c, 0x3, 0xfffffffffffff8c8}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) r7 = socket(0x2, 0x6, 0x0) connect$can_j1939(r7, &(0x7f0000000d40), 0x18) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0000000000000000000000000a3600000062000200"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 02:09:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r2, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:17 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a32000000000800410072786500140033006c6f00000000000000000000000000002f967bae0444ade41831a464f9b20cbd37cdb673c19c98dfd8bd6d9dc493a0f4409424be167fe4c36837c4cd2ddb6a562e845f815bb62e879963b7"], 0x38}, 0x1, 0xa800}, 0x0) [ 2249.219226][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 2249.219242][ T28] audit: type=1804 audit(1593396557.107:2566): pid=4134 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1812/cgroup.controllers" dev="sda1" ino=16369 res=1 02:09:17 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000ef18) [ 2249.343953][ T4154] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2249.364600][ T28] audit: type=1804 audit(1593396557.107:2567): pid=4127 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1812/cgroup.controllers" dev="sda1" ino=16369 res=1 02:09:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r2, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2249.443462][ T4154] qfq: no options [ 2249.459439][ T4160] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2249.564929][ T28] audit: type=1804 audit(1593396557.457:2568): pid=4166 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1813/cgroup.controllers" dev="sda1" ino=15779 res=1 02:09:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2249.734084][ T4129] IPVS: ftp: loaded support on port[0] = 21 [ 2249.744682][ T4164] lo speed is unknown, defaulting to 1000 [ 2249.768916][ T28] audit: type=1804 audit(1593396557.657:2569): pid=4171 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1813/cgroup.controllers" dev="sda1" ino=15779 res=1 02:09:17 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303}, "d26d9b2d04ba48cf", "f5cb8bddb9523a335a1d959ab863b0f2cdb267b6081876776ad1911a017e809e", "23220b1d", "1ada36380927766c"}, 0x38) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/87, 0x57}], 0x1, &(0x7f0000000300)=""/52, 0x34}, 0x40010040) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000000c0)={0x20}) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f00000003c0)={0x0, 0x100000000, 0x1}) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x5c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFACCT_FILTER={0x4}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x10000}, @NFACCT_FLAGS={0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008082}, 0x5) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4008000) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x80, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x32, 0x7, 'system_u:object_r:systemd_logind_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x9f) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="84", 0x1}], 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 02:09:17 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000f000) [ 2249.837607][ T4129] virt_wifi0 speed is unknown, defaulting to 1000 [ 2249.841940][ T4164] lo speed is unknown, defaulting to 1000 [ 2249.917025][ T4164] lo speed is unknown, defaulting to 1000 [ 2249.924822][ T4183] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2249.953739][ T28] audit: type=1804 audit(1593396557.838:2570): pid=4188 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1675/memory.events" dev="sda1" ino=15939 res=1 [ 2250.053804][ T4154] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2250.082105][ T4154] qfq: no options [ 2250.106533][ T4160] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2250.114689][ T28] audit: type=1800 audit(1593396557.848:2571): pid=4188 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=15939 res=0 [ 2250.162389][ T4160] qfq: no options [ 2250.164258][ T28] audit: type=1804 audit(1593396557.848:2572): pid=4188 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1675/memory.events" dev="sda1" ino=15939 res=1 02:09:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc(0x0) socket(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, r5, 0x23f, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) sendfile(r3, r2, 0x0, 0x100000001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x100000001) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 2250.265725][ T28] audit: type=1804 audit(1593396557.988:2573): pid=4197 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1814/cgroup.controllers" dev="sda1" ino=15941 res=1 [ 2250.459523][ T28] audit: type=1800 audit(1593396558.048:2574): pid=4188 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=15939 res=0 [ 2250.520713][ T28] audit: type=1804 audit(1593396558.328:2575): pid=4205 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1814/cgroup.controllers" dev="sda1" ino=15941 res=1 [ 2250.963128][ T4164] infiniband syz2: set active [ 2250.973500][T21564] lo speed is unknown, defaulting to 1000 [ 2250.986793][ T4164] infiniband syz2: added lo [ 2251.015986][ T4164] infiniband syz2: Couldn't open port 1 [ 2251.131045][ T4164] RDS/IB: syz2: added [ 2251.159263][ T4164] smc: adding ib device syz2 with port count 1 [ 2251.169024][ T4164] smc: ib device syz2 port 1 has pnetid [ 2251.176471][T29540] lo speed is unknown, defaulting to 1000 [ 2251.188469][ T4164] lo speed is unknown, defaulting to 1000 02:09:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x100000001) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r0, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f00000005c0)=""/241, &(0x7f0000000100)=0xf1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="0800020000000800fdffb4798f0000000055f407761f0300000000000800d3007f000001080005000000000008ea92648a00e100000000000800060000000000080002"], 0xa0}}, 0x0) r5 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 02:09:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:19 executing program 5: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0xc) mmap(&(0x7f000018e000/0x4000)=nil, 0x4000, 0x3, 0x10, r0, 0x0) socket$inet6(0xa, 0x80003, 0x20) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x1f, 0x80000, 0x8000001) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_generic(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[]}, 0x1, 0x0, 0x0, 0x840}, 0x804) r3 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000dd7487336f44a8c87f5fce6ea161cd5763fb846624000000006478bf592a4dc9a737193d7f5e06003ee82b763ea5c90d84de08dad8683cefba31288a37ad576a6173089a47260ba0618e8455c094b723b93e2325763ee500af32c5ed29ddb0c811d327c02b0e03764f8b5794d052d3c9bfa4fc948f405cb5032054eeb76458c341b1a79b84c6a941848d8ff47721f21270c1935f3275c4711dc4f175d43836a52bbf36236fe6eeed12a4f369a7b038179a4fc03c8e4a3505953817597812277942a7e04197a259adff23a09181cee261392133a7fcf33c94ea804b48dfba3432808f44f8b6b19929e76e552324fd1c02ca546df393c128dd101e46ab6a671e13e596bf6078ee875be01ba6b8d074cba64063cc9d86fc40cd9b539505b3b5dd41dd888d51498435801afc4735feaccc3fb07191fa9a4d3d76240208285f9f38fe5c5b011023c95a1396567e95e27aa574a64c88c31beb7098882456000000000000000000", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000040)={r4, 0xfffc}, 0x8b5) r5 = socket(0x0, 0x1, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f00000005c0)=[@in6={0xa, 0x4e22, 0x3, @local, 0x8}, @in6={0xa, 0x4e23, 0x4, @remote, 0xfb26}], 0x38) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000580)=0x4) sendmmsg$inet_sctp(r5, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="200000000000000084000000020000000000040005000000d2e394294fba35e6cf08000000588f00000001a8d5e3f3ad1e7f4c0cb4c96ffe2269207280e8a43f6a59596c759543c8e832e3caf2b665bb414653b45f84c799972fcb5670f73815bb6000bf764b32b2c531e18c0e94ff4d860fae174f1964ab19e561bb2e9772dedf42105c439b1548cc46b02e66c398c45fc127bc9273621625d40788c7b1e97a8762d683e2519e1c32b2f93f4940fa4080f6f4f9", @ANYRES32=0x0], 0x2f, 0x8800}], 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) r8 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r8, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000180)={r9, 0x8a69, 0x101}, 0x7) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r10, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000500)={r3}) socket(0x1d, 0x33d4c1c25b37f255, 0x0) setsockopt$bt_BT_SNDMTU(r11, 0x112, 0xc, &(0x7f0000000100)=0x3ff, 0x2) socket$bt_rfcomm(0x1f, 0x1, 0x3) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) ioctl(r13, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl(r13, 0x1000008912, &(0x7f0000000800)="08b4b78916269f0c3300000000050db5055e0bcfe8478071eb66a96dee29940ffcb3d569c1d73fd0d741084a29fc1c3ca733ff72b2a8067a89a039c07b35ee4a42ef4d84ffd2fefc0c1389598000155d0d5f213aae3fb6b1ad1dbe9263cc80c35b40ffa29da3310ea4ebc5993a52fcc4a13abe75f8c9b9") ioctl(r12, 0x7c0, &(0x7f0000000440)="0800b5055e0bcfe87b2071") r14 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r14, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r14, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x0, 0x4000004, @ipv4={[], [], @multicast2}, 0x1280}, {0xa, 0x6624, 0x1ff, @mcast1, 0x6}, 0x0, [0x9, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x1000, 0xffffffff]}, 0x5c) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x8, @mcast1, 0x5}}, 0x0, 0x0, 0x39, 0x0, "61d4bd123632a6131f9f6ace199c765ba294c618c19df367ca01275bb6f3d5f8d1cd837461143fb484ca6857a0027571a7464cb98a694082d2beaf0ae7577caa65089272efd0588b1f5de4e1d91c539f"}, 0xd8) setsockopt$inet6_MRT6_ADD_MFC(r14, 0x29, 0xc9, 0x0, 0x0) 02:09:19 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000f0ff) 02:09:19 executing program 0: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000100)) socket(0x10, 0x803, 0x0) socket$inet(0x10, 0x2, 0x0) socket(0x10, 0x80002, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x3, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x10) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x6, 0x7fff, 0x6, 0x7fff}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="03020000000000002c00128009000100766c616e000000001c00028006000100000e00000c0002000e0000000a0000000400038008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="cd3a04b18be5c64818a41e25d9c841d6f2d63e4144b76dd96c09"], 0x5c}}, 0x0) [ 2251.343406][ T4267] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2251.450409][ T4271] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2252.070545][ T4164] lo speed is unknown, defaulting to 1000 [ 2252.386398][ T4164] lo speed is unknown, defaulting to 1000 [ 2252.572676][ T4164] lo speed is unknown, defaulting to 1000 [ 2252.818989][ T4164] lo speed is unknown, defaulting to 1000 [ 2253.041503][ T4164] lo speed is unknown, defaulting to 1000 [ 2253.184447][ T4164] lo speed is unknown, defaulting to 1000 [ 2253.333552][ T4164] lo speed is unknown, defaulting to 1000 02:09:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x2000100, 0x8000000}) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fff}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0xc, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044000}, 0x4040000) 02:09:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x5, 0x0, 0x0, r4}}, 0x20}}, 0x0) 02:09:21 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000f100) 02:09:21 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000300)={{0x8, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 'sed\x00', 0x42, 0x3f, 0x3b}, {@private=0xa010100, 0x4e23, 0x2000, 0x4, 0x1, 0x1}}, 0x44) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) sendto$inet6(r1, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000100)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r1, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) 02:09:21 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffffffffffdb5}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000700)=[{{&(0x7f0000000180)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x6, @loopback, 0x1}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000240)="e8f86e5ed56ae1be3daaab1a062cd5b1fd7500a2de1b70ebdf0875d452b945af3ddaaef616a02c97f272f875e9cc372761a11807a2cb5a457a80d72ac807b76619439a5dbfd2eb9ce12d8d1ae3ce01182b7578e152592a27af88f8997b87834d78a526ddd3585f444b4f241126332887e95484d015eaaa0d88c6191e04d6b52d92acf8dfa499b7e2b3507c3d5a8ac2d539cbb6ad216dae96d397042cd782b4606c7361c9f798572cc95523b26355ff75dce445c52758a9c08359d0bc8d88391826ffbad8e76a71233c46fde44c12a4273d4a32d8ff428ed83538f1114510ff204ad2ceed4e401b2495adbc2ba4a9b094", 0xf0}, {&(0x7f0000000080)='P\"~', 0x3}, {&(0x7f0000000340)="a989eeacd4e01a4556d9b8203042a176f2207d7e941fcc332ee6d019bddff81ceb7891885c36b07a5894fdd7209011dcf7c688ddaad8cba0b84658b59f7567ca9f979f74c08118e6b569e809bae8786d195ba1820cf73daa089639a73eb130dfb2a95375927366202fddc36aa7d762aa8fc5bddf432009448cc9b592ab8f651687fcd22ae2e7af6896aa2c4453287309a89984bf6580ea15", 0x98}, {&(0x7f0000000400)="567bcc5082baedd0fdbfa57348989871bd29ed035935228215e5a950fdcc2b81bd7dd501eca350bfb7816e5a2b16c62ed96ef1e235e751e29d82b5139a72f194b127d6716c71e4f0daaa7e44098bd5e6e72bc2b3e8fd86b245b012cb9521cd8d53004b7b654fa9be51da52b31fb4fbb320c1b9f9ab174acc1fec7c5331249e81c60712bd2361ef6e377984804c1af57a8785d4a1098ce31d712a", 0x9a}], 0x4, &(0x7f00000004c0)=[{0x108, 0x88, 0x400, "057e53563754e3638e137b048affb26a98cb2698f33a1e0fbd4a13ea01d357de02fde03519676ba388fdefda8bcdaf7f4a4470dc21d2bcdfdb93b66a2064187624f35de3f283df56be4382d80ffce59f62094950809d4df79f98a2f4e1d2618b76cb9a2daf983a6c4117ad7e10d4d09efed8d1e8c079ebcbe8509c8c52ce9d09993221f624aaffd91cc1205111b477f2e00957afafe7db19837b79a94e0556b852b048c09251962d680a89c2e8af3e7a9d80b80fc038f75396c1954aec2a5d34f9107e3ff7eac526aa2d14d088010c1351502e986479220bc9823c527bd3d7545805a253ecfc85eb382b4e0320453c81dba0c1ca"}, {0x100, 0x192, 0x8, "81850e67b4301ef9ffa49922bf5a887662dcbbac248e78ab874bb2107d72ab5a4e525fc1060b7f51ecfdce300f1ce9802982811adb531c550cb6fabec9711ea9dc6fec70ae31a842c24ff094152a4b397ecb260d216fae71a6207aeffeb968a707df1805bb4f82556e83b376a2c3e840791e71f760276349621165f800c684e493a24afa2c510fade12aa377aebfd93cab6882d8a84de3df5ada8f71ed5adc2c2f41f7852242d3c4bb393cc5823b2ca811fab98c43afb8adfe2010c850a831f621419a1bca6d6f3f42de4a0e4b6b78a842fbac1ab72148b98e81ac7b455e935291fdabb823a45e715a096c"}], 0x208}}], 0x1, 0x80d0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@bridge_delneigh={0x30, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 2253.557119][ T4304] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2253.569552][ T4305] IPVS: set_ctl: invalid protocol: 8 172.30.1.6:20004 [ 2253.599484][ T4305] IPVS: set_ctl: invalid protocol: 8 172.30.1.6:20004 02:09:21 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES16], 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000000, 0x10, r1, 0xffffd000) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x14, &(0x7f0000004780)=ANY=[], &(0x7f0000000000)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000380)={&(0x7f0000000340), 0xc, &(0x7f0000000940)={0x0, 0x36}, 0x1, 0x0, 0x0, 0x8800}, 0x4) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000100)=0x8, &(0x7f0000000300)=0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r2, 0x0, 0x100000001) sendto$inet6(r2, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r2, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) bind$isdn(r2, &(0x7f00000001c0)={0x22, 0x6, 0x1, 0x4, 0x20}, 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x100000001) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000000506010100000c0000010900020073797a3000000000050001000400000005000100070000000900020073797a3000"/60], 0x3c}, 0x1, 0x0, 0x0, 0x4048081}, 0x44044) [ 2253.674444][ T4308] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2253.768841][ T4317] batman_adv: batadv0: Adding interface: veth198 [ 2253.783753][ T4317] batman_adv: batadv0: The MTU of interface veth198 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 02:09:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) pwrite64(r1, &(0x7f00000001c0)="ffa733715889a4f22be898c73d772398856009479da46ad5c9b561c4e6f46c8f46ca6b7fbb86bf032f", 0x29, 0x1000000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005070c022d640000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280200010076657468000000"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0xe00, 0x0, {0x0, 0x0, 0x0, r4, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000240)={&(0x7f0000000040)=@bridge_newneigh={0x1c, 0x1c, 0x200, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x0, r4, 0x20, 0x1, 0xa}}, 0x1c}}, 0x0) 02:09:21 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000f200) [ 2253.925793][ T4317] batman_adv: batadv0: Not using interface veth198 (retrying later): interface not active [ 2254.003238][ T4326] batman_adv: batadv0: Removing interface: veth198 02:09:21 executing program 5: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) r1 = socket(0x0, 0x80000, 0xffffffff) r2 = gettid() r3 = getuid() r4 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={r2, r3, r4}, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfb, {0x1, 0x0, 0xa}, [@typed={0xb, 0x3b, 0x0, 0x0, @str='vxcan0\x00'}, @typed={0x4, 0x93}, @typed={0x8, 0x7c, 0x0, 0x0, @uid=r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) getsockname$packet(r1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) getgid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000008740)={'vxcan0\x00'}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x2000) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000008840)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_STA_WME_MAX_SP={0x1e, 0x2, "3f56b2f8936db6fbb170d2f46e878859308760cb90fd51534eae"}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x4}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc008}, 0x4000000) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_sfeatures={0x3b, 0x7, [{0x5, 0x3}, {0x20, 0x4}, {0x3, 0x2}, {0x1, 0x7}, {0x7, 0xda6}, {0x3, 0x4}, {0x1, 0x3}]}}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000000c0)=[@window], 0x1) 02:09:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:22 executing program 0: socket(0x40000000015, 0x805, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') bind(r1, &(0x7f0000000280)=@llc={0x1a, 0x8, 0x43, 0x7, 0x7, 0xff, @local}, 0x80) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$unix(r1, &(0x7f00000000c0)=""/236, 0xec, 0x10001, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32=r6], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 2254.098699][ T4336] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2254.135616][ T4308] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 02:09:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e6000039bc166e3623d652957ee09924c55bfe001c0012000cf30000626f6e64000000000c0002000800030006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x2c}}, 0x0) [ 2254.253004][ T4317] batman_adv: batadv0: Adding interface: veth198 [ 2254.259387][ T4317] batman_adv: batadv0: The MTU of interface veth198 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2254.351498][ T2771] tipc: TX() has been purged, node left! [ 2254.358954][ T2771] tipc: TX() has been purged, node left! [ 2254.385459][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 2254.385475][ T28] audit: type=1804 audit(1593396562.278:2587): pid=4359 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1679/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 2254.399434][ T4317] batman_adv: batadv0: Not using interface veth198 (retrying later): interface not active [ 2254.460927][ T4351] batman_adv: batadv0: Removing interface: veth198 [ 2254.512048][ T4357] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2254.559688][ T4365] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:09:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2254.618394][ T4365] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:09:22 executing program 2: accept$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose}, [@rose, @remote, @null, @bcast, @remote, @bcast, @remote, @default]}, &(0x7f0000000100)=0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x100000001) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r0, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) r2 = openat$cgroup_ro(r0, &(0x7f0000002f00)='cpuacct.stat\x00', 0x0, 0x0) getsockname$ax25(r2, &(0x7f0000000140)={{}, [@default, @default, @rose, @netrom, @rose, @netrom, @netrom, @default]}, &(0x7f00000001c0)=0x48) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r3, &(0x7f0000000000)=@rc={0x1f, @any, 0x5}, 0x80) [ 2254.696264][ T28] audit: type=1804 audit(1593396562.588:2588): pid=4344 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1817/cgroup.controllers" dev="sda1" ino=16379 res=1 02:09:22 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, &(0x7f0000000000)="a20a99cb03d860b0de22e50f2ec9b4712d8c29dc8caff6713db42d76fb1940cf3ae7b6aa61f6d428acee29bcee5a1f1d400d90f5526df99d1e1ce4558e69937a8bc759c4c7a2e0d8c28fe1169248437ad0f428ea6354c61b8bc5b72a66d8e796d41d65f89f62281ee7db7c5fed5c74f4a4020b1456ae5500640da54719d8556f67adaa6cce415b630a6b7722fcea28062d7cc1ebaf4137026c17cf49e0afeacee02230502e2041b155d033e5409611b7ea82b09d3490a525748170e9e62a4db86c9ee642ee65840e79d72c72a6c150ca", &(0x7f0000000100)=""/128, 0x4}, 0x20) 02:09:22 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000fe01) 02:09:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x0, 0x1f4, @dev}, 0x1c) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="e6080000825b40e8cb6f458c46d9dec1c357b7d6ac548b959846cebfbb", @ANYRES16=r2, @ANYBLOB="8902eee2aad7000000000100000006000a004e220000080008"], 0x24}}, 0x0) r3 = socket(0x10, 0x3, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r5, 0x502, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x68}, 0x1, 0x0, 0x0, 0x40011}, 0x40005) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x8000) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) sendfile(r3, r1, 0x0, 0x100000009) [ 2254.915924][ T4393] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:22 executing program 5: bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) sendto$inet6(r1, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r2, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/171, 0xab}, {&(0x7f00000003c0)=""/61, 0x3d}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendto$inet6(r1, &(0x7f0000000200)='-', 0x1, 0x20044080, 0x0, 0x0) [ 2255.007316][ T28] audit: type=1804 audit(1593396562.898:2589): pid=4391 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir572905914/syzkaller.nYoq3G/2348/cgroup.controllers" dev="sda1" ino=16374 res=1 [ 2255.108368][ T28] audit: type=1804 audit(1593396562.998:2590): pid=4398 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1818/cgroup.controllers" dev="sda1" ino=16381 res=1 02:09:23 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010800000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in, 0x0, 0x0, 0xfffffffe, 0x0, 0x11}, 0x98) sendmmsg$inet6(r1, &(0x7f000000a840)=[{{&(0x7f0000002840)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c, &(0x7f0000002a80)=[{&(0x7f0000002880)='*', 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x24549}], 0x3b7}}], 0x2, 0x20000040) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x24, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x40c40d5) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x40110}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x8000) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/81, 0x3000, 0x1000, 0x680e, 0x3}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) sendto$inet6(r4, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r4, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) accept4$llc(r6, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x10, 0x800) 02:09:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2255.307466][ T4413] IPVS: ftp: loaded support on port[0] = 21 [ 2255.314151][ T4414] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2255.414440][ T4413] virt_wifi0 speed is unknown, defaulting to 1000 02:09:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2255.585826][ T28] audit: type=1804 audit(1593396563.478:2591): pid=4406 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1818/cgroup.controllers" dev="sda1" ino=16381 res=1 02:09:23 executing program 1: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2376]}, 0x9c0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x44, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_DEBUG={0x8}]}, 0x44}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="020326bd703c66f8a225030700000008000000000800050021ae9f050003000000004400001900ac1414aa"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000f00)='cgroup.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0xc) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000003c0)={0xfffffffa, 0xa3, 0x5, 0xe9ef, 0x52cf, 0x401}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000fc0), &(0x7f0000001000)=0x28) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r5 = accept4(r4, &(0x7f0000000280)=@nl, &(0x7f0000000000)=0x80, 0x80800) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f40)={&(0x7f0000001100)=ANY=[@ANYBLOB="6c000000010701020000000000000000070000010c000640000000000000800008000540000000002c0007800800024000000fff0800024000000008080012400000000908002d3523d317f975fc9800000000000000010073797a31000000000900010073797a3000000000e8b8e46d17517b3b3f5a366eab34d8f5ef8f21201a049612aae28b8c744a38", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x81) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="b19462c33f5d8115ec7c43e324cb91c04ab79a9d9abe98033e3295eebff7f4b93ac52a7368d1be44dc0e346c21e220fa44fde347ffb59892f2c7713ce44d0acec8d57d0ac439e24d4c7e6160356492dc21a4f94e67be791ec34221e762cd0f50ebc08b5a9a3d7b2c10a61673255ee1dd14e0bf57bf9afebd301941e2b3259c1506b98db698f5c9b319958d545d4e4d1db301dee1263e963665de6964774a1a8c82bda902ab3a57a6cb5fec6f469af8ca336c8e52ba6aae6eda763e8e5cca04f77089bb16d1cd0f75f6fe2a4f2f8f875d8be12571eec5a56f", 0xd8}, {&(0x7f00000005c0)="357664a6eb136a8c093aeda6ca78c84b1cc4ac9bb07939d040b691d81fe0f6c040df718502a23459a7c34ddf57b5325b6d8391372a758d24b206927b31fab6942f2c896931cc3c319c3633ad5cfe171a2f68d83077637bb27a168f7117", 0x5d}, {&(0x7f0000000700)="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", 0x78d}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0) 02:09:23 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000ff01) [ 2255.741331][ T28] audit: type=1804 audit(1593396563.478:2592): pid=4398 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1818/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 2255.769305][ T4433] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:23 executing program 2: unshare(0x40000000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005070c022d640000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000010000108000e00"/20, @ANYRES32=r1, @ANYBLOB="0f0000efd0c17e863ee708cd0d06e4941cba8e625fe46cc575ccc2f118d0b5e2ffffffff07001c00ee0000008c445085083f71074157b0e963fdbf232ec2984c59e80dd5404554c1ff2af087cc4eb05a6d51d5db57acfc815062b07f8f08be81b54599316f430d55a4955a9686"], 0x28}}, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000d00)={0x510, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_OURS={0x12c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5, 0x5, "dc"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd3}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x9d, 0x4, "fc06b45c94d8419a997902e3e4d6ccf675cd3496ba2500ec005b7e3608b18807b65bc6bc6cf7693827765aae816cbc8221ec4be17698d108a8f3ec6011c67be25a0c44cc2043459e05966bd0a84f70374dcc816d0f53fa0041ce4a9f02144c733ef4a0a8b0a67d314345c23c725759b27a4e6032057cace4a71973f69b6697c5af15114ff713742a84637f5c1eea047d666f19a1f39a1d9c69"}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'cpu.stat\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'cpu.stat\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'cpu.stat\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}]}]}]}, @ETHTOOL_A_LINKMODES_OURS={0x338, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x138, 0x3, 0x0, 0x1, [{0xdc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9e, 0x2, '#-.@{\xd2\x00\x92\xea\xf3\xcb!E\xf7\f\xd6c\xc4d\x92\xd7U>Rp6Viq\xce\x86\x00{JP\xdcWt\x8dr!eZJ\xba+\xad\xbe\xbb\fQ\xaf\x1c\xde\xcf\xd7\x92y\x98\xf0W\x9b\xf5\xc1\x95G\xf9\xee\x1c\xfcVV\x85\xd2\xfd\xef\xb1\xf1\xaeAJ\xb1\xdd\x10H\a\xf5\x16\x90\xf1\xd7\x9f\n\xc5\n=\xdb\f\xc4\x1e\x00\xa7\xa9\x91]\x9fL\x88\xd7\x1fF$qd\x19\xb6v\xa0)Lt\xcc)\xad\x822\x9f\x9e\x03\xcd\x1b_[\x16\xdf\a@\xba\x87]\xac~\xa0I=n\xa8\x1e\x12\x1dIL\xd2\xee'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^%-,]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'cpu.stat\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'cpu.stat\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '[&^\xaf^-.{@[^)$@*\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[@@\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x9, 0x5, "e63e7c2aa0"}, @ETHTOOL_A_BITSET_VALUE={0x6e, 0x4, "f0ff1bdd57406dd0ad5b2e7a459fe749b7c8e1fb13fbb5303976c29cf86ae9da2b92555504d3eb78bfef6cb7fe2a83a01175ab779302c7d9953ccc170e65e5e3a51276398f3f9aaa143c03e907db1f9b1270efd8fa8f06f65a684ff4762e5060d0557281f3d224599054"}, @ETHTOOL_A_BITSET_VALUE={0x16, 0x4, "0ba1586fafd190e64eefd1cf3e16cf91d9d7"}, @ETHTOOL_A_BITSET_VALUE={0x9a, 0x4, "19df2a4f4ee6e55beb3f046ec11628a1065fec5944e781c9f4b80c26c6ced6fc865a54261d9aeab0540cc71621977b2e3351976d56d204d2a62c7d02e802c815a404708592b966d9da20f7a7cb117b72915404eefe0ce6f0a320458ca5b6a949dc57196c5e4a64b1a4664be1ac0ac87fb693d0fbe92ea53e1361d8b6bf46d5acb5c49ddc5280e371e4a205d68c33a1684e49d4b19fc1"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',--\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'cpu.stat\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'cpu.stat\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x264}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'cpu.stat\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'cpu.stat\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ')[$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffce5}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'cpu.stat\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x510}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r6, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x208000}, 0x20) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) [ 2255.873680][ T4438] device veth257 entered promiscuous mode [ 2255.891297][ T4438] team0: Port device veth257 added [ 2255.913393][ T28] audit: type=1804 audit(1593396563.808:2593): pid=4439 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1819/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 2255.962013][ T4442] device veth257 left promiscuous mode [ 2256.010851][ T4445] IPVS: ftp: loaded support on port[0] = 21 02:09:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f00000003c0)=""/150, 0x0, 0x96}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r8, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r1, @ANYRESDEC, @ANYRES32=r7], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010400000000c70a3b9b00000000", @ANYRES32=r7], 0x20}}, 0x0) [ 2256.373262][ T4415] sctp: Trying to GSO but underlying device doesn't support it. [ 2256.457056][ T4453] IPVS: ftp: loaded support on port[0] = 21 [ 2256.493996][ T28] audit: type=1804 audit(1593396564.388:2594): pid=4443 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1819/cgroup.controllers" dev="sda1" ino=16377 res=1 02:09:24 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000ff0f) [ 2256.636262][ T4442] team0: Port device veth257 removed 02:09:24 executing program 1: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000ff01) [ 2256.691360][ T4454] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 02:09:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2256.785650][ T4455] bridge3: port 1(syz_tun) entered blocking state [ 2256.797268][ T4455] bridge3: port 1(syz_tun) entered disabled state [ 2256.852703][ T4455] device syz_tun entered promiscuous mode [ 2256.892846][ T4456] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2256.896995][ T28] audit: type=1804 audit(1593396564.788:2595): pid=4468 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1820/cgroup.controllers" dev="sda1" ino=16367 res=1 [ 2256.931845][ T4458] device syz_tun left promiscuous mode [ 2256.939824][ T4458] bridge3: port 1(syz_tun) entered disabled state [ 2256.985181][ T4448] IPVS: ftp: loaded support on port[0] = 21 [ 2257.122898][ T4413] lo speed is unknown, defaulting to 1000 [ 2257.126484][ T4445] virt_wifi0 speed is unknown, defaulting to 1000 [ 2257.128925][ T4474] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2257.173171][ T28] audit: type=1804 audit(1593396565.068:2596): pid=4473 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir572905914/syzkaller.nYoq3G/2350/cgroup.controllers" dev="sda1" ino=16379 res=1 [ 2257.205154][ T4475] device veth259 entered promiscuous mode [ 2257.242707][ T4475] team0: Port device veth259 added [ 2257.293429][ T4478] device veth259 left promiscuous mode 02:09:25 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000fff0) 02:09:25 executing program 1: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000ff01) [ 2257.943754][ T4478] team0: Port device veth259 removed [ 2257.987545][ T4456] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2258.072516][ T4453] virt_wifi0 speed is unknown, defaulting to 1000 [ 2258.114746][ T4445] lo speed is unknown, defaulting to 1000 [ 2258.739841][ T4448] virt_wifi0 speed is unknown, defaulting to 1000 [ 2258.760008][ T4453] lo speed is unknown, defaulting to 1000 [ 2259.192618][ T4448] lo speed is unknown, defaulting to 1000 02:09:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:27 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100020000) 02:09:27 executing program 5: pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) tee(r2, r3, 0x9, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x4a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe78f, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000000c0)={0x8001}, 0x4) 02:09:27 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x178, 0xc, 0x0, 0x178, 0x298, 0x258, 0x258, 0x298, 0x258, 0x3, 0x0, {[{{@ipv6={@remote, @private1={0xfc, 0x1, [], 0x1}, [0x0, 0x1e2c114db7b04825], [], 'veth1_to_bond\x00', 'caif0\x00', {}, {}, 0x2c}, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x2}}, @inet=@rpfilter={{0x0, 'rpfilter\x00'}, {0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'veth0_to_batadv\x00', {0x2}}}}, {{@ipv6={@ipv4={[], [], @multicast2}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [0x0, 0x0, 0xff, 0xffffff00], 'veth0_to_team\x00', 'lo\x00', {}, {}, 0x0, 0x1, 0x1}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@time={{0x0, 'time\x00'}, {0x9, 0x80000001, 0xef08, 0xc09f, 0xffff, 0x5, 0x3}}, @common=@srh={{0x30, 'srh\x00'}, {0x5c, 0x9, 0x40, 0x80, 0xfff8, 0x800, 0x1201}}]}, @unspec=@CT0={0x0, 'CT\x00', 0x0, {0x1, 0x1, 0x4b, 0x5, '\x00', {0x5}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x38d) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x82, &(0x7f0000000340)={r3}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r3, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r3, 0x8}, 0x8) 02:09:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) sendto$inet6(r4, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r4, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000040)=0x2, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="124f2000", @ANYRESOCT, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32=r8], 0x4}}, 0x804) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0xe00, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)={0x15c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0x15c}, 0x1, 0x0, 0x0, 0x24008810}, 0x240000c5) [ 2259.473224][ T4582] device veth261 entered promiscuous mode [ 2259.513907][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 2259.513923][ T28] audit: type=1804 audit(1593396567.408:2601): pid=4575 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1822/cgroup.controllers" dev="sda1" ino=16371 res=1 [ 2259.546349][ T4582] team0: Port device veth261 added [ 2259.578736][ T4572] device veth261 left promiscuous mode [ 2259.723698][ T28] audit: type=1804 audit(1593396567.468:2602): pid=4583 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1681/cgroup.controllers" dev="sda1" ino=16366 res=1 [ 2259.857010][ T28] audit: type=1804 audit(1593396567.498:2603): pid=4583 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1681/cgroup.controllers" dev="sda1" ino=16366 res=1 [ 2259.997379][ T28] audit: type=1804 audit(1593396567.749:2604): pid=4585 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1822/cgroup.controllers" dev="sda1" ino=16371 res=1 [ 2260.121028][ T28] audit: type=1804 audit(1593396567.749:2605): pid=4575 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1822/cgroup.controllers" dev="sda1" ino=16371 res=1 [ 2260.163625][ T4572] team0: Port device veth261 removed 02:09:28 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x7, 0x4) write(r0, &(0x7f0000000100)="2400000058001f00ff07f4f9002304000a04f51107000100020100020800028001000000", 0x24) 02:09:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, 0x8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x24363, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) sendto$inet6(r1, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r1, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x82, &(0x7f0000000340)={r5}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r5, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={r5, 0x1f, 0x1ff, 0x1}, &(0x7f00000000c0)=0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x34, 0xe, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000100)={r6, 0x9, 0x14}, 0x8) 02:09:28 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10002d400) 02:09:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x90, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "84ff94dbec"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4010}, 0x55) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f0000000240)=0x2, 0x4) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000009000)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="b5"], 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000007) 02:09:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r2, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:28 executing program 5: pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) tee(r2, r3, 0x9, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x4a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe78f, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000000c0)={0x8001}, 0x4) [ 2260.552845][ T4623] __nla_validate_parse: 2 callbacks suppressed [ 2260.552855][ T4623] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2260.614767][ T28] audit: type=1804 audit(1593396568.509:2606): pid=4621 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1823/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 2260.667262][ T4633] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2260.724536][ T4639] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2260.740964][ T28] audit: type=1804 audit(1593396568.579:2607): pid=4631 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1682/cgroup.controllers" dev="sda1" ino=16374 res=1 02:09:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) sendto$inet6(r1, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r1, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x1411, 0x400, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) [ 2260.886354][ T28] audit: type=1804 audit(1593396568.579:2608): pid=4625 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1682/cgroup.controllers" dev="sda1" ino=16374 res=1 02:09:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r2, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2261.037829][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2261.106868][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2261.160704][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 02:09:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000080)=0x2007, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) sendto$inet6(r4, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r4, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4800000010000507000000000000000000000000aa41e0b3ac2f9bc289826e6c3afe96caeb3d0903bdc69687e7533fa56b85ac2d1f61fe9660b573ae69de98a2d7acb37776bca16d83b0f5b9e76bb52df895ddfd52086e4df742e87be6348d94dd3ed93093b464174f71d682d776ab8bd873b0b98798a4f7d1d6bd1f9b014d27b8e78df863b90a192669094c4fa035cdcd466f38407e5f7fabded23ac2d924bc4ce7dee52f890d", @ANYRESHEX=r6, @ANYRESOCT=r0], 0x48}}, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000340)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000000000000000010000000b000100666c6f77657200001800020006000800600600000a003f00000000000000000018f9a34c77645c380db83052e7d00bbee1f298c3df9ca222a3a273bf489cf0a6f87b227e3857f93d0d2d15272d9e66d90fe5eb2a9ddc02e659b0d343103003a9c901828ef4c7275281dffd3566872779d68a300e09f1eafd0643367ad94782f6a40372d759c9ae74a184e0551606cb867ece"], 0x48}}, 0x0) r7 = socket(0x1000000010, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 2261.330329][ T28] audit: type=1804 audit(1593396569.219:2609): pid=4627 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1823/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 2261.385030][ T4644] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:29 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10002d410) 02:09:29 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}]}, 0x44}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@mcast1}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) sendto$inet6(r3, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r3, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x22c, 0x7, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x170, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@ct={{0x7, 0x1, 'ct\x00'}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}]}, {0xc, 0x1, 0x0, 0x1, [@dup={{0x8, 0x1, 'dup\x00'}, @void}]}, {0x3c, 0x1, 0x0, 0x1, [@meta={{0x9, 0x1, 'meta\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}]}, {0xc4, 0x1, 0x0, 0x1, [@reject={{0xb, 0x1, 'reject\x00'}, @void}, @ct={{0x7, 0x1, 'ct\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5}]}}, @socket={{0xb, 0x1, 'socket\x00'}, @void}, @dup_ipv4={{0x8, 0x1, 'dup\x00'}, @void}, @range={{0xa, 0x1, 'range\x00'}, @void}, @redir={{0xa, 0x1, 'redir\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}}, @quota={{0xa, 0x1, 'quota\x00'}, @void}, @objref={{0xb, 0x1, 'objref\x00'}, @void}, @flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @void}, @payload={{0xc, 0x1, 'payload\x00'}, @void}]}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x9c, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@hash={{0x9, 0x1, 'hash\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HASH_OFFSET={0x8}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7f}]}}]}, {0x5c, 0x1, 0x0, 0x1, [@payload={{0xc, 0x1, 'payload\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x6}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xffffff5b}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3}]}}, @cmp={{0x8, 0x1, 'cmp\x00'}, @void}, @fib={{0x8, 0x1, 'fib\x00'}, @void}]}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) [ 2261.493349][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2261.536664][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 02:09:29 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r1}) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000100)={{0x2b, @multicast2, 0x4e22, 0x3, 'lblc\x00', 0xa, 0x6, 0x28}, {@multicast2, 0x4e24, 0x10000, 0x5, 0x401, 0x13dd}}, 0x44) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x14, 0x6c, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x46) [ 2261.580365][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2261.681157][ T28] audit: type=1804 audit(1593396569.579:2610): pid=4665 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1824/cgroup.controllers" dev="sda1" ino=16369 res=1 [ 2261.756444][ T4673] IPVS: ftp: loaded support on port[0] = 21 [ 2261.775033][ T4659] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 02:09:29 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc(0x0) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x0, 0x1f4, @dev}, 0x1c) sendfile(r1, r0, 0x0, 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000140), 0xff4d) sendfile(r4, r3, 0x0, 0xffffffff800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r5, &(0x7f0000000200)="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", 0x200, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000100)) sendfile(r4, r3, &(0x7f0000000080), 0x10000ab00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 02:09:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r2, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2261.974656][ T4677] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2262.002798][ T4673] virt_wifi0 speed is unknown, defaulting to 1000 02:09:30 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000000), 0x4) r1 = socket(0x28, 0x80000, 0x8000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x80800) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x23b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r3}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000840)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000880)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000003680)={'batadv_slave_1\x00', 0x0}) sendmsg$inet(r4, &(0x7f0000003780)={&(0x7f00000008c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000900)="d7ea8ab0385b2172e46ce6ce8708a2de3a91466d9aae7655ab4a815246f31d76777fadef02c28b76e2a641ab5bb08939c4e420aa95b3e98faa4c935c6e85fa26aa2604d1c546a2b69c047b583e7862b69cf300b563c1771f7375ce94f5c03ef2bf3912eda5bee23de9c99245f5ef73436c984a2efb3f53a7e89104ea34577e7603be3532133b8ecd697e799b51680e0b6c02f06a415d39ac74a0aca72562c0b910ff463bfd506460e9468a940fe1eeca3b269ff24f220cadf0a11ea3e589a1b615ce28fabd23163604b50b2efb9db58ed623f2", 0xd3}, {&(0x7f0000000a00)="ebbbd3e5e9afd900831c9b3cf6461010fb8b0136c8ff5f740f91d8082ca5096ac264023daed00dae8a0f219d778c51a2701594bd31dd5fd17f1209a4b7d020709b9fd16318c4a0c2cb7c02f7dd2d4c80deff62e279b0309479e6af907cdc628467eed3b5feb755ab4be0c67e03a85ebf5b40e42530e276af1eb6f7ea4ed636a8fc6fe7a6569c379ca576018b32d03cd1cde99f12b29823b8bf360a9bebcf8e47eafe6c5f786e488c0fefb833b80f0f3849e9f2cc0eaf94bb80489fecfda0a909728008bfb763", 0xc6}, {&(0x7f0000000b00)="28c9675c93eb2b33fbd8cbf86b89ff414f1c491a24ae7454287a78b2f9ae1de3c44961", 0x23}, {&(0x7f0000000b40)="d6dcf91ece962d910ad1", 0xa}, {&(0x7f0000000b80)="73830c485c17a95e780ce43a4afaeb48c24d24715ad8ba4c6f89e60fa21628d8a47cbf34f03e58cfae2205d67190c545ab2092545ccd22f0af8a09e52bb6606fa7232ccb06b89d12c415ab82f2740c09cc806ad3d533913e549d6188cf7394092ebe95221dfd78ef6b6ce84ac2f73ae1e82d172fe2adcbcc058da6637fc19f6b41adb5ba4aff4b", 0x87}], 0x5, &(0x7f00000036c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4f5a}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0xa0}, 0x4000) bind$pptp(r1, &(0x7f00000037c0)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000003800)={0x0, 0x400, 0x101, 0x895, 0xee4, 0x800}, &(0x7f0000003840)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000003880)={r6, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000038c0)=0x1ff, 0x4) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003900)='cgroup.events\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000003ac0)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003a80)={&(0x7f0000003980)={0xd8, 0x1403, 0x100, 0x70bd2a, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}]}, 0xd8}}, 0x20004010) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000003b00)={0x0, @in={{0x2, 0x4e21, @remote}}, [0x5, 0x8, 0x7fffffff, 0x18a, 0x2, 0x5, 0x1, 0x4, 0xfffffffffffffff8, 0x9, 0x0, 0x9, 0x7f, 0xffffffff, 0x100000000]}, &(0x7f0000003c00)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000003c40)={0x800, 0x101, 0x4, 0x1, 0xb1a1, 0x7, 0x0, 0x80000001, r8}, &(0x7f0000003c80)=0x20) recvmsg(0xffffffffffffffff, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003cc0)=""/247, 0xf7}], 0x1, &(0x7f0000003e00)=""/246, 0xf6}, 0x100) r9 = accept$inet(0xffffffffffffffff, &(0x7f0000003f40), &(0x7f0000003f80)=0x10) getsockopt$inet_int(r9, 0x0, 0x16, &(0x7f0000003fc0), &(0x7f0000004000)=0x4) 02:09:30 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100040000) [ 2262.072002][ T4687] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r2, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:30 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) sendto$inet6(r1, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r1, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x44, r4, 0x1, 0x0, 0x0, {0x21}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x8c, r4, 0x800, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0xf16243fabc394d6a) 02:09:30 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x9, 0x30, 0xffffffffffffffff, 0x8972e000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000480), 0x12) sendfile(r2, r1, 0x0, 0xffffffff800) sendmsg$AUDIT_TRIM(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x3f6, 0x200, 0x70bd28, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='io.stat\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0xfffffffffffffffd, 0x5}) pwrite64(r3, &(0x7f0000000200)="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", 0x200, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x100000001) sendfile(r6, r1, &(0x7f0000000040), 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 02:09:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r2, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:30 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100100000) 02:09:30 executing program 1: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000000c0)) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x240000c1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x3, 0x4c, 0x7fff, 0x5, 0x6}) r2 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x1401, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}}, 0x8000) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x2, @random="7ca2c10697b5", 'veth1_virt_wifi\x00'}}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "f3e20c4dd0b44169", "8484b8196df6968ef12d94da1045d435", "219d0d68", "623e06dee0745aec"}, 0x28) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreq(r3, 0x0, 0x0, &(0x7f00000018c0)={@local, @private}, &(0x7f0000001900)=0x8) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000001940), &(0x7f0000001980)=0x8) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f00000019c0)={'geneve1\x00', {0x2, 0x4e23, @local}}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001a00)={0x0, 0x32, "f0b7f14dcb8d1f7de61823df85616778262bbff0e0b41d475ea5453e77e755a6c498a2f5cb68d56e4b4bead2afdd9086fded"}, &(0x7f0000001a40)=0x3a) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001a80)={r4, 0x2ced, 0x81, 0x7fff, 0x4eb3, 0x4f}, 0x14) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000001ac0)={0x2, 0x0, 0x1f, 0x4, 0x4}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b40)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000002600)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0xb0, r6, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x44b11069bd26c639}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44800}, 0x800) 02:09:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x100000001) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r0, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) r2 = accept4(r0, &(0x7f0000000800)=@phonet, &(0x7f0000000880)=0x80, 0x80800) recvmsg$can_raw(r2, &(0x7f0000000980)={&(0x7f00000008c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000940)}, 0x2100) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000024c5e28b179000000000008cb552ae505b7ce1ec5e626ea8a2490000000001", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="000000000000000004000a000a000100726f757465000000200002000800010000000000080003004000000004000600080002"], 0x50}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) r7 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2263.018836][ T4729] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2263.117063][ T4673] lo speed is unknown, defaulting to 1000 [ 2263.120625][ T4730] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 02:09:31 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001d0001002dbd7000fddbdf2507000000d49bf5d659b0fb84835510d4b3194288aad797ea3e4d032dd9475344a3e32633eff86365035f6c9fd55e47adc3e501a83bded599", @ANYRES32, @ANYBLOB="100020051400030000000100ff7fffbf00000000020000000a1020"], 0x84}}, 0x0) 02:09:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f00000000c0)={0x2, 'syz_tun\x00', {0x6}, 0x3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 02:09:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r2, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2263.847311][ T4770] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2263.866421][ T4771] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2263.890039][ T4772] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. 02:09:32 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000075250000120f26bd70000000020000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000d00010066715f636f64656c000000002c000200080007000000000008000500ff0f00000800050000000000080007000002000008000800ff030000"], 0x60}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 02:09:32 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)={0x14c, 0x1, 0x1, 0x0, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10000}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x8, 0xffffffff, 0x9]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_SYNPROXY={0x54, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x100}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x20}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1e18}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x10001}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1f}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_LABELS_MASK={0x20, 0x17, [0x9d, 0x1, 0x40, 0x5, 0x3, 0x1, 0x10000]}, @CTA_TUPLE_ORIG={0x70, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4004080}, 0x2000c8d0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000280)=""/189, 0xbd}}], 0x1, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0xfffffd6d) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e558c5986f0000000000000087695931515781ae36a4d148f269399022f5ce7ec3b6d946be4fac9508cce4df4d7015f5590bbfb45e25844000722053f1502598808b355f7b815bdb22ba86dddc81145dd688759944bd09b0f55e7ca54b07bd9189de8defcea227e56f94ddc8d5e02f38fdd0ad2e5cc22b1f090ecf60605fa26c0e48a80a6bd544fa300d066a4d162d7ef85002025faf0831fffbb5f1a12a6f5f158a752eaf25a859b40a57381147cdd7c9fd7ceae30304783fd7f2eec79c49b69a61287b591371f3f60b34470692217a8930a11f0e0c796c587da235e5ed34ce844827033a3bac99ab9498f944fec73001fd8be2b4b36b0b3c9672af727831275017a6d5aff50c09bfc22ebf548906138e7dae98da1b8a39bf8800000000339b567e58689a4da64cf31b4ea5066103ba672332000000000000af7029f1226901c86f510b46e3a027d6135f99b585d0aa73b71cd8e7448f107336ed8a46a35936d5a24a92a4e2be4b78ca3d304e40f3931319f8b3e3f6feebfdcefa894f5b2537fa42349e6957c1b0965242194e87e3ca02"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b400000c13900060008000029ec2400020cd37e99d69cda45a95e", 0xffffffc2}], 0x1}, 0x0) connect$rxrpc(r4, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) sendmmsg(r4, &(0x7f0000005c00), 0x40000000000037b, 0xff48) 02:09:32 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100101100) 02:09:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005070c022d640000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0xe00, 0x0, {0x0, 0x0, 0x0, r5, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=@deltclass={0x8b4, 0x29, 0x800, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x18, 0xb}, {0x0, 0xd}, {0xffff, 0xe}}, [@tclass_kind_options=@c_cbq={{0x8, 0x1, 'cbq\x00'}, {0x83c, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0xa6, 0x1, 0xc42, 0x9, 0xfff, 0x5}}, @TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x1, 0x8, 0x1}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x7, 0x5, 0x46, 0x4, 0x1, 0x100}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x1000, 0x10000, 0x0, 0x400, 0x800, 0x0, 0x0, 0xffff, 0x7fffffff, 0x8, 0x8000, 0x10001, 0x3cf3151d, 0x9, 0x7, 0x553b, 0xfffff73b, 0x0, 0x7ff, 0x9, 0x7ff, 0x5, 0x5, 0x4, 0xfffffffe, 0x30000, 0x193, 0x5, 0x400, 0x4, 0x20, 0x800, 0x9, 0xf449, 0x7, 0x80, 0x7, 0xf0, 0x9, 0xfffff000, 0x1f, 0x10001, 0xfff, 0x0, 0x40400000, 0xaf47, 0x3, 0xff, 0x8, 0x8, 0x7fff, 0x593b, 0x9, 0x1, 0x1, 0xa7, 0xf2, 0x8, 0x4, 0x8138, 0xff, 0x1ff, 0x5, 0x3ff, 0x200, 0x0, 0x40, 0xb193, 0xf91e, 0x8, 0x20080, 0x0, 0x5, 0x5, 0x7, 0x8, 0x2, 0x7fffffff, 0x6, 0xfffffffb, 0x7fff, 0x1ca4, 0x8, 0x200, 0x1, 0x7, 0x8, 0x6, 0x5, 0x1, 0x0, 0x800, 0xff, 0x101, 0x2, 0x2, 0x3, 0x7a3b, 0x8f1, 0x5, 0x0, 0x0, 0x79, 0x800, 0x7, 0x3, 0xfffff55b, 0x200, 0x3f, 0x3, 0x4, 0x818, 0x7, 0x4, 0x4bf, 0x1, 0x2, 0xc9d, 0x5, 0x200, 0x20, 0xffffffff, 0x8, 0x7, 0xffffffff, 0x9, 0x10000, 0xba4, 0x9af, 0x7174, 0x10, 0x5, 0x3f, 0xe4, 0x4, 0x2, 0x1e, 0x9, 0x96, 0x101, 0x81, 0x8000, 0x5, 0x900000, 0x0, 0x81, 0x101, 0x1d, 0x800, 0x101, 0x3, 0x5c, 0x4d, 0x0, 0x4, 0x8001, 0xfffffffa, 0x44, 0x40, 0x8, 0x1, 0x8001, 0xf70, 0x2, 0xffffffe0, 0x40000000, 0x9, 0x1c, 0x5, 0x4, 0x0, 0x7ff, 0x9, 0x1000, 0xe677, 0x0, 0xfffffffd, 0x4d88, 0x3, 0xfffffffb, 0x9, 0x3, 0xc36a, 0xb, 0x10001, 0x6, 0x7fff, 0x1f, 0x6, 0x139b, 0x8, 0x7e3, 0xfffffc7a, 0x5, 0x4, 0x3, 0x9, 0x101, 0x98c, 0x9, 0x400, 0xfff, 0x9, 0x1f, 0x8001, 0x2fef, 0x0, 0x3a, 0x80000000, 0x26, 0xffffffc0, 0x80000001, 0x1, 0xfffff541, 0x6000, 0x8, 0x9, 0xffffff81, 0x21, 0x1b, 0x6, 0x8, 0x9, 0x80, 0x9, 0x7, 0xffffffc1, 0x10000, 0xfffffff9, 0x75c, 0x9609, 0x3, 0x100, 0x2, 0x7, 0x5, 0x401, 0x8001, 0x5, 0x3, 0x8000, 0x759, 0x0, 0x2, 0xe4a, 0x0, 0x200, 0x1, 0x40, 0x10000, 0xadb, 0x0, 0x9, 0x8, 0x9, 0x10001]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xfffffc01, 0x5, 0xfffffff9, 0xac2, 0x2, 0x51d1, 0xd1fd, 0x3ff, 0xeb, 0xb26, 0x7, 0xff, 0x5, 0xdbf, 0xffffffff, 0x0, 0x6000000, 0x7, 0x2, 0x77, 0x5, 0x4, 0x1, 0x48c0, 0xfffffff8, 0x9, 0x0, 0x9, 0x4, 0x9, 0x542, 0x10001, 0x81, 0x7, 0x1, 0x5, 0x7, 0xc3, 0x8a, 0x3, 0x0, 0x4, 0x628472cd, 0x1, 0x2, 0x400, 0x0, 0x800, 0x1ff, 0x747, 0xfffff001, 0x8, 0x800, 0xe1b, 0x81, 0xa6ae, 0x6, 0x1, 0x7, 0x6, 0x5, 0xfffffffb, 0x1, 0x823c, 0x20, 0x6, 0xf1de, 0x5, 0x800, 0x40, 0x6, 0x5, 0xabee, 0x73e42531, 0x13, 0x8000, 0x9, 0x1ff, 0xfffffff7, 0x3, 0xfffffffd, 0x5, 0xffffffff, 0x2691, 0x6d2b, 0x4, 0xf79e, 0x8, 0x1, 0x0, 0xffff, 0x20, 0x10001, 0x17f6, 0x5, 0xbec3, 0x1f, 0x0, 0x5, 0x3, 0x569, 0x1, 0x8, 0x6, 0x10000, 0x1f, 0x5, 0x4, 0x5a5, 0xfff, 0xfffff02b, 0xffffff5c, 0x5, 0x6, 0x1, 0x6, 0x8ca0, 0x2, 0xfffffe00, 0x5, 0x6, 0x7, 0x1, 0x81, 0x5, 0x0, 0x80, 0x7f, 0x362, 0xe7, 0x8001, 0x9, 0xfe58, 0xa7, 0x5, 0x1, 0x7f, 0x4, 0x5, 0x58, 0xd09, 0x9, 0x1000, 0x2d4, 0x6, 0x800, 0x9, 0x61a, 0x83, 0x8001, 0x3, 0x9, 0x0, 0x1, 0x0, 0x10001, 0x101, 0x9, 0xe64, 0x4, 0x0, 0x0, 0x6, 0x8, 0xfffffff7, 0x9, 0x2d, 0xffffffff, 0xe9f, 0x3ff, 0x6, 0x7fff, 0x3, 0xc7a, 0x0, 0x7fd35a1c, 0x7, 0x2f, 0x401, 0x2, 0xbd1a, 0x7, 0x40, 0x4, 0xfff, 0x9, 0x49423567, 0x9, 0x1, 0x5, 0xfff, 0x0, 0x7f, 0x9, 0xfffffff7, 0x4, 0x2, 0xffff, 0x15, 0x3, 0x8, 0x40, 0x812, 0x10001, 0x5, 0x7f, 0x5, 0x81, 0x8, 0x80000001, 0x101, 0x0, 0x9, 0x8000, 0x2d, 0x20, 0x34d99b4d, 0x9, 0x7f, 0x3, 0x7, 0x5, 0x7c, 0xfffffbff, 0xc442, 0xe9f, 0x1ff, 0x0, 0x9, 0x5, 0xffffff28, 0x1f, 0x9, 0x0, 0x5, 0x400, 0x80, 0x7, 0x10001, 0xdc1, 0x3, 0x3f, 0x6, 0xa71e, 0xfff, 0x7, 0x3b7, 0x7, 0x8, 0x8, 0x5, 0x1, 0x10001, 0x81, 0x100, 0x2e1]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @tclass_kind_options=@c_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x4}}}, @tclass_kind_options=@c_multiq={0xb, 0x1, 'multiq\x00'}, @tclass_kind_options=@c_clsact={0xb, 0x1, 'clsact\x00'}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @tclass_kind_options=@c_taprio={0xb, 0x1, 'taprio\x00'}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x800}, 0x20040850) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e9798e3060c01d6279979f102be71a243c000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r8, r7, 0x0, 0x100000001) ioctl$TUNGETVNETHDRSZ(r8, 0x800454d7, &(0x7f00000000c0)) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000100001041d9eafa6268ab259d9cf1fecc332134d0000000000000000000000002adbf30fa3b5e23399b8c5e1f2e085cd7ccc8777b30f930b07f9da6fa68a80dcc83a0bf1d3a28a72f94d74384b7bdf103978641596ac7b9df9a6ca8aa81667857c096607bb7b5d55b96027389441812350bda6a24491513534e545ce14ba35ece05bb12ed862d61c754b4ec1ca5d572536b8cbb5e648a9a073a822b0cf78e07cf8316cf9fb645e93520b72eb4ca60b1aa2440ef670ec15712632c37a5c765414aad670df7f33c41b7f1576cda12614b88d91764c33a2b6c7c5228ee1970293", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB], 0x4c}}, 0x0) 02:09:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r2, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x100000001) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000020601000040000000000000000e0003006269746d61703a697000000005000400000000002bb83de24db8852f0000000005000500000000000500010006000000"], 0x48}, 0x8}, 0x0) 02:09:32 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x28, 0x6, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0302000000000000140012000c000100626f6e64"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x13804}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}]}}}]}, 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') read$alg(0xffffffffffffffff, &(0x7f0000000f40)=""/197, 0xc5) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r5, 0x400, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x20000810) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924924924924f6, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000240)={0x27, 0x0, 0x2, 0x7, 0x2, 0xf, "d5acae84029bc2a749838ffe86301dfb4e6ff33a290fb3825b05e2234770498a0f9dc374f7186535b90f8ef57dde3fa1f7a470d18b56e37bfb8166384f5175", 0x39}, 0x60, &(0x7f00000000c0)=[{&(0x7f00000003c0)="b1f80b50fecafa90afbac1c94bfc9c5ecfcd6a31f532f621c20688e77542cdc552aac4da67a991a372ef1a17e0d13230087b58c1d245644a8e399e39cabb2c48721960e4018180f6a58006c50fad22406d3c145ce2fbab6b1f0959ec17e7588f0e2a30f503ece12d062b4c9fa237a7bd926f32768e6e9ccfe797f6f0aaa2c3b7c79dee6c550d525bd326adba1b00899cd64a895c7975eba040cce6200f378fe9af78b4d69a86615af630029e57308221347b93b2be36bb7cc4bc090236a1e12179d3b4d5b12db84f01ac460279ac2df667c2e86d0193128acb8f6cccb38de672b962e082c05cff487362a5f27f097d536409f1", 0xf3}, {&(0x7f00000004c0)="e238c3166feceb6e0facfbbbff7574cf776fe9052a826bf96a5a82a8465c0b822180ef5a557f9d1a8b507f7b1056f72092a489cd180688251e241b6c6a846f4e184aada463459bdd2fddb2cfa6496c7cdc1969a1637336f87e012b8ffa940df6d4e63c746876e5cb8dd370fb226a5350ad7026f51d92ba40c934bd63809b91e8c696f8729ad079e31f670eb0552dc643f323363bd21cbcd460513db9ec42cc2e0c5d3fbe75b815bf6ba67fe3c11ae21cba42626fa7fb6c37cc462f55dc4860d19d081ab4bc2c803d2f4936febd5f28f0c6f2adb98be73a3195a90305a68971b0", 0xe0}, {&(0x7f00000005c0)="94d9f80b59211a187eee72c553a2402584bd0bd3549d90507b4e5c35a6986fef2ca89cfbbf04779b4c23a67eef67fd150e47bb4b7db9404991ab23f9d21332914eae11697f9b787ef6b65045ac303472b65b61c161fb990a8aae196b17aa09be8728957ea3fd63bc630ff440d96e2e299fe4abd32c805259e5052cde593b2ead67080a5aec2ff936dff85e088683a0fd3eb472812a5ca1db2d179d49726f76aedd93d487051cdf813ee744238c3985138a7ba2ac1327e3667228732a8e815dd5749dd7e91dd26a9d9deec34d25b1de468484663700d9e2933fa4", 0xda}], 0x3, &(0x7f00000006c0)={0x80, 0x107, 0xfffffff9, "5f4bdf3441ffa43367535f6427fac1b968744ccdc5bfad8aa4aa3689fee95c46f271fb97c30bb14b5494afda82a7306ba474f8635e65946e264693f49abc0315452615d4bd8f9cc8718e84d81e1cf3800a4e0a5961fab323071744e89d6df78cf41e42d8dc48d3bf7894c85b3f5f"}, 0x80, 0x44000}, 0x0) [ 2264.354312][ T2771] tipc: TX() has been purged, node left! [ 2264.385485][ T2771] tipc: TX() has been purged, node left! 02:09:32 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100111000) 02:09:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="00f0000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x5c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r5, 0x2}}, 0x20}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000580), &(0x7f00000005c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x3, @mcast1, 0x5}, @in6={0xa, 0x4e24, 0x846, @remote, 0x8000}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e21, 0x3, @mcast1, 0x2}, @in6={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @multicast2}], 0xb0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x900, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) r9 = socket(0x1, 0x1, 0xd910) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0xa8, 0x3, 0x8, 0x101, 0x0, 0x0, {0xc, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000050) [ 2264.465771][ T2771] tipc: TX() has been purged, node left! [ 2264.493034][ T2771] tipc: TX() has been purged, node left! 02:09:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r2, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2264.530970][ T2771] tipc: TX() has been purged, node left! 02:09:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x100000001) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r0, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000000)={0x1, 0x4, 0x2, 0x40, 0x8, 0x24, 0x1c, "c1feba48d8e1685ed5d034dbb4a63f4d86646f30", "7963ffd1dd2d956d5e18dfbf1e52859543b1cf90"}) syz_emit_ethernet(0x558, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd600000000522330000000000000000000000000000000000ff020000000000000000000000000001"], 0x0) [ 2264.613611][ T4816] IPVS: ftp: loaded support on port[0] = 21 [ 2264.770794][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 2264.770811][ T28] audit: type=1804 audit(1593396572.669:2637): pid=4828 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1828/cgroup.controllers" dev="sda1" ino=16380 res=1 02:09:32 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000000006061ae6e00142f00fc020000000000000000000000000000ff02000000000000000000000000000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6400dc7e92889fbb"], 0x46) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x140c, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x40000) 02:09:32 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100300000) [ 2264.949221][ T4816] virt_wifi0 speed is unknown, defaulting to 1000 [ 2264.961370][ T4829] device veth190 entered promiscuous mode [ 2264.980270][ T4829] team0: Port device veth190 added 02:09:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f00005bc000/0x1000)=nil, 0x1000}, &(0x7f0000000140)=0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 2265.161570][ T28] audit: type=1804 audit(1593396573.059:2638): pid=4848 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1829/cgroup.controllers" dev="sda1" ino=16384 res=1 [ 2265.373270][ T4838] team0: Port device veth190 removed [ 2265.392401][ T28] audit: type=1804 audit(1593396573.289:2639): pid=4855 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir834134059/syzkaller.j6s4N7/1569/cgroup.controllers" dev="sda1" ino=16376 res=1 02:09:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r2, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:33 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100800000) 02:09:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r2 = socket(0x27, 0x5, 0x4) connect$rds(r2, &(0x7f0000000600)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x8, 0x7, "4f90519a202955"}, 0xf) sendfile(r1, r0, 0x0, 0x100000001) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r0, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0xffffffdc}], 0x3, &(0x7f0000000440)=""/102, 0x66}, 0x40000102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) sendto$inet6(r4, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r4, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) getpeername$netrom(r4, &(0x7f0000000300)={{}, [@netrom, @netrom, @netrom, @bcast, @rose, @bcast, @netrom, @rose]}, &(0x7f0000000380)=0x48) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000080)='E', 0x1, 0x4008002, 0x0, 0x0) [ 2265.582110][ T28] audit: type=1804 audit(1593396573.349:2640): pid=4850 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1829/cgroup.controllers" dev="sda1" ino=16384 res=1 [ 2265.618829][ T4819] IPVS: ftp: loaded support on port[0] = 21 [ 2265.683952][ T4866] __nla_validate_parse: 8 callbacks suppressed [ 2265.683962][ T4866] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:33 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x23, 0x829, 0x3, 0x0, {0xe, 0xe00000000000000}}, 0x14}, 0x1, 0x60, 0x0, 0x8000}, 0x0) [ 2265.858467][ T28] audit: type=1804 audit(1593396573.749:2641): pid=4871 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1830/cgroup.controllers" dev="sda1" ino=16380 res=1 [ 2266.119357][ T28] audit: type=1804 audit(1593396574.009:2642): pid=4879 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1830/cgroup.controllers" dev="sda1" ino=16380 res=1 [ 2266.325250][ T4816] lo speed is unknown, defaulting to 1000 [ 2266.398434][ T4819] virt_wifi0 speed is unknown, defaulting to 1000 [ 2266.953009][ T4819] lo speed is unknown, defaulting to 1000 02:09:35 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1, &(0x7f00000001c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000200), 0x4010040c000) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0x2, &(0x7f0000000680)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2, 0x0, 0xfffffffd}, 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03000a0d698cb89e40f086dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}, 0x40) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='memory.events\x00', r4}, 0x10) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100)=0x24011) write$cgroup_int(r3, &(0x7f0000000200), 0x4010040c000) r6 = openat$cgroup_ro(r3, &(0x7f0000000140)='cpu.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000001900), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000002, 0x10012, r6, 0x57e69000) socket(0x10, 0x80002, 0x0) unshare(0x0) r7 = socket(0x10, 0xc, 0x0) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, 0x0, 0x0) r8 = socket(0x18, 0x1, 0x7) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0180eb1d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000000)={r9, 0xfffffffa, 0x0, 0xbb}, 0x10) socket$netlink(0x10, 0x3, 0x12) socket(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$kcm(0x10, 0x2, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r12 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r11, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xfffffffe}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r12}]}, 0x3c}}, 0x0) close(r12) 02:09:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108655800000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108655800000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32], 0x34}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) sendto$inet6(r3, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r3, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/90, 0x5a}, {&(0x7f0000000240)=""/165, 0xa5}, {&(0x7f0000000380)=""/91, 0x5b}], 0x3, &(0x7f0000000440)=""/96, 0x60}, 0x40000102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000000000)=0x5) 02:09:35 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100d40200) 02:09:35 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xc0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r2, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x4, [@typedef={0x6, 0x0, 0x0, 0x8, 0x2}, @ptr={0x9, 0x0, 0x0, 0x2, 0x4}, @union={0x9, 0x2, 0x0, 0x5, 0x1, 0x8, [{0x3, 0x3, 0x8}, {0x4, 0x3, 0x22}]}, @union={0x5, 0x3, 0x0, 0x5, 0x1, 0xff, [{0x1, 0x5, 0x303ec7d9}, {0x7fffffff, 0x3, 0x1}, {0xc, 0x4, 0x3}]}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000000240)=""/116, 0x88, 0x74, 0x1}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r5, 0xc0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, [], 0x0, 0xa, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x78) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs={0x1}, 0x6e, 0x0}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r7, &(0x7f0000003040), 0x4000000000001d4, 0x0) 02:09:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800030a00000000007efaa7901a359a79418e0b0000001d01000008001000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) recvfrom$inet(r1, &(0x7f0000000040)=""/3, 0x3, 0x2102, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) r4 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x50, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x3a, 0xe, "0c9944192c3a3c5930c49f0aa27320c525998ce17ad80d954ae2ff6ef226a0a90bf67797000ed8e86e4300e72eea21e252851a256110"}]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x110, r6, 0x400, 0x70bd28, 0xf2be, {}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6a1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xd9, 0xac, "7da4a0506bfd126c4b173b228e927fd0b5e6b82adb8ed8cad888f9f477416500665f5f49cd9df664506d1065d8051a7709b674f1bdc7a6571cf232df7d9e28e475413dbaf2bd711abc4b1bebbbfedfff9a9903f4e1be790cadfe110df5bea79c57c67665afa407c637e491f9b1d0b79dbb69532ff540b473ca619cfa96a4e730cfce630b29a66be459a5b33f492de27e5a3235f82a93fa9a951bb1c072e3da6a8509ba4a4949bbe9e42e54f29397a62b3009891210dc2907e6c7c1ffe34cf28680b0c354bd5ebd82d611d0f13d7ef5dbd7789dabbd"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7f}]}, 0x110}, 0x1, 0x0, 0x0, 0x200048c1}, 0x800) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x0, 0x1f4, @dev}, 0x1c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000001c0)={0x6, 0x7, 0xc, 0x800, 0x2, 0xbf, 0x8cf7, 0x9, r7}, &(0x7f0000000200)=0x20) [ 2267.444051][ T4931] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2267.536780][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2267.545904][ T28] audit: type=1804 audit(1593396575.439:2643): pid=4936 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1831/cgroup.controllers" dev="sda1" ino=16369 res=1 [ 2267.616955][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2267.656423][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 02:09:35 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x1) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) sendto$inet6(r2, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r2, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x1) 02:09:35 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100f0ffff) [ 2267.853507][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 02:09:35 executing program 0: r0 = socket$packet(0x11, 0xa, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="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", 0x6c) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg(r2, &(0x7f0000004480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)='N', 0x1}], 0x1, &(0x7f00000044c0)=ANY=[@ANYBLOB="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"], 0x3f68}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000004180)={&(0x7f0000000280)={0x14, r3, 0x0, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000014}, 0x40000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xffc}, {0x80000006}]}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$bt_hci(r2, &(0x7f0000004200)={0x1f, 0x43}, 0x1) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) socketpair(0x18, 0x5, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendto$inet6(r4, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) [ 2267.923618][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2267.970170][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 02:09:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="24000000200007041dfffd946f610500020000001f00000000000800057f000000000000", 0x24}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e22, 0xe98c, @local, 0x3094}, @in6={0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, [], 0x1}}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e22, 0x1, @ipv4={[], [], @private=0xa010102}, 0x2c}, @in6={0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, [], 0x1}, 0x19e00000}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x6a, @mcast1, 0x1000}], 0xbc) sendfile(r2, r1, 0x0, 0x100000001) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r5, &(0x7f0000000440)="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", &(0x7f0000001440)=""/4096}, 0x20) [ 2268.069895][ T28] audit: type=1804 audit(1593396575.969:2644): pid=4962 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1832/cgroup.controllers" dev="sda1" ino=16376 res=1 02:09:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r3, @ANYBLOB="5325f403855f844ced2a7ab93d9ce0cc3cb6d5b494f4dde3f07e988424fce076ef1860606b096a822547a09746aa47ee282b0d68a20bc579b83e9a081f426d35"], 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}}, 0x0) [ 2268.260457][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 02:09:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2268.320319][ T28] audit: type=1804 audit(1593396576.219:2645): pid=4964 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1832/cgroup.controllers" dev="sda1" ino=16376 res=1 [ 2268.322771][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 02:09:36 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005070c022d640000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0f0000000000000008001c00ef000000"], 0x28}}, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={r4, @broadcast, @loopback}, 0xc) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0xfdca) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000695, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 2268.364288][ T28] audit: type=1804 audit(1593396576.219:2646): pid=4962 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1832/cgroup.controllers" dev="sda1" ino=16376 res=1 02:09:36 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x101000000) [ 2268.508664][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2268.644432][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2268.697607][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2268.737655][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2268.919816][ T4982] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:09:36 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) write$binfmt_elf64(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="990063db36dd2c646bfbc78514c267199d0d1c05", @ANYRES64, @ANYRES16, @ANYBLOB="7c94615b0ae92866476b750cd30a517adcd53add884b6f60abbb3d29b6a576ab33797dd6a6073e3029d2b9edbd463b11daf7743a502a287453385069f51a28337ce786caa5772ca22b50b2582bed298632958c40ac2923191d23a308e297f3140f928bed4f4f87899d613cb2", @ANYRESDEC], 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002300)={0x0, 'bond0\x00', {}, 0x7}) r4 = socket$netlink(0x10, 0x3, 0x14) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000009180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6ca00000d95d7a0451b83d671e8291ffd68dd741f45af2b56c1aa80dfb2647267f744920cb08f7546bd875a0a73fe68a5cb2bdeaae8572ad81d3468bc003783c49839efb4d1f76dfe4a6d64dd1cc4189371b6e2ae6946e64b2d4c869e3bb00"/125, @ANYRES16=0x0, @ANYBLOB="00002bbd7000fedbdf25100000000400028040000180060002000c000000060004004e2200000c000700000000000400000008000b00736970000600040000000000070006006e71000008000b007369700008000400020000000400018008000400fdffffff"], 0x6c}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080), 0xc, 0x0}, 0x20008801) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000580)="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", 0xffe}], 0x1) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 02:09:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2], 0x1}}, 0x8004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x2, 0x1, 0x20000) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x10002, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r9, 0x800c6613, &(0x7f0000000280)=@v2={0x2, @aes256, 0x10, [], "ae4acc679bb690983fa78df3d820770b"}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="00f0000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080000000000000000b8000000", @ANYRES32=r8, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) 02:09:36 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffdffb3efa, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2268.994032][ T4980] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) accept4$llc(r0, 0x0, &(0x7f0000000000), 0x800) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r3, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e27, 0x4, @ipv4={[], [], @broadcast}, 0x4}, 0x1c) 02:09:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x82, &(0x7f0000000340)={r4}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r4, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r4, 0x5, 0x3, [0x926, 0x5, 0x3]}, &(0x7f0000000040)=0xe) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0xe5, 0x2, 0x204, 0x7, 0x0, 0x101, 0x3, 0x9, r5}, &(0x7f0000000100)=0x20) sendmsg$netlink(r0, &(0x7f0000004800)={0x0, 0x0, &(0x7f0000004780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000068001188fe080016d000000002000000", @ANYRES32=0x0, @ANYBLOB="040009"], 0x1c}], 0x1}, 0x0) 02:09:37 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x102000000) [ 2269.287657][ T4982] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2269.474947][ T5015] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2269.836394][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 2269.836411][ T28] audit: type=1804 audit(1593396577.730:2654): pid=5027 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1834/cgroup.controllers" dev="sda1" ino=16376 res=1 02:09:37 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x103000000) [ 2269.967518][ T5039] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2269.984602][ T28] audit: type=1804 audit(1593396577.880:2655): pid=5008 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir834134059/syzkaller.j6s4N7/1572/memory.events" dev="sda1" ino=16362 res=1 [ 2270.030916][ T28] audit: type=1804 audit(1593396577.910:2656): pid=5012 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir834134059/syzkaller.j6s4N7/1572/memory.events" dev="sda1" ino=16362 res=1 02:09:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2270.265119][ T28] audit: type=1804 audit(1593396578.160:2657): pid=5056 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1835/cgroup.controllers" dev="sda1" ino=16381 res=1 02:09:38 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40448c4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) sendto$inet6(r2, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r2, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) connect$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, @fixed={[], 0x11}, 0x5}, 0xa) 02:09:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010008506000000000000000400000000", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x11) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000340)={r5}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r5, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={r5, 0x1, 0x3, [0x9, 0x400, 0x5]}, &(0x7f0000000240)=0xe) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x54) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100ffffffffffffffef02000000", @ANYRES32=r7], 0x20}}, 0x0) [ 2270.346738][ T5060] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x44, r5, 0x1, 0x0, 0x0, {0x21}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x74, r5, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004000}, 0x448d1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r2, 0xc0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x1c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x78) 02:09:38 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608756ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ec0ea4334844d2322e8965c79435883df6c10ce86188c92292b2d0226082960be682836bdff860971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da098ef78dffcff5e1ed19913a5fb25c79dac2e489f681278926581f9e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517e92c26637b4c34bf2d0aa304ed42bf7048ffffff7f3fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba04a978f41e8ed4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e7171094018630366397266090a12343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d80810da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efdfcfa95eafa95e2d9eff867a2a647c7066c95524c85df0952d32093082b7aa71304e0d2d9cc310d1b676b378a5879e47941de1a28c3a8f4be28628bd443537d0e032b7d2badd0bc6617a859b7ac273b63040000006f43291829030f06cc0ca1765838eb5590264736fbccfc3a8f10daf6a275daf5db2dac70b0fedb05e68d0300000073ce6b144503d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6636b354b6e674b08f7b7f72bd7dbc96aef53be267d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e0711d759fc5a9c441a8fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f448128207de07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330713045eed7d4c292f4448733c0826c4eb950f3dc0457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000067257424c15acf1b1b7fbd8437e70800000000d40d73be47803297dbe34264c8c70b7761b22a7114a078a87d63d6ba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681f92a2d0e1e8e38ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bbbace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa152737d294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158078b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529018034b920d87f12b6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a9302eb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddccce8f3ba739d90ddc5d62a85f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f708ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69ff1ce9626de9847bf53475d90642d973c6546732e3bf8e07bf8f66dada18acac5a5185ed0a08da1d817154ef68576119aab4bffd17796bf7eaa317dc4daea8f09d7590bc9e37ee84ceb7d33ee14c98d530f0fc4212230acec591d94366"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, r2, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve0\x00'}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfbff}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x809) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x100000001) sendto$inet6(r1, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010106}, 0x2}, 0x1c) r4 = openat$cgroup_ro(r1, &(0x7f0000000380)='cpu.stat\x00', 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='cgroup.controllers\x00', 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000300)=0x4) accept(r1, &(0x7f0000000040)=@l2, &(0x7f0000000100)=0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x3000000, 0xe, 0x0, &(0x7f00000003c0)="0069c2704ade28eddb0000200000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair(0x18, 0x80000, 0xfff, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000700)=0x20000008) [ 2270.444248][ T28] audit: type=1804 audit(1593396578.340:2658): pid=5056 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1835/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 2270.467967][ T5068] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 02:09:38 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x104000000) [ 2270.604117][ T28] audit: type=1804 audit(1593396578.380:2659): pid=5055 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1835/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 2270.673598][ T28] audit: type=1804 audit(1593396578.570:2660): pid=5084 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1836/cgroup.controllers" dev="sda1" ino=16383 res=1 [ 2270.709792][ T5068] device bond9 entered promiscuous mode 02:09:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:38 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x48851) r1 = socket(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000020805000000000000000000070041523200010900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4004804) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0xc261, 0x4) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000000c0)) r5 = socket(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000001600)={0x5}) syz_genetlink_get_family_id$smc(&(0x7f00000001c0)='SMC_PNETID\x00') close(r0) [ 2270.764597][ T5070] device bridge10 entered promiscuous mode [ 2270.804065][ T5070] bond9: (slave bridge10): Enslaving as an active interface with an up link 02:09:38 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x0, 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32, @ANYBLOB="ddf6f4f2a2ff14010000000000f76272696467650000"], 0x34}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xd}], 0x492492492492805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x82, &(0x7f0000000340)={r4}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r4, 0x9}, 0x8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @private=0xa010100}, {0x2, 0x4e22, @rand_addr=0x64010101}, {0x2, 0x4e21, @local}, 0x0, 0x0, 0x0, 0x0, 0x3ff, &(0x7f0000000080)='sit0\x00', 0xc23, 0x101, 0x9}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={r4, 0x3, 0x2, [0x2, 0x3]}, 0xc) [ 2270.849783][ T5093] bond9 (unregistering): (slave bridge10): Releasing backup interface [ 2270.930412][ T5093] device bridge10 left promiscuous mode [ 2270.975383][ T5127] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 2271.044814][ T5129] IPVS: ftp: loaded support on port[0] = 21 [ 2271.305875][ T28] audit: type=1804 audit(1593396579.200:2661): pid=5102 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1836/cgroup.controllers" dev="sda1" ino=16383 res=1 02:09:39 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x105000000) [ 2271.375935][ T5093] bond9 (unregistering): Released all slaves [ 2271.463012][ T28] audit: type=1804 audit(1593396579.200:2662): pid=5084 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1836/cgroup.controllers" dev="sda1" ino=16383 res=1 02:09:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x29, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000003580)=""/4096, 0x1a, 0x1000, 0x8}, 0x20) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x31905e13403123b7, 0x0, 0x0, {0x5, 0x0, 0xf000}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 2271.543466][ T5123] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2271.593037][ T28] audit: type=1804 audit(1593396579.480:2663): pid=5174 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1837/cgroup.controllers" dev="sda1" ino=16383 res=1 [ 2271.652951][ T5068] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2271.751162][ T5192] BPF:btf_header not found 02:09:39 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x106000000) [ 2271.832424][ T5178] IPVS: ftp: loaded support on port[0] = 21 [ 2271.952771][ T5135] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2271.979249][ T5129] virt_wifi0 speed is unknown, defaulting to 1000 [ 2271.999128][ T5136] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 02:09:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x14e24, 0x40000000}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4ffe0, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000000606050000000000000000000a0000070900030005000100070000000000030073790000e40f55c45b4e622446e546761e9898a6e01097c99606923efc79bc9f6ac91761e76610e402cf43610dabd2c01c7a7b57aefea3b3f9119bbd5ea0f9a5cf77104eacc2f5d313cd9cf327daeabcd3183e5a736a2f591c74fff880d3b48537d37f5c800831d62d5f897e6f1d38232d485e1ee7009bd0d5a97eafd337db06ea46d688"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) recvmmsg(r2, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000200)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) 02:09:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2272.280349][ T5227] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2272.290776][ T5190] BPF:btf_header not found 02:09:40 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x107000000) 02:09:40 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x82, &(0x7f0000000140)={r3}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r3, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r3, @in6={{0xa, 0x4e21, 0x788c, @empty, 0xff}}, [0x7fffffff, 0x4, 0x4, 0x8, 0x7, 0x10000, 0x4, 0x2, 0x7, 0x0, 0x0, 0x1bffb6bf, 0x10001, 0x7, 0x40]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x3}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x3, 0x3f00}, 0x12d48122) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) sendto$inet6(r4, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r4, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000300)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r4}, 0x10) 02:09:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2272.633080][ T5135] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 02:09:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x0, 0xfffffffc, 0x0, 0x10000}, 0x10) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0d0000000000000000000f000000080003007771c91c368202ddcc7143aa2100ed04971235ae66773d9a63abfe284eb947131f8917735bb0e28b51e690f898a147388af87d50465bbf64295339ba4d22ddcc5602c8a7f1c285dc7a736e7bd4e890c3f14280be68d920133f8ecccdacd788e4c3a303b00a597b971031e93c003ff3f6d3e0abf984a47307340000000000000000", @ANYRES32=r4, @ANYBLOB="0500330000000000"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x851) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000200)={{0x3b, @empty, 0x4e22, 0x1, 'fo\x00', 0x2c, 0x6, 0x2f}, {@broadcast, 0x4e21, 0x10000, 0x200, 0x8, 0x7}}, 0x44) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x5}]}]}}, &(0x7f0000000040)=""/219, 0x2e, 0xdb, 0x8}, 0x20) [ 2272.843780][ T5266] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2272.962440][ T5273] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2272.972204][ T5178] virt_wifi0 speed is unknown, defaulting to 1000 [ 2272.972444][ T5129] lo speed is unknown, defaulting to 1000 02:09:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2273.055822][ T5273] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 02:09:41 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x108000000) [ 2273.249539][ T5281] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2273.777465][ T5178] lo speed is unknown, defaulting to 1000 02:09:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2b010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$binfmt_script(r1, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYBLOB="0dc66332cb214745fbb4819044915f1908e93a5f2ced"], 0x175cdb5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRESHEX=r3, @ANYRES64=r5, @ANYRESDEC=r1, @ANYRESHEX, @ANYRESDEC, @ANYRESOCT=r4, @ANYRES16], 0x1c}, 0x1, 0xffffff7f0e000000, 0x0, 0x8040}, 0x0) sendfile(r3, r2, 0x0, 0x100000001) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x100000001) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r9, r8, 0x0, 0x10001) 02:09:42 executing program 5: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r5, r4, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100)) sendfile(r5, r4, &(0x7f0000000040), 0x100000001) 02:09:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f02b57cdcde0000000001000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0xfffffff0}, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x0, 0x1f4, @dev}, 0x1c) r5 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x0, 0x1f4, @dev}, 0x1c) r6 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r6, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r6, &(0x7f0000419000)={0xa, 0x0, 0x1f4, @dev}, 0x1c) ppoll(&(0x7f0000000000)=[{r2, 0x4020}, {r1, 0x209}, {r1, 0x241}, {r4, 0x4008}, {r1, 0xa004}, {r5, 0x140}, {r6}, {r1, 0x1010}], 0x8, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0xfffffffffffffc43]}, 0x8) 02:09:42 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x5d}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8", 0x0, 0x5ab}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005070c022d640000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000340), &(0x7f00000003c0)=0x4) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0xe00, 0x0, {0x0, 0x0, 0x0, r6, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=@newchain={0x158, 0x64, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x4, 0x6}, {0xffff, 0xc7a0e5e33aad5a46}, {0x5, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0xfbd}, @filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x124, 0x2, [@TCA_U32_ACT={0x120, 0x7, [@m_skbedit={0x11c, 0xc, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x10}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0x3}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xfff}]}, {0xc7, 0x6, "f97721b7d88809407c612ac9dca5803774b10659f453e73d3a2804f69b151b58b65b2c4a5d00607f232f0f42ba403744cb4406c1668284351964c513211ea6612ecc11aaa18d6a0b3261a77333632780f78ae297b991bdd94432b7f40ea0b11496502ba3bda4e9d5c6f4d4aab6d9d5023930fe532fa23d7ca3cd566805585c4254be07290cd3f82997198ea70f555571e45a9eff878bc2714e5c0a8cf99f0e3e38ef0bac4f542f8c4df9d301aef8e7818eb5ba5d92489b57fe9d8689cccd801da1f914"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc810}, 0x4014) 02:09:42 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x109000000) [ 2274.538635][ T5340] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:42 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) setsockopt$rose(r2, 0x104, 0x6, &(0x7f0000000340)=0x7fffffff, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01030000000000f9b77ea2bbc87e9643a13733943ebee017bba21c4a590810b300000005000000f45000000000000080019e7c48669334643be6d8a164bcef687081bf33c8ba2201e3", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)=[{0x18, 0x1, 0x1, 'O'}], 0x18}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001440)={'batadv_slave_0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000097f4ec359ce743cb70d86706cf71fdb61c527c3d97da3970f1846aa467a427107821df59abf29fee2a884366d52660966eb4120ad4aa721b45c2a0a1d3e3ebe2b6dd5d8e3c9b2be47ccb360d5e837f82", @ANYRESOCT, @ANYBLOB="00012dbd7000fbdbdf251a000000050092000300000008009a000000000008009a000000e3ff07009a000100d20bd1cc7e91988b00006fb9cf8b45206b3523f9c38de87b000000000006000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="330a2dbd7000040004000000000000003c00038008000100ffffffff08000200070000000800010000040000080003003d00000008000200e50000000800020029040000080002000002000004000380240005800c000280080003000300000014000280080002009d01000008000200060000000000000000000000000000000000e413349768af442c6accff7c373624582ff13e623e9f4b91e90e6fb157943e515d07af5254370e9241557453"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x2, 0x9, 0x301, 0x0, 0x0, {0x1}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3ff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x800) 02:09:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="45fe0d6b732186ffff000031e1f39cf50000009159086c50f5194e00010074797a3000f133380000000021"], 0x20}}, 0x20000094) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, 0x2, 0x8, 0x401, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4090}, 0x4050) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000600), &(0x7f0000000640)=0x4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x23, 0x5, 0xffffffff) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) accept4(r5, &(0x7f0000000340)=@alg, &(0x7f00000000c0)=0x80, 0x800) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0200cb76ea7211439a321f589f32be513a25de0b608088ed10ecd8f255705addfd40df1c69c799b0f81ab8b65617dc8fcd27806270570411ab4971f9166617a497a18603807eeab93d20ca8f83d9cced9e34e7d843976e821bd4c9e34997ea210181451b143521435cb49840b0f6127442ea5997c3648665ff981c9e5dc445758addf261"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}]}, 0x38}}, 0x0) [ 2274.839698][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 2274.839715][ T28] audit: type=1804 audit(1593396582.740:2678): pid=5347 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1841/cgroup.controllers" dev="sda1" ino=16359 res=1 02:09:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000000020104000000000000000000000000240002801400018008000100543966a4099cf64087905e5d8eea5d00e000000108000200ffffffff0c000280"], 0x40}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000140)=@gcm_128={{0x304}, "ec20229bcf1d45c5", "0fa2b8be486fe05250382722c0d3974b", "a52e9c57", "466576a7d5bd81e7"}, 0x28) r4 = accept4$inet(r3, 0x0, &(0x7f0000000040), 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x82, &(0x7f0000000340)={r7}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r7, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={r7, 0x3ff, 0x5, 0xfffffffc, 0xfffffc00, 0x101}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000000)) 02:09:42 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10a000000) 02:09:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001480)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESHEX=r0], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff835}], 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000001340)={0xfff, 0x7, 0x9, 0x0, 0x0, [{{r1}, 0x6}, {{}, 0x3}, {{r6}, 0x7}, {{}, 0xdd53}, {{}, 0x80}, {{r1}, 0x2}, {{}, 0x6}, {{r5}, 0xffff}, {{}, 0xc9a}]}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f00000001c0)={0x7, [0x3, 0x9], 0x4}, 0x10) shutdown(0xffffffffffffffff, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000fff0) [ 2274.996475][ T28] audit: type=1804 audit(1593396582.740:2679): pid=5342 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1841/cgroup.controllers" dev="sda1" ino=16359 res=1 02:09:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2275.118852][ T5378] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2275.219344][ T28] audit: type=1804 audit(1593396583.110:2680): pid=5384 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1842/cgroup.controllers" dev="sda1" ino=16383 res=1 [ 2275.373014][ T5378] 8021q: adding VLAN 0 to HW filter on device bond14 02:09:43 executing program 2: getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB='t', @ANYBLOB="10cd32dc3d304152eae83ad18964274b"], 0x74}}, 0x0) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006, 0x0, 0x0, 0xe0}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000080)={0x81, 0x7}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000000c0)=0x100100, 0x4) [ 2275.409251][ T28] audit: type=1804 audit(1593396583.270:2681): pid=5392 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir145771254/syzkaller.hoJ3z6/1047/memory.events" dev="sda1" ino=16363 res=1 02:09:43 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) sendto$inet6(r1, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r1, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB="b4020508bcd75308de388c3a450970d545c33db493d24b3419d4f6222d7287d1806d70cc836c369694afd82b62b5c723b499911e1f542711caaae1e6b05b87937e6ff532f60ee80caf4d801f0f5df92fc648db57d1c56d06f0f9e3919fdff1afbaea8de482cad39f607e69c16042217a1aa7e2e87bf93bb6a893dcf6d724cbf69295667edc8c0c670d449171237975b8f79fd4ba5c8f8117df55a0fca81d5b7738b602ff9a365afe3fd6bd338d16f092fc11400f2a0c85f302218e0235953cba11e30dca32cb", @ANYRES16=r4, @ANYBLOB="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"], 0x2b4}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x400003fc, 0x10000000, 0x3ff, 0x7c7}, 0x10) recvmmsg(r0, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000040)=""/50, 0x32}], 0x1}}], 0x1, 0x0, 0x0) [ 2275.621965][ T28] audit: type=1800 audit(1593396583.270:2682): pid=5392 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16363 res=0 02:09:43 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10b000000) 02:09:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2275.769562][ T5390] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2275.781061][ T28] audit: type=1804 audit(1593396583.500:2683): pid=5393 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1842/cgroup.controllers" dev="sda1" ino=16383 res=1 02:09:43 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10a000000) 02:09:43 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9, 0x1, 0x2, 0xe, 0x9, 0x1}, &(0x7f0000000180)=0x20) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) [ 2275.973749][ T28] audit: type=1804 audit(1593396583.870:2684): pid=5466 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1843/cgroup.controllers" dev="sda1" ino=16379 res=1 02:09:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2276.157621][ T28] audit: type=1804 audit(1593396584.030:2685): pid=5466 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1843/cgroup.controllers" dev="sda1" ino=16379 res=1 02:09:44 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10c000000) [ 2276.380034][ T28] audit: type=1804 audit(1593396584.190:2686): pid=5476 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir572905914/syzkaller.nYoq3G/2367/cgroup.controllers" dev="sda1" ino=16371 res=1 02:09:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2276.582294][ T28] audit: type=1804 audit(1593396584.200:2687): pid=5474 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1698/cgroup.controllers" dev="sda1" ino=16383 res=1 02:09:44 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000840)=[{&(0x7f0000000680)="30dd96866c8619c7522155d10efb2cc5b0a761c91083a81d8483c1db9a56744d590452367251d70f3ce7bbb664fe975a105cadf789618f7a51abddc6ad6564ac6f08b316b1de15f1c2bb3f58722383a5a9c68233a39fba38b43f871fb52eabc279cf67bd8dc1cbc964fece03ffd57b8a789640692dbbb17fbe53bce58c461d9fae317cbf87901aed080b695e19f766bb1413ae000000000000002d1e15875ad5b244082fac18c28973c5677ba706d48f019a6973cc21278c6533c792f292e952ccbd96e0a9c5117a4d9b85f2ac4c72deaf542c3369a34dce3775f849be4a77095980f6eeb79a1798d8ca6e383267790219917c635f6d3db5000000000000009e47d7c7f5ee98e29287cfb1f09d4bfe4a6936fb96770f51d161ca774752e97b4cbba0cc84176c009586bfbea7fb1e7b9a995c6a175a694a30a64feed3730151503404777bc6b1bcea4755ab8aacc81ead62ebf576d13445d09fa510033c5a4971b48f0907477ceeaf717d4d429c70191b65a8e35197524bd11c988eff77ad06896a01c497c10034e2", 0xffffff32}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f00000001c0)=0x1000) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @private0}}, 0x0, 0x0, 0x4e, 0x0, "79365517136fb2b2078584963528836ff20ca9ebdd3b91d72296e832ba6a8bfea1953c83623e661e132038aa6e6238ad5b68c06d85d8c0b07e229dd53dd337506959bb24fa66b0aeb0f68f63cbb6d82b"}, 0xd8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) sendto$inet6(r3, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r3, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "4d42562bc413b814", "6d98fa803723ae4196e509ee6bf09ed4", "65133331", "ae1db995942e1b42"}, 0x28) getpeername$tipc(r4, &(0x7f0000000140), &(0x7f0000000340)=0x10) splice(r0, 0x0, r1, 0x0, 0x80000fffffffc, 0x0) [ 2276.784495][ T5498] __nla_validate_parse: 7 callbacks suppressed [ 2276.784507][ T5498] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:44 executing program 0: socket(0x2, 0x80014, 0x67) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x400443c8, &(0x7f0000000000)={0x4, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005070c022d640000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0xe00, 0x0, {0x0, 0x0, 0x0, r5, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x2, &(0x7f0000000040)=@raw=[@generic={0x8, 0x1, 0x2, 0x5, 0x6}, @generic={0x81, 0x3, 0x5, 0xfff, 0x9}], &(0x7f0000000080)='GPL\x00', 0x8a3, 0xec, &(0x7f00000000c0)=""/236, 0x41100, 0x4, [], r5, 0x16, r0, 0x8, &(0x7f00000001c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x10000}, 0x10}, 0x78) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, {0x2, 0x4e21, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0xba, &(0x7f0000000300)='veth1_to_bond\x00', 0x3ff, 0x6, 0x7}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={r1, r6}) 02:09:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2277.063033][ T5511] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:09:45 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x1000) sendto$inet6(r0, 0x0, 0x0, 0x3a8f7dc2ac1e8d0b, &(0x7f0000000040)={0xa, 0x4e33, 0x0, @mcast2}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f02b57cdcde0000000001000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0xfffffff0}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000140)=@buf={0xb5, &(0x7f0000000280)="9979d6ab579d44750ae08eb5c42a9fe2c85fc852b87b10fb86ed36ec3ca78566fd32558901d45314b38ac1174c4d7007d6550fc60bbe149f371f357c034cf50b6f795feed20b161857c068c05cc56a9892ef55bef4682f1cd3270afb723cd0248c3e68a546aa8fd57eef96e8271765efb52e3693073c384108fe5518399e932a6810077bf4dce5003c7c0cf554707f1fef7f9bec04fb971bfc88685c79bf90482bc67311630f48a642a300fb8625edfba68a2744db"}) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000005140)={0x1, 0x20000004}, 0x8) sendto$inet6(r0, &(0x7f0000000240)='W', 0x1, 0x4000001, 0x0, 0x0) 02:09:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x80002, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$unix(r3, &(0x7f00000006c0)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f00000002c0)="6a154e60b19d3618c645a61e2abb2b676bbf565740d05211fbe9a62c91fb7622dede2270bd05b3750e628461641007bdeda2340d78a42f1127bca90ac7e5fa4313fb2644f8d837466dfd05889bc515eb05cc553c3fae57f0bd8301dfa78867aadb488433758122b99112bc45e3e46822ed9b82689ff1f384cd1e471911e9cd57916c8c6f28ed54", 0x87}, {&(0x7f0000000000)="8f3ace4b6a766e453e3229049c0523ac0e78b7929e45ab8257f6ca5b45b32424eb72dd51863f81d78dd6b8", 0x2b}, {&(0x7f0000000100)="70241c49d85a353827fd16cc21a3", 0xe}, {&(0x7f0000000600)="fbcb5e531a557f078bf0c43df860c0f84d540a64e7ee0e88032a94962d21edad85b75b1d4eba862719612a39aaaaa03e3bfcd6ab940fe6553f68111fcdb698c13ca4e739f0f1b2a8", 0x48}, {&(0x7f0000000c40)="ade64c41c9d4a273f733a7b8bb25b686a770759f3a6843e838780ae9ced8108050e6d540c09e163ff9114869bfa58759bfa1bde20d259d70f1d7f312a60982ea9e437607f13318caec7f521f869b9e80c23e1fa5f3ea3b77e3eba3474be02933d6d5875bcce6995fd59bb95541de0cc34a8fecb84758b01eb60bce1de62b6c24816cbf4f5a0ffbeb0dfe23c7307014267b340ca28f26cd3ae572ae2e131ee5cb284077846ccfbb0db46e513e57e5", 0xae}, {&(0x7f00000004c0)="540ae89df3d21707fcb768aacd691327dc70a950ed47fe36320f091d5da4b0d4ca3e43bb2e401f0a84cbc70bad8e1659a30517b58979ca1d351a7b13c6d0b8663139c32db1debc49dc5a9955a4ee51e184ddc61b5d02ce92ab79adcf59e525d022445cf309a7e8abafad3c78043e1e1fa84f", 0x77}, {&(0x7f0000000180)}, {&(0x7f0000000540)="ef8bf68c64c9527bd4d2ecf2d629d9035d811dbcab0a0db723f7b60adef5045e5e28f5693488d55b3d4d9751438518e7bededcf3df50144f1a8f9916cd72590e81256d51e73a8a4a95bd5147fe8cdd59a7f876eb85677aa01474f1627704b04fe2190d6f65fcb8b22c4c609896b123e9289486ad54d5d3", 0x77}, {&(0x7f00000005c0)="900575c34d1d097798525b4c063d0466c62e80d83b39f49839d04abe5d97f4fab8c361d614", 0x25}, {&(0x7f00000007c0)="f9833f713a43c38070f22b80348c7ffa93548c7cbd9bbb5f83d4ec870a60a9522788e2f256d7b492a99484374c2f6184b5d27a852077d7645daf565eefa55df61b49c149e1d640d5dae7501b6457ef449535e2eb569a3a34853b4d124042976cc9b44c25ef98cda49bdc5654beeed81e39f0012d4688f9c68cf3ee8dfe84d5f9fe91cc779b3a5aab7d5887ab745a2c79fae3c539efb0fffbcbce5363339419", 0x9f}, {&(0x7f0000000880)="fc774fe2a31e247b41a80087da3c2b729fae66c9b9fc97d5ebc3db01982976f4a3cf64a8b46ef8c6598c21dc879a239986144c14eb16d4d573ed9645ec3f86f969eee945d148a9e3fc33e2d23e57ea810a1cabfecfa08e671b6c29131743cd8bcc8c16853609f5bec4f7a72097e0737d05dfe8d112f8864c1d", 0x79}, {&(0x7f0000000900)="5c64186309b028a190d66858755fb21b98baa218136d3f761e1a2b4996f72498f30b5d1d1d9cc9450e021b1eb31305a3da7a10032657f07b0485ade842a7397f8856943f81c4bc9161d6e2cf8d3347a36d8c10c4d552aa7cbb68a1bed291b76352e84b02708a4f3199b53f7a8a50ff2f59c3c0cda6fa08eba13b58582a69ed666bb7a9110f113d0be121a2d4afc2e6085f5a323b990f9bc7d1a086a32a07620fcf3b3ba06148c2baedfcd0a0f7438f85ab4ca54e33311f6a7bbb654d590a841c32f873a1d35478c7088fa4f3d4", 0xcd}, {&(0x7f0000000a00)="26db84d95a69e83f927b6a832725861b7549b77d42a137c3a3f5b51da1cd29d40d3b24e167661a08f5b2bb9eb2042e6e429d2dac5ed15faa649dda7300e1849a9dd642859f11e70d252658aee59beffa6bfee7c3806afb99d224ffb1357b1b7a3021ee14fbdcd8147b3f", 0x6a}, {&(0x7f0000000a80)="3ef3de43d3fe4f75619ab4fc7577d9687734b8791caa20bc3e5f78f0e4aacf569893f1f59414f3b62b2a5e0e65fc25f51fc018e808bbc58791012795f66596d97af65c25740d821688d149c07c22a9738ec1dcaa00ed8bfd66ab7740665df0e7f0057d75290f7e6089a7696b6c7cdcf7e9f53a2d092b3ccda8d1bc8079efbe2df5c7647fa9de72c6cf6b7915f814edf8ce65b1962cdb", 0xf6}, {&(0x7f0000000b40)="0578c2d45ef85608c3409e26558050a94c8b5db6f6ac2c28ac6158a0bc572ca86af1c03acba1e17ccec2fd832fc7b1cb0fce76ee79152bd3e1b5086536b3c0abe64ac139724d60962671d923d0ac748856b856ce0a54e2c76e2d52557ff1e02b69cb39618b1a1d5f8e33bdfeacbba012610f0600000000000000bfb650032f5d32adac82c295ca7245901d927fb4d1e4dfef4f583c1f2e08b32cac98ad2760f6a249793aaf931d19b7b3244526d86151d7102ab11419a9df1dd0d6357833d90603d6", 0xc2}], 0xf, 0x0, 0x0, 0x881}, 0x4000820) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000780)=0x4) r4 = accept$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r5 = socket$inet_udp(0x2, 0x2, 0x0) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000700)=@id, &(0x7f0000000740)=0x10) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) unshare(0x4060000) sendfile(r2, r1, 0x0, 0x100000001) 02:09:45 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10d000000) [ 2277.323188][ T5523] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000680)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x2000}}, 0x1c}}, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x3, 0x7ffe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x25, 0x1}}], 0x18}, 0x4800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) sendto$inet6(r2, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r2, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r5}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x1404, 0x400, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4044}, 0x800) 02:09:45 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x700, @loopback}, 0x1c) 02:09:45 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x100, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) close(0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000d13800000800000000000000000000000000003400048008000140000000000800014000000000080001400000000008000140000000000800014000000000080001400000000006000240000000000600024000000000"], 0x58}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f3, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 02:09:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:45 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10e000000) 02:09:45 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x23b, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$SIOCAX25GETINFOOLD(r0, 0x89ed, &(0x7f0000000500)) [ 2278.085636][ T5570] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:46 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x0, 0x0) getsockopt(r0, 0x0, 0x3, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xcb, &(0x7f0000000000), 0x3) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) setsockopt(r3, 0x3, 0x80, &(0x7f0000000180)="9c374e9f407618d6b49c4239f903e89010bcb8e549c33a06d584cff8a9fb9242d3c6b9ddc588669efe3e2a0ad7b79fd34d807262a68797d4ca8e61176cbc8f20d2089f0f66e526b0e45598f52cce61b77faf27734e4dd02968df7cdd9ee99fc4fae4a82d3e5e369c2eeae15e671bebc812d15094309cdad76f063f1ecf775da1ec3248612b530d20f9c17fbe130ee2e0915b3f5a0f3d540c1a3d", 0x9a) connect$nfc_llcp(r3, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x2, 0x9, 0x0, "b2ae4a39fbfc6742c8d9c3b981c841d4d918fd673d9387f63dd868c2e0d9a921155eb049c8db804a18e57d7e918fb978baab81767895eb463eae55dad9f513", 0x2f}, 0x60) [ 2278.172440][ T5573] IPVS: ftp: loaded support on port[0] = 21 02:09:46 executing program 0: socket$inet(0x2, 0x80001, 0x84) r0 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000000)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000080)={0x7, 0x7, 0x3}, &(0x7f00000000c0)=0x28) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x6, 0x1, 0x9, 0x2, 0x2, 0x3e, 0x4, 0x6f, 0x40, 0x396, 0x3, 0x8, 0x38, 0x1, 0x8}, [{0x3, 0x5f39, 0x1, 0x23, 0x3, 0x7, 0x155b, 0x800}], "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", [[], []]}, 0x1278) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) r4 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=0x60) write$binfmt_script(r4, &(0x7f0000000280)=ANY=[], 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x200000000000000) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001480)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x2c, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004800}, 0x40) [ 2278.299140][ T5573] virt_wifi0 speed is unknown, defaulting to 1000 02:09:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2278.359619][ T5590] IPVS: ftp: loaded support on port[0] = 21 02:09:46 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10f000000) [ 2278.653763][ T5602] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}], 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) sendto$inet6(r1, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r1, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000000)={0x2}) 02:09:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:47 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002300)={0x0, 'bond0\x00', {}, 0x7}) pipe(0x0) r4 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, 0x0, 0x4000000) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000009180)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB], 0x3}}, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00002bbd7000fddbdf0e0a000000080004000c04000008000500050000001800028014000100ff0200000000000000000000000000010c00018028000900760000000800050000feffff"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100), 0x1, 0x0, 0x0, 0x80}, 0x20008801) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00'}) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000580)="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", 0x1000}], 0x1) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 2279.263102][ T5620] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:47 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x110000000) [ 2279.422091][ T5619] IPVS: ftp: loaded support on port[0] = 21 [ 2279.596761][ T5590] virt_wifi0 speed is unknown, defaulting to 1000 [ 2279.603753][ T5573] lo speed is unknown, defaulting to 1000 [ 2280.113743][ T5591] IPVS: ftp: loaded support on port[0] = 21 [ 2280.167721][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 2280.167738][ T28] audit: type=1804 audit(1593396588.041:2702): pid=5639 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir145771254/syzkaller.hoJ3z6/1053/memory.events" dev="sda1" ino=16359 res=1 [ 2280.391083][ T28] audit: type=1804 audit(1593396588.091:2703): pid=5643 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir145771254/syzkaller.hoJ3z6/1053/memory.events" dev="sda1" ino=16359 res=1 [ 2280.542308][ T28] audit: type=1804 audit(1593396588.101:2704): pid=5647 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1848/cgroup.controllers" dev="sda1" ino=16367 res=1 [ 2280.753444][ T28] audit: type=1804 audit(1593396588.101:2705): pid=5641 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1848/cgroup.controllers" dev="sda1" ino=16367 res=1 [ 2280.765191][ T5619] virt_wifi0 speed is unknown, defaulting to 1000 [ 2280.798878][ T5590] lo speed is unknown, defaulting to 1000 [ 2280.878692][ T28] audit: type=1804 audit(1593396588.211:2706): pid=5660 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir145771254/syzkaller.hoJ3z6/1053/memory.events" dev="sda1" ino=16359 res=1 [ 2281.404900][ T5591] virt_wifi0 speed is unknown, defaulting to 1000 [ 2281.426020][ T5619] lo speed is unknown, defaulting to 1000 [ 2281.677677][ T5591] lo speed is unknown, defaulting to 1000 [ 2281.697579][ T2771] tipc: TX() has been purged, node left! [ 2281.703689][ T2771] tipc: TX() has been purged, node left! [ 2281.718863][ T2771] tipc: TX() has been purged, node left! [ 2281.728735][ T2771] tipc: TX() has been purged, node left! 02:09:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:49 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036746e6c0000300002800500090c0400000005000600f00000ff959cfb42f900060012004e200000040013000500040003000010080008001a00000008000a00f6d3bbeb3460487662a8bbf89cff15a2ede4d0c968f0fbed6f9aa62b7867335c9eb734d3d56a4aff8276fb68d9dd3af24fd1c51e0db42a2f8afd81722cedf8371c5e4818f978d36fdf", @ANYRES32, @ANYBLOB="080004"], 0x70}}, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000280)=0x10, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000380), &(0x7f0000000580)=0x4) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000579dfb8f0ed3914679868cbe01235f44614050027666563bce1c15a97c0527f3fcd45e9ac7e277e996c355413a6559659676a3e41a816aa0d08fb07d3e465a871dba840624ec260020e9846780293d78ce0d402ecba96f92e235a796f81c881944b5dcd019bed9d185ae0c5331085c84a347d1ec8510052678ab3768d478317e948d8221aed4732096e6af47ecc836a46a2ecec71106a97e49cb7d2a7fe5f8a7b51d1a29dd5831a2ca7827aad13cb1fbe5558123c9fa23e94d196fe8f43420ce61a0a93a758e1c755e14c0d8202a695ed44bbb04e3efdcd543220c13a028936513ddd460561142088f9936fbb00655a8785e43d3c832308ff7cabe0b3aae35b7b72e564f5241e3c77d23d76e1e027963630ed5481d284112fc9353d392fe4c492ffbe743a88d8334d679c53685d092ed44c848587e7f87fe4ff4936c6f7fabc256c674f907056c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) sendto$inet6(r3, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r3, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x6d) r6 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r6, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r6, &(0x7f0000419000)={0xa, 0x0, 0x1f4, @dev}, 0x1c) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x4e20, 0x3, @empty, 0x10001}, 0x1c) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r5}, 0xc) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x0, r5}, 0x8) 02:09:49 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x110d40200) 02:09:49 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @empty}}}}}}, 0x2a) r5 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x0, 0x1f4, @dev}, 0x1c) ioctl$int_in(r5, 0x5421, &(0x7f00000000c0)=0x8) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2281.878752][ T2771] tipc: TX() has been purged, node left! [ 2281.904904][ T5740] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2281.930844][ T5741] IPVS: ftp: loaded support on port[0] = 21 [ 2281.997819][ T28] audit: type=1804 audit(1593396589.891:2707): pid=5739 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1849/cgroup.controllers" dev="sda1" ino=16370 res=1 [ 2282.051475][ T5742] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2282.073758][ T5742] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2282.195956][ T5741] virt_wifi0 speed is unknown, defaulting to 1000 [ 2282.614952][ T5741] lo speed is unknown, defaulting to 1000 02:09:53 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000d, 0x6031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000340)={r4}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r4, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={r4, 0x400}, &(0x7f0000000300)=0x8) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x44, r5, 0x1, 0x0, 0x0, {0x21}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb4, r5, 0x6f92584e9534abd2, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x20040800) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$inet6(0xa, 0x8000080003, 0x800000000000005) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendfile(r6, r6, 0x0, 0x0) recvfrom(r1, &(0x7f0000000040)=""/184, 0xfffffffffffffe07, 0x40012500, 0x0, 0xfffffe53) mmap(&(0x7f0000c51000/0x3000)=nil, 0x3000, 0x0, 0x810, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000aa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 02:09:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xb732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @private}}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="bffb67f3bc103c", 0x7}, {&(0x7f0000000180)="8e53e3430888a8", 0xc0}], 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x20}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000003c0)={0x0, 0x100000000, 0x1}) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4008000) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x64, r3, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:insmod_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4881}, 0x8840) 02:09:53 executing program 0: r0 = socket(0x400000000010, 0x2, 0x0) write(r0, &(0x7f0000000040)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) sendto$inet6(r1, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r1, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) 02:09:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:53 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x111000000) [ 2285.724641][ T5814] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xec) [ 2285.850931][ T28] audit: type=1804 audit(1593396593.741:2708): pid=5818 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1850/cgroup.controllers" dev="sda1" ino=16372 res=1 02:09:53 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) sendto$inet6(r1, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @local, 0x2}, 0x1c) recvmsg$can_raw(r1, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) recvmsg$can_raw(r1, &(0x7f0000000300)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/196, 0xc4}], 0x1, &(0x7f0000000280)=""/98, 0x62}, 0x3) bind$phonet(r3, &(0x7f0000000340)={0x23, 0x1, 0x7}, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x82, &(0x7f0000000340)={r7}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r7, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000380)={r7, 0x80, 0x41865533, 0x800}, &(0x7f00000004c0)=0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000023000511d25a80648c63940d0724fc60040002400a0003000200000037153e370a00018002020000d1bd", 0x33fe0}], 0x1}, 0x0) 02:09:54 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x111010000) [ 2286.109435][ T28] audit: type=1804 audit(1593396594.001:2709): pid=5831 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1850/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 2286.229198][ T5840] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2286.259841][ T5840] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'. 02:09:54 executing program 5: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x111000000) [ 2286.428262][ T28] audit: type=1804 audit(1593396594.321:2710): pid=5844 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1851/cgroup.controllers" dev="sda1" ino=16359 res=1 [ 2286.706538][ T28] audit: type=1804 audit(1593396594.591:2711): pid=5849 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir145771254/syzkaller.hoJ3z6/1056/cgroup.controllers" dev="sda1" ino=16374 res=1 [ 2286.868248][ T28] audit: type=1804 audit(1593396594.761:2712): pid=5846 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1851/cgroup.controllers" dev="sda1" ino=16359 res=1 02:09:54 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x112000000) 02:09:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2287.015856][ T28] audit: type=1804 audit(1593396594.761:2713): pid=5844 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1851/cgroup.controllers" dev="sda1" ino=16359 res=1 [ 2287.225033][ T28] audit: type=1804 audit(1593396595.111:2714): pid=5866 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1852/cgroup.controllers" dev="sda1" ino=16377 res=1 02:09:55 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @default, @null]}, 0x48) listen(r0, 0x0) unshare(0x8000180) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000000}, 0x48010) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000003, 0x811, 0xffffffffffffffff, 0x0) pipe(0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000080)=@generic={0x6, "e27c89861be3186093b6cba7911a1fbcec4c91865b3ab15075d15ec69f4a0725291d204b451799eb482f7ecd9f73c0017a316665d9d918ef936f68c59a10e2fe2d94c8809578f9a3527796e412cdd52537d66d26ac8c5c471d72767e00d3c41a094b17a0f70ce22e4ed13c803c09cf1aad48918984e992618edcb927051e"}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000001600)=[{0x1010, 0x10b, 0x7, "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"}, {0xf0, 0x105, 0x0, "b9d9020b01e959b6859f66680005290d5c410dcdbab07f061345e253eaedd81a5f44a33f59072a56822617992b3c01bb25735f9e3eadb4093ff854128b50c87459fdcff646606eafa7d605099cea50724766a895be1dc4dded0bad8839d38ad518b47458aebb99490d06c2ba3bfc87d8da2c63af7656b614b378c087673e6298cd2673677d9c3d2263205482f6a1be8ae6aa058b07e5138338a980f8a98e4b443a45de82d0ba1e9912f336e5842f6572295b7971cdaa01442e8dca98090b00ba2096dfd3915a05fe26219496538ee37f4fe5c8953f5a717bf8e2be6727699d"}, {0x28, 0x84, 0x4, "18d07598e49da966c6fdf3f87cff03fa2980dd8df6475b77"}, {0x70, 0x84, 0x7, "1f962716f1421f2636b76278dc6651b470de63b1f9818df4cf2a20be0bde393ba20540ab0d2baca3ca56ff0ed50e0e2b49897691889eaa6365a9b7a6de614fe804ba0550198a3a53b6b5b5a3defacc723996a624b688917077bd"}, {0x20, 0x1, 0xcd, "80a03b2c881dc5d75c916de975735539"}, {0x40, 0x118, 0x8f2, "7a8b415c3f51b8ad8b8e5646c3289fec5f380cc0bd0356420e53843f07751ee2367cf5121022ceda3946151e1742f7c3"}], 0x11f8}, 0x4008880) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000015c0)=ANY=[@ANYBLOB="8100635b36dd2f5e31"], 0xc) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20008801) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) 02:09:55 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18, 0x4c085}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_user\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000) socket(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) sendfile(r3, r0, 0x0, 0x80000001) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1000}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008084}, 0x800) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) [ 2287.604110][ T28] audit: type=1804 audit(1593396595.491:2715): pid=5880 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir834134059/syzkaller.j6s4N7/1581/memory.events" dev="sda1" ino=16383 res=1 [ 2287.708660][ T28] audit: type=1800 audit(1593396595.491:2716): pid=5880 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16383 res=0 [ 2287.797924][ T28] audit: type=1804 audit(1593396595.541:2717): pid=5880 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir834134059/syzkaller.j6s4N7/1581/memory.events" dev="sda1" ino=16383 res=1 [ 2287.839061][ T5869] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket(0x840000000002, 0x3, 0x1) bind$inet6(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYRES32, @ANYBLOB="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"/270], 0x4}}, 0x54) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x44801}, 0x20040040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x6}, &(0x7f0000000380)=0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket(0x2000000000000022, 0x2, 0x11) close(r7) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f0000000300)=0x81, 0x4) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x81800) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'bond0\x00'}, 0x18) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000002c0)=0xd9e9) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000000206010000000000000000000000001005000400000000000d000300686173683a6e6574000000000900020073797a3000000000050005000a0000000500010007", @ANYRES32=r0, @ANYRESOCT=r5, @ANYRES16=r4, @ANYRESOCT, @ANYRES32, @ANYBLOB="848f206947d211c67603147a65314e9d2dc53528b3ff81366608d8aac3694be72ec00e003cbeebfaf36e5e386fe100f52a1b93f0fbd4916b31fde25e2981d5a7f417a2a112572e113cb402007a3ce806ca2c9ea1d1b592b04680aa1be2677608ffb5512c870a6028a11f380998e55538148fe1a967", @ANYRESHEX, @ANYRESDEC, @ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendfile(r5, r3, 0x0, 0x1fffffff1) 02:09:56 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x112010000) 02:09:56 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x82, &(0x7f0000000200)={r5}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r5, 0x9}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$FS_IOC_MEASURE_VERITY(r8, 0xc0046686, &(0x7f0000000300)={0x2, 0x50, "abcb5c27d3b76abc7e83a8d3c7f9fc16efc37b80a1a12d55b79333bb25f8f75286d54f05b45aa63c6a66a41654029bbdaa8edcc5f1e18c2f6e0a97084f43b1eee35a49fa4982328ecd4c823af7368895"}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r9}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 02:09:56 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0], 0x7c774aac) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x0, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xc, 0x2011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) sendto$inet6(r4, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair(0x25, 0x3, 0x400, &(0x7f0000000040)={0xffffffffffffffff}) accept4$x25(r7, &(0x7f00000000c0), &(0x7f0000000100)=0x12, 0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r6, 0x0) 02:09:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2288.366956][ T5917] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2288.430312][ T5920] batman_adv: Cannot find parent device [ 2288.483177][ T5920] batman_adv: batadv0: Adding interface: gretap1 [ 2288.515450][ T5926] delete_channel: no stack [ 2288.521151][ T5920] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2288.624863][ T5920] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 2288.658583][ T5937] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 0, id = 0 02:09:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:56 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x113000000) [ 2288.903800][ T5942] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r0, 0x0) openat$cgroup(r0, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.stat\x00', 0xb00000000065808, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005070c022d640000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108000e00"/20, @ANYRES32=r5, @ANYBLOB="0f0000000000000008001c00efe4ff00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdbcf251803000e0c00990005000020ebffffff07000300", @ANYRES32=r5, @ANYBLOB="0c0099000600000001000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0xc000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendfile(0xffffffffffffffff, r1, 0x0, 0x35) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x32) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x44010}, 0x0) unshare(0x40000000) 02:09:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r2, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2289.189114][ T5952] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2289.312633][ T5926] delete_channel: no stack 02:09:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @empty}, {0x2, 0x4e24, @empty}, 0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='veth0_macvtap\x00', 0xfff, 0x8, 0x4}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005070c022d640000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0xe00, 0x0, {0x0, 0x0, 0x0, r5, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="020027bd7000dbdf256b00000008000300", @ANYRES32=r5, @ANYBLOB="9fe6d6"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24004010) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', r6}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0x7fb1, 0x20c49a, 0x0, 0x27) [ 2289.347535][ T5960] IPVS: ftp: loaded support on port[0] = 21 02:09:57 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0x7, [@typedef={0x4, 0x0, 0x0, 0x8, 0x1}, @enum={0xb, 0x4, 0x0, 0x6, 0x4, [{0xe, 0x1f0}, {0xb, 0x4}, {0x2, 0xff}, {0x5}]}, @volatile={0x1}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @struct={0x9, 0x9, 0x0, 0x4, 0x1, 0x46f09521, [{0x3, 0x1, 0x80000000}, {0x6, 0x0, 0x10001}, {0xb, 0x4, 0xa0000000}, {0xc, 0x0, 0x4168d18e}, {0xa, 0x2, 0x7}, {0x9, 0x4, 0x4}, {0x4, 0x1, 0x9}, {0x6, 0x0, 0x7f}, {0x4, 0x2, 0x7fff}]}]}, {0x0, [0x3e, 0x0, 0x3f, 0x2e, 0x61]}}, &(0x7f0000000200)=""/166, 0xe7, 0xa6}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x3}, 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="288c5e11e406a5a071353f1b8ace", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 2289.465171][ T5960] virt_wifi0 speed is unknown, defaulting to 1000 [ 2289.528266][ T5971] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2289.927595][ T5955] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2290.201210][ T5960] lo speed is unknown, defaulting to 1000 02:09:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r2, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:09:58 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x114000000) 02:09:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000040)=0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}) 02:09:58 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xcc3ab000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0xffff) r5 = openat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x208000, 0x800, 0x0, 0x2}, 0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0) [ 2290.713221][ T6021] IPVS: ftp: loaded support on port[0] = 21 02:09:58 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e00080008000c00060008001940a30700000000000000001338d52f4400009bfb83de448daa7227c43ac9220000010cec4fab91d400000000", 0x55}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x43}, 0x10) sendmmsg$alg(r2, &(0x7f00000000c0), 0x49249249249265a, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="14167400", @ANYRES16=r3, @ANYBLOB="00012abd7000fddbdf251400000044000980080001000000090008000100020000000800020051ab00000800626052a1000008000100ffffff7f0800010001000000080002000100000008000200ff7f00000c000980080001000900000010000680080001000600000004000200"], 0x74}, 0x1, 0x0, 0x0, 0x48004}, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendfile(r5, r4, 0x0, 0x100000001) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x43}, 0x10) sendmmsg$alg(r6, &(0x7f00000000c0), 0x49249249249265a, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012abd7000fddbdf251400000044000980080001000000090008000100020000000800020051ab00000800626052a1000008000100ffffff7f0800010001000000080002000100000008000200ff7f00000c000980080001000900000010000680080001000600000004000200"], 0x74}, 0x1, 0x0, 0x0, 0x48004}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r7, @ANYBLOB="00022dbd7000fddbdf25100000006800078008000100010000000800020007000000080002000600000008000200000400000c000400f5000000000000000c000400000001000000000008000100000204000c00040007000000000000000c00040003000000000000000c00040002000000000000000c00068008000100070000004800078008000100001000000c000400050000000000000008000100050000000c000300fff6ff00000000000c000400070000000000000008000200090000000800010001000000"], 0xd0}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000001940)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40008}, 0xc, &(0x7f0000001900)={&(0x7f0000000480)={0x1cc, r3, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb9c1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe243}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xee4a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff7fff}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2008000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x922}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x111}]}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffff000}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'netpci0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40004040}, 0x8080) 02:09:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r2, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2290.811456][ T6021] virt_wifi0 speed is unknown, defaulting to 1000 02:09:58 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000008a00)='memory.current\x00', 0x0, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31000000000000000000090c00003c0003000800400000000000140002006c6f000000000000000000000000000014000300ff0300000000000000400300000000010800010001"], 0x50}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x7f, 0x1, 0x8, 0xd1dc, 0x5c}, 0xc) [ 2290.887965][ T6044] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2290.961823][ T6046] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2291.043003][ T6044] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.2'. 02:09:59 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x115000000) [ 2291.085399][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 2291.085421][ T28] audit: type=1804 audit(1593396598.972:2730): pid=6035 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1855/cgroup.controllers" dev="sda1" ino=16366 res=1 [ 2291.175314][ T6056] IPVS: ftp: loaded support on port[0] = 21 [ 2291.434778][ T28] audit: type=1804 audit(1593396599.322:2731): pid=6066 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1856/cgroup.controllers" dev="sda1" ino=16366 res=1 [ 2291.692220][ T28] audit: type=1804 audit(1593396599.582:2732): pid=6067 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1856/cgroup.controllers" dev="sda1" ino=16366 res=1 [ 2291.733288][ T6056] virt_wifi0 speed is unknown, defaulting to 1000 [ 2291.748457][ T6021] lo speed is unknown, defaulting to 1000 [ 2292.007406][ T2771] tipc: TX() has been purged, node left! [ 2292.017148][ T6059] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 2292.051151][ T6074] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 1023, id = 0 [ 2292.174515][ T6059] IPVS: ftp: loaded support on port[0] = 21 [ 2292.206810][ T2771] tipc: TX() has been purged, node left! [ 2292.488874][ T6059] virt_wifi0 speed is unknown, defaulting to 1000 [ 2292.498284][ T6029] IPVS: ftp: loaded support on port[0] = 21 [ 2292.605295][ T6056] lo speed is unknown, defaulting to 1000 [ 2292.697930][ T6094] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 2293.244780][ T6029] virt_wifi0 speed is unknown, defaulting to 1000 [ 2293.623281][ T6059] lo speed is unknown, defaulting to 1000 [ 2293.928345][ T6029] lo speed is unknown, defaulting to 1000 02:10:03 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2300000025000511d25a80648c63940d0424fc31040018000a001100022f000037153e", 0x23}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0xffffffffffffffd5, 0x0}, 0xc100) sendmsg(r1, &(0x7f0000000a40)={0x0, 0xfffffffffffffebd, &(0x7f0000000380)=[{&(0x7f0000000fc0)="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", 0x584}], 0x1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x4000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r6, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r7}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r6, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x81}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040050}, 0x4044000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r3, 0x6dd, 0x4, 0xffffffff}, 0x10) 02:10:03 executing program 2: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x2) getsockname(r0, &(0x7f0000000080)=@nfc, &(0x7f0000000100)=0x80) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000008c0), 0x80000) accept4$packet(r1, 0x0, &(0x7f0000000900), 0x800) r2 = socket$pptp(0x18, 0x1, 0x2) pwrite64(r2, &(0x7f0000000940)="de9dbc788f962c14194c8ac2ead1b2e7e7873e519b4f2b1db39b795fd6e1c4d778c48d0f429320dda629d1a16ad65f2cbb7ae1f95fef63e80d72d3db2ba896dd7d4f323b41cb810ac9955f197f05311b02946a072b2070b5b5388a07e4edf80af8e2017ab8f10e4c05dcb5de9f5c8e0a471edb8d2c74c4c828e9f3fe3c22d63bdd5c10873dff56edc96fa59cceda9dd5d8b474edb5d1755070098eeb439f8a75cd4c63e82ebf0472cd6fe0524555e0fad1ba770cd6332986f64cd8c5cc8f2a80d565835caa1e0524ab63aa2c6dbeba8cf6ea27d27673", 0xd6, 0x7) socketpair(0x5, 0x1, 0x0, &(0x7f0000000f80)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_buf(r4, 0x29, 0x23, &(0x7f0000000fc0)="5dc4027ee919e41463e15e33b20e4587e9062c6a47f00c19ee729a86b6227ce1b9a74d1f7bfb80aee737178bf87d780e697d8648567a7b4c7618a75816a8a2f2a008f2ce97d2d13b51687c32d8ea3f8f9557a538250960158295d488090833a23735444afe0e7db74b3d802e7bf2e4b941509cb997b93bdeaf807cd807a25bac2df91df2fcf213e8c30b96dad547abfa52b4e9784e7251bb47f9d39c6e330826df040755a53f168abba516ce523fd9bc23a3b46149a4d7a1bea25a8240e23c8ee5fd7d7bbfb31979dda69f5913333f8cb3703fa7e8eaa28243c1e62a78428e32dc9dac6137", 0xe5) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000010c0)=@v2={0x2, @adiantum, 0x3, [], "6bbef30cfb6bd35070f8051f4f1dc917"}) r5 = accept4(0xffffffffffffffff, &(0x7f0000001100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000001180)=0x80, 0x80000) setsockopt$netrom_NETROM_T2(r5, 0x103, 0x2, &(0x7f00000011c0)=0x83, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001200)={r1}) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000001340)={@in6={0xa, 0x4e24, 0x5f26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, {&(0x7f0000001240)=""/151, 0x97}, &(0x7f0000001300), 0x24}, 0xa0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0xea, &(0x7f0000001400)=0x7ff, 0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000014c0)={0x0}, &(0x7f0000001500)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000001540)={0x0, 0x8000, 0x0, 0x3, r8}, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000015c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001600)={0x84, r9, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:tmpfs_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x84}}, 0xc001) 02:10:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:03 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x116000000) 02:10:03 executing program 1: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x115000000) 02:10:03 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x24c, r1, 0x20, 0x70bd28, 0x25dfdbff, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0x7f}, {0x8, 0x15, 0x101}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80}, {0x6}, {0x8, 0x15, 0x80000000}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x7fffffff}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x58af}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0xbc1a}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x20}, {0x8, 0x15, 0xff}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2673}, {0x6, 0x11, 0x6beb}, {0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x865}, {0x8, 0x15, 0x8}}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4048840}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0xf9}, 0xc) r4 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000800000008000100753332002c0002001400050000000000000000000000000000000000140008006272690600000000000000655f310000"], 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=@deltclass={0x4c, 0x29, 0x30a, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0xffe0}, {0xfff3, 0xc}, {0xffe0, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x80, 0xfe}}, @TCA_RATE={0x6, 0x5, {0x9, 0x3f}}, @tclass_kind_options=@c_red={0x8, 0x1, 'red\x00'}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @TCA_RATE={0x6, 0x5, {0x1, 0x7}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000000) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000340)={r6}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r6, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000740)={r6, @in6={{0xa, 0x4e23, 0x7, @local, 0x8000}}}, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x25, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, 0x90) 02:10:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2295.389098][ T6179] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2295.419789][ T28] audit: type=1804 audit(1593396603.312:2733): pid=6177 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1857/cgroup.controllers" dev="sda1" ino=16366 res=1 [ 2295.435706][ T6179] CPU: 0 PID: 6179 Comm: syz-executor.0 Not tainted 5.8.0-rc2-syzkaller #0 [ 2295.453251][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2295.463293][ T6179] Call Trace: [ 2295.466574][ T6179] dump_stack+0x18f/0x20d [ 2295.472635][ T6179] sysfs_warn_dup.cold+0x1c/0x2d [ 2295.477557][ T6179] sysfs_do_create_link_sd+0x11e/0x140 [ 2295.483271][ T6179] sysfs_create_link+0x5f/0xc0 [ 2295.488025][ T6179] device_add+0x6ff/0x1b00 [ 2295.492599][ T6179] ? device_check_offline+0x280/0x280 [ 2295.497964][ T6179] ? ieee80211_set_bitrate_flags+0x20b/0x5c0 [ 2295.503942][ T6179] wiphy_register+0x1d5b/0x2840 [ 2295.508800][ T6179] ? wiphy_unregister+0xc10/0xc10 [ 2295.513809][ T6179] ? default_device_exit_batch+0x3d0/0x3d0 [ 2295.519610][ T6179] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2295.525667][ T6179] ieee80211_register_hw+0x2291/0x3950 [ 2295.531125][ T6179] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 2295.536487][ T6179] ? check_preemption_disabled+0x38/0x220 [ 2295.542191][ T6179] ? memset+0x20/0x40 [ 2295.546258][ T6179] ? __hrtimer_init+0x12c/0x260 [ 2295.551096][ T6179] mac80211_hwsim_new_radio+0x2351/0x4540 [ 2295.556813][ T6179] ? hwsim_virtio_rx_work+0x350/0x350 [ 2295.562175][ T6179] ? memcpy+0x39/0x60 [ 2295.566143][ T6179] hwsim_new_radio_nl+0x93e/0xf8c [ 2295.571154][ T6179] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 2295.577041][ T6179] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b3/0x310 [ 2295.583970][ T6179] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1bd/0x310 [ 2295.590890][ T6179] genl_rcv_msg+0x61d/0x9e0 [ 2295.595393][ T6179] ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310 [ 2295.602773][ T6179] ? lock_release+0x8d0/0x8d0 [ 2295.607431][ T6179] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2295.612715][ T6179] netlink_rcv_skb+0x15a/0x430 [ 2295.617465][ T6179] ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310 [ 2295.624429][ T6179] ? netlink_ack+0xa10/0xa10 [ 2295.629017][ T6179] genl_rcv+0x24/0x40 [ 2295.632987][ T6179] netlink_unicast+0x533/0x7d0 [ 2295.637755][ T6179] ? netlink_attachskb+0x810/0x810 [ 2295.642868][ T6179] ? _copy_from_iter_full+0x247/0x890 [ 2295.648219][ T6179] ? __phys_addr+0x9a/0x110 [ 2295.652714][ T6179] ? __phys_addr_symbol+0x2c/0x70 [ 2295.657741][ T6179] ? __check_object_size+0x171/0x3e4 [ 2295.663034][ T6179] netlink_sendmsg+0x856/0xd90 [ 2295.668743][ T6179] ? netlink_unicast+0x7d0/0x7d0 [ 2295.673672][ T6179] ? netlink_unicast+0x7d0/0x7d0 [ 2295.678766][ T6179] sock_sendmsg+0xcf/0x120 [ 2295.683169][ T6179] ____sys_sendmsg+0x6e8/0x810 [ 2295.687918][ T6179] ? kernel_sendmsg+0x50/0x50 [ 2295.692663][ T6179] ? do_recvmmsg+0x6d0/0x6d0 [ 2295.697244][ T6179] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2295.703208][ T6179] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2295.709166][ T6179] ? __lock_acquire+0xc1e/0x56e0 [ 2295.714089][ T6179] ___sys_sendmsg+0xf3/0x170 [ 2295.718663][ T6179] ? sendmsg_copy_msghdr+0x160/0x160 [ 2295.724027][ T6179] ? __fget_files+0x272/0x400 [ 2295.728689][ T6179] ? lock_downgrade+0x820/0x820 [ 2295.733528][ T6179] ? find_held_lock+0x2d/0x110 [ 2295.738278][ T6179] ? check_preemption_disabled+0x38/0x220 [ 2295.743982][ T6179] ? __fget_files+0x294/0x400 [ 2295.748649][ T6179] ? __fget_light+0xea/0x280 [ 2295.753227][ T6179] __sys_sendmsg+0xe5/0x1b0 [ 2295.759803][ T6179] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2295.764810][ T6179] ? __x64_sys_futex+0x382/0x4e0 [ 2295.769993][ T6179] ? check_preemption_disabled+0x38/0x220 [ 2295.775702][ T6179] ? do_syscall_64+0x1c/0xe0 [ 2295.780274][ T6179] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2295.786243][ T6179] do_syscall_64+0x60/0xe0 [ 2295.790644][ T6179] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2295.796605][ T6179] RIP: 0033:0x45cb19 [ 2295.800473][ T6179] Code: Bad RIP value. [ 2295.804524][ T6179] RSP: 002b:00007f4b3469bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2295.812915][ T6179] RAX: ffffffffffffffda RBX: 0000000000502440 RCX: 000000000045cb19 [ 2295.820868][ T6179] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2295.828908][ T6179] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2295.836869][ T6179] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2295.844822][ T6179] R13: 0000000000000a39 R14: 00000000004cd203 R15: 00007f4b3469c6d4 [ 2295.948266][ T28] audit: type=1804 audit(1593396603.832:2734): pid=6176 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir572905914/syzkaller.nYoq3G/2374/cgroup.controllers" dev="sda1" ino=16364 res=1 [ 2296.110939][ T28] audit: type=1804 audit(1593396604.002:2735): pid=6182 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1857/cgroup.controllers" dev="sda1" ino=16366 res=1 [ 2296.173638][ T28] audit: type=1804 audit(1593396604.002:2736): pid=6177 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1857/cgroup.controllers" dev="sda1" ino=16366 res=1 02:10:04 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x117000000) 02:10:04 executing program 1: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x115000000) 02:10:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:04 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005070c022d640000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0xe00, 0x0, {0x0, 0x0, 0x0, r6, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x1f4, @dev}, 0x1c) r7 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c, 0x80400) getsockopt$bt_hci(r7, 0x0, 0x2, &(0x7f0000000780)=""/49, &(0x7f00000007c0)=0x31) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=@newlink={0x24, 0x10, 0x800, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2, 0x4a080}, [@IFLA_VFINFO_LIST={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x14, 0x2, [@TCA_TCINDEX_CLASSID={0x8}, @TCA_TCINDEX_FALL_THROUGH={0x5}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 02:10:04 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000001340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x54000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x810, 0xffffffffffffffff, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000180)=0xec, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001240)='^\x97\xd9\xc1d.%\xb2\x03\xc6]\xd8\xc6\x04\x00\x00\x00u\xe3\x8f\xbb?\xd3#D|\x8ea&\b\x91\f#\xbf\"'}, 0x30) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004030}, 0x816) sendfile(r5, r4, 0x0, 0x100000001) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) [ 2296.465740][ T6179] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2296.501291][ T6179] CPU: 1 PID: 6179 Comm: syz-executor.0 Not tainted 5.8.0-rc2-syzkaller #0 [ 2296.509841][ T28] audit: type=1804 audit(1593396604.402:2737): pid=6204 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1858/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 2296.509959][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2296.509966][ T6179] Call Trace: [ 2296.509988][ T6179] dump_stack+0x18f/0x20d [ 2296.510012][ T6179] sysfs_warn_dup.cold+0x1c/0x2d [ 2296.510034][ T6179] sysfs_do_create_link_sd+0x11e/0x140 [ 2296.562840][ T6179] sysfs_create_link+0x5f/0xc0 [ 2296.567625][ T6179] device_add+0x6ff/0x1b00 [ 2296.572068][ T6179] ? device_check_offline+0x280/0x280 [ 2296.577464][ T6179] ? ieee80211_set_bitrate_flags+0x20b/0x5c0 [ 2296.583470][ T6179] wiphy_register+0x1d5b/0x2840 [ 2296.588363][ T6179] ? wiphy_unregister+0xc10/0xc10 [ 2296.593581][ T6179] ? default_device_exit_batch+0x3d0/0x3d0 [ 2296.599082][ T28] audit: type=1804 audit(1593396604.492:2738): pid=6205 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir572905914/syzkaller.nYoq3G/2375/cgroup.controllers" dev="sda1" ino=16376 res=1 [ 2296.599408][ T6179] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2296.629850][ T6179] ieee80211_register_hw+0x2291/0x3950 [ 2296.635616][ T6179] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 2296.641021][ T6179] ? check_preemption_disabled+0x38/0x220 [ 2296.646756][ T6179] ? memset+0x20/0x40 [ 2296.650747][ T6179] ? __hrtimer_init+0x12c/0x260 [ 2296.655656][ T6179] mac80211_hwsim_new_radio+0x2351/0x4540 [ 2296.661429][ T6179] ? hwsim_virtio_rx_work+0x350/0x350 [ 2296.666826][ T6179] ? memcpy+0x39/0x60 [ 2296.670829][ T6179] hwsim_new_radio_nl+0x93e/0xf8c [ 2296.677097][ T6179] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 2296.683032][ T6179] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b3/0x310 [ 2296.689992][ T6179] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1bd/0x310 [ 2296.697047][ T6179] genl_rcv_msg+0x61d/0x9e0 [ 2296.701580][ T6179] ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310 [ 2296.708805][ T6179] ? lock_release+0x8d0/0x8d0 [ 2296.713500][ T6179] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2296.719157][ T6179] netlink_rcv_skb+0x15a/0x430 [ 2296.723944][ T6179] ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310 [ 2296.730903][ T6179] ? netlink_ack+0xa10/0xa10 [ 2296.735542][ T6179] genl_rcv+0x24/0x40 [ 2296.739545][ T6179] netlink_unicast+0x533/0x7d0 [ 2296.743022][ T28] audit: type=1804 audit(1593396604.632:2739): pid=6217 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir834134059/syzkaller.j6s4N7/1584/cgroup.controllers" dev="sda1" ino=16361 res=1 [ 2296.744321][ T6179] ? netlink_attachskb+0x810/0x810 [ 2296.773707][ T6179] ? _copy_from_iter_full+0x247/0x890 [ 2296.779106][ T6179] ? __phys_addr+0x9a/0x110 [ 2296.783826][ T6179] ? __phys_addr_symbol+0x2c/0x70 [ 2296.788870][ T6179] ? __check_object_size+0x171/0x3e4 [ 2296.794173][ T6179] netlink_sendmsg+0x856/0xd90 [ 2296.799312][ T6179] ? netlink_unicast+0x7d0/0x7d0 [ 2296.804280][ T6179] ? netlink_unicast+0x7d0/0x7d0 [ 2296.809231][ T6179] sock_sendmsg+0xcf/0x120 [ 2296.813703][ T6179] ____sys_sendmsg+0x6e8/0x810 [ 2296.818482][ T6179] ? kernel_sendmsg+0x50/0x50 [ 2296.823170][ T6179] ? do_recvmmsg+0x6d0/0x6d0 [ 2296.827774][ T6179] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2296.833773][ T6179] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2296.835518][ T28] audit: type=1804 audit(1593396604.722:2740): pid=6218 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir834134059/syzkaller.j6s4N7/1584/memory.events" dev="sda1" ino=16362 res=1 [ 2296.839754][ T6179] ? __lock_acquire+0xc1e/0x56e0 [ 2296.839779][ T6179] ___sys_sendmsg+0xf3/0x170 [ 2296.839800][ T6179] ? sendmsg_copy_msghdr+0x160/0x160 [ 2296.839818][ T6179] ? __fget_files+0x272/0x400 [ 2296.839839][ T6179] ? lock_downgrade+0x820/0x820 [ 2296.839852][ T6179] ? find_held_lock+0x2d/0x110 [ 2296.839877][ T6179] ? check_preemption_disabled+0x38/0x220 [ 2296.839898][ T6179] ? __fget_files+0x294/0x400 [ 2296.839922][ T6179] ? __fget_light+0xea/0x280 [ 2296.839945][ T6179] __sys_sendmsg+0xe5/0x1b0 [ 2296.839962][ T6179] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2296.839976][ T6179] ? __x64_sys_futex+0x382/0x4e0 [ 2296.839990][ T6179] ? check_preemption_disabled+0x38/0x220 [ 2296.840014][ T6179] ? do_syscall_64+0x1c/0xe0 [ 2296.933661][ T6179] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2296.939662][ T6179] do_syscall_64+0x60/0xe0 [ 2296.944093][ T6179] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2296.949988][ T6179] RIP: 0033:0x45cb19 [ 2296.953875][ T6179] Code: Bad RIP value. [ 2296.957937][ T6179] RSP: 002b:00007f4b3469bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2296.966438][ T6179] RAX: ffffffffffffffda RBX: 0000000000502440 RCX: 000000000045cb19 [ 2296.974414][ T6179] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2296.982389][ T6179] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2296.990373][ T6179] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2296.998368][ T6179] R13: 0000000000000a39 R14: 00000000004cd203 R15: 00007f4b3469c6d4 [ 2297.027017][ T28] audit: type=1804 audit(1593396604.922:2741): pid=6218 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir834134059/syzkaller.j6s4N7/1584/cgroup.controllers" dev="sda1" ino=16361 res=1 [ 2297.221831][ T28] audit: type=1804 audit(1593396605.112:2742): pid=6211 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1858/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 2297.462702][ T28] audit: type=1804 audit(1593396605.352:2743): pid=6218 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir834134059/syzkaller.j6s4N7/1584/cgroup.controllers" dev="sda1" ino=16361 res=1 [ 2297.845942][ T6221] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:10:05 executing program 1: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x115000000) 02:10:05 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x118000000) 02:10:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e35, 0x0, @ipv4={[], [], @rand_addr=0x7fffffff}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 02:10:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x82, &(0x7f0000000340)={r4}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r4, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000200)={r4, @in={{0x2, 0x4e21, @remote}}, [0x2ebd, 0x2, 0x1, 0x8, 0x8, 0xbd6, 0x401, 0x5, 0x5, 0x6, 0x1ff, 0x5, 0xffffffff, 0x7fff]}, 0xfffffffffffffffd) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r0, 0x0, 0x100000001) accept4$inet(r5, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0xbc}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 02:10:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x103, 0x103, 0xc, [@func={0x5, 0x0, 0x0, 0xc, 0x5}, @union={0x4, 0x9, 0x0, 0x5, 0x1, 0x5, [{0x2, 0x2, 0x401}, {0x10, 0x5, 0x3}, {0x9, 0x2, 0x546b}, {0xe, 0x0, 0x9}, {0x7, 0x0, 0x1}, {0x0, 0x2, 0x7f}, {0xa, 0x0, 0x4}, {0x5, 0x4, 0xd0}, {0x6, 0x1, 0x101}]}, @datasec={0x2, 0x7, 0x0, 0xf, 0x3, [{0x1, 0x5, 0x1ff}, {0x4, 0x9, 0xd7}, {0x4, 0x80000001, 0x3}, {0x4, 0xfffffffb, 0x80000000}, {0x4, 0x31ec}, {0x1, 0x1, 0x3}, {0x4, 0x1ff, 0x80}], "839991"}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x2e, 0x0, 0x12, 0x2}, @func={0x6, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x8d8ded4962cba84, 0x0, 0x30, 0x5f, 0x5f, 0x0, 0x2e, 0x30, 0x5f, 0x61]}}, &(0x7f0000000900)=""/164, 0x128, 0xa4}, 0x20) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x80002, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$unix(r3, &(0x7f00000006c0)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f00000002c0)="6a154e60b19d3618c645a61e2abb2b676bbf565740d05211fbe9a62c91fb7622dede2270bd05b3750e628461641007bdeda2340d78a42f1127bca90ac7e5fa4313fb2644f8d837466dfd05889bc515eb05cc553c3fae57f0bd8301dfa78867aadb488433758122b99112bc45e3e46822ed9b82689ff1f384cd1e471911e9cd57916c8c6f28ed54", 0x87}, {&(0x7f0000000000)="8f3ace4b6a766e453e3229049c0523ac0e78b7929e45ab8257f6ca5b45b32424eb72dd51863f81d78dd6b8", 0x2b}, {&(0x7f0000000100)="70241c49d85a353827fd16cc21a3", 0xe}, {&(0x7f0000000380)="fbcb5e531a557f078bf0c43df860c0f84d540a64e7ee0e88032a94962d21edad85b75b1d4eba862719482a39aaaaa03e3bfcd6ab940fe6553f68111fcdb698c13ca4e739f0f1b2a8", 0x48}, {&(0x7f0000000400)="ade64c41c9d4a273f733a7b8bb25b686a770759f3a6843e838780ae9ced8108050e6d540c09e163ff9114869bfa58759bfa1bde20d259d70f1d7f312a60982ea9e437607f13318caec7f521f869b9e80c23e1fa5f3ea3b77e3eba3474be02933d6d5875bcce6997cd59bb95541de0cc34a8fecb84758b01eb60bce1df02b6c24816cbf4f5a0ffbeb0dfe23c7307014267b340ca28f26cd3ae5722e2e131ee5cb", 0xa0}, {&(0x7f00000004c0)="540ae89df3d21707fcb768aacd691327dc70a950ed47fe36320f6a1d5da4b0d4ca3e43bb2e401f0a84cbc70bad8e1659a30517b58979ca1d351a7b13c6d0b8663139c32db1debc49dc5a9955a4ee51e184ddc61b5d02ce92ab79adcf59e525d022445cf309a7e8abafad3c78043e1e1fa84f", 0x72}, {&(0x7f0000000740)="a0b9c607a990b5d6194f441a456c04a7de51dbeadfa0b88477b7d004fbbe9e", 0x1f}, {&(0x7f0000000540)="ef8bf68c64c9527bd4d2ecf2d629d9035d811dbcab0a0db723f7b60adef5045e5e28f5693488d55b3d4d9751438518e7bededcf3df50144f1a8f9916cd72590e81256d51e7388a4a95bd5147fe8cdd59a7f876eb85677aa01474f1627704b04fe2190d6f65fcb8b22c4c609896b123e9289486ad54d5d3", 0x77}, {&(0x7f00000005c0)="900575c34d1d097798525b4c063d0466c62e80d83b39f49839d04abe5d97f4fab8c361d614", 0x25}], 0x9, 0x0, 0x0, 0x881}, 0x4000820) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000700)={0x0, 'caif0\x00', {0x1}, 0x6}) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000780)=0x4) r4 = accept$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) unshare(0x4060000) sendfile(r2, r1, 0x0, 0x100000001) 02:10:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2298.144098][ T28] audit: type=1804 audit(1593396606.032:2744): pid=6254 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1859/cgroup.controllers" dev="sda1" ino=16374 res=1 02:10:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2000005d9cd1d7a30000000000000000000000000900012073797a3000000000140000001100010000000000000000000000000a"], 0x48}}, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10, 0x40000) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) sendto$inet6(r2, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r2, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000240)="e73acf30c115ca483a875fd843fb8743e096b604fab1efe583fc1a1f56767eeb1c92ae0a47f947182445c1b2ed2b670f9f5990b611888104ad9ffd0dd6fe61c1ee0c40a16b04b67f1c32d7687563843dc52d64417e3e09f713e48127c007062042b552bba178aa53c48eff092d7d7f39579dba193dd6def61b21fb7860688ec13e0936c79c8669ede88310d573841cc71deb9a9cdfc2957450c83d32bc87bbd50ba68dda2252b0bf511d1a97ad389c37f3e62346a5c3ad2cadd329ac8e34a8dd0775ca7ed584ea61de61d944b19c3bd3d144e909f5e1228ad4b28a7021c4effc4319345ad35191d4b122b14a90aecf9e154b4345b5250b40befe31e13b6804172a6cd1ea9007640ddc7c167d4fc2ee51b4be717d9826e9028f0a25041c0ad58e9c6973fdcf470b859c916b2959177650c7e74d014d764600442112bdf254b844fff7377728a41390f6ac36a6c33b513b06dfd1e2bbeece771d6232331afed6878ebb7e38bbe3cc75915262c5d79644de02f709d78737218f5ad6e39aadc0375447243c4a3925eb661fc11d307131ad255cfe25d016498b3e0a0421d47bebb4fb35d65dbc9b56baaa541d8440c25ab6f6e00db95da450e22ef49c31be7bbb44ee86f557acdce04dfeac91745794aa3854ad65b443d2ffea18d31989b53e2436f413381a1a5d11284f3757abb3df7fc9d2690437172ac10a007d8b0074b9070e560f6504906c83de21a67b6c0eb2e3f26545d0606175f4257ac077b892381f73429ae99ee4d99d1dc5136476e032d3ccd2ac69dcbc4210959262a2806657bbc403479103240c49139b2d859cc81d606c694242caa1c5518e422cac75a57f65ed3976d51092f8863608fe7d3b762fa142b61d44c078e9aac94f72ab71b83c56816171b00150d0cf4f45d51c88d0c514cfd6add7db4dd3bb2999051dcff42ed3f39b329da091d5cdc8a870e16c973700297a289a17dcfaa44ece8ed5444447c97af8ac33c95bd54ea4a7bdf4a55f3bfaf49c8b400f9583bad76820a80ad4bf226b765de32d50c93cedd29be4eefc3a5aec53e0add4faddf28678187489683a9a55d479f6de5969da805b1d9723aead563f023d33acaa541aaf8bf4d028fa425bc1f9da104e35e6605503dc99bc692e74f2448784f393c5fc28f2789ed498a421d00febe0c4b00dd4e446b513ec1015275ad94f8bd6b949178ad2995f66d830217897d5132c5aa82a5e6bbf432ac4686db7a1f7e853a8b9e189c513248257800530df1f91428fc0f52f65e1ddd4cad0b2a64948beb24fc717cf9467e7d97b257d59cecee54f03f2e74c20453bc3922f800ff97a03805b7fa344e60aa21586950e87b736a7d2d2bfc71adf20f19b1cdb8ca87cefb50a5192f7ddff7da08f531f734e3cc0c78b49ba6e20f72a3dd87c056d48c87483b34499557af8d6bcb86ae8ef5621293d697051979dda969cb54cc3f09135e2335482aa4c0975f84f559e6af244c6f895e0888aa1195c1d6927bca57baf6e5f8e542035d078291c654ffa8e6469067ca19e50a5ee4c60492451b4176ef4391322f8ee7118d461d2b588a518247d693e541b433c2738314e056e19bb2386bd673575a24ecea51ee277d563e3dbb0518a95cc2d45d6a79c298a05b42b4cd7dc49fb4d84a05588920861442c8694b6eeda4ce2be99dbb3fd1903aff7db91e69b1198861454802979ccbae143f71dba85cf8a9678e2b5ac436445194428d8c4a4fcf61fbc7c88168c8b92aad7725cee192df105da20e23db21b06715468ef4afc139b155e05e4072614f931074ff8087a651414881162fdead94353f06a12697ebb401a64159f662bb0dae1fc153de93d68ac8e2ad04ff3c66a9eae91985e8ecf07072a6343620a3904283de7df10f10d528ddf1d5d23a3140d0b628a557ab84ab3519c7b432b6664d5d38c8c4e6c426e30f17c62c9f174f2f9f56435fc5826bb9debfe705eecb32d027600b1747c1d61ceb56b5b03a4d181b89ee004d7d62037d57d2992296dc81f3bfe22aad6fb5bc3bd0dac5b59859c3da6f4725953e06d0579b1062cd524ad4c5c80dce0185428bcaf3ef22f3eb2ece8bcf77f4ab0aebeb16d22324f596b7bbf68e69d994958b7e3353e86dfb1aceef86a605c7a8a19a536d8df40ccf2ef77a499f58196d2c1be18e2629e084551044d62d88b61875ef2827de570942c5648088defcae9fef1c9a0258d13d92b2f7f861c4bf6bd89bebad9f272fd2121ae4e7167f9f1ce04e79b4e979251e5d2645a3477dca4435427d8669006d27973d71b7ad1c6764b79ab9be1881dc2ee13e006fc018a1f507de0a225a2847427aed2676c424f94ce27401e1f507d7489117748d1962933a52c23eb7def22d6a12c7bceeee607996f6941dc9dd974cecf8075ce12438db33a18cb356fe6b5fb1d732de76ef32e9a8a7dd14aac5995f543530e55fc52cb9997039f1290f225e041fde3d1ce60925a622661004947394f78250108a5496d9ac9e6213501df82c326353a3ef659ae8de30e40078083ba9dd9a7a5ed91a849ec5d27b95dcfb06977f3896fcbd108441b827e41e3c10d145d524ad999ac4ea634f3c1c396c696454a906242bb0a18c623691977d8e8caf84d1d045e616978d84d59bd4fe4aeeaadf156c9da8b6e2ea9e3f33c5ca13e7ba58fe4db70c2f5bd25b7e05de32a5622a281d78e790cb6d7e387358e661d0ad130ae4476a199d10af0e12d2db60f26277ae1b8eb1cb14cf9d41112b61e313d0acf4034c5cf90dbf94992efe9218b8fef76f011fbe7daa3e5d01a02a75a3965606217c40fe720e164576496e2a48ce7985705532f073c5772537c0d142100e0465e80e3e6ce64896d409632394798d6c771cc79e6ee2043a46c1771c442e4f20e8bdd1dacd277e4ebcb07e1c37c46813189e673fd55f24a11842a04b150750d0ea398b6a5755888c8878ecc313df351e44063b7bdc5990292eb407e4c79a6cb051d25fb3c513a256b7541ad82beaeb0c70bc53f0d7b03fa5ef96e201a7c67c71189b537a8cd28ed47b90a6b522fdf1f24ec39bb3a24794fe4870eb6d2278350e4367bad060d002901cea010f448400f7dce52d0f3c51300cbfcbfe614c805a7b9785fb31d455128299e1865398f85c143dd48b30be04a61a26f940b9a850313adb16403f201e4dc2d052098e2497fdce9d48ac59676546230f8258cd601c3dd650ce017cb78d9d281a5f8a831ff9ef0031d00ac5fb4bd4b9107b0007315e5724a95404ceeb40064d157a62f3cf9b1caa709a8504a93406a13865685b20e299f1727cc3a8253514415aa1c2ea4c3e06832eee595997744b81a23eab52d31863b8b34b889b8c66ae36f2db4269f817a864dc9445b357a4794d3f85950ee8a3f316a65e56de4fb0cac444a5796d9784b1830887c3ea6739e3031623c88ac35f0ed33813e8495d4d1c7f6197ad07968ed1a952ec6def0c21819f02537ba87cc300a08caec572e542e8bd819557d35f976ef54aacf298ea8b47fd10c9255c2dbcd0066d2c12424cdd608865a50f1eec5dc26b52e89f27dfeb7bbc0b43bafffff53510d9819016730485f5311255242e627ea5746c5cc337cc5d3a793b7afc7623da9c04451c57cf090b69423f69a22fea5d4e83aa73b33c957e635ec594e8a765e122dbecdb8386b74a4c2771c382a3ff5c1f71d7bfc42beabc49891b7304fa5a427c7b3d2cb64fe00b1f8b15623fcc6074dac57ad9f77d90a0e4f869e7969847388122be6f02dad5f3360dbd91ccc340c71bb51d9e3c2d6451d316e4f08e64f8559bcc83e22b3fefb67b8bf2e6ec5a087d42d9739fc492ed664b33697c64a2034f337bb2a022f2be7838f31d2b979357cf815cd09fad3324f8d85473970f99cc088780ae277f6b695fb39dc77e484a2faf1eca08efc489d1dbb90951023187215c05c30dc90007d28b98a61c42ff73f0fd0205f680cc67b30145b13f73a1a478de063b7fae21284a4ee71c0f8f13e4c24818608f85da6c7523226282f911f251252864d3e993d18a585ec56843b970a5248e6b884642f8ccea59de704f339ed1d5bcdd83446741b912d6a913ae930ed96a744c760327f214a92b9a9b1c939e13852e3eda49c54773edb66f6b6db731a4f1a92bb7c31836e1872b9b6618c2bf5d42398888c5b36141b5bc84d9cf4ccc7b7b848a15ed899f8b7168aa2745c9f4cdb1209e620f1c2b4114691685d3748c5a782bc7c16607d77bfbb7be881c044b867e75efb3aeef6dfdf93d8dcdd12e845b5f011f54889eb95e7c65e76642419758f2e732b2424d1196513d40a668a8c058dabee220fcc52189718dec11b4cfb2849189b0db69761f506092db1902c339137e28b32e0888ac70476fb0315bbcc0b4c8a54482d1c2a7dcfd98c77191d56fb4cc7810f3fbb98f4d366392705833beb5b5fe100b9ec9477ec21b6c23a46da61d874a192a568c23aee38c02240014b6e9656eb958ddd220fd8deb6af43d4c8deb6218d8a29d765ab5d73c7bf444051d22c7dd96073b59cf813daead6ee8bcc21b6cb411385ce19e2d8b3ed807eeb9970ee7f6b1b6cc3d79aaab0c8e1c67122a79a8769b68697cbcdc361cd30e1c6bcbb4db9ada26c440ddcaa1f9755054ef55029233837defdc43bfd100228e5c3616e9f71b95017fc88e7fd9f868de42ac5a149bdc5ac286e52a77e184a6cd1b0abc0f8c56719253ef73a9b2649b07b948278215fe5a40789cab0838b50672189c9f419b0ec6ea9d73e1fc33d5273e79a5ec7fd392be24475ba48385f6e9d9b32906cbca8f85da03f39c0ad5ec7fe57fcc24bbc7bbf490d8067c58c4734aefc558e67423b2c9b75b7ed67285ff9b9137e4d6fef1d5fe4f234a47542ff07e54062f9da313c6ecb2466ef0b3149c94cfadb4aa31a13355dc5a2416b9db0c2eec92879e97c84a4755af9e9aa0f43452769afd92f183347cb4dece5212c63597aaaff525bf97d750e53da0e09a82957830b54e10bd5e0742ad4f0b2264f64d6f8e13044c973c1abc4931411e097c65e9e1cb18b1926e7121728b0f43ffd8842fbe98477a0b353a4e59eeb2364ee0f80a7a319755242b5417d79a2b5b7f5170ecb71bf4cea5f7f5a1f93fd69a9435c682d7909ce7ee52aa535f7956d25e621b4b698010fedf570645006158f205c0c6ad42827371d18aacb072af258d0d98b1fe24b53250c63578976e06e766dceb9f8c5db30e7c54acd6e0d24ff7ff2dd24630e74df899afa43668c001db1734ecf762103975e45a2b24cae87bd5ac3726a71cfcf36c7a603fb13ef49591a2e8c5472fd35a389525e1d1749de1c33d8e3cf658529b51d708604c8d4a870fcbd00e2129c4e73de087c86089ee5b8866c7d70e89cc45c260d88af40e7df71e8c500393ac484ad51fb94b4d53093acf7ea948446dc8ab5227a9891037fdb004a9eefc569086d0c2b11281d092a7d69b8e6c5bb40626e5fd5c30bf057adc2877f60d78d6c141a6710760d97b7381c583967b946844df1db776eef9e7abd31807c6ac56dae99e15da259abbb1c8dbe59bd0d38a6783c85d3e730e27fc4f145222cf4f7233c9b77cdcb476c48fc90ffaa1efaf91e20194ea4250175363c18e5621f422f2f974ba8d3a787d32626ab02bb66e9d3bc6d115393041aee9a10eceec17e08213969c8cc91818422c2452170b01fa675c1036f52c30bcb8d8ab98c01cc835c38dc89790377250d8ee5e8bb094ce53ebd07c853ff484e0f45eb522d04d5c4b7b647bde3780f004121bd0c058921dc8675c32804edfe96ce7f39", 0x1000) 02:10:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:06 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x119000000) 02:10:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000006d5e03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) bind$pptp(r3, &(0x7f0000000440)={0x18, 0x2, {0xa4f6, @local}}, 0x1e) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x200, 0x70bd2a, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008080}, 0x4048000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6, @ANYBLOB="f5d01a031070f3884f7e701f43d22373aaf4851b162911d93a09079d9d5b65309f02ce845e4dbbae5019751239df57a2dae30344a39b6e2bcaeb2231be0ca43b22e9147adb5d07373d7b72d9d276104abfec0d6d492bbb4d907d1b9ae1c2a947a05fa81cf75f42b3ffd5e70713d5c5acb54785760ece67534d7cf0c9400048124f4541a27388a78d888e9486bb6ec1efed78ca21b103776803bbbcf5acae561b2c734245d82dec1d23df012ef45daf11022c7edef3950dcc54a64e6771545d1d76ff32a63a8f309d"], 0x3c}}, 0x0) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000080), &(0x7f0000000400)=0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r9, 0x40112}}, 0x20}}, 0x0) 02:10:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x3f, 0x4) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000003c0)={0x6, {{0x2, 0x4e22, @rand_addr=0x64010101}}}, 0x88) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8, 0x0, 0x2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x8}) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000480)="4685f8fd3e23a7b7b6d3d39d5f59f1ae0210c347eddcfe860fe1472b773ebede4d9b8d734eae30ec7634747a8c51dd9010fea712a2764a93d57620632558238a85137cca964af02fd4319ba2f880045fe585eafd49fc955553df9cab03479f770254c9456d633cc31dbf4b4b184019093198225801eff929d46ba8279cf21e630d69f0e504d831dc1f78b052b2de520ea8dfe7378b99eb4acc58ee445e59a2a0a8ce98a5a5737cf09b6f1577bd6aaa4a691f0d3b02670300000000") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000f2ff00000a000100726f757465000000180002000400060008000400", @ANYRES32=0x0, @ANYBLOB="0800030000000000"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={@empty, @private0={0xfc, 0x0, [], 0x20}, @empty, 0x100, 0x7, 0x7369, 0x80, 0x9, 0x280}) [ 2298.853045][ T6283] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 02:10:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f02b57cdcde0000000001000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000300)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x70, 0x0, 0x302, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7fffffff}, @NL80211_ATTR_SCAN_SSIDS={0x30, 0x2d, 0x0, 0x1, [{0xc, 0x0, [0x2, 0x3, 0x19, 0x1, 0x0, 0x17, 0xa, 0x16]}, {0x5, 0x0, [0x19]}, {0xd, 0x0, [0x14, 0x0, 0xc, 0x20, 0x1e, 0x10, 0x8, 0x1f, 0x9]}, {0x5, 0x0, [0x13]}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x80, 0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x400) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x4c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x1c, 0x2, [@TCA_CGROUP_ACT={0x18, 0x1, [@m_nat={0x14, 0x0, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x4c}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$netrom_NETROM_T1(r9, 0x103, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe6c}, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x14, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0xfffffdd9}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe6c}}}, 0x24}}, 0x0) [ 2299.162290][ T6288] bond15: (slave bridge23): making interface the new active one [ 2299.214889][ T6288] bond15: (slave bridge23): Enslaving as an active interface with an up link 02:10:07 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x11a000000) [ 2299.274698][ T6298] bond15 (unregistering): (slave bridge23): Releasing active interface 02:10:07 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x11b000000) [ 2299.804353][ T6298] bond15 (unregistering): Released all slaves [ 2299.870141][ T6339] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 02:10:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2299.982002][ T6283] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 02:10:07 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000d00ea1100000005000000", 0x29}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 02:10:08 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x11c000000) [ 2300.166339][ T6345] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2300.212510][ T6409] IPVS: ftp: loaded support on port[0] = 21 02:10:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00', 0x0, 0x18}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003880)={r1, 0x0, 0x9c, 0x0, &(0x7f0000000180)="88f14dfec3c7646dd28af06ef46b423047cb7e4730d5d211cdd85376a9973aed7e3d932c29d8423abd15037964053d72f08516bd0d32dd1896f019d234cc80d19941172afa5cbb5cfdbc8b409065d8d73686dc0767356ca22330edbd986a6d9fda848d382370cb4ec0118ea1d94a7d67a62896b2abaa2c43d16ddd86ff132512a88d364b0479c2352e6272c0c2fdb1a86bd44b1624fc9cd1f0a98ae9", 0x0, 0x7}, 0x28) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000003740)={0x84, @multicast1, 0x0, 0x0, 'wlc\x00'}, 0x2c) setsockopt$inet_udp_int(r2, 0x11, 0x0, &(0x7f0000000040)=0xfffffffffffffbc7, 0x4) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000e80), &(0x7f0000000680)=0x68) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0x0, 0x0, 'lc\x00'}, 0x2c) getsockopt$inet_opts(r2, 0x0, 0x20000040000a, &(0x7f0000000280)=""/109, &(0x7f00000012c0)=0x1b0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000f00)={0x40000000, 0x1, 0x8, 0x9, 0x0}, &(0x7f0000000f40)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x18}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettaction={0x18, 0x32, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettaction={0x18, 0x32, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000f80)=ANY=[@ANYRES32=r3, @ANYRES16], 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000001300)) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f00000003c0)={'HL\x00'}, &(0x7f0000000400)=0x1e) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet(0x2, 0x8000b, 0x6) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x200600) accept$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001080)=0x14) r11 = socket$inet6(0xa, 0xa, 0x0) sendmmsg$inet6(r11, &(0x7f0000007c40)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000001500)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001380)=ANY=[@ANYRESDEC=0x0], 0x18}}], 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000001280)={@rand_addr=' \x01\x00', 0x10, r10}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x0, 0x5000000) write$cgroup_subtree(r8, &(0x7f0000001600)=ANY=[], 0x23fa00) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x80005, 0x10000000000001) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f00000010c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/80, 0x50}], 0x1, &(0x7f0000001200)=""/61, 0x3d}, 0x2000) recvfrom$rose(0xffffffffffffffff, &(0x7f0000003780)=""/236, 0xfffffffffffffee8, 0x60002002, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast]}, 0x40) ioctl$SIOCRSACCEPT(r7, 0x89e3) 02:10:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c000280080009007f000001a3beaf8058cf7e452c69dd089807253f223bbfa8e7e7beff7ee468b727d2abb356d27d0e2a658a84befa7007e0d3ae3f92d812cc2059831b80e085ba30562c12d7cd98d3f80958d3d5446543e01884ffb10f"], 0x38}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x1c, r5, 0xc694d42685586125, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000129bd700049d95da04cc0d39e6896014aa401005799be82c0d06d0080000000000b424851a70e376ff5aedb7ad1f9654a383adbc550de9f15913e240196901df76e99388412959a628642e14f113b63116786d0359e0b11654b301488da3a0034fd8042617df96a726b85e35a8dfbca99a968f49620f5eb090635098b4f280f468f511811e05f249e8745c7cb611e3e7e0a4a614f05571ee4d923637842"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x840) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005070c022d640000000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0xe00, 0x0, {0x0, 0x0, 0x0, r9, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)=@ipv6_newroute={0xd0, 0x18, 0x2, 0x70bd28, 0x25dfdbfe, {0xa, 0x10, 0x10, 0x6, 0xfc, 0x3, 0xfd, 0x7, 0x3c00}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_OIF={0x8, 0x4, r9}, @RTA_METRICS={0xa2, 0x8, 0x0, 0x1, "842a194a2e5905f569bdf057437bd21801f55f84c418186da46c1f906c16ec87fcf89da17efe29dfde821653e423f9626032bc56f8b0753ee16550dbf71e8bdf19b75e4b7d6425c058b1e7ed478dad95598dcabad011075dc2a712a416bc0f7d39fc31b3f91352eba79d752f220daa89c3b8f41fc22114a0981d5bcbbe099cf7ce999d0710d94a2d2fb1f191ddeec19060afcf931ace2baf40859a3e389b"}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8018001}, 0x44880) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r5, 0x77683c5adb1ce876, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) [ 2300.347216][ T6409] virt_wifi0 speed is unknown, defaulting to 1000 02:10:08 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000000e8bb40c4c5760d7af5fe8251e19e7c3ae0ff5074e44efc148716033ba70a5033b045a6214d5ed9c58089d13591c7ce2d7ca1ae463a99289dc133b13ce91f2094a646fdf382cfadaa550dd61f8493966537f3832500", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00001000000000000b0000000b0001006367726f7570000044000200400003803400028018000100001401000000000000000000ff030000000000001800020000000400000000000c0001000000000005000000080001001f"], 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) sendto$inet6(r4, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r4, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) openat$cgroup_subtree(r4, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) [ 2300.476013][ T6421] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2300.552696][ T6422] tc_dump_action: action bad kind [ 2300.559471][ T6423] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 2300.580997][ T6425] tc_dump_action: action bad kind [ 2300.590374][ T6426] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 02:10:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2300.751370][ T6429] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2300.781015][ T6423] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:10:08 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x11d000000) [ 2300.836728][ T6430] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2300.946401][ T6429] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2300.979787][ T6443] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2301.030943][ T6425] tc_dump_action: action bad kind [ 2301.040199][ T6422] tc_dump_action: action bad kind 02:10:09 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x4000000000084) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0xb, &(0x7f0000000040)=[{&(0x7f0000000000)="ba02000000000000001c857b", 0xc}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) sendto$inet6(r1, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r1, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000200)) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa800c00}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) bind$rose(r3, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @default}, 0x1c) [ 2301.077537][ T6411] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2301.139763][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 2301.139809][ T28] audit: type=1804 audit(1593396609.033:2759): pid=6463 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1864/cgroup.controllers" dev="sda1" ino=16370 res=1 [ 2301.174180][ T2771] tipc: TX() has been purged, node left! 02:10:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2301.222340][ T2771] tipc: TX() has been purged, node left! [ 2301.260074][ T2771] tipc: TX() has been purged, node left! [ 2301.281176][ T6457] device lo left promiscuous mode [ 2301.296734][ T6457] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 02:10:09 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x11e000000) [ 2301.353220][ T6466] IPVS: ftp: loaded support on port[0] = 21 02:10:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="50000000100000009c000000001000000000000094b99da12a44de6b50e129bfb5ab1d856063b2ae06c6ccc62a654772213e6f9ae178b3c59e7d75f25a80b046ad8c302391c303f67d343b22d52f384680ce68", @ANYRES32=0x0, @ANYBLOB="0000000000000000746800000000180002801400010000000000000000000000000000004fd4025b91db97654de1128bf9ecb159e76144006155187527bd5b1d71535e1629d5840919c54d657e2aa45da45c8dd51d2fd60622f3eabcd93e6adc867f6cdd88844b9840b31b032f1703131e9aa445f595d72d5c3938c6234b7f3ccf2dc9fd5bb42f925ba6b588837b5efda94a997d5dcdbaed84ba5eb21d4975430d4fd45625665e9fe6114b5b4ecc9a264de5f83cdd22d92f3c07", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="00012abd7000fddbdf251400000044000980080001000000090008000100020000000800020051ab00000800626052a1000008000100ffffff7f0800010001000000080002000100000008000200ff7f00000c000980080001000900000010000680080001000600000004000200"], 0x74}, 0x1, 0x0, 0x0, 0x48004}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="84090083", @ANYRES16=0x0, @ANYBLOB="000128bd7000fddbdf2515000000ac00058008000100657468000800010065746800080001007564700007000100696200004400028008000300ff010000080001000c00000008000200030000000800030083280000080001000f00000008000100080000000800020001040000080001000500000034000280080002000900000008000100070000000800010006000000080100dd0f0000080002006409000008000100657468000800010075647000c40006800800010005000000040002000800010003000000040002001e000300c5e4ba23c2821311847cf6706d33fbb6bf3ccfcae23f7a7c3886000086000300644484624f7296898e8c52963b9f8be06152a8619459fd00d1de7854d46dfdbb182a004bcdb9f7050de46edc908813f3992ece7480b38b14fd465359bee3ac186976dccc26ce5bb63c615e5d67afb21f571fc02132b5d839c370fd901a7725eb5c6ba3cbcb0b1b4ab5c85584ed2f501281ef0f4e8e6f6f94699c20db7c2213ab6d158865"], 0x184}, 0x1, 0x0, 0x0, 0x20040050}, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r8, r7, 0x0, 0x100000001) sendto$inet6(r7, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r7, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@dellink={0xb8, 0x11, 0x917d68a30fde8dcf, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x516}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xbf}, @IFLA_WEIGHT={0x8, 0xf, 0xffffa8aa}, @IFLA_LINK_NETNSID={0x8}, @IFLA_PROP_LIST={0x4}, @IFLA_PHYS_PORT_ID={0xa, 0x22, "15b23f3678a0"}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x3}, @IFLA_OPERSTATE={0x5, 0x10, 0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}, @IFLA_AF_SPEC={0x34, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x17, 0x0, 0x0, 0x7}]}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x16, 0x0, 0x0, 0x7f}]}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0xa, 0x0, 0x0, 0x8000}]}}]}, @IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xd}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}]}, 0xb8}}, 0x40088) [ 2301.527560][ T6457] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2301.563512][ T6457] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2301.608611][ T28] audit: type=1804 audit(1593396609.503:2760): pid=6476 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1865/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 2301.610012][ T6457] device dummy0 left promiscuous mode [ 2301.715725][ T6457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2301.745973][ T6409] lo speed is unknown, defaulting to 1000 [ 2301.750225][ T6466] virt_wifi0 speed is unknown, defaulting to 1000 [ 2301.751875][ T6470] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2301.821024][ T6475] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2301.993134][ T6475] 8021q: adding VLAN 0 to HW filter on device bond15 [ 2302.014512][ T6469] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2302.015029][ T28] audit: type=1804 audit(1593396609.903:2761): pid=6479 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1865/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 2302.060949][ T28] audit: type=1804 audit(1593396609.923:2762): pid=6476 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1865/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 2302.223935][ T6478] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2302.246547][ T2771] tipc: TX() has been purged, node left! [ 2302.451301][ T6466] lo speed is unknown, defaulting to 1000 02:10:12 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x40000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x34, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x3, [0x5]}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000300)=0x4, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005070c022d640000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0xe00, 0x0, {0x0, 0x0, 0x0, r8, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000780)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000001880)={0x114, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x21}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40004}, 0x40801) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x58}}, 0x20000040) 02:10:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f00000000c0)={'caif0\x00', 0x4}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000d3cd000000000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}}, 0x0) 02:10:12 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x11f000000) 02:10:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:12 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x140c, 0x2, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40440c0}, 0x40000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x7fffffff, @mcast2, 0x4}, 0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) read(r2, &(0x7f0000000280)=""/74, 0x4a) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000040)={@void, @val, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}, 0x32) 02:10:12 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="440000002c00270d000200000000004000000000d75649daa84dc70d5761179de0f6500a35fa8c5b62cf83e5b41d00e0a4486db8b177acbd00ebdf", @ANYRES32=r3, @ANYBLOB="00001000000000000e00000009000100666c6f77001a0000140002000800010001"], 0x44}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000980)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)="701e8582150d5035ee99c959860db96ad5c63d33bfd32f1bf4f71a094f6729777bbb4800fe627259e1621b7344638f4b4a1bc9ba9a7f5df5afb4e05ca9e50fc89212ace34f7115b956a91fc64bf2cc533e040c1d7998f6e0944d228eb64fcbbf3cde997a315c7bc1eff60b4bde93da226c78e65584827de79cdba2623ff3a50fb67a8a8fd35394da127b9c28a34fa014f8fec1e144eb0b57005353ac2e63f4fc89354fca8170a47d6775366f34873414b5e9776552d6a5520348bc09e37ac7e350dfb3269bb91bbe06422f3e64d21a6f2fb4a06c", 0xd4}, {&(0x7f0000000540)="2ed25a9133ed1b206487b1e318bce6bb5e0fe6cc45ebc73116d3beebb98855486668fbc9a30dc182b71f05937bb031d44a1824cc54d3c736fa9c681584d729300e22167940fe9bec9cc446dfdd761cef6daf8d025e24967626e26f0c35d4c7238912b7005110395ef549dd91581f600992a72102e8b6e978cfffe297e6536be0a2882b817709e25ebbe7bcbaa5b03d2e8e22622a343dfc7e186ddff07c7a26ad17159a7b0fe4b47122c9b02fea886411ccf3ab5426d8871b10955f21afa8b826513270b430846b82b91b405edb471fa0e69b5caabd90993411363ff7d8b71014f2bccb5ca35dfc0ae533a8b4f04a99ce66cc68cb63", 0xf5}, {&(0x7f0000000080)="71a90c98c29ce532c3b99b425ad6d7a2294057abbc7d90330a3a4978280ac17f694754705bf5f0788f74d207406246f2f131dff4074f52bf3093c89d9335a1d6a059bfdbcfd0d7e30184244e9d514f2c8e69ee17df475d8d462c3b1a9007b1a8289195", 0x63}, {&(0x7f0000000300)="6ac719155a1b4f788df955fb3d4120eeb57c49717aefb93de584eb63c1fc03dc0291444064d1febab4bee9ed8464acf4a4a1ce3b52840784c34c33", 0x3b}], 0x4, &(0x7f0000000640)=[@iv={0xf8, 0x117, 0x2, 0xe0, "5922863c6b7a9b6774fad4b5dfeedeec7f8e79310ec0727400bb3e936aca69e55ac081d307fd0be74fad2342437020be727dfb5236002351bfc0be275ed8743d003434beeb610d5b5870f0cfb9283533d203e8c7173a36381e775d19fd3873c7806b416fcb0b5684c41aec339b6b1631c0453f55c3e6a977ec9a270138f0a789e7335d8ef6a68bffbe089e971ff2cb9a6ddf04ab423bc7965ba8daa94547ddf5a4c27950d1800efd85277f0ce67788ec96e943b363b26f6cbf5b43095b56673c8c60a1bd6e07ab271530d975ad990bf7c9d6ffe29f0617aaa3cc14e7f7ca7537"}], 0xf8, 0x4000000}, {0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000740)="f73cac35b04da9680db9a5c6f1af5b5102093cd525b3c3e5b59283a37160117a61026696684d08b0889b9010128d5769e0ebb4b60176914679831efad16a4a99cfeb8a2b727701e283bcbde784b64f90ba2997dc0160fba97cc940e3810ca67d79cd0e15a2cc22975ff2295d8b74c650e14c344ee24ae89d64d7fcefa75ae7278d03869c849474169695a39272945a790de344243d83f2b5f38648522c3108db85dd800f47708390084b8640bf11f4479670d702e08c29ab614e9f37d27c8e508e9a8fe0ac5c712b44b3b136726f2e3318cf825dbaaf4f84860e3a8a1195ffb2eec5d9e69b46c7aa19e679c92a905d84", 0xf0}, {&(0x7f0000000840)="8984863da80722014d099bd5ac09ee461c3468b0ade2ce549f5160f663ccc60d8318b1d1ceb7aa0af5f27f184a68e2509a636bdfffff4599344b99f2a756863dd15d816363cbd8131d09688994ab00d969334be70b3633c0037ebcce0b95d3c78cbcb6b865b3827672a56da3d3f5661d3b7dcf9c4d2d834e032fb58fcb6df345ef6fc5525e03d98e90d286487b2fcf2b21ce71c31aab254a71ef63987a92586d6cf645", 0xa3}], 0x2, &(0x7f0000000900)=[@assoc={0x18, 0x117, 0x4, 0x5ed}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18}], 0x48, 0x4040084}], 0x2, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2305.021248][ T6586] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2305.048405][ T6590] IPVS: ftp: loaded support on port[0] = 21 [ 2305.054525][ T6587] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2305.117341][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2305.148165][ T28] audit: type=1804 audit(1593396613.043:2763): pid=6589 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1866/cgroup.controllers" dev="sda1" ino=16018 res=1 [ 2305.246834][ T6596] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2305.312108][ T6597] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2305.326323][ T6590] virt_wifi0 speed is unknown, defaulting to 1000 02:10:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2305.444921][ T6587] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2305.471504][ T6639] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2305.481617][ T6632] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2305.520069][ T6632] bond7 (uninitialized): Released all slaves 02:10:13 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x2c4, &(0x7f000000d000)=[{&(0x7f0000000080)="4c0000001200ff0cfffefd956f7f83b7549c911e00000000000000683540150024002e0000000000000000000f44acdf66672825c4110bee46b3cd9d4a23d3c62ea02a00a2641612fa864b05", 0x4c}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180), 0x572, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f00000001c0)={0x1, 'vlan1\x00', {}, 0xa90}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x1e, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x4, @local, 0x6}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) connect$nfc_llcp(r3, &(0x7f0000000280)={0x27, 0x1, 0x1, 0x3, 0x6f, 0x1, "f9bb17ee45ed5fe9cc13e54ae023f4a184c4ea0e1afbde2da35685ed9d9ba87670f038d2fb5cff1d1cc91de6cd920ef79406fe22a1a4dab813913f7a999f90", 0x6}, 0x60) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000100)={{0x2, 0x4e20, @broadcast}, {0x6, @dev={[], 0x2b}}, 0x4, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth1\x00'}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x1a, &(0x7f0000000080)={r7}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x100, 0xa, 0x1200, 0x1, r7}, 0x10) [ 2305.618925][ T6642] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 02:10:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x37e7, 0x24ba1dc0}) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffd37) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x0, &(0x7f0000000000)="080db5055e0b") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64=r2, @ANYBLOB="38fa31880d42a69b", @ANYBLOB="8ce9020b9bf98bae9528c766144f641c8025266df0ec296a4c25e70de3b55de749e03f9b364588c84f8f0748684f627a7017fa6b094bbd31c80bf89389e052ea0fc3eefca4a923ba5508ee14e9520b1bd1aefecb4e52146e88d0b6964191c8948b5d81d8771c65e6a5223dda11f3d7cb4e9093570acb0121e9418d53668fe12e0a9c6f802a97013696d84742170534f95b53bd64841fd740c638a646ecf6062d0a4df89513b2fad1143fb0222bf61fb93783b49026f6a94a", @ANYRES64, @ANYRESDEC, @ANYRESHEX, @ANYBLOB="57d3ea738c01fc7adef06c02c15a021e4cc7267de4299d699daa4d39b95a0ad0638ab4e4595fa408d65d47e226799b5fe462c6abc036fc0dfd03f5ecc06cf7b1d762a71dcfca19e8ab36a4c42dc8fc7ee5154af870800e8a40a926602a5fc1466aee5581c958cccc8d784224e4029595ca845f4bb213ce52024568fc5afba3039e78be9a531335e25a6628f065443010ef596e", @ANYRES16], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x100000001) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x100}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40840}, 0x44000) close(r1) 02:10:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2305.837594][ T6649] netlink: 'syz-executor.1': attribute type 46 has an invalid length. [ 2305.853603][ T28] audit: type=1804 audit(1593396613.743:2764): pid=6600 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1866/cgroup.controllers" dev="sda1" ino=16018 res=1 [ 2305.876194][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 02:10:13 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x120000000) [ 2306.009841][ T28] audit: type=1804 audit(1593396613.903:2765): pid=6656 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1715/cgroup.controllers" dev="sda1" ino=15777 res=1 [ 2306.170648][ T28] audit: type=1804 audit(1593396614.023:2766): pid=6666 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1715/cgroup.controllers" dev="sda1" ino=15777 res=1 02:10:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "31317324b544da42", "9c597e52543dca7746518ff717088414cf27718a1d9555c0e5e3f1145468ddc0", "6d088f64", "f10566dc4b3ad4d0"}, 0x38) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000f00)={{{@in6=@mcast1, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@private0}}, &(0x7f0000000e00)=0x27) r2 = openat$cgroup_ro(r0, &(0x7f0000000e40)='pids.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x7fffffff, 0x9, 0x11}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={r5, 0x200, 0x0, 0xe10, 0x4}, &(0x7f0000000240)=0xffffff8f) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e80)={0x50, r7, 0x100, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x3a, 0xe, "0c9944192c3a3c5930c49f0aa27320c525998ce17ad80d954ae2ff6ef226a0a90bf67797000ed8e86e4300e72eea21e252851a256110"}]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000dc0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000540)={0x82c, r7, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xe2}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1000}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80, 0x4}}, @NL80211_ATTR_IE={0x7eb, 0x2a, "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"}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}]}, 0x82c}, 0x1, 0x0, 0x0, 0x200400e5}, 0x20044000) sendfile(r6, r2, 0x0, 0x100003000) syz_init_net_socket$llc(0x1a, 0x1, 0x0) [ 2306.316312][ T28] audit: type=1804 audit(1593396614.103:2767): pid=6665 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1867/cgroup.controllers" dev="sda1" ino=16065 res=1 [ 2306.486817][ T28] audit: type=1804 audit(1593396614.343:2768): pid=6672 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir145771254/syzkaller.hoJ3z6/1066/cgroup.controllers" dev="sda1" ino=16114 res=1 [ 2306.524345][ T6676] IPVS: ftp: loaded support on port[0] = 21 [ 2306.693342][ T28] audit: type=1804 audit(1593396614.563:2769): pid=6667 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1867/cgroup.controllers" dev="sda1" ino=16065 res=1 [ 2306.778986][ T28] audit: type=1804 audit(1593396614.563:2770): pid=6665 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1867/cgroup.controllers" dev="sda1" ino=16065 res=1 [ 2306.844875][ T6655] [ 2306.847256][ T6655] ============================================ [ 2306.853398][ T6655] WARNING: possible recursive locking detected [ 2306.859548][ T6655] 5.8.0-rc2-syzkaller #0 Not tainted [ 2306.864821][ T6655] -------------------------------------------- [ 2306.870965][ T6655] syz-executor.1/6655 is trying to acquire lock: [ 2306.877281][ T6655] ffff888091148280 (&vlan_netdev_addr_lock_key/1){+...}-{2:2}, at: dev_mc_unsync+0xf4/0x190 [ 2306.887363][ T6655] [ 2306.887363][ T6655] but task is already holding lock: [ 2306.894723][ T6655] ffff8880a2708280 (&vlan_netdev_addr_lock_key/1){+...}-{2:2}, at: dev_mc_unsync+0xb0/0x190 [ 2306.904887][ T6655] [ 2306.904887][ T6655] other info that might help us debug this: [ 2306.912941][ T6655] Possible unsafe locking scenario: [ 2306.912941][ T6655] [ 2306.920399][ T6655] CPU0 [ 2306.923671][ T6655] ---- [ 2306.926942][ T6655] lock(&vlan_netdev_addr_lock_key/1); [ 2306.932475][ T6655] lock(&vlan_netdev_addr_lock_key/1); [ 2306.938009][ T6655] [ 2306.938009][ T6655] *** DEADLOCK *** [ 2306.938009][ T6655] [ 2306.946324][ T6655] May be due to missing lock nesting notation [ 2306.946324][ T6655] [ 2306.954651][ T6655] 3 locks held by syz-executor.1/6655: [ 2306.960098][ T6655] #0: ffffffff8a798148 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x4b8/0x730 [ 2306.969399][ T6655] #1: ffffffff8a7b00e8 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0xb7/0xeed [ 2306.978877][ T6655] #2: ffff8880a2708280 (&vlan_netdev_addr_lock_key/1){+...}-{2:2}, at: dev_mc_unsync+0xb0/0x190 [ 2306.989398][ T6655] [ 2306.989398][ T6655] stack backtrace: [ 2306.995270][ T6655] CPU: 0 PID: 6655 Comm: syz-executor.1 Not tainted 5.8.0-rc2-syzkaller #0 [ 2307.003874][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2307.013897][ T6655] Call Trace: [ 2307.017166][ T6655] dump_stack+0x18f/0x20d [ 2307.021468][ T6655] __lock_acquire.cold+0x178/0x3f8 [ 2307.026558][ T6655] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2307.032510][ T6655] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2307.038505][ T6655] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 2307.044296][ T6655] lock_acquire+0x1f1/0xad0 [ 2307.048863][ T6655] ? dev_mc_unsync+0xf4/0x190 [ 2307.053536][ T6655] ? lock_release+0x8d0/0x8d0 [ 2307.058452][ T6655] ? lock_release+0x8d0/0x8d0 [ 2307.063710][ T6655] ? do_raw_spin_lock+0x120/0x2b0 [ 2307.068708][ T6655] ? rwlock_bug.part.0+0x90/0x90 [ 2307.073627][ T6655] _raw_spin_lock_nested+0x30/0x40 [ 2307.079589][ T6655] ? dev_mc_unsync+0xf4/0x190 [ 2307.084241][ T6655] dev_mc_unsync+0xf4/0x190 [ 2307.088741][ T6655] vlan_dev_stop+0x51/0x350 [ 2307.093492][ T6655] ? vlan_dev_change_rx_flags+0x170/0x170 [ 2307.099215][ T6655] __dev_close_many+0x1b3/0x2e0 [ 2307.104042][ T6655] ? dev_add_offload+0x250/0x250 [ 2307.108951][ T6655] ? mark_held_locks+0x9f/0xe0 [ 2307.113892][ T6655] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2307.120035][ T6655] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2307.125994][ T6655] dev_close_many+0x238/0x650 [ 2307.130649][ T6655] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2307.136775][ T6655] ? napi_watchdog+0xc0/0xc0 [ 2307.141339][ T6655] ? vlan_device_event+0x69e/0x2010 [ 2307.146514][ T6655] vlan_device_event+0x8ef/0x2010 [ 2307.151575][ T6655] ? phonet_address_add+0x760/0x760 [ 2307.157107][ T6655] ? unregister_vlan_dev+0x570/0x570 [ 2307.162365][ T6655] ? do_raw_spin_unlock+0x171/0x230 [ 2307.167569][ T6655] notifier_call_chain+0xb5/0x200 [ 2307.172570][ T6655] call_netdevice_notifiers_info+0xb5/0x130 [ 2307.178438][ T6655] dev_close_many+0x30b/0x650 [ 2307.183088][ T6655] ? netdev_adjacent_get_private+0x40/0x40 [ 2307.188872][ T6655] ? napi_watchdog+0xc0/0xc0 [ 2307.193478][ T6655] ? vxlan_offload_rx_ports+0x430/0x430 [ 2307.199017][ T6655] rollback_registered_many+0x3af/0xf60 [ 2307.204546][ T6655] ? notifier_call_chain+0x1a9/0x200 [ 2307.211300][ T6655] ? dev_xdp_uninstall+0x3f0/0x3f0 [ 2307.216847][ T6655] ? netdev_upper_dev_unlink+0x48e/0x5f0 [ 2307.222525][ T6655] unregister_netdevice_queue+0x2dd/0x570 [ 2307.228222][ T6655] ? unregister_netdevice_many+0x50/0x50 [ 2307.233830][ T6655] unregister_vlan_dev+0x2c0/0x570 [ 2307.239217][ T6655] vlan_ioctl_handler+0x311/0xeed [ 2307.244305][ T6655] ? mutex_lock_io_nested+0xf60/0xf60 [ 2307.249711][ T6655] ? register_vlan_dev+0x7f0/0x7f0 [ 2307.255889][ T6655] ? do_vfs_ioctl+0x27d/0x1090 [ 2307.260636][ T6655] ? generic_block_fiemap+0x60/0x60 [ 2307.265953][ T6655] ? register_vlan_dev+0x7f0/0x7f0 [ 2307.271321][ T6655] sock_ioctl+0x4d1/0x730 [ 2307.275810][ T6655] ? check_preemption_disabled+0x38/0x220 [ 2307.281528][ T6655] ? dlci_ioctl_set+0x30/0x30 [ 2307.286535][ T6655] ? __fget_files+0x294/0x400 [ 2307.291189][ T6655] ? dlci_ioctl_set+0x30/0x30 [ 2307.295845][ T6655] ksys_ioctl+0x11a/0x180 [ 2307.300151][ T6655] __x64_sys_ioctl+0x6f/0xb0 [ 2307.304978][ T6655] do_syscall_64+0x60/0xe0 [ 2307.309501][ T6655] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2307.315367][ T6655] RIP: 0033:0x45cb19 [ 2307.319257][ T6655] Code: Bad RIP value. [ 2307.323334][ T6655] RSP: 002b:00007f46f73c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2307.331729][ T6655] RAX: ffffffffffffffda RBX: 00000000004f3b80 RCX: 000000000045cb19 [ 2307.339685][ T6655] RDX: 00000000200001c0 RSI: 0000000000008982 RDI: 0000000000000004 [ 2307.348130][ T6655] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2307.356081][ T6655] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2307.364040][ T6655] R13: 0000000000000696 R14: 00000000004d5330 R15: 00007f46f73c76d4 [ 2307.449346][ T6660] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2307.474364][ T6590] lo speed is unknown, defaulting to 1000 [ 2307.477881][ T6670] device geneve4 entered promiscuous mode [ 2307.576873][ T6649] netlink: 'syz-executor.1': attribute type 46 has an invalid length. 02:10:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r2 = socket(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) sendto$inet6(r3, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r3, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "74a00457062ba0eb", "1bb66393d174e10bb23995d445886471", "7146dbf7", "dca5ff33d6887129"}, 0x28) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) 02:10:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) socket$inet6(0x10, 0x0, 0x0) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000001340)='+', 0x1}], 0x1, 0x4800000000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0xa, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f00000002c0)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@mcast2, r7}, 0x14) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) 02:10:16 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}, 0x80000000}, &(0x7f0000000240)=0x9c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0)=0x81, 0x4) 02:10:16 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x121000000) 02:10:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:16 executing program 1: getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)=""/4096, &(0x7f0000000040)=0x1000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xb1d000) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0x9) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4100000002}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000034c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x100000000, 0x0) [ 2308.325291][ T2771] tipc: TX() has been purged, node left! 02:10:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2308.472488][ T28] audit: type=1804 audit(1593396616.363:2771): pid=6742 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1868/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 2308.514867][ T2771] tipc: TX() has been purged, node left! 02:10:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r2 = socket(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) sendto$inet6(r3, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r3, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "74a00457062ba0eb", "1bb66393d174e10bb23995d445886471", "7146dbf7", "dca5ff33d6887129"}, 0x28) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) 02:10:16 executing program 1: getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)=""/4096, &(0x7f0000000040)=0x1000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xb1d000) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0x9) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4100000002}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000034c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x100000000, 0x0) 02:10:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r2 = socket(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) sendto$inet6(r3, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r3, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "74a00457062ba0eb", "1bb66393d174e10bb23995d445886471", "7146dbf7", "dca5ff33d6887129"}, 0x28) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) 02:10:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) socket$inet6(0x10, 0x0, 0x0) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000001340)='+', 0x1}], 0x1, 0x4800000000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0xa, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f00000002c0)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@mcast2, r7}, 0x14) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) 02:10:17 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x121000000) 02:10:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:17 executing program 1: getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)=""/4096, &(0x7f0000000040)=0x1000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xb1d000) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0x9) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4100000002}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000034c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x100000000, 0x0) 02:10:17 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x122000000) 02:10:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r2 = socket(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) sendto$inet6(r3, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r3, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "74a00457062ba0eb", "1bb66393d174e10bb23995d445886471", "7146dbf7", "dca5ff33d6887129"}, 0x28) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) 02:10:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2309.488675][ T28] audit: type=1804 audit(1593396617.383:2772): pid=6793 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1869/cgroup.controllers" dev="sda1" ino=16371 res=1 02:10:17 executing program 1: getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)=""/4096, &(0x7f0000000040)=0x1000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xb1d000) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0x9) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4100000002}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000034c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x100000000, 0x0) 02:10:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r2 = socket(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) sendto$inet6(r3, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r3, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "74a00457062ba0eb", "1bb66393d174e10bb23995d445886471", "7146dbf7", "dca5ff33d6887129"}, 0x28) [ 2309.613560][ T28] audit: type=1804 audit(1593396617.503:2773): pid=6794 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1717/cgroup.controllers" dev="sda1" ino=16372 res=1 02:10:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) socket$inet6(0x10, 0x0, 0x0) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000001340)='+', 0x1}], 0x1, 0x4800000000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0xa, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f00000002c0)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@mcast2, r7}, 0x14) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) 02:10:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r2 = socket(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) sendto$inet6(r3, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r3, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) 02:10:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2310.163744][ T28] audit: type=1804 audit(1593396618.054:2774): pid=6796 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1869/cgroup.controllers" dev="sda1" ino=16371 res=1 02:10:18 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x121000000) 02:10:18 executing program 1: getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)=""/4096, &(0x7f0000000040)=0x1000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xb1d000) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0x9) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4100000002}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x100000000, 0x0) 02:10:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r2 = socket(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) sendto$inet6(r3, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r3, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040), 0xfea3) 02:10:18 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x123000000) [ 2310.352483][ T6848] __nla_validate_parse: 8 callbacks suppressed [ 2310.352494][ T6848] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2310.429601][ T28] audit: type=1804 audit(1593396618.324:2775): pid=6849 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1870/cgroup.controllers" dev="sda1" ino=16368 res=1 02:10:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) socket(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) sendto$inet6(r2, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r2, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) [ 2310.647671][ T6865] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:10:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) socket(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) sendto$inet6(r2, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) recvmsg$can_raw(r2, &(0x7f0000000580)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000440)=""/103, 0x67}, 0x40000102) 02:10:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) socket$inet6(0x10, 0x0, 0x0) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000001340)='+', 0x1}], 0x1, 0x4800000000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0xa, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f00000002c0)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@mcast2, r7}, 0x14) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2310.900937][ T6873] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:10:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) socket(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) sendto$inet6(r2, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) 02:10:18 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x124000000) [ 2311.239820][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 2311.239838][ T28] audit: type=1804 audit(1593396619.134:2778): pid=6884 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1871/cgroup.controllers" dev="sda1" ino=15938 res=1 02:10:19 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x121000000) 02:10:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:19 executing program 1: getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)=""/4096, &(0x7f0000000040)=0x1000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xb1d000) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0x9) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4100000002}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x100000000, 0x0) 02:10:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) socket(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) sendto$inet6(r2, &(0x7f0000000200), 0x0, 0x24040090, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @ipv4={[], [], @private=0xa010102}, 0x2}, 0x1c) [ 2311.376575][ T6892] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 02:10:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) socket(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) [ 2311.630231][ T6905] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2311.671661][ T28] audit: type=1804 audit(1593396619.564:2779): pid=6900 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1719/cgroup.controllers" dev="sda1" ino=16364 res=1 02:10:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) socket$inet6(0x10, 0x0, 0x0) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000001340)='+', 0x1}], 0x1, 0x4800000000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0xa, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f00000002c0)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@mcast2, r7}, 0x14) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 02:10:19 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x125000000) [ 2311.795290][ T28] audit: type=1804 audit(1593396619.644:2780): pid=6884 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1871/cgroup.controllers" dev="sda1" ino=15938 res=1 02:10:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) socket(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) [ 2311.868052][ T6911] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 02:10:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) [ 2312.001040][ T28] audit: type=1804 audit(1593396619.894:2781): pid=6913 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1872/cgroup.controllers" dev="sda1" ino=16369 res=1 [ 2312.062356][ T6920] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:10:20 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x121000000) 02:10:20 executing program 1: getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)=""/4096, &(0x7f0000000040)=0x1000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xb1d000) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0x9) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4100000002}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x100000000, 0x0) 02:10:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) [ 2312.396236][ T28] audit: type=1804 audit(1593396620.294:2782): pid=6945 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1720/cgroup.controllers" dev="sda1" ino=16365 res=1 [ 2312.431031][ T6947] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:10:20 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x121000000) 02:10:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) socket$inet6(0x10, 0x0, 0x0) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000001340)='+', 0x1}], 0x1, 0x4800000000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0xa, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f00000002c0)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@mcast2, r7}, 0x14) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) [ 2312.532555][ T28] audit: type=1804 audit(1593396620.404:2783): pid=6917 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1872/cgroup.controllers" dev="sda1" ino=16369 res=1 02:10:20 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x126000000) 02:10:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) 02:10:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 2312.669432][ T28] audit: type=1804 audit(1593396620.404:2784): pid=6913 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1872/cgroup.controllers" dev="sda1" ino=16369 res=1 02:10:20 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x121000000) [ 2312.733002][ T6969] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2312.772843][ T28] audit: type=1804 audit(1593396620.594:2785): pid=6960 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1721/cgroup.controllers" dev="sda1" ino=15741 res=1 02:10:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) [ 2312.858966][ T28] audit: type=1804 audit(1593396620.704:2786): pid=6967 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1873/cgroup.controllers" dev="sda1" ino=16377 res=1 02:10:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:20 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x121000000) [ 2312.974039][ T28] audit: type=1804 audit(1593396620.854:2787): pid=6983 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1722/cgroup.controllers" dev="sda1" ino=16368 res=1 02:10:21 executing program 1: getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)=""/4096, &(0x7f0000000040)=0x1000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xb1d000) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0x9) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4100000002}) vmsplice(0xffffffffffffffff, &(0x7f00000034c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000000, 0x0) 02:10:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) 02:10:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) socket$inet6(0x10, 0x0, 0x0) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000001340)='+', 0x1}], 0x1, 0x4800000000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0xa, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f00000002c0)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@mcast2, r7}, 0x14) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) 02:10:21 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x127000000) 02:10:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) 02:10:21 executing program 1: getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)=""/4096, &(0x7f0000000040)=0x1000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xb1d000) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0x9) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4100000002}) vmsplice(0xffffffffffffffff, &(0x7f00000034c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000000, 0x0) 02:10:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:21 executing program 1: getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)=""/4096, &(0x7f0000000040)=0x1000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xb1d000) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0x9) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4100000002}) vmsplice(0xffffffffffffffff, &(0x7f00000034c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000000, 0x0) 02:10:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) 02:10:21 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x121000000) 02:10:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:21 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x128000000) 02:10:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) socket$inet6(0x10, 0x0, 0x0) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000001340)='+', 0x1}], 0x1, 0x4800000000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0xa, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f00000002c0)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@mcast2, r7}, 0x14) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) 02:10:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) 02:10:22 executing program 1: getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)=""/4096, &(0x7f0000000040)=0x1000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xb1d000) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0x9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000034c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x100000000, 0x0) 02:10:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:22 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x121000000) [ 2314.228554][ T7053] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 02:10:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) 02:10:22 executing program 1: getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)=""/4096, &(0x7f0000000040)=0x1000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xb1d000) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0x9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000034c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x100000000, 0x0) 02:10:22 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x129000000) 02:10:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) 02:10:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) socket$inet6(0x10, 0x0, 0x0) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000001340)='+', 0x1}], 0x1, 0x4800000000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0xa, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f00000002c0)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) 02:10:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) 02:10:23 executing program 1: getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)=""/4096, &(0x7f0000000040)=0x1000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xb1d000) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0x9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000034c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x100000000, 0x0) 02:10:23 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, 0xffffffffffffffff, 0x0, 0x121000000) 02:10:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:23 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x12a000000) 02:10:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) 02:10:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:23 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, 0xffffffffffffffff, 0x0, 0x121000000) 02:10:23 executing program 1: getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)=""/4096, &(0x7f0000000040)=0x1000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xb1d000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4100000002}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000034c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x100000000, 0x0) [ 2315.368002][ T7104] __nla_validate_parse: 4 callbacks suppressed [ 2315.368012][ T7104] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 02:10:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) [ 2315.517863][ T7113] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 02:10:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) socket$inet6(0x10, 0x0, 0x0) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000001340)='+', 0x1}], 0x1, 0x4800000000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) socket(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0xa, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f00000002c0)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) 02:10:23 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, 0xffffffffffffffff, 0x0, 0x121000000) 02:10:23 executing program 1: getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)=""/4096, &(0x7f0000000040)=0x1000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xb1d000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4100000002}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000034c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x100000000, 0x0) 02:10:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) 02:10:23 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x12b000000) [ 2316.049194][ T7137] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 02:10:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) 02:10:24 executing program 1: getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)=""/4096, &(0x7f0000000040)=0x1000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xb1d000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4100000002}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000034c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x100000000, 0x0) 02:10:24 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000054000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x121000000) [ 2316.200438][ T7145] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 02:10:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8107, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x7, 0x2500, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:10:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) [ 2316.387107][ T7157] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2316.690715][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 2316.690731][ T28] audit: type=1804 audit(1593396624.584:2805): pid=7165 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840583757/syzkaller.c5t57r/1729/cgroup.controllers" dev="sda1" ino=15986 res=1 [ 2316.821194][ T28] audit: type=1804 audit(1593396624.714:2806): pid=7141 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir985447833/syzkaller.QXP0hT/1878/cgroup.controllers" dev="sda1" ino=16382 res=1