, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:10 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) 18:40:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 18:40:10 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) 18:40:10 executing program 2: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 3230.114288][ T7361] debugfs: File 'dropped' in directory 'loop0' already present! [ 3230.153585][ T7361] debugfs: File 'msg' in directory 'loop0' already present! 18:40:10 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x8901, 0x0) 18:40:10 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0, 0x2}}, 0x0) 18:40:11 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000002400)="0ac87d98869433c130472888a5e31ab4f2435df6b6e2", 0x16}}, 0x0) 18:40:11 executing program 2: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:40:11 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:11 executing program 0: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x74445b60eba837ed) 18:40:11 executing program 4: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000080)) [ 3230.398198][ T7380] ieee802154 phy0 wpan0: encryption failed: -22 18:40:11 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:40:11 executing program 4: bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) 18:40:11 executing program 2: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:40:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 3230.510933][ T7386] debugfs: File 'dropped' in directory 'loop0' already present! [ 3230.535278][ T7386] debugfs: File 'msg' in directory 'loop0' already present! 18:40:11 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 18:40:11 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 18:40:11 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x1, 0x7000000) 18:40:11 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000700), 0x8) 18:40:11 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x8912, &(0x7f0000000240)={@bcast, @default, 0x0, [@null, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 18:40:11 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x801c581f, 0x0) [ 3230.797193][ T7406] debugfs: File 'dropped' in directory 'loop0' already present! [ 3230.830683][ T7406] debugfs: File 'msg' in directory 'loop0' already present! 18:40:11 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 18:40:11 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x46, 0x0, 0x0) 18:40:11 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x2a, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) 18:40:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x4a, 0x0, 0x0) 18:40:11 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000000)={0x3, @default}) 18:40:11 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x2, 0x0, 0x0) [ 3231.071049][ T7430] debugfs: File 'dropped' in directory 'loop0' already present! 18:40:11 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@hopopts={{0x18}}], 0x18}}], 0x3, 0x0) 18:40:11 executing program 2: ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001280)={0x0}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001700), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) [ 3231.125904][ T7430] debugfs: File 'msg' in directory 'loop0' already present! 18:40:11 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:11 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x101}, 0x1c, 0x0}}], 0x1, 0x4010) 18:40:12 executing program 4: socketpair(0x2, 0xa, 0x20, &(0x7f0000000000)) 18:40:12 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x23, 0x0, 0x8}, 0x10) 18:40:12 executing program 2: pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r0, &(0x7f0000001540)=ANY=[], 0x10e6) 18:40:12 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_freezer_state(r0, 0x0, 0x0) [ 3231.349039][ T7451] debugfs: File 'dropped' in directory 'loop0' already present! 18:40:12 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x89f9, &(0x7f0000000240)={@bcast, @default, 0x0, [@null, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) [ 3231.396599][ T7451] debugfs: File 'msg' in directory 'loop0' already present! 18:40:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 18:40:12 executing program 1: perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:12 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000002400)="0ac87d98869433c130472888a5e31ab4f2435df6b6e2001cb9d23c276a7069447488e5ea948535f02fb6b6c13bc95a1b3ce040de1050eadb1552609a8c7a474862d987e150dfa929deb775c7f6e5842d06dc22bf62002fa62da100ecc3f9171fce29076157729b2b56a984642185c51e6446dbfb02f43e2cb4403b733325bb35", 0x80}}, 0x0) 18:40:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000380)="eae0e84eeccdb1c74dd6c1d0d9aedf78f3b48839d1b7a2e625973629ff91acb7b8811997e60a4020633618f7f3209572c0da0bc5cf0c3bdba9449a01d1656a14449f14d7855f38c98273cb9111db3c4646c74392ccd66a7c05096f6e461aa7ed03e083126c0c7d588c411e3b31fb0a7477633985ed4d339370a3017a6b83d4978cbd1b5d646fbb3ac71399b442807301fb5b6eaa5eb07a4632260d9536e9887b03b6a583806b4c8ad671fc23d03f46a1aeb87f9678b6ffb93cf786c3e6de857e7e027446dae346fa99245935027942c58eb5d573015c12ce848ca4ff6a8b6b2e94d370c72e0492432ebfb2459e3c6af1d265a55b1528042904f9188ef943084d208b4392e33d94a36e383e78e2c4977789c8f5b47848ddc34a6ab93b42230213d89edb4f661e1faf125fef8d3b978283caccbf2df04420fc6f05d257368926228fadb233af259b15f2d21b4297cc3b34a636233363b6037b5991cb089c54fa72d3a23e3f4464d744873addbaa4c4953f9a9bd9688510f5fbce1c0ce0aa5fe25f4f1b2f4da98d82fb4eb44c1918733ad780705be5a9c44e312ccf3dc6f6e99807fd9ce9fad8f31467ede3da156170c54746620836561cd4993f8ff0bb64c541f2f350afee40b8afba3e744bd7d55c74d5f155e006007ccdd81011fbd70796fc82c97339ddbcec02ce1c7a87d63e521d64985202d1c0f1cff256214b474da7400e5120495638f19dc115757dceaed21b15e7dab536f85f801cd2a44d883221779c86ddd7c4cdbe914053603683d417e1d978e9099527b48bf62304d5c2f3b901056d3f595e4d0b8675be2c7b087380cb25148ed56edd26abe2cd13363b209cb926148e851001157e51521b61a5b77ccced265bdb10f6e64bfddbbe64dc4b517b4dc1b333bf72c5305932e714ff013fd2a23a5ae1ff5ae4692b40e9b61d7f83887f779547e045e28dd0a4f8604ea13330dece402eb5d0426f1a705d512030095dc928ca757442d37561da5dca22b76f3ab8562dd69d3c744c205e40eeb75ba9f301920db24576bcb794eca9c63d577b98f8dd381d978d373234f42910bdc0c7ce211b3dd5833c0d7ca66452441b869349eec7d0b7c20d38abdab89b3964ac34509a185c218f193e591a402cd9500274e605515c50d921df8d16ccf85fa00e3f4575ace9b03899baf8bab5d64973ff5daad46b139b6f8651348a6ed7ba744b7bcdecb05721b8ac71ca191a0c8c18ffb81442ef0a43fe59ded9c8bb0b57a4c8ba8fa48b02ab422f16965d5cca4b9f73ced5461a80e1230492c29f5e053e4a8927616250ec8e9024f5fa5bfe5c2c4deabab72fb69bc9ab97485de7617000fda29ba503800d7f7319a787f7554e17f6e5c649f8640132fa8438cf437ee73e748199ce89d4857b7f2bbe709bd5aa5a072b96807471edf25c0ac5ede463296fbd27f0839595c632f58aa29e2018ce3f712e850e148423742ba011a7bc35550ea9e0c8863c3f77bff87bbdf2e94e04730ec0210942eff863210ce617692c3b03e1e6fff7b0798b390dc524ada99053ce9ef22ba3dec7afba712a69ad4fdb001d961a3f6cfcf5b569d36024134900eca569476791b5c6668e19182c8e9dbd6895be3a77549a1fc7cf11bdea1f2c28f18e2bbba993088e9597d3f6ba0db961318d3f5975d3428574df2e2e8b0881ccd90eb1cb554d76f0265a6cb7cfd8c86f34974ceaa3e1ccbe3babcac01599b003c315b8796e89cc5f5b1e765964a562b6b92a634861140aac97c1a4c0b491012a92e73fb4543c09e4b584d56494eab0848bc8d98ab315f709b8ce373e979592dcc47810f057ce52d5c47c0338fabc0f7d69ef707b8c4e36dff997b7ff157381190077c5191a80dc691514fb6cc8dd502a3dbbceb7b4229c4fa13ed9ddc37b0413f2795b5d7ef8d5e99622c744f859a1d3a0118e65c14dbe1b9d33f77ea70f11a1201ca42a632e34ccac77770b0cfecce53a50529e9801a911e8f5a8587247cfc997b89732217da6f670a0f0f04a01ec2588929c6b011f40f23ecd318def75c290aaa58d9d04493e5520e3658063157758874e5a2d9942fdce12df07de81e9f2d4fb4c9705fee6d0d6013a04a99ade55bb5a68de72091315ce0a9d4d8defc1012d02599e311da72e8b8dbbc6378354ef0769dd706615b68cf57345a9cb5ff0e80cb1d8b29442e3cb92d26466809c7ff703ddc21bac965b4f5f553796abbff2125e9560d437c584b33811f41cefce58f1695874f95ee8a45562e5953fbadc63b3fb8445e6643828948a41fd489ecba7df2e82afa04be0148d9c1b8cad6ae319717013123f1374d6d1e28fc9d30825634566b0cafc6cb1a06dab8ca4f334fef64dd059481074a7daf0a27409028f70dc730bcc799f972ad1f631307e66149ef3923ff32685c80edfe6efacb0f89a3a3e51c3ae41c0cd0a003ef4bff4448993ac1664fef095c1bf4e08645c2bf7346c1fa75b69ba870e59990697a513f7efc8c707474a8624880511a1ab65dd94079aa92232bb41b21304602da26abcea51400420c9161aa8c6b48ba7b350dffd79a327601da3fdc356750ea1073e9d257c1a4c82bb19953b8a3662baab7dcb91fa5022a8cb88f8a8364bd0304bf9b6b4d181d083835097284d9af1890be6bafad4a58de83ec45dd09a7930324d59793ce0345e84a4a7939ff81a32e951181ec5a827f397da5f838ecc62abb5ca7947c8e87ba77c45de75e317ed8e0a82bf8811bb124e208a8c2700c597442992e04de7c50b74ef668427d61e8fffba8d54f8c35e6e40c63351828c4615cdfb8422a42e9faa4be071df526c24fb3ecdeb6c36005088609250b4518e2dc3685ff15905846a7b3be83f1301eda88cff8f7638960341f0b4ec8fd9e7f125a84504e079976b837d5c3acdd748deb75d43b54e85d03c4d67b75da71770484108b159b99257bd7e6296fb5c693b03c13c46e5a3414346bf5a7008dc23f807449d4c30c549ca5981bc5150aa252629c5dd795bbe06bfee382570d7ec60c0fe3e0427e6fc51908559c58e99991777f2127d45c305b1bffad95f2c616266c24036536a923f89aec9849a39512c3a34ba535015e3c6be963696416d10d4bad8d4ccbc42f0ef18ff43ee1fc54aa4d0738c39ed2bce6b9029ecb26deaa372152473b7321c9bd6190262a778dfb0d9469196001ce7af8b4df6ac5302efb2903cdcbe1dc468e9598f5f6bfe46d630eb99c5c53607b40bd4fb5c95f446ef46b5b8b39917798231c0f59eaaa23482f4e0b65faf00058e35b0907131a5c2ce20e80f9715e8b79b377542c95ad0fa7d1c5b98ad32078f1116b6e58a8b2a9d0af16516f1495c5b42dd8ab638320f8662b8536247810d563ff896a3ded2f32adf830becd73a2e250b1cc67af0102e3c463aed070987b2caabda37db4e09298025ab3d97dacd68211f4c01a2d63b1526e1e77bf7a14d77980e15100b1ba91aa74305da24e36a06238160dd7d7367b766c4f0606ce3266ebd454dd7aa12d3e97b07030e01a00e0669207827e5cd092011f18e4a06b51d8de91c6eb4f5deaa8a9a0fba0f5dd45df8acd1b129d216de28fa7f34910620f4acaccfeba9e2a11b7d4c6660bd139a8a5c7a3046eb22e221a0693655cbdd8fd22816341085b8b8fd19e2fbb5456243a5c5cd00135755be11dcf1a240003b7cbb10268486a3ac431ae2308dcdd1ac27daf570ef0270bc69f50766864905670399d65cebb91620ba7923c472f2923a536d29525b1f712d0f624f5064ad5b54cb8f9771db59a197b73e78e69aee525e4f4a8f6424646d8f99cc6cbf7c8215789a9c09ae06c28d45e99596862fbd0a73ffe6ebc3c8d45fdb649c666bf7ee2a014ea9487f7f3f679d6bab8c283eb151216b212a95a4419f67306c987715a01a85f4b28c4b2c2629e6dfa6684c7253f40c47eb71f77b5bf862bf6345c3ec3bf5431828ad0e8f9870bf08ac20950a54ee69daecb1ef9cbf03a8258f3a42960a30309fd37887489cd7150e958f8a0ca96bf050460445b20b2a871b6075f893d5fbd6f843c1ac7d8b614e021213cba4337cddfa9a807910de1603174160b861786797725ee2aa7bc3fdcc515e3bf7ad3c01b9001b13598dabaeb4cb5caea6b853a9f1ea5472b8870cafe35fb4241e704dbdf369b34633a9519c6bf18738f502f686ff9057daa07adb49f81bc36a76b1e29906c2f7f74b8c9078c577f81cf93e822052f40d3d2abb5f783dad57c646ef02da023b7cce539b46b958ae9ae8d2622cb85aa81eebd570dc1ded7159edbe235338f5525cd3ab972ec90022f5cc4a34ee4b965abe83800d8c67130cd90b88c8c660d8ae1e4c2f6f6d15e426c013e5866bc1d19048aaf63c7369167c0e0a4146a50cd13ea63d99007081a41e2fa6801956af200dde2f21b466000832a5fa84b3a333d034f1f0935ea75d772d2a0c930035399cd2a6465064b9c1b71e958dc6191f8c0122ced813f067e5e0edf1c7724c7819908b29314869136467b1e43fa95cfeb5ec96af2172cbdf616ef43ba6c75e718839af7adacbb94dfddf85d3b8c5c3d4a3aeda86c7c9a2ea97b3ed2229f1c0b6499ca09853e205a2b1333f9bbd8febd0bc74bf1d5f98492d8d879ffda72bf34a57a691d2eeaaad3ddd7096268083c0b58a08a43882103add6bb6bade19694138ccd2925c0bd96e2573b296b97bfb083f614b7d45824c546c67cbaf72440277f2c8ae81f69ecb6ed60a818fb3e85296d78d2cf3bade4e38dcdb9982148620e2612a0083caf16abf2a56614a877c19d40d63f60c7ed5ab7dadc9bf6c7769e7bfa8e64cf8e2ff7f2bce6766244dc017e7ee9f13898395e30f6762e64658d724d14a4f2cd59a5621afc77cf4757c7cd31bb7686ad6906fe453939b7fc727ddd27f58d5ae30585c9ffe2c2e638008074afada4e82d42ff4ebaad0501421e68c1a3e2a6b150cbc30428da0b6e8112819d62dc16f4ab8b3f1e18eb3577c8fed4175e294c2a7c832d5e7a4f911ec3cc41c1878b13dc15ad80697fb4aa8cef8ce1b837947b41b5f7ed8fdeb84d686792555ca4bda3f8ec989a8976ae7eaebabb2b2ba7e28915658bb6f3dabcdaa152376b9330551f5032a504a3a12282eb81b78864b7e4f31364adf904e2a55c94df36fd3a9731a567d5d57768998882a795617d1b00720a4bdb58ffee237e4c0d599770031ae1f81956b44116eec41b38e2638324783a8c02f5c337ad256797edef5519a1dc9de1b8ed212345691306c9b231cfd952acad8764806b1234a539ccd25c2ab9075b328099f20ecba475ca45b8e8d9b0780347721281b8058a46b876eaaaeada639ca2b8de3e5cf21a97380a4dad89b664f4652fb73e9fb5bf5f21b0861ce979e7497815856eaa5a1c706680628e38b7a8900ebed3b34a3bfe4f82a2ea2b194df581cf68fa227487be88237c3a9a31615809577df271d6cad3a1c1a2a8768419e8b3a9d5174b854b96b38554913caa1ac7e5cf886d618fbf777ef98c4de9cfb46010958d66ecdefcb2c960c832b0cd914e23fede8d96831e4af0c3bc032d212d9ef696b210237dc534f9fb07048dd7a772476ce038b09107f45f7c243410f8ac91f10d5b4ea3b82b2ae321200f37c727d7ef4df9f59c47cf480e891b6229f35d2a38dc1e4f51db22fd0131309458ea96b395cff21ec9fa01789afc2c8a84fa583f61f4700a4bdfe8fc00652cec781d37ef089f701283a077fe92567f62156acb61eb8b1298be2cd4eee9072e22f3ea117f64a45b1b1b38aa3cdf569e80e2f2e8654d882bf1d301f4e9034", 0x1000}, {&(0x7f0000000080)="2fcbd309c331024bd369d61c9f6b48ecc37a43d7", 0x14}, {&(0x7f0000001380)="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", 0xe72}], 0x4}, 0x0) 18:40:12 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) 18:40:12 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @private2}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 18:40:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001500)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000001400)=[@hoplimit_2292={{0x14}}, @rthdr={{0x18}}], 0x30}, 0x0) [ 3231.630195][ T7472] debugfs: File 'dropped' in directory 'loop0' already present! [ 3231.656273][ T7472] debugfs: File 'msg' in directory 'loop0' already present! 18:40:12 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000040)="0ac87d98869433c130472888a5e31a191c4e60b4f2435d", 0x17}}, 0x0) 18:40:12 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@hopopts={{0x11}}], 0x18}}], 0x1, 0x0) 18:40:12 executing program 1: perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:12 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0xc020660b, 0x0) 18:40:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) [ 3231.884464][ T7491] ieee802154 phy0 wpan0: encryption failed: -22 18:40:12 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x0) 18:40:12 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 18:40:12 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x89a1, &(0x7f0000000240)={@bcast, @default, 0x0, [@null, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 18:40:12 executing program 4: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) [ 3231.929144][ T7492] debugfs: File 'dropped' in directory 'loop0' already present! [ 3231.959230][ T7492] debugfs: File 'msg' in directory 'loop0' already present! 18:40:12 executing program 1: perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 18:40:12 executing program 3: socketpair$tipc(0x1e, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001700), 0xffffffffffffffff) 18:40:12 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}], 0x28}}], 0x16a, 0x0) 18:40:12 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 3232.211422][ T7510] debugfs: File 'dropped' in directory 'loop0' already present! [ 3232.232928][ T7510] debugfs: File 'msg' in directory 'loop0' already present! 18:40:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 18:40:13 executing program 3: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80ffffff) 18:40:13 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x48, r1, 0x1, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6}}]}, 0x48}}, 0x0) 18:40:13 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x4, 0x0, 0x9, 0x0, 0x1}, 0x40) 18:40:13 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe}, 0x40) [ 3232.448727][ T7538] debugfs: File 'dropped' in directory 'loop0' already present! [ 3232.463145][ T7538] debugfs: File 'msg' in directory 'loop0' already present! 18:40:13 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 18:40:13 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000006c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c) 18:40:13 executing program 0: setsockopt$sock_linger(0xffffffffffffff9c, 0xffff, 0x80, &(0x7f0000000000), 0x8) 18:40:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000080)="2fcbd309c331024bd369d61c9f6b48ecc37a43d7", 0x14}, {&(0x7f0000001380)="9319fefb619199a917c9de24334de2658349a0f9b27d25920e2fe31a5dbc1d525edcb0f64220be9193fa20748eb625b85547cada4f021c86a980d624ee21ceb77282ff9bcb99f8e673e58d910281bfc4dd72758821f9b4d3e6011180c8197af853d54323a873afdebbc75b081950461f937a89ac08777f0670c625e698d5723cf6d04e157caa61e8cef4503df2474b7674f300ea1391e8ac8045bf588bbaf16a66fd0d8d593c3de900db96282cb74ea4341e9055083ee44820629f9d5d0c18c9135c9098af55c18b121fecd681f72ef9303d0618a28a5e97a5dbcf16ca1f54e5d19d6dd2007250f876aa36aebaccf9abda9d88c4b918a3b7fac1d5049e355015e81bf513499c444621872aca8a2aeb52198e74f4ee7c99fa78af6753bbb4a6395028eb67ff1b834e759aa96d1a48a95986029c94ef6d4e614228d978908445c7df9dc2b25c86c6c629bf9557b96501f6d4df2f3ab8e5c3804fb58318cc9fd2347c312be0c17643c79e88ae8fdcc1a051114fcdbb1340388e7ab70e5c127127b5ec8345b64214fbaa124adb082585bd4ba527b4fd22b86b94bbe1cd40a75e694dae51474f89c301318afbbce4ce59bd7d74777d53841c7f7ff98ba5b539016b38dfb6d13e871b3fd7c493df1e923cab728d90501181410ce32b48f18f6442dc2316e36cd62bb693a3254f460873c941408471b5f781c23af9471b2e2dce02cd9e69d82c48cb0ce66b39ce40c58e9536784fef9ade39b092669dcd3d48823b537735e7dd6284605fc93919c65e9d016557ecdaccb95d6904927da320fe459d08c689a6502cc9fdb863900dfbe33bc287919b4974de52c8cfb28aa4036c489995940fd3da90cb518fdb492dd9b766ae05567d1c2ade5ee70851f681a20c4cfa13fe2ec14610dbd1d2cb889b2b9c1237297cfcb75d94b95f9ba42be96fc92af43d30cda5c380961b9edf7a4972d0c1672247c023d968483d96e8329c7b85fe49521153b79a25c633fa3b475594be068020ffb36962d9b60721af9ee97978f30479a142dba5cdbce32adad77b86e4d7b0b9501717cd7f68146314e8e5a7d1c26534a83e91fe0e34beac3bd5de445ae41da701bcf92e3587b05407ced86b9dd2a65e4ad5e0884a34fa3ba58589a4be3fb03584b43bff80ede3f804a40830907ef1e637f45aaccc2bad617a3cb452dbca3f48e364126b0a446db5b32465129a188cd86fad905cbd7b960ef039b46e8e9734ecae2384c7c80c654b078ab180956c0ce7557f69842af9e1357deb9feebd54f5549a01ca56367d293214f46213bc2158ff091abf6aba1b7f26c464c040292f2bea120ffddf7b655a9bee95fe623e6f949b9f78eb049bde8c043471e12c58469e9a63602072ae66fec275f256b1a6302d350d82f920a5eeb2b234f979f29ffdb1501ec9f7d8c8852778e6bba5bc2d4241fd67a25e6757436a45ed10a5ca762a80e2a81fbbe4822bb33ea6c67a937d5b4f5686b78d37b550c688189aaef7fdd97d18ecda26f1098c41dd67ed771909011bd44c6720122b3680861e53eb11a45abf326aa9aa512d8f65a7a8966ae120de97ddb1bc905b36162bd9ef81642ba02f4f05275e486f956e0efcabbe77fdf0caeaab219500e74c286b2e8521500f1e96d164d32f4c22e193fd73b2210c9d345a5dbcdd4051f72033368cc222ef454f7fa8e99a528e9dbc82ea31b069672d89c2c5c0fae5e98daacdf436e51b6eb5c8ec74eb19bba3c96282e6ddfab613ed7852599dc825a6314e7f38ca4b101ef3c4dd5aaa32c4df8ed9058957dd1e68431c933be11dc38d776fe42407f2302e767d946588be8b7cc7b094da52788a8b2ac9bf7c913560bae1abb625ef86fb5a399afd7c4e09f01a67edbd727626021326ea01521f5ac880f3adedb71cb5e2735cf0b9ba6ceb6335a07b3f99956f04fabcd3098e6770fca7b885ec3ca17c86dac4c53e85999aabeac5e2e76a33a7c8ed01fd468e99da08e792a38faab3823463353ca1ff6f5f5d9480d42f2170d38e52e08d0f7d09582ddc184d8ff477b06774e86873a34020f0ac5b3c8de9eab12835895edb5717962bae4c195291db6b64d8f6c4bdae73e37fadb19a0f19fcc0969c0321d5d3ca6a8240cdc243b764c99aa5d0426ea6f39e937cdcaf77b24dbead24da141cdd63c5f12e9aa9592b4ebb9e5f9273477e4df11ba209dcca7f129cf0926ce612300401a98f17a53c990fc35ab6e470685ae0f156d26847aa799be1dcad016ac83389d10210c055a06fa770a0f4b2249b5170e951a14979d5659dd85b9ea19f32b7220e4aca8ce3e58587a514ce71e754eb36872ce12ae3392be268f71a572015940c5128e29f16a96f82ce55bfebdb7a5f7b7400f9f11fe56d11a0f94e6d3758754bd78070bfb755b63fc3be9ff63b4d42e7b2027f0aa8b2369d0d1b4894c6005155fcb14be3716866d96c1553d5b9aee07e76de9a43ba274f3d9ae262c8c0af68d008e466fada063d9e1e11a6ba9af339a7fab6a42160bfb76a86d638d92b9f2a8434f08b9c10e5047570aef37359bc0677b5538feb1d948adcb723cbe85438087933daa94cd6d101652d0ba65b585bfd49c0a472f1998c1994c5d7472e37ca052306988721e88075c4acffd072dfc472654eb091eac6def74cc5d9e310465f7d6f3476c8112d9ddc57cd06d21c3604bb75ad8a117a21be38fe11313f973064e52196410d8ce10928b1dec230b5559c639efc6b8fd05c881f9584e27baaed2e9aba43f5f4a6ded60123f414553f26f1c561ae0c20ecff50ea2643be7b73ffc9b4b2e45abb04f7e454b324e8e00ed24c99eb00e7772ecadb9c0da15917501c4748ba865e713ed364dad172fe189e6abf1ec82e9d643a2afb76112d70f234ca17fd92d4d6cff1b1553767d1fabea04dcfe04b74e04bc72afad0b69da538514eb1d49ca3639fa83dae70f6418f1990a502abebf8e18c445cefcdc2fcca0fc7302c2568cc0072353551f1e32f6aa8899ddebda4b6837537989ace3472d0dae48ebc2738567c4b3a43f12db3eb246b5758c5ac6e8bd680a5dcadaf79486072b82f6608bc1f3da2b7b7bbcdfb58c715af008b45d77769aa55375ba5098e8cc49a7d882634a00d2ce570cc308f3679959f453f9f830be53e6d7c4473d97e92b5f571de14d4ac799904d184d78f3b122f62c7eb003cdec5859f3d22c7bcaa3f3f00236758ea13e3878dd7395e6a636144f3cb7bc2bcbb804f902340757bcbc06b4ff7e00af6489f5d1c8fe13b3ad0cc662d820cffaf9553e178a4e8f245821a8f85a09e24ddfcc0c4bd3091d33cccf07bf1002f304b7b3ea759cf8deb0bd9a358d9400dd3b4cf5edb674a9a8eecd3a384a9bb6ad31f1f7022d2f5ecbc77b96744d329c763f2944220851c9d103ee2654334a19534dc8be56868cfcecee4d6b70cbf90603edf4934235677dd12dd84eebbca132dafc961912f3c44d15093d39ff64d7905ae4b70ff8a92d5ac1f51095efea35ff0ee74e532f7f2c36819f5681a89dbfec3aed3fad4f76b0b599c41df50afebf92c53c25fbdf4bbc20983e9c17aaa60c7ad0c977deb5267a966d4a67fdbf4959d87055556a3b4e416f6cfe34cde0b3121653506b1b0272e662463698f21ff9241bd41b902698b5c6c79087ef84b4066f636bee30a5158d85cf99b172d622862d13a8a25c474ef8e99cc9f7595e341973948eab7a9ec7c7abeaa5e5d09f142c2995fd5015234980663c1abbb5cc6d74fc1b8fca8f6ef62d3282d548e72770891a30913d8d2e0094a80ed53ade41bb792e57531d7402b8ea6173fc40f74f047b1c23c4c37c0d6787f4645a00fa893b6ebf738967bc9d3c7648d35b47ffd7b29932b37aa65cfe536232da4e09121e3438d60862845f1306c3ae4f11b0419d371e2a0ab323aaa7a7ad319bbd2e4a15109df5202e972ff0174ab769005dbb1d62aaaeb0c858400284089c24e7063324376721ec3bca662828824b04685065ce17d5171c0e941ecf01ea372dafde2fc451670705691ee339c6e5de14409439028ae0852f7729da990f196fb24b546566d634cc92a249e084b01c6c8f73702d6dad70c13fc05a537f87ca0bb3325291d74413aa3a4551ea0af5028e79efc7b88c3f35a5bc06892fcd76707bb1b72d7a801fda830c7e61098979d3adb53291f9e5f0db7c115c0ad16e8855e33024a9db3cdc988bf95f01c959c3dc319d53173b22d3d7156ca58b5eceba6bc5149ad6de7424f525b8e293fa7ef6a53c13de3c3f76517e4229563b42a59993b08b2d5f2bb26920143df8a7c6ecdd1f1b12b9956d35c1c1c0c01cb4a042e3db97cc723d97ba723a4af9a58f5848bbb1636e2a079c231e7d5620c37a2d859754c8dc93cee20e6bd7c141f94e316e35c29fc0e1bdd33ac310f9dc418f1ab28573066642dcabd3a8875b55f8ef089fbf89afcd0cb34224b0200d3ce807a42bc2f18bd98da84e0e20cf8724803b6565e26e3c41e9cb54a1d0683f7e55e58872c0cbda2ef1df4c7c92aea911aa473e354afc4005732a039d163cfe2baedab84872637077ac9be03dff646ffaccc6999926243089260538ff59063e7959643502ea2a185c5918d3a8a7cfe2952724ea54fbecfeaa6d71fe5efd3f25c6f66fc1fb13aea4015ebc7dfaef8fc5a546da4e0b9ffb07bccc24ae203d8553d90164b52e74c1836513a41ea89481355a27d951ecc93cbee31462054a43b4fdb5aff27dabbafe8bb1774c15d05be475c8b5129d34494593da9cd55c191c95e27475a3e5e91b775e4cff3bd2e3c8b8312863618f220d3cec06c3fdea1e8e474813ae38f18c985bae96d33fd7799bd21c39074e3fdcae1df5f429e37665e337db95b8af0a7740299bdc20198fa618d76d989d391f4f589ed01ac33ae1d75d17ce203b74d03d4eaaae8b59d890e9c1e2cf90759f6f6854eee2f3e7da099daeb0a430452036216321e772ebb7ec8d12f33073cb337f2a1568a3f81401a502ee4d7bf92e46e250c567aea5d7d8021e29804ba437fff93bdeb153e69348926ec65ba121b01838c661733b2c66a7517ac8b97ea2eacabe890ab66ed68c5ed6e27fa9eddad586a81c489e5149c9e2d62a4f797de0599a617450e71269eda6b2775eae0dcc0407c836c809c0c139b887b54930c3db2c3c90b308368a07d26c6194b589885ded13b4730d95095e345bb86c58c940eda30671bd3e0bb9d89e6f52e5f6f202dfb324c3d7217", 0xe72}], 0x3}, 0x0) 18:40:13 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FREEZING\x00', 0x9) 18:40:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) [ 3232.641829][ T7549] debugfs: File 'dropped' in directory 'loop0' already present! [ 3232.666297][ T7549] debugfs: File 'msg' in directory 'loop0' already present! 18:40:13 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x1d, 0x0, 0x0) 18:40:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, 0x0, 0x0) 18:40:13 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18"], 0x48}}], 0x1, 0x0) 18:40:13 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) 18:40:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 18:40:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000040)=0x20) [ 3232.922776][ T7573] debugfs: File 'dropped' in directory 'loop0' already present! [ 3232.950750][ T7573] debugfs: File 'msg' in directory 'loop0' already present! 18:40:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x19, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) 18:40:13 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:13 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x101}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x4010) 18:40:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 18:40:13 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x12000) 18:40:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x21, 0x0, 0x0) 18:40:14 executing program 0: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 18:40:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000090000000000000068b7a65c9b"], 0x28}}, 0x0) [ 3233.216706][ T7596] debugfs: File 'dropped' in directory 'loop0' already present! [ 3233.254302][ T7596] debugfs: File 'msg' in directory 'loop0' already present! 18:40:14 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 18:40:14 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@hopopts={{0x18}}], 0x18}}], 0x1b, 0x0) 18:40:14 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:14 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x17, 0x0, 0x0, &(0x7f0000000300)=[@hopopts={{0x18}}], 0x18}}], 0x1, 0x0) 18:40:14 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 18:40:14 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_buf(r0, 0x29, 0xd3, 0x0, 0x0) 18:40:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000)='|', 0x1, 0x40800, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote, 0x2}, 0x1c) 18:40:14 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{0x0}, {&(0x7f0000000c00)="bc", 0x1}], 0x2}}], 0x7ffff000, 0x0) [ 3233.504476][ T7618] debugfs: File 'dropped' in directory 'loop0' already present! [ 3233.533533][ T7618] debugfs: File 'msg' in directory 'loop0' already present! 18:40:14 executing program 0: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000900), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={0x0}}, 0x0) pipe(&(0x7f0000000c00)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000e00), 0xffffffffffffffff) [ 3233.595848][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 18:40:14 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 18:40:14 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) [ 3233.733745][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3233.845568][ T7640] debugfs: File 'dropped' in directory 'loop0' already present! [ 3233.866345][ T7640] debugfs: File 'msg' in directory 'loop0' already present! 18:40:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}}, 0x0) 18:40:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000012c0)={&(0x7f0000001140), 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x14}, 0x14}}, 0x0) 18:40:14 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r0}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 18:40:14 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x10241, 0x0) 18:40:14 executing program 0: pselect6(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0xc8]}, 0x8}) 18:40:14 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:14 executing program 4: pselect6(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0xc8]}, 0x8}) 18:40:14 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000a40)={'ip6tnl0\x00', 0x0}) 18:40:14 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)="4f8a9c47a0b4b4160492", 0xa}}, 0x0) 18:40:14 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r0}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) [ 3234.042335][ T7651] debugfs: File 'dropped' in directory 'loop0' already present! [ 3234.078759][ T7651] debugfs: File 'msg' in directory 'loop0' already present! 18:40:14 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) [ 3234.241083][ T7667] ieee802154 phy0 wpan0: encryption failed: -22 18:40:15 executing program 4: r0 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 3234.290787][ T7666] debugfs: File 'dropped' in directory 'loop0' already present! [ 3234.334005][ T7666] debugfs: File 'msg' in directory 'loop0' already present! 18:40:15 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000000), 0x4) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x180000000) 18:40:15 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r0}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 18:40:15 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005e80)='./cgroup/syz1\x00', 0x200002, 0x0) 18:40:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, 0xffffffffffffffff, 0x0) 18:40:15 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x13, 0x0, 0x0) 18:40:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) [ 3234.522212][ T7684] debugfs: File 'dropped' in directory 'loop0' already present! [ 3234.539016][ T7684] debugfs: File 'msg' in directory 'loop0' already present! 18:40:15 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r0}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 18:40:15 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:15 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), &(0x7f0000000100)=0x4) 18:40:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x12, 0x0, 0x0) [ 3234.717372][ T37] audit: type=1804 audit(1627152015.464:495178): pid=7693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4048/cgroup.controllers" dev="sda1" ino=15150 res=1 errno=0 [ 3234.821534][ T7701] debugfs: File 'dropped' in directory 'loop0' already present! [ 3234.854603][ T7701] debugfs: File 'msg' in directory 'loop0' already present! 18:40:16 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x89ed, &(0x7f0000000240)={@bcast, @default, 0x0, [@null, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 18:40:16 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r0}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 18:40:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x40000123, 0x0, 0x0) 18:40:16 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:16 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002180)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="4e33defc67390be1251830d36bd70f693fffbfa7bd70384acba6d9c2747d5c1f8f880e153e646bbddd17e470992a5f72ce2bb468a73ebb32deac1aa012f7e4ac40bf23264e7f7c9831fd85e4f20ec8c5f1bc1b0cf500c6d8e35d6b7b72747c395f63756ebdaa36d0722ef889453c3a906c4c2cd6b5d351b9b6b6938d819883", 0x7f}, {&(0x7f0000000140)='|', 0x1}], 0x2}}], 0x1, 0x0) 18:40:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:16 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r0}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) [ 3235.377165][ T7726] debugfs: File 'dropped' in directory 'loop0' already present! [ 3235.408329][ T7726] debugfs: File 'msg' in directory 'loop0' already present! 18:40:16 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@hopopts={{0x18, 0x29, 0x8}}], 0x18}}], 0x1, 0x0) 18:40:16 executing program 4: getpid() r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}, 0x0) 18:40:16 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) [ 3235.562297][ T37] audit: type=1804 audit(1627152016.314:495179): pid=7729 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4049/cgroup.controllers" dev="sda1" ino=15663 res=1 errno=0 18:40:16 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x5411, 0x0) 18:40:16 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0xa}, 0x40) 18:40:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@broadcast}, 0xa, @in6=@mcast1}}, 0xe8) 18:40:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 18:40:16 executing program 4: socketpair(0x2c, 0x3, 0xfffffffa, &(0x7f0000000040)) 18:40:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x4b, 0x0, 0x0) 18:40:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:16 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 18:40:16 executing program 4: socketpair(0x2a, 0x2, 0x0, &(0x7f00000001c0)) 18:40:16 executing program 3: ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001700), 0xffffffffffffffff) 18:40:16 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x89a0, &(0x7f0000000240)={@bcast, @default, 0x0, [@null, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 18:40:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 18:40:16 executing program 4: socketpair(0x2a, 0x2, 0x0, &(0x7f00000001c0)) 18:40:16 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@hopopts={{0xf}}], 0x18}}], 0x1, 0x0) 18:40:17 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) [ 3236.289198][ T37] audit: type=1804 audit(1627152017.044:495180): pid=7777 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4050/cgroup.controllers" dev="sda1" ino=14199 res=1 errno=0 18:40:17 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 18:40:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:17 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000100)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xee00}) 18:40:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 18:40:17 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0, 0x500, &(0x7f0000000300)=[@hopopts={{0x18}}], 0x18}}], 0x1, 0x0) 18:40:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001480)={'wpan3\x00'}) 18:40:17 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:17 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 18:40:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x0, 0x7}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) 18:40:17 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x11, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) 18:40:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x4a, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) [ 3236.986098][ T37] audit: type=1804 audit(1627152017.734:495181): pid=7851 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4051/cgroup.controllers" dev="sda1" ino=14417 res=1 errno=0 18:40:17 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) gettid() tkill(0x0, 0x800000009) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 18:40:17 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 18:40:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x49, 0x0, 0x0) 18:40:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendfile(r3, r1, 0x0, 0x100007000) 18:40:17 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)) 18:40:18 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x8, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) 18:40:18 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) gettid() tkill(0x0, 0x800000009) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:18 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r2}) 18:40:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) [ 3237.224517][ T7886] debugfs: File 'dropped' in directory 'loop0' already present! [ 3237.256589][ T7886] debugfs: File 'msg' in directory 'loop0' already present! 18:40:18 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x8, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) [ 3237.372064][ T37] audit: type=1804 audit(1627152018.124:495182): pid=7889 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4052/cgroup.controllers" dev="sda1" ino=14085 res=1 errno=0 [ 3237.392058][ T7911] debugfs: File 'dropped' in directory 'loop0' already present! 18:40:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 18:40:18 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x20010002, 0x0, 0x0) 18:40:18 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) gettid() tkill(0x0, 0x800000009) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) [ 3237.448279][ T7911] debugfs: File 'msg' in directory 'loop0' already present! 18:40:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000800)={0x0, 0x0, "c4a3bf", 0xe1}) 18:40:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r1, 0x681, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}}, 0x0) [ 3237.613510][ T7927] debugfs: File 'dropped' in directory 'loop0' already present! 18:40:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 18:40:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendfile(r3, r1, 0x0, 0x100007000) 18:40:18 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) [ 3237.658484][ T7927] debugfs: File 'msg' in directory 'loop0' already present! 18:40:18 executing program 4: socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000090000000000000068b7a65c9b989fe2d8f9fe4b"], 0x28}}, 0x0) 18:40:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) [ 3237.797997][ T7944] debugfs: File 'dropped' in directory 'loop0' already present! [ 3237.800060][ T37] audit: type=1804 audit(1627152018.544:495183): pid=7939 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4053/cgroup.controllers" dev="sda1" ino=14483 res=1 errno=0 [ 3237.819679][ T7944] debugfs: File 'msg' in directory 'loop0' already present! 18:40:18 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) [ 3237.924915][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 18:40:18 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x11, 0x67, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) [ 3237.967715][ T7954] debugfs: File 'dropped' in directory 'loop0' already present! [ 3237.989661][ T7954] debugfs: File 'msg' in directory 'loop0' already present! 18:40:19 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0xe03d, 0x0, 0x0, &(0x7f0000000300)=[@hopopts={{0x18}}], 0x18}}], 0x1, 0x0) 18:40:19 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:19 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x4020940d, &(0x7f0000000240)={@bcast, @default, 0x0, [@null, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 18:40:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 18:40:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendfile(r3, r1, 0x0, 0x100007000) 18:40:19 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, 0x0, 0x403}, 0x40) 18:40:19 executing program 4: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) [ 3238.711859][ T7983] debugfs: File 'dropped' in directory 'loop0' already present! 18:40:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x10, 0x0, 0x0) 18:40:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) [ 3238.744621][ T37] audit: type=1804 audit(1627152019.494:495184): pid=7979 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4054/cgroup.controllers" dev="sda1" ino=14675 res=1 errno=0 [ 3238.758416][ T7983] debugfs: File 'msg' in directory 'loop0' already present! 18:40:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) 18:40:19 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(0x0, 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:19 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x8906, 0x0) 18:40:19 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x101}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@hoplimit={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@dev}}}], 0x40}}], 0x1, 0x0) 18:40:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 18:40:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40800, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote, 0x2}, 0x1c) 18:40:19 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(0x0, 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:19 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x1a, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) 18:40:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 18:40:19 executing program 3: socketpair$tipc(0x1e, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000001700), 0xffffffffffffffff) 18:40:19 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(0x0, 0x0, 0x101842) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={0x0}}, 0x1) [ 3239.247549][ T37] audit: type=1804 audit(1627152019.994:495185): pid=8015 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4055/cgroup.controllers" dev="sda1" ino=14563 res=1 errno=0 18:40:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 18:40:20 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x324}, 0x0) 18:40:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0xb, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) 18:40:20 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:20 executing program 4: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000040)="03451b", 0x3}}, 0x0) [ 3239.492727][ T8039] ieee802154 phy0 wpan0: encryption failed: -22 18:40:20 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x401c5820, &(0x7f0000000240)={@bcast, @default, 0x0, [@null, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) [ 3239.541492][ T8040] debugfs: File 'dropped' in directory 'loop0' already present! [ 3239.566371][ T8040] debugfs: File 'msg' in directory 'loop0' already present! 18:40:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 18:40:20 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080), 0x4) 18:40:20 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x89e3, 0x0) 18:40:20 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:20 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@hopopts={{0x18}}], 0x20000318}}], 0x1, 0x0) 18:40:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 3239.708400][ T998] Bluetooth: hci0: command 0x0401 tx timeout 18:40:20 executing program 5: socketpair(0x1d, 0x0, 0x1, &(0x7f00000012c0)) 18:40:20 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) [ 3239.797695][ T8057] debugfs: File 'dropped' in directory 'loop0' already present! [ 3239.815299][ T37] audit: type=1804 audit(1627152020.564:495186): pid=8054 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4056/cgroup.controllers" dev="sda1" ino=14755 res=1 errno=0 18:40:20 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0xa, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) [ 3239.847622][ T8057] debugfs: File 'msg' in directory 'loop0' already present! 18:40:20 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 18:40:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@hoplimit={{0x14}}, @dstopts={{0x18}}], 0x30}, 0x0) 18:40:20 executing program 4: pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r0, 0x0, 0x10e6) 18:40:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 18:40:20 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:20 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x89a1, 0x0) 18:40:20 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@hopopts={{0x18, 0x29, 0x36, {0x0, 0x2}}}], 0x18}}], 0x1, 0x0) 18:40:21 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x0, 0x0, 0x4}, 0x40) 18:40:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 18:40:21 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:21 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000) [ 3240.304351][ T37] audit: type=1804 audit(1627152021.054:495187): pid=8085 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4057/cgroup.controllers" dev="sda1" ino=14755 res=1 errno=0 18:40:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x33, 0x0, 0x0) [ 3240.476826][ T37] audit: type=1804 audit(1627152021.224:495188): pid=8106 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir310435568/syzkaller.hTdtQz/4892/memory.events" dev="sda1" ino=14213 res=1 errno=0 18:40:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:21 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 18:40:21 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x2, 0x0) [ 3240.602520][ T37] audit: type=1804 audit(1627152021.264:495189): pid=8106 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir310435568/syzkaller.hTdtQz/4892/memory.events" dev="sda1" ino=14213 res=1 errno=0 18:40:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000900), r0) 18:40:21 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0xc0189436, 0x0) 18:40:21 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) [ 3240.768086][ T37] audit: type=1800 audit(1627152021.434:495190): pid=8106 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=14213 res=0 errno=0 18:40:21 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) 18:40:21 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$xdp(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x140010, r0, 0x0) [ 3240.892549][ T37] audit: type=1804 audit(1627152021.644:495191): pid=8122 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4058/cgroup.controllers" dev="sda1" ino=14675 res=1 errno=0 18:40:21 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x5451, 0x0) 18:40:21 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:21 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x0, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 18:40:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0x3) 18:40:21 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x6, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) 18:40:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:40:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="00f0000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250807000b000000000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x6c, 0x60, 0x0, r5}}, 0x20}, 0x1, 0x600000004000000}, 0x0) 18:40:22 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x0, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 18:40:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) 18:40:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x20, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 3241.329712][ T37] audit: type=1804 audit(1627152022.084:495192): pid=8159 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4059/cgroup.controllers" dev="sda1" ino=14659 res=1 errno=0 [ 3241.369142][ T8170] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 18:40:22 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x5452, 0x0) [ 3241.453212][ T8187] team0: Port device veth259 added 18:40:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:22 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x0, 0x2, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:22 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x2) 18:40:22 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x0, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) [ 3241.745650][ T37] audit: type=1804 audit(1627152022.494:495193): pid=8203 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3309/cgroup.controllers" dev="sda1" ino=14947 res=1 errno=0 18:40:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) [ 3241.833614][ T8170] team0: Port device veth259 removed [ 3242.031640][ T37] audit: type=1804 audit(1627152022.784:495194): pid=8241 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4061/cgroup.controllers" dev="sda1" ino=14850 res=1 errno=0 18:40:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @sack_perm, @window, @window], 0x4) 18:40:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x20, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x20}}, 0x0) 18:40:23 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x0, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x49, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) 18:40:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:40:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:23 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 18:40:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x20, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x20}}, 0x0) 18:40:23 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 18:40:23 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x0, 0xf2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:23 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x80108906, 0x0) 18:40:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) [ 3242.507556][ T37] audit: type=1804 audit(1627152023.254:495195): pid=8264 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4062/cgroup.controllers" dev="sda1" ino=14609 res=1 errno=0 18:40:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x11, 0x64, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) 18:40:23 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:23 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000380)={0x3, @default}) 18:40:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) [ 3242.794643][ T8285] debugfs: File 'dropped' in directory 'loop0' already present! [ 3242.825854][ T8285] debugfs: File 'msg' in directory 'loop0' already present! 18:40:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:40:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x0) 18:40:23 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000380)={0x3, @default}) 18:40:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) 18:40:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:23 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:23 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000380)={0x3, @default}) [ 3242.993441][ T8301] nbd: must specify a size in bytes for the device 18:40:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) 18:40:23 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000002400)="0ac87d", 0x3}}, 0x0) [ 3243.099607][ T8310] debugfs: File 'dropped' in directory 'loop0' already present! [ 3243.107589][ T8310] debugfs: File 'msg' in directory 'loop0' already present! 18:40:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) 18:40:23 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000380)={0x3, @default}) 18:40:24 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) [ 3243.233956][ T8327] ieee802154 phy0 wpan0: encryption failed: -22 [ 3243.380592][ T8337] blktrace: Concurrent blktraces are not allowed on loop0 18:40:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:40:24 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@bcast, @default, 0x0, [@null, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 18:40:24 executing program 4: ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000380)={0x3, @default}) 18:40:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) 18:40:24 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:40:24 executing program 4: ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000380)={0x3, @default}) 18:40:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) [ 3243.734477][ T8352] blktrace: Concurrent blktraces are not allowed on loop0 18:40:24 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x5460, 0x0) 18:40:24 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, 0x0) 18:40:24 executing program 4: ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000380)={0x3, @default}) 18:40:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) [ 3243.935752][ T8365] blktrace: Concurrent blktraces are not allowed on loop0 18:40:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r3, r2, 0x0, 0x100000002) 18:40:25 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x8914, &(0x7f0000000240)={@bcast, @default, 0x0, [@null, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 18:40:25 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000380)={0x3, @default}) 18:40:25 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x8001, 0x2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mq_notify(0xffffffffffffffff, 0x0) 18:40:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) 18:40:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100007000) 18:40:25 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000380)={0x3, @default}) 18:40:25 executing program 2: socketpair(0x26, 0x0, 0x0, 0x0) socketpair(0x1d, 0x0, 0x0, &(0x7f0000000000)) 18:40:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x4, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) [ 3244.642550][ T8388] debugfs: File 'dropped' in directory 'loop0' already present! [ 3244.669652][ T8388] debugfs: File 'msg' in directory 'loop0' already present! 18:40:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x3, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) 18:40:25 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000380)={0x3, @default}) 18:40:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100007000) [ 3244.865045][ T8400] can: request_module (can-proto-0) failed. [ 3245.037985][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 3245.038002][ T37] audit: type=1804 audit(1627152025.784:495201): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3313/cgroup.controllers" dev="sda1" ino=15283 res=1 errno=0 [ 3245.082479][ T37] audit: type=1804 audit(1627152025.804:495202): pid=8411 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4066/cgroup.controllers" dev="sda1" ino=13930 res=1 errno=0 18:40:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r3, r2, 0x0, 0x100000002) 18:40:26 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0}}, 0x4c) 18:40:26 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) 18:40:26 executing program 4: syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000380)={0x3, @default}) 18:40:26 executing program 1: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000001700), 0xffffffffffffffff) 18:40:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100007000) 18:40:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="82000000000000000a004e2400000101ff"], 0x310) [ 3245.352237][ T8429] ieee802154 phy0 wpan0: encryption failed: -22 18:40:26 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000300)='syzkaller\x00', 0x400, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x8, 0x10, 0x0}, 0x78) 18:40:26 executing program 4: syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000380)={0x3, @default}) 18:40:26 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x4020940d, 0x0) [ 3245.392313][ T37] audit: type=1804 audit(1627152026.144:495203): pid=8430 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4067/cgroup.controllers" dev="sda1" ino=15634 res=1 errno=0 18:40:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r2, r1, 0x0, 0x100007000) 18:40:26 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c, 0x0}, 0x0) [ 3245.733907][ T37] audit: type=1804 audit(1627152026.484:495204): pid=8445 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4068/cgroup.controllers" dev="sda1" ino=15555 res=1 errno=0 [ 3245.773582][ T37] audit: type=1804 audit(1627152026.524:495205): pid=8447 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3314/cgroup.controllers" dev="sda1" ino=14085 res=1 errno=0 18:40:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r3, r2, 0x0, 0x100000002) 18:40:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r2, r1, 0x0, 0x100007000) 18:40:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x38, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) 18:40:26 executing program 3: socketpair(0x1d, 0x0, 0xf7181845, &(0x7f0000000480)) 18:40:26 executing program 4: syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000380)={0x3, @default}) 18:40:26 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x894c, 0x0) 18:40:26 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 18:40:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000090000000000000068b7a65c9b"], 0x28}}, 0x0) 18:40:27 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001480)={'wpan3\x00'}) 18:40:27 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x5, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) [ 3246.259718][ T37] audit: type=1804 audit(1627152027.014:495206): pid=8469 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4069/cgroup.controllers" dev="sda1" ino=15671 res=1 errno=0 [ 3246.350352][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:40:27 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) [ 3246.391871][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:40:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) [ 3246.656028][ T37] audit: type=1804 audit(1627152027.404:495207): pid=8500 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3315/cgroup.controllers" dev="sda1" ino=14416 res=1 errno=0 18:40:27 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 18:40:27 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x89e8, &(0x7f0000000240)={@bcast, @default, 0x0, [@null, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 18:40:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r2, r1, 0x0, 0x100007000) 18:40:27 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000740)={&(0x7f0000000680), 0xc, &(0x7f0000000700)={0x0}}, 0x0) 18:40:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000002) 18:40:27 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000)='|', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote}, 0x1c) 18:40:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x0, 0x9, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3f5a, 0x2}, 0x40) 18:40:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x0, 0x0, 0x4}, 0x40) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x5421, 0x0) 18:40:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x28}}, 0x0) 18:40:27 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)="4f8a9c47a0b4b4160492e90829e7107bee2b5e", 0x13}}, 0x0) [ 3247.007125][ T37] audit: type=1804 audit(1627152027.754:495208): pid=8515 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4070/cgroup.controllers" dev="sda1" ino=14416 res=1 errno=0 18:40:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002180)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev}, 0x1c, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000140)='|', 0x1}], 0x2}}], 0x1, 0x0) 18:40:27 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x4b, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) [ 3247.121542][ T8527] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3247.146362][ T8528] ieee802154 phy0 wpan0: encryption failed: -22 18:40:27 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_ax25_SIOCADDRT(r0, 0x5452, &(0x7f0000000240)={@bcast, @null, 0x0, [@null, @bcast, @default, @bcast, @null, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) [ 3247.179973][ T8531] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 18:40:28 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, &(0x7f0000000080)) 18:40:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r2, r1, 0x0, 0x100007000) 18:40:28 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x102) 18:40:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000002) 18:40:28 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x42, 0x0, 0x0) 18:40:28 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0x0, 0x0, &(0x7f0000003240)) 18:40:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x3c, 0x0, 0x0) 18:40:28 executing program 1: sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x5af196d299b9a237) [ 3247.521381][ T37] audit: type=1804 audit(1627152028.274:495209): pid=8545 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4071/cgroup.controllers" dev="sda1" ino=15490 res=1 errno=0 18:40:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x21, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) 18:40:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x11, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) 18:40:28 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair(0x1, 0x1, 0x3, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r3, 0x400, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8841}, 0x800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@loopback, r5}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1e, r5}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x3, 0x0, 0x0) 18:40:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000013000000080001"], 0x48}}, 0x0) 18:40:28 executing program 2: socketpair(0x2, 0x2, 0x80, &(0x7f0000000040)) 18:40:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r2, r1, 0x0, 0x100007000) [ 3247.857236][ T8572] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3247.896647][ T8573] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3248.007922][ T37] audit: type=1804 audit(1627152028.754:495210): pid=8578 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4072/cgroup.controllers" dev="sda1" ino=15671 res=1 errno=0 18:40:29 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000006c0)=[{0xfffffffffffffffd}], 0x1}, 0x0) 18:40:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000002) 18:40:29 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1ff}}], 0x18}}], 0x1, 0x0) 18:40:29 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x20000160, 0x0, 0x0) 18:40:29 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000001540)=0x18) 18:40:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r2, r1, 0x0, 0x100007000) 18:40:29 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x9, 0x3, &(0x7f0000001840)=@framed, &(0x7f0000001580)='GPL\x00', 0x6, 0xff, &(0x7f00000018c0)=""/255, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:40:29 executing program 1: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000040)="0345", 0x2}}, 0x0) 18:40:29 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) getsockname$unix(r0, 0x0, &(0x7f0000000340)) 18:40:29 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f0000000040)={{0x3, @bcast, 0x4000005}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @default]}, 0x48) 18:40:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x48}}, 0x0) [ 3248.620183][ T8608] ieee802154 phy0 wpan0: encryption failed: -22 18:40:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100007000) 18:40:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x48, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) 18:40:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000002) 18:40:29 executing program 1: socketpair(0x2, 0x5, 0x1, &(0x7f00000001c0)) 18:40:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x10, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) 18:40:29 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x11, 0x66, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) 18:40:29 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) recvmsg(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0) 18:40:29 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x541b, &(0x7f0000000240)={@bcast, @default, 0x0, [@null, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 18:40:29 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private1, 0x1e, r2}) 18:40:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100007000) 18:40:29 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000001700), 0xffffffffffffffff) 18:40:29 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x410101, 0x0) 18:40:30 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000040)="0abde5", 0x3}}, 0x0) 18:40:30 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) sendto$ax25(r0, 0x0, 0x0, 0x4, 0x0, 0x0) 18:40:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000002) 18:40:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100007000) 18:40:30 executing program 1: syz_emit_ethernet(0x2000015a, &(0x7f0000000140)={@random="a780f54e03bc", @link_local, @val={@void}, {@llc_tr={0x11, {@snap={0x0, 0x0, "94", "1cc724"}}}}}, 0x0) [ 3249.356277][ T8665] ieee802154 phy0 wpan0: encryption failed: -22 18:40:30 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25ADDUID(r0, 0xc0189436, &(0x7f0000000000)={0x3, @default}) 18:40:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x1e, 0x0, 0x0) 18:40:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x11, 0xa, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) 18:40:30 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x5421, 0x0) 18:40:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:30 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x10) 18:40:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000002) 18:40:30 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x42, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) 18:40:30 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0xc8]}, 0x8}) 18:40:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={0x0}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001340), r0) 18:40:30 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x280000}, 0x4) 18:40:30 executing program 4: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)) 18:40:30 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x11, 0xb, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) 18:40:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0}}], 0x1, 0x0) 18:40:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002180)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0xc6}, 0x1c, 0x0}}], 0x1, 0x0) 18:40:31 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0xa, 0x0) getsockname$packet(r1, 0x0, 0x0) 18:40:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:31 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 18:40:31 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@hopopts={{0x18, 0x29, 0x2}}], 0x18}}], 0x1, 0x0) 18:40:31 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x7791fd4f8cb4464, 0x0) 18:40:31 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0}}, 0x0) 18:40:31 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 3250.714184][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 3250.714200][ T37] audit: type=1804 audit(1627152031.464:495213): pid=8697 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4077/cgroup.controllers" dev="sda1" ino=15164 res=1 errno=0 [ 3250.862244][ T8733] ieee802154 phy0 wpan0: encryption failed: -22 18:40:31 executing program 3: socketpair(0x1d, 0x0, 0x49, &(0x7f00000002c0)) 18:40:31 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$ppp(r0, 0x0, 0x0) 18:40:31 executing program 1: ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) 18:40:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) 18:40:31 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x88, 0x23, 0x0, 0x0) 18:40:31 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x5421, &(0x7f0000000240)={@bcast, @default, 0x0, [@null, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 18:40:32 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:32 executing program 1: syz_emit_ethernet(0x1a, &(0x7f0000000140)={@random="a780f54e03bc", @link_local, @val={@void}, {@llc_tr={0x11, {@snap={0x0, 0x0, "94", "1cc724"}}}}}, 0x0) 18:40:32 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback=0xac14142b}, "00006371ae9b1c03"}}}}}, 0x0) 18:40:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 18:40:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, 0x1c, 0x0}, 0x0) 18:40:32 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000003c0)={0x0, 0x0, "75cd77", 0x99}) [ 3251.693704][ T37] audit: type=1804 audit(1627152032.444:495214): pid=8752 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4078/cgroup.controllers" dev="sda1" ino=15689 res=1 errno=0 18:40:32 executing program 4: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmsg(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x40000141) 18:40:32 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback=0xac14142b}, "00006371ae9b1c03"}}}}}, 0x0) 18:40:32 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x102, 0x0, 0x0, 0x0) 18:40:32 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x5450, 0x0) 18:40:32 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x1, 0x0) [ 3251.985233][ T37] audit: type=1804 audit(1627152032.734:495215): pid=8769 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3323/cgroup.controllers" dev="sda1" ino=15692 res=1 errno=0 18:40:32 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback=0xac14142b}, "00006371ae9b1c03"}}}}}, 0x0) 18:40:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x88, 0x23, 0x0, 0x7) 18:40:33 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback=0xac14142b}, "00006371ae9b1c03"}}}}}, 0x0) 18:40:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002180)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='N', 0x1}, {&(0x7f0000000140)='|', 0x1}], 0x2}}], 0x1, 0x0) 18:40:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 18:40:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x88, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) [ 3252.667811][ T37] audit: type=1804 audit(1627152033.414:495216): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4079/cgroup.controllers" dev="sda1" ino=15142 res=1 errno=0 18:40:33 executing program 1: r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:40:33 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000000)={0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x1, 0x0) 18:40:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x31, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) 18:40:33 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 18:40:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) [ 3252.996038][ T37] audit: type=1804 audit(1627152033.744:495217): pid=8806 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3324/cgroup.controllers" dev="sda1" ino=14675 res=1 errno=0 18:40:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4, 0xceda}, 0x1c, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000080)="2fcbd309c331024bd369d61c9f6b48ecc37a43d7", 0x14}, {&(0x7f0000001380)="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", 0xe72}], 0x4}, 0x0) 18:40:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 18:40:34 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 18:40:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001a40)={&(0x7f0000000980), 0xc, &(0x7f0000001a00)={0x0}}, 0x1) 18:40:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 18:40:34 executing program 4: r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x10) 18:40:34 executing program 3: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x80000001) 18:40:34 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 18:40:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:34 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x8910, &(0x7f0000000240)={@bcast, @default, 0x0, [@null, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 18:40:34 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x48, 0x0, 0x0) 18:40:34 executing program 3: connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 18:40:34 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback=0xac14142b}, "00006371ae9b1c03"}}}}}, 0x0) 18:40:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x3a, 0x0, 0x0) 18:40:34 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r2, r0, 0x0, 0x100007000) 18:40:34 executing program 4: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000900), r0) [ 3253.787468][ T37] audit: type=1804 audit(1627152034.534:495218): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3325/cgroup.controllers" dev="sda1" ino=15711 res=1 errno=0 18:40:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 18:40:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="00f0000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250807000b000000000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x6c, 0x60, 0x0, r5}}, 0x20}, 0x1, 0x600000004000000}, 0x0) 18:40:34 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback=0xac14142b}, "00006371ae9b1c03"}}}}}, 0x0) 18:40:34 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 18:40:34 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r2, r0, 0x0, 0x100007000) 18:40:34 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x6, 0x89, &(0x7f00000000c0)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 3253.878729][T30661] Bluetooth: hci0: command 0x0401 tx timeout [ 3253.883384][ T37] audit: type=1800 audit(1627152034.534:495219): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=15711 res=0 errno=0 [ 3253.964338][ T8871] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 18:40:34 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback=0xac14142b}, "00006371ae9b1c03"}}}}}, 0x0) [ 3253.992366][ T37] audit: type=1804 audit(1627152034.534:495220): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3325/cgroup.controllers" dev="sda1" ino=15711 res=1 errno=0 [ 3254.024869][ T8876] team0: Port device veth3 added 18:40:34 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0xffffe03d, 0x0, 0x0, &(0x7f0000000300)=[@hopopts={{0x18}}], 0x18}}], 0x1, 0x0) 18:40:34 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r2, r0, 0x0, 0x100007000) 18:40:34 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'}) 18:40:34 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback=0xac14142b}, "00006371ae9b1c03"}}}}}, 0x0) 18:40:35 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000001200), 0x8) [ 3254.262753][ T37] audit: type=1804 audit(1627152035.014:495221): pid=8892 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3326/cgroup.controllers" dev="sda1" ino=15717 res=1 errno=0 18:40:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 3254.386421][ T37] audit: type=1800 audit(1627152035.054:495222): pid=8892 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=15717 res=0 errno=0 [ 3254.427588][ T8871] team0: Port device veth3 removed 18:40:35 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) 18:40:35 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x35, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) 18:40:35 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0xc0189436, &(0x7f0000000240)={@bcast, @default, 0x0, [@null, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 18:40:35 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback=0xac14142b}, "00006371ae9b1c03"}}}}}, 0x0) 18:40:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:35 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback=0xac14142b}, "00006371ae9b1c03"}}}}}, 0x0) 18:40:35 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x88, 0x23, 0x0, 0x0) 18:40:35 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x5411, &(0x7f0000000240)={@bcast, @default, 0x0, [@null, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 18:40:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:35 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x5452, &(0x7f0000000240)={@bcast, @default, 0x0, [@null, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 18:40:35 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback=0xac14142b}}}}}}, 0x0) 18:40:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:40:35 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@hopopts={{0x40, 0x29, 0x36, {0x0, 0x4, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}}}], 0x40}}], 0x1, 0x0) 18:40:35 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) 18:40:35 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) 18:40:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:35 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback=0xac14142b}}}}}}, 0x0) 18:40:35 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback=0xac14142b}}}}}}, 0x0) 18:40:35 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) 18:40:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) 18:40:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:36 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback=0xac14142b}, '\x00\x00cq'}}}}}, 0x0) 18:40:36 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x2, &(0x7f0000000240)={@bcast, @default, 0x0, [@null, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 18:40:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:40:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x31, 0x0, 0x0) 18:40:36 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x401c5820, 0x0) 18:40:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:36 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback=0xac14142b}, '\x00\x00cq'}}}}}, 0x0) 18:40:36 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000000), 0x4) 18:40:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x12000, 0x0, 0x0) 18:40:36 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) 18:40:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x2, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xe8) 18:40:36 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback=0xac14142b}, '\x00\x00cq'}}}}}, 0x0) 18:40:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0x20000368) 18:40:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:40:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r1, 0x681}, 0x14}}, 0x0) 18:40:37 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x8904, 0x0) 18:40:37 executing program 2: syz_emit_ethernet(0x44, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback=0xac14142b}, "00006371ae9b"}}}}}, 0x0) 18:40:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x14}, 0x14}}, 0x0) [ 3256.265260][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 3256.265275][ T37] audit: type=1804 audit(1627152037.014:495227): pid=8993 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3329/cgroup.controllers" dev="sda1" ino=15710 res=1 errno=0 18:40:37 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000029"], 0x48}}], 0x1, 0x0) 18:40:37 executing program 2: syz_emit_ethernet(0x44, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback=0xac14142b}, "00006371ae9b"}}}}}, 0x0) 18:40:37 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 18:40:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:37 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 18:40:37 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, 0x0, 0x46}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:40:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:40:37 executing program 2: syz_emit_ethernet(0x44, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback=0xac14142b}, "00006371ae9b"}}}}}, 0x0) 18:40:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:37 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0xc00, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x0, 0x84) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x5782, 0x0, 0x9, 0x1ff, 0x20, 0x1, 0xff}, 0x9c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001f00)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:40:37 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x2, [@union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}]}}, 0x0, 0x8a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 3256.841298][ T37] audit: type=1804 audit(1627152037.594:495228): pid=9029 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3330/cgroup.controllers" dev="sda1" ino=15730 res=1 errno=0 18:40:37 executing program 2: syz_emit_ethernet(0x45, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback=0xac14142b}, "00006371ae9b1c"}}}}}, 0x0) 18:40:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) [ 3257.030204][ T9044] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3257.059707][ T9044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3257.091888][ T9044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 18:40:37 executing program 2: syz_emit_ethernet(0x45, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback=0xac14142b}, "00006371ae9b1c"}}}}}, 0x0) 18:40:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:38 executing program 2: syz_emit_ethernet(0x45, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback=0xac14142b}, "00006371ae9b1c"}}}}}, 0x0) [ 3257.279334][ T9058] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3257.302255][ T9058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3257.315924][ T9058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 18:40:38 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0xc00, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x0, 0x84) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x5782, 0x0, 0x9, 0x1ff, 0x20, 0x1, 0xff}, 0x9c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001f00)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 3257.607462][ T9069] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3257.621924][ T9069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3257.633675][ T9069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 18:40:40 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$llc(r0, 0x0, &(0x7f00000000c0)) 18:40:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:40:40 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:40:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:40 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, 0x0, 0x46}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:40:40 executing program 1: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000380)=ANY=[@ANYBLOB="260000009f4b52be194ea7c8f25c9d773714979fb27662be87b526fcafa6747f08d25b9df0ae608ee41c168f6118cb00000000000000e567b97ccb7a17b14352e9f2878f45cb18e74bb8daaf4eb1be3997fb367880d90a9900fcfecc73d1c142337677d4c3871ec688283a250b603ae1c09a509f127887a7b2c8775030f8d3a605f0d2502ab5c783e801c767e16462dc4c45677a85e363d5b833837d3bfe"], &(0x7f0000000040)=0x2e) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0xc00, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0x3, @mcast1, 0x7}}, 0x0, 0x10001, 0x8, 0x0, 0x5}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000440)={r1, 0x10001, 0x100, 0x400}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x0, 0x84) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000814) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000005c0)={r2, @in={{0x2, 0x4e20, @multicast2}}, 0x5782, 0x0, 0x9, 0x1ff, 0x20, 0x1}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001f00)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:40:40 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x200201, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x5) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) exit_group(0x0) 18:40:40 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:40:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) [ 3259.850678][ T37] audit: type=1804 audit(1627152040.604:495229): pid=9092 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3332/cgroup.controllers" dev="sda1" ino=15700 res=1 errno=0 18:40:40 executing program 4: getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001f00)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:40:40 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 3260.105139][ T37] audit: type=1804 audit(1627152040.854:495230): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3333/cgroup.controllers" dev="sda1" ino=15731 res=1 errno=0 [ 3260.145557][ T9109] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 18:40:41 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:40:41 executing program 5: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 3260.188749][ T9109] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3260.216083][ T9109] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3260.315016][ T9122] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3260.372501][ T9122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3260.409880][ T9122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 18:40:41 executing program 1: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000380)=ANY=[@ANYBLOB="260000009f4b52be194ea7c8f25c9d773714979fb27662be87b526fcafa6747f08d25b9df0ae608ee41c168f6118cb00000000000000e567b97ccb7a17b14352e9f2878f45cb18e74bb8daaf4eb1be3997fb367880d90a9900fcfecc73d1c142337677d4c3871ec688283a250b603ae1c09a509f127887a7b2c8775030f8d3a605f0d2502ab5c783e801c767e16462dc4c45677a85e363d5b833837d3bfe"], &(0x7f0000000040)=0x2e) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0xc00, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0x3, @mcast1, 0x7}}, 0x0, 0x10001, 0x8, 0x0, 0x5}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000440)={r1, 0x10001, 0x100, 0x400}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x0, 0x84) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000814) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000005c0)={r2, @in={{0x2, 0x4e20, @multicast2}}, 0x5782, 0x0, 0x9, 0x1ff, 0x20, 0x1}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001f00)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:40:41 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 3260.724770][ T9141] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3260.770011][ T9141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3260.791358][ T9141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3260.856746][ T37] audit: type=1804 audit(1627152041.604:495231): pid=9116 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4098/cgroup.controllers" dev="sda1" ino=15758 res=1 errno=0 [ 3260.947368][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3260.964280][ T37] audit: type=1800 audit(1627152041.604:495232): pid=9116 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=15758 res=0 errno=0 [ 3261.001328][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3261.039784][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 18:40:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "5dfd27064637efff", "1c4dc9c31de266a003d1916479f7d9cf", '\x00', '*\t\x00'}, 0x28) r2 = socket$inet6(0xa, 0x2, 0x0) dup2(r2, r1) 18:40:43 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:40:43 executing program 5: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 18:40:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:43 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x1d}, {0xc}, {0x6}]}) 18:40:43 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001f00)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 3262.762634][ T9162] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3262.797524][ T9162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 18:40:43 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 3262.826955][ T9162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3262.838879][ T37] audit: type=1326 audit(1627152043.594:495233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9158 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x0 18:40:43 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getegid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010001307ebff00041200000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a0010000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) prctl$PR_GET_SECCOMP(0x15) bind$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0xf6, 0x0, 0x1, 0x8, 0x6, @remote}, 0x14) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) setgid(0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@delneigh={0x28, 0x1d, 0x4, 0x70bd2d, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x4, 0xa, 0x2}, [@NDA_DST_MAC={0xa, 0x1, @random="7cbf3fa0ec86"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4884}, 0x40080) getsockname(r0, &(0x7f0000000440)=@nl=@proc, &(0x7f0000000380)=0x80) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0}, 0x28000040) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000540)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x60, 0x2, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) setgid(0x0) 18:40:43 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 3263.209437][ T9176] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3263.234440][ T9176] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.1'. 18:40:44 executing program 5: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 18:40:44 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 3263.347813][ T9176] team0: Port device veth3 added [ 3263.399633][ T9181] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3263.424969][ T9181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 18:40:44 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 3263.463448][ T9181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3263.538362][ T37] audit: type=1800 audit(1627152044.284:495234): pid=9165 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=15770 res=0 errno=0 18:40:44 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) readahead(r0, 0x0, 0xffffffffffff28d4) 18:40:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:44 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:40:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:40:44 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x9129, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af92347510f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 18:40:44 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) readahead(r0, 0x0, 0xffffffffffff28d4) 18:40:44 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 3264.407044][ T37] audit: type=1804 audit(1627152045.154:495235): pid=9211 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4100/cgroup.controllers" dev="sda1" ino=15771 res=1 errno=0 18:40:45 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getegid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010001307ebff00041200000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a0010000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) prctl$PR_GET_SECCOMP(0x15) bind$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0xf6, 0x0, 0x1, 0x8, 0x6, @remote}, 0x14) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) setgid(0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@delneigh={0x28, 0x1d, 0x4, 0x70bd2d, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x4, 0xa, 0x2}, [@NDA_DST_MAC={0xa, 0x1, @random="7cbf3fa0ec86"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4884}, 0x40080) getsockname(r0, &(0x7f0000000440)=@nl=@proc, &(0x7f0000000380)=0x80) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0}, 0x28000040) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000540)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x60, 0x2, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) setgid(0x0) 18:40:45 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x9129, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af92347510f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 18:40:45 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) readahead(r0, 0x0, 0xffffffffffff28d4) 18:40:45 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:40:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:40:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:45 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) readahead(r0, 0x0, 0xffffffffffff28d4) 18:40:45 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 3264.630561][ T9240] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. 18:40:45 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x9129, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af92347510f0b56a20ff27fff", 0x89}], 0x1}, 0x0) [ 3264.692237][ T9240] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3264.777259][ T9240] team0: Port device veth5 added 18:40:45 executing program 3: readahead(0xffffffffffffffff, 0x0, 0xffffffffffff28d4) 18:40:45 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:40:45 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x9129, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af92347510f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 18:40:46 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:40:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:40:46 executing program 3: readahead(0xffffffffffffffff, 0x0, 0xffffffffffff28d4) 18:40:46 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:40:46 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x9129, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af92347510f0b56a20ff27fff", 0x89}], 0x1}, 0x0) [ 3265.414934][ T37] audit: type=1804 audit(1627152046.164:495236): pid=9271 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4101/cgroup.controllers" dev="sda1" ino=15778 res=1 errno=0 18:40:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) [ 3265.488275][ T3262] ieee802154 phy0 wpan0: encryption failed: -22 [ 3265.494907][ T3262] ieee802154 phy1 wpan1: encryption failed: -22 18:40:46 executing program 3: readahead(0xffffffffffffffff, 0x0, 0xffffffffffff28d4) 18:40:46 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x9129, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af92347510f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 18:40:46 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) readahead(r0, 0x0, 0xffffffffffff28d4) 18:40:46 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:40:46 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x9129, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af92347510f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 18:40:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) [ 3266.406306][ T37] audit: type=1804 audit(1627152047.154:495237): pid=9308 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4102/cgroup.controllers" dev="sda1" ino=15786 res=1 errno=0 18:40:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000640)={0x7, 'vlan1\x00'}) 18:40:49 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) readahead(r0, 0x0, 0xffffffffffff28d4) 18:40:49 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x9129, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af92347510f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 18:40:49 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:40:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:40:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:49 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) readahead(r0, 0x0, 0xffffffffffff28d4) 18:40:49 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:40:49 executing program 4: r0 = socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x9129, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af92347510f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 18:40:49 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, 0x0, 0x32}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:40:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:40:49 executing program 4: r0 = socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x9129, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af92347510f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 18:40:49 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:40:49 executing program 3: openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0xffffffffffff28d4) 18:40:49 executing program 4: r0 = socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x9129, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af92347510f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 18:40:49 executing program 3: openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0xffffffffffff28d4) 18:40:49 executing program 4: socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x9129, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af92347510f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 18:40:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:50 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:40:50 executing program 3: openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0xffffffffffff28d4) 18:40:50 executing program 4: socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x9129, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af92347510f0b56a20ff27fff", 0x89}], 0x1}, 0x0) [ 3269.371949][ T37] audit: type=1804 audit(1627152050.124:495238): pid=9330 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4103/cgroup.controllers" dev="sda1" ino=14265 res=1 errno=0 18:40:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYBLOB="0100000000000000240012000c000100627269646765000e1400020008"], 0x44}}, 0x0) socket(0x0, 0x803, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 18:40:52 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) 18:40:52 executing program 4: socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x9129, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af92347510f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 18:40:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:40:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:52 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:40:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x0) 18:40:52 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) [ 3271.907521][ T9396] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 18:40:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x0) 18:40:52 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) 18:40:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) [ 3272.021610][ T9401] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 18:40:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x0) 18:40:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getegid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010001307ebff00041200000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a0010000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) prctl$PR_GET_SECCOMP(0x15) bind$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0xf6, 0x0, 0x1, 0x8, 0x6, @remote}, 0x14) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) getpid() setgid(0x0) getsockname(r0, &(0x7f0000000440)=@nl=@proc, &(0x7f0000000380)=0x80) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@bridge_delneigh={0x50, 0x1d, 0x200, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @broadcast}, @NDA_DST_IPV4={0x8, 0x1, @multicast1}, @NDA_PORT={0x6, 0x6, 0x4e23}, @NDA_SRC_VNI={0x8, 0xb, 0x80000000}, @NDA_SRC_VNI={0x8, 0xb, 0x4}, @NDA_LLADDR={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c000}, 0x28000040) setgid(0x0) 18:40:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765000e1400"], 0x44}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) 18:40:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 3272.198556][ T9419] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3272.234319][ T9419] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.1'. 18:40:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 3272.372134][ T9419] team0: Port device veth7 added 18:40:53 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:40:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:40:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 18:40:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765000e1400"], 0x44}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) 18:40:53 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getegid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010001307ebff00041200000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a0010000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) prctl$PR_GET_SECCOMP(0x15) bind$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0xf6, 0x0, 0x1, 0x8, 0x6, @remote}, 0x14) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) getpid() setgid(0x0) getsockname(r0, &(0x7f0000000440)=@nl=@proc, &(0x7f0000000380)=0x80) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@bridge_delneigh={0x50, 0x1d, 0x200, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @broadcast}, @NDA_DST_IPV4={0x8, 0x1, @multicast1}, @NDA_PORT={0x6, 0x6, 0x4e23}, @NDA_SRC_VNI={0x8, 0xb, 0x80000000}, @NDA_SRC_VNI={0x8, 0xb, 0x4}, @NDA_LLADDR={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c000}, 0x28000040) setgid(0x0) [ 3272.734034][ T9453] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. 18:40:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040), 0x0) [ 3272.776713][ T9453] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3272.814900][ T37] audit: type=1804 audit(1627152053.564:495239): pid=9454 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4107/cgroup.controllers" dev="sda1" ino=14788 res=1 errno=0 18:40:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040), 0x0) [ 3272.915034][ T9453] team0: Port device veth9 added 18:40:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) [ 3272.967203][ T9453] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3272.985954][ T9453] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.1'. 18:40:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x84}}, 0x0) 18:40:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040), 0x0) [ 3273.101591][ T9453] team0: Port device veth11 added 18:40:53 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ftruncate(r0, 0x2007fff) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "5dfd27064637efff", "1c4dc9c31de266a003d1916479f7d9cf", '\x00', '*\t\x00'}, 0x28) sendfile(r4, r2, 0x0, 0x800100020001) creat(&(0x7f0000000440)='./bus\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@initdev, @in=@local}}, {{@in6=@private0}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) [ 3273.266039][ T37] audit: type=1804 audit(1627152054.014:495240): pid=9487 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir310435568/syzkaller.hTdtQz/4968/bus" dev="sda1" ino=14293 res=1 errno=0 [ 3273.286275][ T9453] syz-executor.1 (9453) used greatest stack depth: 22352 bytes left [ 3273.328637][ T37] audit: type=1804 audit(1627152054.064:495241): pid=9489 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3347/cgroup.controllers" dev="sda1" ino=14516 res=1 errno=0 [ 3273.364136][ T37] audit: type=1800 audit(1627152054.064:495242): pid=9489 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=14516 res=0 errno=0 [ 3273.406732][ T37] audit: type=1804 audit(1627152054.064:495243): pid=9486 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3347/cgroup.controllers" dev="sda1" ino=14516 res=1 errno=0 [ 3273.447910][ T37] audit: type=1804 audit(1627152054.194:495244): pid=9493 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir310435568/syzkaller.hTdtQz/4968/bus" dev="sda1" ino=14293 res=1 errno=0 18:40:54 executing program 2: shutdown(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(0xffffffffffffffff, 0x100000000000012) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:40:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 18:40:54 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:40:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32, @ANYBLOB="0100000000000000240012000c00010062726964676500"], 0x44}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) [ 3273.666165][ T9501] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 18:40:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 18:40:54 executing program 2: shutdown(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(0xffffffffffffffff, 0x100000000000012) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:40:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32, @ANYBLOB="0100000000000000240012000c00010062726964676500"], 0x44}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) [ 3273.713524][ T37] audit: type=1804 audit(1627152054.464:495245): pid=9497 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4108/cgroup.controllers" dev="sda1" ino=14532 res=1 errno=0 18:40:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 18:40:54 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) [ 3273.882930][ T9514] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 18:40:54 executing program 2: shutdown(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(0xffffffffffffffff, 0x100000000000012) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 3274.085158][ T37] audit: type=1804 audit(1627152054.834:495246): pid=9493 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir310435568/syzkaller.hTdtQz/4968/bus" dev="sda1" ino=14293 res=1 errno=0 18:40:54 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getegid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010001307ebff00041200000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a0010000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) prctl$PR_GET_SECCOMP(0x15) bind$packet(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) getpid() setgid(0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@bridge_delneigh={0x50, 0x1d, 0x200, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x11, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @broadcast}, @NDA_DST_IPV4={0x8, 0x1, @multicast1}, @NDA_PORT={0x6, 0x6, 0x4e23}, @NDA_SRC_VNI={0x8, 0xb, 0x80000000}, @NDA_SRC_VNI={0x8, 0xb, 0x4}, @NDA_LLADDR={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c000}, 0x28000040) setgid(0x0) 18:40:54 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 18:40:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)}], 0x1}, 0x0) 18:40:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:54 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 3274.147045][ T37] audit: type=1804 audit(1627152054.874:495247): pid=9493 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir310435568/syzkaller.hTdtQz/4968/bus" dev="sda1" ino=14293 res=1 errno=0 18:40:55 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)}], 0x1}, 0x0) 18:40:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:40:55 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 3274.418257][ T9547] team0: Port device veth3 added 18:40:55 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)}], 0x1}, 0x0) [ 3274.523293][ T9547] team0: Port device veth5 added 18:40:55 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32ef", 0x45}], 0x1}, 0x0) 18:40:55 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:40:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r2, r1, 0x0, 0x100007000) [ 3274.794742][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 3274.794798][ T37] audit: type=1804 audit(1627152055.544:495251): pid=9576 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4110/cgroup.controllers" dev="sda1" ino=14645 res=1 errno=0 [ 3274.899720][ T37] audit: type=1804 audit(1627152055.654:495252): pid=9581 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3350/cgroup.controllers" dev="sda1" ino=14662 res=1 errno=0 [ 3274.942936][ T9547] syz-executor.3 (9547) used greatest stack depth: 22256 bytes left 18:40:55 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getegid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010001307ebff00041200000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a0010000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) prctl$PR_GET_SECCOMP(0x15) bind$packet(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) getpid() setgid(0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@bridge_delneigh={0x50, 0x1d, 0x200, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x11, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @broadcast}, @NDA_DST_IPV4={0x8, 0x1, @multicast1}, @NDA_PORT={0x6, 0x6, 0x4e23}, @NDA_SRC_VNI={0x8, 0xb, 0x80000000}, @NDA_SRC_VNI={0x8, 0xb, 0x4}, @NDA_LLADDR={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c000}, 0x28000040) setgid(0x0) 18:40:55 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32ef", 0x45}], 0x1}, 0x0) 18:40:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000100)={0x10001, 0x1, 0x6}, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket(0x2, 0x5, 0xff7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='highspeed\x00', 0xa) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:40:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:40:55 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:40:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r2, r1, 0x0, 0x100007000) 18:40:56 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32ef", 0x45}], 0x1}, 0x0) [ 3275.243695][ T37] audit: type=1804 audit(1627152055.994:495253): pid=9595 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4111/cgroup.controllers" dev="sda1" ino=14610 res=1 errno=0 [ 3275.312174][ T9597] team0: Port device veth7 added [ 3275.369563][ T37] audit: type=1804 audit(1627152056.084:495254): pid=9598 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3351/cgroup.controllers" dev="sda1" ino=14945 res=1 errno=0 18:40:56 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f8", 0x67}], 0x1}, 0x0) 18:40:56 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) [ 3275.437292][ T9597] team0: Port device veth9 added 18:40:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r2, r1, 0x0, 0x100007000) 18:40:56 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f8", 0x67}], 0x1}, 0x0) 18:40:56 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f8", 0x67}], 0x1}, 0x0) [ 3275.799643][ T37] audit: type=1804 audit(1627152056.554:495255): pid=9623 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4112/cgroup.controllers" dev="sda1" ino=14594 res=1 errno=0 [ 3275.818272][ T9597] syz-executor.3 (9597) used greatest stack depth: 21872 bytes left [ 3275.861077][ T37] audit: type=1804 audit(1627152056.594:495256): pid=9627 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3352/cgroup.controllers" dev="sda1" ino=14977 res=1 errno=0 18:40:56 executing program 3: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0xc00, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x0, 0x84) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001f00)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:40:56 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0xc00, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x0, 0x84) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x5782, 0x0, 0x9, 0x1ff, 0x20, 0x1}, 0x9c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001f00)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:40:56 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e", 0x78}], 0x1}, 0x0) 18:40:56 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:40:56 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:40:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r2, r1, 0x0, 0x100007000) 18:40:56 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e", 0x78}], 0x1}, 0x0) [ 3276.136097][ T9642] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 18:40:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e", 0x78}], 0x1}, 0x0) [ 3276.204252][ T9642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3276.232074][ T9642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3276.274661][ T37] audit: type=1804 audit(1627152057.024:495257): pid=9646 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3353/cgroup.controllers" dev="sda1" ino=14977 res=1 errno=0 18:40:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af9234751", 0x81}], 0x1}, 0x0) [ 3276.417437][ T37] audit: type=1804 audit(1627152057.074:495258): pid=9655 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4113/cgroup.controllers" dev="sda1" ino=15009 res=1 errno=0 [ 3276.451872][ T9647] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3276.464603][ T9647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3276.476291][ T9647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3276.568990][ T9664] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3276.605347][ T9664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 18:40:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af9234751", 0x81}], 0x1}, 0x0) 18:40:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) [ 3276.646582][ T9664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 18:40:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r2, r1, 0x0, 0x100007000) [ 3276.757398][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3276.794955][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3276.853334][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 18:40:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af9234751", 0x81}], 0x1}, 0x0) 18:40:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r0) connect$unix(r0, 0x0, 0x0) 18:40:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='highspeed\x00', 0xa) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 3276.931976][ T37] audit: type=1804 audit(1627152057.684:495259): pid=9677 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4114/cgroup.controllers" dev="sda1" ino=14577 res=1 errno=0 18:40:57 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:40:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af92347510f0b56a2", 0x85}], 0x1}, 0x0) [ 3277.079208][ T37] audit: type=1804 audit(1627152057.814:495260): pid=9682 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3354/cgroup.controllers" dev="sda1" ino=14788 res=1 errno=0 18:40:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x9, 0x7fff, 0x0, 0x7a, 0x0, 0x1}, 0x40) 18:40:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:40:58 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af92347510f0b56a2", 0x85}], 0x1}, 0x0) 18:40:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r2, r1, 0x0, 0x100007000) 18:40:58 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x0, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:40:58 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af92347510f0b56a2", 0x85}], 0x1}, 0x0) 18:40:58 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af92347510f0b56a20ff2", 0x87}], 0x1}, 0x0) 18:40:58 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="680300002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="f2ff0000000000000400000007000100667700003c030200080005008a070000080001"], 0x368}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 18:40:58 executing program 1: syz_mount_image$hfsplus(0x0, 0x0, 0x0, 0x2, &(0x7f0000001480)=[{&(0x7f0000000100)="a7", 0x1, 0x10001}, {&(0x7f00000001c0)="ae", 0x1}], 0x0, 0x0) 18:40:58 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af92347510f0b56a20ff2", 0x87}], 0x1}, 0x0) [ 3277.684547][ T9716] __nla_validate_parse: 8 callbacks suppressed [ 3277.684566][ T9716] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3277.750544][ T9716] netlink: 808 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3277.769682][ T9716] netlink: 808 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3277.783148][ T9725] loop1: detected capacity change from 0 to 256 [ 3277.813655][ T9716] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3277.889250][ T9725] loop1: detected capacity change from 0 to 256 18:40:58 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:40:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:40:58 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af92347510f0b56a20ff2", 0x87}], 0x1}, 0x0) 18:40:58 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:40:58 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x5, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001280), 0x8, 0x10, 0x0}, 0x78) 18:40:58 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af92347510f0b56a20ff27f", 0x88}], 0x1}, 0x0) 18:40:58 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x12, 0x1, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:40:58 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000005304"], 0x54}}, 0x0) 18:40:58 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:40:59 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af92347510f0b56a20ff27f", 0x88}], 0x1}, 0x0) 18:40:59 executing program 3: syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:40:59 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:40:59 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:59 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:40:59 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:40:59 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b1f0000000000000072f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080800bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955fed0009d78f0a947ee2b49e33538afa8af92347510f0b56a20ff27f", 0x88}], 0x1}, 0x0) 18:40:59 executing program 1: mq_timedsend(0xffffffffffffffff, &(0x7f0000000780)="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", 0xfc0, 0x0, &(0x7f0000001780)={0x77359400}) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000001800), 0x2a2830, &(0x7f0000001840)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@access_client}, {@access_any}], [{@subj_role={'subj_role', 0x3d, '\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}}) syz_usb_connect$uac1(0x2, 0xea, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd8, 0x3, 0x1, 0x0, 0x30, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x1}, [@feature_unit={0xd, 0x24, 0x6, 0x3, 0x3, 0x3, [0x1, 0x3, 0x3], 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x203, 0x2, 0xfb, 0x3, 0x9, 0x7c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x80, 0x1f, 0x2}, @as_header={0x7, 0x24, 0x1, 0x40, 0x93}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x80, 0x1, 0x3, 0xff, "c4", "d167"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x3, 0x81, 0x71, "f2c24d", "adcd8c"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x40, 0x1, 0x1, 0x1f, '?m'}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x81, 0x5, {0x7, 0x25, 0x1, 0x1, 0xff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8, 0x3, 0x2, 0x7, "2fb07434e279274b"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x80, 0x2}, @as_header={0x7, 0x24, 0x1, 0x3, 0x7f, 0x2}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x3, 0x5, 0xfa, "", "ff16"}, @as_header={0x7, 0x24, 0x1, 0x5, 0xd4, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xff, 0x3, 0x0, {0x7, 0x25, 0x1, 0x1, 0x8, 0x7}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000017c0)={0xa, 0x6, 0x250, 0x20, 0x1, 0x3, 0x20, 0x19}, 0x2b, &(0x7f0000000380)=ANY=[@ANYBLOB="050f2b000603100b03100b0710020880c7000b10010c55200603004007100214933f000710021444400000"], 0xa, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x65, &(0x7f0000000400)=@string={0x65, 0x3, "6a9f4100edead295f084c2484e17499d648b9d7684e740d4a5308f449b94968fc6cb4998fc3293b11cee37dff0b15edc4baf14c37462f6d1901a7e67cc08e7dd2f69e8a588aa7b62012ab1e10e06062438ac2894bc88751c10b30c29dfa2d3886ed046"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x480a}}, {0x56, &(0x7f00000005c0)=@string={0x56, 0x3, "27240405a9e3c70e6cc42ef9057d08888d0a7ab900238883b4944a71ac34d7785110e70e634b0293d175a2b9dd08a85e076b80eac8ded2a9f6fa2fb881d9379cfb2bfafa295f9b32ffc9ca2607497d207411f242"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x455}}]}) bpf$MAP_CREATE(0x7, 0x0, 0xfece) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x10, &(0x7f0000000100)={&(0x7f0000000040)=""/147, 0x93}}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)={0x20000, 0x28, 0x2}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x0) 18:40:59 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:40:59 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x200040, &(0x7f0000000900)=ANY=[@ANYBLOB="6e6f6465636f6d706f73652c6465636f6d706f73652c747970653df5770b2e2c6e6f6465636f6d706f73652c63726561746f723d5c56c7b42c6e6c733d6e"]) syz_mount_image$hfsplus(0x0, 0x0, 0x0, 0x1, &(0x7f0000000c00)=[{&(0x7f0000000a00)="3bf9", 0x2, 0x7fffffff}], 0x0, 0x0) [ 3278.728304][ T2675] usb 4-1: new high-speed USB device number 12 using dummy_hcd 18:40:59 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:40:59 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 3278.791007][ T9780] hfsplus: unable to load nls mapping "n" [ 3278.796982][ T9780] hfsplus: unable to parse mount options [ 3278.860711][ T9786] loop4: detected capacity change from 0 to 264192 [ 3278.938336][ T2676] usb 2-1: new full-speed USB device number 2 using dummy_hcd 18:40:59 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 3279.022260][ T2675] usb 4-1: Using ep0 maxpacket: 32 [ 3279.030170][ T9780] hfsplus: unable to load nls mapping "n" [ 3279.036027][ T9780] hfsplus: unable to parse mount options [ 3279.149767][ T2675] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 3279.170080][ T2675] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 3279.196884][ T2675] usb 4-1: config 1 has no interface number 1 [ 3279.208939][ T2675] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3279.233518][ T2675] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3279.255161][ T2675] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3279.418443][ T2676] usb 2-1: not running at top speed; connect to a high speed hub [ 3279.469791][ T2675] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3279.479030][ T2675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3279.487028][ T2675] usb 4-1: Product: syz [ 3279.494194][ T2675] usb 4-1: Manufacturer: syz [ 3279.499993][ T2675] usb 4-1: SerialNumber: syz [ 3279.513140][ T2676] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 3279.526033][ T2676] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3279.718354][ T2676] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3279.728568][ T2676] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3279.736706][ T2676] usb 2-1: Product: У [ 3279.742992][ T2676] usb 2-1: Manufacturer: 齪A闒蓰䣂ᝎ鵉譤皝푀ゥ䒏钛辖쯆顉㋼놓뇰꽋쌔扴퇶᪐松࣌椯ꗨꪈ扻⨁؎␆갸鐨袼ᱵ댐⤌ꋟ裓큮 18:41:00 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:00 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:41:00 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 18:41:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 3279.770543][ T2676] usb 2-1: SerialNumber: К 18:41:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@shortname_lower}, {@fat=@usefree}, {@numtail}]}) [ 3279.906516][ T2675] usb 4-1: USB disconnect, device number 12 [ 3279.934035][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 3279.934052][ T37] audit: type=1804 audit(1627152060.684:495271): pid=9829 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4119/cgroup.controllers" dev="sda1" ino=15185 res=1 errno=0 [ 3279.978383][ T9841] FAT-fs (loop4): bogus number of reserved sectors [ 3279.989509][ T9841] FAT-fs (loop4): Can't find a valid FAT filesystem [ 3280.042990][ T9841] FAT-fs (loop4): bogus number of reserved sectors [ 3280.053972][ T37] audit: type=1804 audit(1627152060.804:495272): pid=9839 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3358/cgroup.controllers" dev="sda1" ino=14645 res=1 errno=0 [ 3280.065975][ T9841] FAT-fs (loop4): Can't find a valid FAT filesystem 18:41:00 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000001c40), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 18:41:00 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:41:00 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="6e6f6465636f6d706f73652c6465636f6d706f73652c747970653df5770b2e2c6e6f6465636f6d706f73652c63726561746f723d5c56c7b42c6e6c733d6e"]) syz_mount_image$hfsplus(0x0, 0x0, 0x0, 0x1, &(0x7f0000000c00)=[{&(0x7f0000000a00)="3bf9", 0x2, 0x7fffffff}], 0x0, 0x0) 18:41:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) [ 3280.198998][ T2676] usb 2-1: 0:2 : does not exist 18:41:01 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:41:01 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3800) [ 3280.255817][ T2676] usb 2-1: USB disconnect, device number 2 [ 3280.284522][ T9851] hfsplus: unable to load nls mapping "n" [ 3280.295094][ T9851] hfsplus: unable to parse mount options 18:41:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x9, 0x0, 0x0, 0x0, 0x40, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x40) 18:41:01 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(0xffffffffffffffff, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:41:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000180)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) [ 3280.428354][ T37] audit: type=1804 audit(1627152061.174:495273): pid=9884 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4120/cgroup.controllers" dev="sda1" ino=13844 res=1 errno=0 18:41:01 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000004580), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3280.649681][ T9895] loop3: detected capacity change from 0 to 4096 [ 3280.731257][ T9895] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:41:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 18:41:01 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="680300002c00270d00"/19, @ANYRES32=r3], 0x368}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 18:41:01 executing program 4: socket(0x10, 0x803, 0x0) clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() tkill(r0, 0x800000009) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:41:01 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(0xffffffffffffffff, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:41:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000004580), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3280.971916][ T9913] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:41:01 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="6e6f6465636f6d706f73652c6465636f6d706f73652c747970653df5"]) [ 3281.021451][ T37] audit: type=1804 audit(1627152061.774:495274): pid=9909 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4121/cgroup.controllers" dev="sda1" ino=15009 res=1 errno=0 18:41:01 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(0xffffffffffffffff, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 3281.062983][ T9922] netlink: 836 bytes leftover after parsing attributes in process `syz-executor.1'. 18:41:01 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='T'], 0x54}}, 0x0) [ 3281.132440][ T9926] hfsplus: type requires a 4 character value [ 3281.132974][ T9922] netlink: 836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3281.182543][ T9926] hfsplus: unable to parse mount options 18:41:02 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 3281.259932][ T9926] hfsplus: type requires a 4 character value [ 3281.266030][ T9926] hfsplus: unable to parse mount options [ 3281.271556][ T9913] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:41:02 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1b, 0x0, 0x0) 18:41:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) [ 3281.427349][ T37] audit: type=1804 audit(1627152062.174:495275): pid=9937 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3359/cgroup.controllers" dev="sda1" ino=14474 res=1 errno=0 18:41:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 18:41:02 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="680300002c00270d00"/19, @ANYRES32=r3], 0x368}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 18:41:02 executing program 4: syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x2b, 0x0}) 18:41:02 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:41:02 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x4}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:02 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 3281.604598][ T37] audit: type=1804 audit(1627152062.354:495276): pid=9948 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4122/cgroup.controllers" dev="sda1" ino=14645 res=1 errno=0 18:41:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000200), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000300)=[@increfs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3281.670609][ T9960] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3281.754959][ T9960] netlink: 836 bytes leftover after parsing attributes in process `syz-executor.1'. 18:41:02 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:41:02 executing program 3: syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) 18:41:02 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x9, 0x0, 0x0, 0x7a, 0x0, 0x1}, 0x40) [ 3281.879647][ T2682] usb 5-1: new full-speed USB device number 12 using dummy_hcd 18:41:02 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:41:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) [ 3281.996204][ T37] audit: type=1804 audit(1627152062.744:495277): pid=9977 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3360/cgroup.controllers" dev="sda1" ino=14039 res=1 errno=0 18:41:03 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 18:41:03 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x9, 0x7fff, 0x2, 0x7a, 0x40, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x40) [ 3282.248526][ T37] audit: type=1804 audit(1627152062.994:495278): pid=9989 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4123/cgroup.controllers" dev="sda1" ino=13947 res=1 errno=0 [ 3282.329095][ T2682] usb 5-1: unable to get BOS descriptor or descriptor too short 18:41:03 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 18:41:03 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x4, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:03 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:41:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, &(0x7f0000001740)="2400000052001f0014f9f407000904010200071008000100ff09bc8cc61b859b5f00000019eac7737397541d06a7d64116b2ff0f000079219cef99501e6f920820f2b2d5d3a1dc8cea4057e800838bba1716b68099a5ebc36cd555f1a594ae46cbbf70e64ff6a9588da44e6d229bdc876a7e9c8c67558124afb42c2bb8ab2c13ebc2c662edf25b1a57ef18e939d984eaf4697337dd71dc5ec1e565ab71475ebe7b41a4820787f023089b377cd2b607e58c9b6e4bd444450562015fe7014e572e786784bc1e6c89758544c510b71e336edb6d2fbd3f0a8d092fa65dde29eb2ebd5266a56230166560f7e87f2d66cfb7185dd4c3549289369462e5ee29c95a3759bec96a58102918fe7af7a9b8eac8d2da6af84b8a6ca32919a23da9633c353617db5f4ea092bbbd36e6f01d45a14e52cd938329a54c0772f80cc16fae0410b8fd2f557c276a7a7e12ddef2d526e6b3afe3281e60ef25e2e175449898d0dd70598ac75e777c49054c9", 0x168) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x1f4}, 0x700) [ 3282.464163][ T37] audit: type=1804 audit(1627152063.214:495279): pid=9996 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3361/cgroup.controllers" dev="sda1" ino=15193 res=1 errno=0 [ 3282.582155][ T2682] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 3282.599675][ T2682] usb 5-1: can't read configurations, error -71 18:41:03 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) move_pages(0x0, 0x20000047, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f00000001c0)}, 0x10) 18:41:03 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x0, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001280), 0x8, 0x10, 0x0}, 0x20001378) 18:41:03 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:41:03 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRESOCT], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:03 executing program 3: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:41:03 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:41:03 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 18:41:03 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000c00)=[{&(0x7f0000000a00)="3bf9", 0x2, 0x7fffffff}], 0xa06815, &(0x7f0000000c40)) 18:41:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:03 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 3283.070539][T10026] loop4: detected capacity change from 0 to 264192 18:41:03 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 3283.149443][T10026] loop4: detected capacity change from 0 to 264192 [ 3283.159285][ T998] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 3283.190998][ T37] audit: type=1804 audit(1627152063.944:495280): pid=10028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4124/cgroup.controllers" dev="sda1" ino=15195 res=1 errno=0 [ 3283.398296][ T998] usb 4-1: Using ep0 maxpacket: 32 18:41:04 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:41:04 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@map={0x18, 0x0, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:04 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) [ 3283.518927][ T998] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 3283.553223][ T998] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 3283.586699][ T998] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 18:41:04 executing program 4: getpgrp(0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1ff, 0x5, &(0x7f0000001380)=[{&(0x7f00000000c0)="5420f07813caeddb913bfa0b948c8441102d9fd53ff6f213dbb6a4c942db52bc194234e56c09e585dee004ba132550a9bf84c142ccae2ce3c36c7883cf1b5e8ef8f99278111d60bcec4cde552b739723ade23f2c448cc43b2c511da36a11862b8540f3d6ca3e330975797084dd1c06c8cfd03d83e06dbb11d30f5a362f567a81a06941c63e899dd58fd669bf6e2fde7fb1e10caad630461dce635f2290ad6a58c4b1e9c2e10c43bcb338beada55edbbc9ee6baa46e95eda33db905e152a145188fe6f9e076f578da2295812309fd316decee3d17163b2869d96624ed545845ac9597350ef6d39da1", 0xe8, 0xfffffffffffffe00}, {&(0x7f00000001c0)="3154b11759fe2ab5b5b06804bf2874aac9498125c162aa", 0x17, 0x1f}, {&(0x7f0000000200)="22c955fa10a18e69a10e22033fdcecbc379ba1c0ce08bb262c8fe63ab257b2dc058b6728ce52adae08f1685d3bfc9459063bc437d55bb2962a049c9d2feca321bebf5a860b94ff0e5ecd956a9d54b631e3d5f500013be626761e30e1dc5fb3de495e654ff08936fc94494d9f0bd5550a2dc2a2828e09924e6710dafdca75668a200409195d2bd3bbb0f32b94967db6079c03", 0xfffffffffffffebe, 0x3}, {&(0x7f00000002c0)="fedf89150458cc86faab5f041d2c0ed2c657c9ea573e07af48becdd996cd3d0f6469a228a06c744f6b11986797fdf3e7241d1322acec9cba46f2c2155cb3dff35d387ac6da40059397580a576e49633c25581d6c5c64f6c6c8184c438520e2b846d31672231e1a23c3a46ccef0e6f7b51ad3f90855980213e8c0603280218031bd901075ddca397a1bf24d31d2586f8343abbd25107e", 0x96, 0x10001}, {&(0x7f0000000380)="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", 0x1000, 0x6}], 0x1000, &(0x7f0000001400)={[{@nobarrier}, {@barrier}, {@nodecompose}, {@nodecompose}, {@session={'session', 0x3d, 0x100}}, {@nodecompose}], [{@obj_user={'obj_user', 0x3d, 'nodecompose'}}]}) [ 3283.789205][ T998] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3283.803218][ T998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3283.830490][ T998] usb 4-1: Product: syz [ 3283.848428][ T998] usb 4-1: Manufacturer: syz [ 3283.864647][ T998] usb 4-1: SerialNumber: syz [ 3284.012155][T10057] loop4: detected capacity change from 0 to 32760 18:41:04 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001380), 0x1000, &(0x7f0000001400)) 18:41:04 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:41:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0xfffff000) readv(r1, &(0x7f0000000240)=[{0x0}], 0x1) 18:41:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 3284.218388][ T998] usb 4-1: 0:2 : does not exist 18:41:05 executing program 4: rt_sigaction(0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)) 18:41:05 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:41:05 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x1, &(0x7f0000000040)=@raw=[@ldst={0x0, 0x0, 0x1}], &(0x7f00000000c0)='GPL\x00', 0x3, 0x96, &(0x7f0000000100)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 3284.267980][ T998] usb 4-1: USB disconnect, device number 13 18:41:05 executing program 3: mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x2a2830, 0x0) syz_usb_connect$uac1(0x2, 0x78, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 18:41:05 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700ae1f7094e77e0346e8347eb1163b8b425ba21c21fbe379a5ebf1c099e4514e8d860d9b81a53f44abc32024bc917c00e27f0995458ceffb9ee81aa6eefa66f1ec079e8fb78f124d1ccd53823922f77d703c35f6e6e808be26db462f90774c8330d1050c836664039b191376d82d4581c68e69587cb48c540d26e6f3059409c95f4f1d6a565a0352017552ea87b1847663a53fc1a455cab00951c998f63e360f55fa33f35f7362ea86a04caad33891af789e3230dddf51b105de2e22aa7a8834c356", 0xc5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 18:41:05 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:41:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:05 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f00000000c0)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="0300000004", 0x5, 0x640}, {&(0x7f0000000300)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000012a00)="8081000000180000daf4655fdaf4655fdaf4655f01000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {&(0x7f0000000880)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x40000}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = syz_mount_image$jffs2(&(0x7f0000000040), 0x0, 0x3, 0x0, 0x0, 0x200402, &(0x7f00000008c0)={[{}, {}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, '{!--'}}]}) getdents64(r0, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000011c0), &(0x7f00000013c0)=ANY=[], 0xd8, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x6611, 0x1200000000000000) socket(0x10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) stat(0x0, &(0x7f0000000380)) 18:41:05 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x22, 0x0, 0x0) 18:41:05 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 3284.631214][T10125] loop1: detected capacity change from 0 to 4096 [ 3284.692256][T10125] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:41:05 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) [ 3284.760524][T10125] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. 18:41:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:06 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:41:06 executing program 1: mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x2a2830, 0x0) syz_usb_connect$uac1(0x0, 0x8f, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x0, 0x30, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_continuous={0x8}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x3, 0x81}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0xff, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}}}}]}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x2) 18:41:06 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="6e6f6465636f6d706f73652c6465636f6d706f73652c747970653df5770b2e"]) 18:41:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x100007000) [ 3285.437494][T10164] hfsplus: unable to find HFS+ superblock [ 3285.490121][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 3285.490136][ T37] audit: type=1804 audit(1627152066.244:495286): pid=10167 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4128/cgroup.controllers" dev="sda1" ino=15222 res=1 errno=0 [ 3285.569009][T10164] hfsplus: unable to find HFS+ superblock [ 3285.615016][ T37] audit: type=1804 audit(1627152066.364:495287): pid=10172 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3364/cgroup.controllers" dev="sda1" ino=15215 res=1 errno=0 [ 3285.681332][ T998] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 3285.943975][ T998] usb 2-1: Using ep0 maxpacket: 32 [ 3286.098425][ T998] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 3286.107321][ T998] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 3286.125872][ T998] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3286.288434][ T998] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3286.297630][ T998] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3286.394315][ T998] usb 2-1: Product: syz [ 3286.428393][ T998] usb 2-1: Manufacturer: syz [ 3286.433186][ T998] usb 2-1: SerialNumber: syz [ 3286.835233][ T998] usb 2-1: 0:2 : does not exist [ 3286.893109][ T998] usb 2-1: USB disconnect, device number 3 18:41:08 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x13, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:08 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:41:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) 18:41:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:08 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x17, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:08 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, 0x0, 0x0) [ 3287.643598][ T37] audit: type=1804 audit(1627152068.394:495288): pid=10221 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3365/cgroup.controllers" dev="sda1" ino=15247 res=1 errno=0 18:41:08 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:41:08 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, 0x0, 0x52}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:41:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000180)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0xffffff1f) [ 3287.799557][ T37] audit: type=1804 audit(1627152068.444:495289): pid=10224 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4129/cgroup.controllers" dev="sda1" ino=15244 res=1 errno=0 18:41:08 executing program 3: syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:41:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:08 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 3287.915407][T10248] loop4: detected capacity change from 0 to 4096 [ 3287.977448][T10248] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:41:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) [ 3288.122622][ T37] audit: type=1804 audit(1627152068.874:495290): pid=10273 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4130/cgroup.controllers" dev="sda1" ino=15237 res=1 errno=0 18:41:09 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:41:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) [ 3288.325823][ T37] audit: type=1804 audit(1627152069.074:495291): pid=10276 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3366/cgroup.controllers" dev="sda1" ino=15243 res=1 errno=0 [ 3288.355909][ T1147] usb 4-1: new high-speed USB device number 14 using dummy_hcd 18:41:09 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 3288.484790][ T37] audit: type=1804 audit(1627152069.234:495292): pid=10283 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4131/cgroup.controllers" dev="sda1" ino=15254 res=1 errno=0 18:41:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:09 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 3288.658339][ T1147] usb 4-1: Using ep0 maxpacket: 32 [ 3288.784468][ T1147] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 3288.802004][ T1147] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 3288.874221][ T1147] usb 4-1: config 1 has no interface number 1 [ 3288.887711][ T1147] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3288.936165][ T1147] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3288.957057][ T1147] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3289.169061][ T1147] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3289.191568][ T1147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3289.206906][ T1147] usb 4-1: Product: syz [ 3289.212141][ T1147] usb 4-1: Manufacturer: syz [ 3289.216736][ T1147] usb 4-1: SerialNumber: syz [ 3289.594965][ T1147] usb 4-1: USB disconnect, device number 14 18:41:11 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1ff, 0x5, &(0x7f0000001380)=[{&(0x7f00000000c0)="5420f07813caeddb913bfa0b948c8441102d9fd53ff6f213dbb6a4c942db52bc194234e56c09e585dee004ba132550a9bf84c142ccae2ce3c36c7883cf1b5e8ef8f99278111d60bcec4cde552b739723ade23f2c448cc43b2c511da36a11862b8540f3d6ca3e330975797084dd1c06c8cfd03d83e06dbb11d30f5a362f567a81a06941c63e899dd58fd669bf6e2fde7fb1e10caad630461dce635f2290ad6a58c4b1e9c2e10c43bcb338beada55edbbc9ee6baa46e95eda33db905e152a145188fe6f9e076f578da2295812309fd316decee3d17163b2869d96624ed545845ac9597350ef6d39da1", 0xe8, 0xfffffffffffffe00}, {&(0x7f00000001c0)="3154b11759fe2ab5b5b06804bf2874aac9498125c162aa", 0x17, 0x1f}, {&(0x7f0000000200)="22c955fa10a18e69a10e22033fdcecbc379ba1c0ce08bb262c8fe63ab257b2dc058b6728ce52adae08f1685d3bfc9459063bc437d55bb2962a049c9d2feca321bebf5a860b94ff0e5ecd956a9d54b631e3d5f500013be626761e30e1dc5fb3de495e654ff08936fc94494d9f0bd5550a2dc2a2828e09924e6710dafdca75668a200409195d2bd3bbb0f32b94967db6079c03", 0xfffffffffffffebe, 0x3}, {&(0x7f00000002c0)="fedf89150458cc86faab5f041d2c0ed2c657c9ea573e07af48becdd996cd3d0f6469a228a06c744f6b11986797fdf3e7241d1322acec9cba46f2c2155cb3dff35d387ac6da40059397580a576e49633c25581d6c5c64f6c6c8184c438520e2b846d31672231e1a23c3a46ccef0e6f7b51ad3f90855980213e8c0603280218031bd901075ddca397a1bf24d31d2586f8343abbd25107e", 0x96, 0x10001}, {&(0x7f0000000380)="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", 0x1000, 0x6}], 0x1000, &(0x7f0000001400)={[{@nobarrier}, {@barrier}, {@nodecompose}, {@nodecompose}, {@session}, {@nodecompose}], [{@obj_user={'obj_user', 0x3d, 'nodecompose'}}]}) 18:41:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:11 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:41:11 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x6, 0x0, 0x0) 18:41:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:11 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:11 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x11, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:11 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) [ 3290.913060][ T37] audit: type=1804 audit(1627152071.664:495293): pid=10339 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4132/cgroup.controllers" dev="sda1" ino=15267 res=1 errno=0 18:41:11 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:41:11 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x0, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x78) 18:41:11 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) 18:41:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) [ 3291.395416][ T37] audit: type=1804 audit(1627152072.144:495294): pid=10366 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4133/cgroup.controllers" dev="sda1" ino=15255 res=1 errno=0 [ 3291.413303][T10350] loop1: detected capacity change from 0 to 32760 18:41:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@shortname_lower}, {@numtail}]}) 18:41:12 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:41:12 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}], 0x12) 18:41:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:12 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0xe, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) [ 3291.903246][ T37] audit: type=1804 audit(1627152072.654:495295): pid=10390 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4134/cgroup.controllers" dev="sda1" ino=15256 res=1 errno=0 [ 3291.937754][T10396] FAT-fs (loop1): bogus number of reserved sectors 18:41:12 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}], 0x12) [ 3291.954408][T10396] FAT-fs (loop1): Can't find a valid FAT filesystem 18:41:12 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:41:12 executing program 3: perf_event_open$cgroup(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 3292.044502][T10396] FAT-fs (loop1): bogus number of reserved sectors [ 3292.070534][T10396] FAT-fs (loop1): Can't find a valid FAT filesystem 18:41:12 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)=@buf={0x0, &(0x7f00000000c0)}) 18:41:12 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}], 0x12) 18:41:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:13 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:41:13 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:13 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000001c40), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) 18:41:13 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}], 0x12) 18:41:13 executing program 1: getpgrp(0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x5, &(0x7f0000001380)=[{&(0x7f00000000c0)="5420f07813caeddb913bfa0b948c8441102d9fd53ff6f213dbb6a4c942db52bc194234e56c09e585dee004ba132550a9bf84c142ccae2ce3c36c7883cf1b5e8ef8f99278111d60bcec4cde552b739723ade23f2c448cc43b2c511da36a11862b8540f3d6ca3e330975797084dd1c06c8cfd03d83e06dbb11d30f5a362f567a81a06941c63e899dd58fd669bf6e2fde7fb1e10caad630461dce635f2290ad6a58c4b1e9c2e10c43bcb338beada55edbbc9ee6baa46e95eda33db905e152a145188fe6f9e076f578da2295812309fd316decee3d17163b2869d96624ed545845ac9597350ef6d39da1", 0xe8, 0xfffffffffffffe00}, {&(0x7f00000001c0)="3154b11759fe2ab5b5b06804bf2874aac9498125c162aa", 0x17, 0x1f}, {&(0x7f0000000200)="22c955fa10a18e69a10e22033fdcecbc379ba1c0ce08bb262c8fe63ab257b2dc058b6728ce52adae08f1685d3bfc9459063bc437d55bb2962a049c9d2feca321bebf5a860b94ff0e5ecd956a9d54b631e3d5f500013be626761e30e1dc5fb3de495e654ff08936fc94494d9f0bd5550a2dc2a2828e09924e6710dafdca75668a200409195d2bd3bbb0f32b94967db6079c03", 0xfffffffffffffebe, 0x3}, {&(0x7f00000002c0)="fedf89150458cc86faab5f041d2c0ed2c657c9ea573e07af48becdd996cd3d0f6469a228a06c744f6b11986797fdf3e7241d1322acec9cba46f2c2155cb3dff35d387ac6da40059397580a576e49633c25581d6c5c64f6c6c8184c438520e2b846d31672231e1a23c3a46ccef0e6f7b51ad3f90855980213e8c0603280218031bd901075ddca397a1bf24d31d2586f8343abbd25107e", 0x96, 0x10001}, {&(0x7f0000000380)="b31db555efe31e1fe003b5367ffefca594a3d7f586830d939ad18a48629dcff91af3591aacae81560723cce813dcf18aefb8f9829df6a1e8c4b6674ad5ce693ab7a86f9e49cb5a174df970ce6552760ad2362b388cc36ff903312269d54977b211db66c2b8445ff634e18fc81570e27ed3000f65b49a454ca25039df6879979d93afe35e91b9287c8b90b679dfada528743fbbe424c80aae3b8ef4ae6ef76e66b25653fc92d38df947917738dfe4bf1302830aa3d38a8b2ac775a39cc70ba60711e28333da0a431f9b355d05ef803e25c30ae8192e020917fb9ab81d46f085671bbe180566f543d51a2924e9c90ce6466e8515d5bc0b74004771ef90ee14401ae2c05107884728b066da2f04cb59ea44561b21757e638ee869622876992995bfeddf5285308516305cf0cb9aeaf00770083cf699f6996ab8f1a8e39af0cf031e19d6f3abda50d2a6732bdf369d827d722b1f05aa9add2460521131462a18e8a10e6fd45a252fe42db85eb82dfdd558d67fa64604176e7543cb29e19103fb96589c03e1ecc467798eab08a029689e762be6e14eee34e6c4553e2d13458371fb0d384e3c855a8a532ab344a751d941b21e5addeaea7949da2afc4b6abac840145612e10c1fa82c56122573d4a7baf41978ce69ab6e8b1812f3685902369bbdbe4e8a2dad10ba9b7658820c3220b443e36d8c39d13ab15392fe1c0cec3a457decdaa3a7ffdbaffd100897a07b47fe38787d3f3addbd64ed3eee787e277289eb3ba38b2a3194989c7eb2ab0dcef7667f214adac1d85adac88829191d50fe1a0b71382d984d6c76c1d2e5d4e4f6146c493e8762c59319bc5862fbbf1ff80e6b2c28308fe075f48eb9fd05640747b04426be7d44e5645bde33c37ffe42a61acaccce73c9d8c1f2b298c47d669711f56df586861096867ee3664f3e45135275f7d2d92dd3557f98b98efe114faefb7897f97bce446487c948c983575cd5ad7d9b51f4c4fac0a0a22ed93f0e0b8c14802aabbfe8562147c1baed78f9635e533d215192ad27b1c83c27b3949d831ed3e1e341e5328d4512d1d9c44ab1e776baa01723aa96c3e035640d3e4dd98f9345cc1f0590ee5dad4ad2663b28d87d3a3c4352a440895fc36eb7c7a70dda23d58417f3c811ffad73436096a1b4794c642b14e7ebe73d08f3c63f501d9ea2533d06190a0151e0bd436d0978ebc11a56c374e529ad642147b3cc1c61e409c9d6ee24c36855707e4cb156f3581ca166678c7ee0d9d9e6ab5c966b95e0f463206fc9dd910ad13dd7afc072b88b1d50b525493102c47014a05c044260cfb50dc36a2549eff77445044dd9001975deef502280f42691809b8a3d18beadf92df63cb61402ab53f327736a40c4b711a41c0b38ed1d187cc1035cec380e0b28337c23010487bbdb977c788e76a0fc23ec09d3ca96635752df4e1d81cacb6c5c2deffdf58fc894e2ca410474adcaafaee8684a25fa4e0e0c345ba2d06acdf2febc4e4d4b52e2f6376c1d0ff30b31f9d0d99a7534260c1fd4b1179b2d5b84fefc0cfa37867e84e058cb587376da2d7793e21cbaae3f784c97f7dcf487bc1e1d0788f359bad20a731da12aa35c2470310a9fd38148fe60aeafa3f8fba97d45ee90d7ce4c743684e460fb24c16d35f1465d681d7c3dbfc8f89c7c096a6ffc2de8795d0224991b5e9e4c03f87665f01dffb931b1cce26334b51b20a5d5e5c2cd8fd272e453586a31394c4ffddf6fa1739de0bcacf57e5d2ecd782266f14c2c337750d52182a24ae28b0d024713f272b7f1727872c13753797f8eb5c550ce0d0f598b21fd5881c60ffb51cead928108931436df854bd2a30c63e5d68e3cc51450f988eef774d6397a78b9cb1cb1c4172b87e077b6b1ab9e8f0448c91a45c1bb4758ac65771d930707f061b9e3a5e03f2c5ec246bee1ae411e9b0303611c54ac3f3bb6e1bcab4ef30b975127e639a2d28f85592f607094f7155d185e2b8a66cadc38d8177af757cc155376c0a3a66eecdedb8f44501bb09f4a6bd047382cb434754263fc0b71ba44d9d2faee5cc7addd06a5d43b7859e80e00874bb0243f29320c7fe4c2fb88ba07279c0b8c9ff1863bb526ab73d94ce0d64b0a1333fb5a76db36549143dd1bbf5cee399fb5f916b2bee4be94a08b47ccd44da7fb21a2a41835d286a77f3cdce7804371f4d3b9132acf2684387b7120d976eda07bec58eaab40b68c412c1b3b5fd54f5f560d49f97c8acc619da5f92f61f451f63abc2708ead32354bb5c9bb7b5335a6b9cc542a8bc61b86a45b53842b4f75f5ad0afd7656facac898bb243b47076d500664508d6ca1e5bed231f2be2a59c0217ccaccab6a470c58e41a77cacc277ee4cca356e1e9597c3ac12738cae1d63ecea058e5cd002f3eadae8897cd799357fa33729bbae07e1ac09247fb7bab0329070cad6e3e483ccfa0e2dc794322bf3811e28755481639a63161fb74343861bb5d6400388486fcc2a46fd7ac04d8264bbab0637f4688f672194bdafc01bdb87548ab6a9206813dfa75d1c97c525632a7299aaf398089436358bb8584b1f3f1b365f9299a99fd5f75ef9f71ccec98b0bb039ef79cbc88c1fdd9649ee229a988ea3c781bdff9525b0011c37bf289c7a437f5ff981d01a7ba1c495cd2d1ed20b2fb2e920611610b6cbbb448c420eba09c3f2b0287d42596d03c0e26811fd16587dd9bbd6f581cdea1a18e4db1b93021b2015bbe3e85e8fcecff8a505f758284b527b3616e57a2fdadcf07011899120b624544da4e8333d102f51ad21a76b2a18b7d182a699450f5a461c62eae12b05adbbcae198b01086b61351533e8e3829294051997d53ffbb4c3fd23c2d99ae9a109c6e2b97e3aaf7344da8b98b4e9671edcdd08bf33e64a89c04aa8591c8207a5fb45a4e781270cd451a857b9994f0ae3364b1bd4acf33c13aa0b5194db3e0062666b841eb318a2fdb8b1e0a6cd069afa0d616c36dead342a3c3736fda270ae1f786c7427d7bd4b153096e96bdc207f470c7ea7b819b25e8504d276b14090905534ea1a7bdda7540e0dc50f3bffd63e830f6636e9c8068ee9a2490020f844c5ceca7dc30c91feefe57b77cb68ad54bf5f66d164f770bf14862f124b301a1af0e5ba6bd17fb588d36909347352649cc4517157e24fc7b4da2e9bcb8dd5f645cdba0eeb837c8ae6f102eb634408216c3d0a1afd3968e6267b4f67ca193fabb3bfba0188c1ccfeb72955310ece5afba47ccfefc8674baf3b4acea1f28914307252fa66c7008b5aeec6b8a480dce054882d0adf02524255cf7f49a4028b3422dc71ba1b583da339f50975c9eb7d4d191f76721db3df8457379f9fc05d11b852c1eeb135b821cfb615362aac558311f9b42e5694b117deb9de4e791fa678b2e83e86a1fe361956f19a3b91e85d9dfc46028492189ae3340667a4a373ed547108ec7eef3e03053e76849f50d78bad9f1311fe5eb8f6f5eeec8b513ae59d4b475b272c53876cc0fd047266dea2686f1e11f73ba3e0e8fde79116943024cd7d4783403d5090ac5a7a13fd5bba6aa9f20ee5d7bb4587aa98e2c497b5a2b469a105b1518dff0b76bb77fedf13584ee21a78b53e3874d1b4ea301491b4c714480fd6e40dafdf052492a5ced30c5db3bcd4938ae313ee777ef16a1fbbe47b2a7abf8b0304d308c78d2bdd435e2ae07eb9366427b56f15cf24f002d325a9cd62edae56d802b07049007d4dcef6aae47a4bf5c691b9d0bb9e4e7755a5f09ef67544ae9fa3f15a29ac39a8a905c6b2a01167500201e311cced0a1ac64a2dbde5ad49f2793a5664fafd9ca9964ca9655d5554942187a3d68c409a49d3ebaaaecb881e79501fb13166bb2d2edd9c27a081d1df092777ca6e38c23f14eabf63076ba11929bfaeb25c709dfb64db8ee514920523f97d2dc1d34cc6d7861280a2d70e036acaea53bba685c35ab73ae1b48d312a7fc24e5a70a0f4c0706e2c271365427a8a223493a623f2e0b334afb8e80acdfb97aa6473b86f1126f7646a6aa901a8293182dae9489d22c9fafb7c4110becfee6e72d0e7301efe0600f60203ce9d82aa97e8e227d76f709e90f1eec9fc7aeacc314899fb44c2a038a04c1c8919c55ce6f3602638e4a447729ec9c2447cb943875234f317c10c392bfe8bfe68750056a2acab82ee73ad3d251aad44bb539377c12a971b88a0c882aedd20f0dddc4925ba671ce6f376651c347259ffe911d55b211b2063043e17d627d30be8abda90c0384a81e155fe7c5c6edb960674faf4ffc94f156fb23344750b712f6b332398988f69950269aca1015fcc05fca71ff3ae89b109de0c420a5f7cb94993b632ef62de65c72d7586c43851917d72ae9de207aad998343bcf5a04ebee9ad5c65d282f8b78df2db4b108ffbd71618857c6636c421b4078a2a49e24cd62ddc01406b363299f643432652f2a64b178f4e11716dc74c510ae10505c412588c106807ec39f22dc082ca7ab23d7c4cb561aef85778909bb96eb195cd31bc67408e98e28e7e3be36ed3807fad9d3b647cbdf5c83658f0fd910c3384d996c62152d807a652106656f716f1e491101832c1aeff788c0b371a03dae90c421f36abbc80ff088185a9fcfaac4646e57b40fc07c11af5e7ab237984c93d467bb596679a1e03422d0a239cbb84fb6272e4201b5177c14a880edfd138b2ca64028f1ab999ff1a755eb8bcd0301199f3da8c58cab86d5bb66c4c141d78d3ef7e3bf9677667c2cd5a6099320d49936e6984fe80040ba19badaef2d4384f60cef87fdcfc74393e22b3ec466d71d059424492a517f849dcf74a147dde2fbedceb4d369ef9ac2eda008465981669709a45444533cf46a2889ee9b3ccf36cd308be506bc4acf2935c0b3f13d90ca9c868033b67f9d06b1f059fa3ce8c6423117c46816e8efe4bc59df9dea160026f8cb389aa7be380d5403e78cf54fed37ae097cb3d0e949b1df3893f9ccd5a7a6d1d66693451ba482348e1c7cb9cb9facc4c2c29570a773b29bcee496bfb52d5ed32b2b1781a4e07413ce5d33c7aaa1ccc0d740e08eb9dd1f22b5f5485dce3b5509fa7e930b5c6d64059989037ca10ca6ed761547a703c098888432b05c270d0bd3b8d32d64402e721d7ce127da95c2e236345b7a2b0d4b692fabed4d43737e86e8875fa990994d9bdd303b022eed4e17d0fb01e63e98a71ab918540264141643aa295345791bbb8108358c4dfa5e046afecb3573ae493f1b8f3feed716bac83815faf53cee0679bc30b19d97276d7fbc0b153924c1db4cffe4720450bda01265b6754a3997314da15da14ae6a4c69ad537a6eb98f6e8e3b0ce5a9466409472c94fdaa117d7b8be1517ea28297145ef534dccffb36660d2189b1e0c35649d89d689fccacd7f446dcb8e6b1b77fc3eb5067f966378a0ee06f591a438c254de00014e3fe58a01904cf93a12ad7e19014feb82b89b42c50ec7193c058a111bc730cc41b1da83af6b139114aa33913b1e6ea558679d4ae8cdb69813fda113f88cdf9e9a85fa72a87d1f00809bb085de31708212153d9fc28234e73bcee790edbaaa5128ea8a3f8ef42542919ed3bac72555fdc0d91136f50f9321fd351b32479d7ee8f435b1cdb396497fc5a8eac9b6340e4d2e12da7d2abdcdbd5022eccc5b8e348cb1af39824f135ac19db3f6a5a88b931e43752a2d9386dc108f0da99140362d21deebfb2fec23dd4de948492fa31fcb3009cbbfa7d41277e75ad8ae295702008be9ce00a62303778408e518492e3aefbaee5e64e1a65f291a155df9059e0c6", 0x1000, 0x6}], 0x1000, &(0x7f0000001400)={[{@nobarrier}, {@barrier}, {@nodecompose}, {@nodecompose}, {@session={'session', 0x3d, 0x100}}, {@nodecompose}], [{@obj_user={'obj_user', 0x3d, 'nodecompose'}}]}) 18:41:13 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) [ 3292.468766][ T37] audit: type=1804 audit(1627152073.224:495296): pid=10425 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4135/cgroup.controllers" dev="sda1" ino=15457 res=1 errno=0 18:41:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0xb, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:13 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) 18:41:13 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}], 0x12) 18:41:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) [ 3292.642134][ T37] audit: type=1804 audit(1627152073.344:495297): pid=10427 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3370/cgroup.controllers" dev="sda1" ino=15281 res=1 errno=0 18:41:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x0, 0x0, 0x4}], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:13 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) 18:41:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000f1670000", @ANYRES32, @ANYBLOB="0000000000000000cd16f0"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:13 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:13 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}], 0x12) [ 3292.897796][ T37] audit: type=1804 audit(1627152073.644:495298): pid=10444 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4136/cgroup.controllers" dev="sda1" ino=14496 res=1 errno=0 18:41:13 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) [ 3293.156173][T10433] loop1: detected capacity change from 0 to 32760 [ 3293.210137][ T37] audit: type=1804 audit(1627152073.964:495299): pid=10459 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3371/cgroup.controllers" dev="sda1" ino=15258 res=1 errno=0 18:41:14 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x8, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000080)=@framed={{}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @initr0, @func, @call, @map_val]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:14 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}], 0x12) 18:41:14 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) 18:41:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}], 0x12) 18:41:14 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) 18:41:14 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2020}, 0x1c) [ 3293.571454][ T37] audit: type=1804 audit(1627152074.324:495300): pid=10470 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4137/cgroup.controllers" dev="sda1" ino=15650 res=1 errno=0 18:41:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80) 18:41:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}], 0x12) 18:41:14 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f0000000080)=@ethernet={0x0, @broadcast}, 0x80) 18:41:14 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100), &(0x7f0000000180)=0x10) 18:41:14 executing program 1: setresuid(0xffffffffffffffff, 0xee01, 0x0) mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) 18:41:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:14 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100), &(0x7f0000000180)=0x10) 18:41:14 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{0x77359400}}, 0x0) [ 3294.087706][ T37] audit: type=1804 audit(1627152074.834:495301): pid=10496 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4138/cgroup.controllers" dev="sda1" ino=15553 res=1 errno=0 18:41:14 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x9, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}], 0x12) 18:41:15 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100), &(0x7f0000000180)=0x10) 18:41:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000200), 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000300)=[@increfs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000380)="96"}) [ 3294.476568][ T37] audit: type=1804 audit(1627152075.224:495302): pid=10517 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3372/cgroup.controllers" dev="sda1" ino=15232 res=1 errno=0 18:41:15 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}], 0x12) 18:41:15 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, &(0x7f0000000100)) 18:41:15 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x10) 18:41:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:15 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:15 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000013c0)=@bpf_lsm={0x2, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:15 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000013c0)=@bpf_lsm={0x2, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:15 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private2}}) 18:41:15 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x10) 18:41:15 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}], 0x12) 18:41:15 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 18:41:16 executing program 1: setresuid(0xffffffffffffffff, 0xee01, 0x0) setresuid(0x0, 0x0, 0x0) 18:41:16 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x10) 18:41:16 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}], 0x12) 18:41:16 executing program 3: socket(0x28, 0x0, 0x10001) 18:41:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:16 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 18:41:16 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, 0x0) 18:41:16 executing program 3: pipe(&(0x7f0000000000)) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 18:41:16 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}], 0x12) 18:41:16 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x8916, &(0x7f00000007c0)) 18:41:16 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x0, 0x0, 0x0, 0xd00}, 0x10) 18:41:16 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, 0x0) 18:41:16 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}], 0x12) 18:41:16 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x6dd, 0x4) 18:41:16 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x100000000000012) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, 0x0) 18:41:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:16 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}], 0x12) 18:41:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x0, 0x2}]}}}], 0xf}, 0x0) 18:41:16 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000)=0x1000, 0x8) 18:41:16 executing program 2: r0 = socket$inet(0x2, 0x3, 0x29) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 18:41:17 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x14, 0x0, 0x4}, 0x40) 18:41:17 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r0, &(0x7f0000000d00), 0x1, 0x0) [ 3296.194874][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 3296.194890][ T37] audit: type=1804 audit(1627152076.944:495308): pid=10605 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4141/cgroup.controllers" dev="sda1" ino=15277 res=1 errno=0 18:41:17 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}], 0x12) 18:41:17 executing program 2: r0 = socket$inet(0x2, 0x3, 0x29) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x1600bd80, 0x0, 0x0) 18:41:17 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0x0) 18:41:17 executing program 1: r0 = socket(0x11, 0xa, 0x0) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) 18:41:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) [ 3296.645267][ T37] audit: type=1804 audit(1627152077.394:495309): pid=10635 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3375/cgroup.controllers" dev="sda1" ino=14131 res=1 errno=0 [ 3296.701393][ T37] audit: type=1804 audit(1627152077.424:495310): pid=10637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4142/cgroup.controllers" dev="sda1" ino=14072 res=1 errno=0 18:41:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 18:41:17 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}], 0x12) 18:41:17 executing program 1: r0 = socket$inet(0x2, 0x3, 0x29) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x14, 0x0, 0x0) 18:41:17 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x14, 0x4, 0x4, 0xe3af}, 0x40) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000140)={r0, 0x0, &(0x7f0000000080)=@tcp6}, 0x20) 18:41:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x17, 0x15, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @loopback]}]}}}], 0x28}, 0x0) 18:41:17 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom(r0, 0x0, 0x3800, 0x0, 0x0, 0x0) 18:41:18 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @local, 0x7}}) 18:41:18 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}], 0x12) 18:41:18 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) connect(r0, 0x0, 0x3f) 18:41:18 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}], 0x12) 18:41:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:18 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f00000011c0)=[{{&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}}], 0x1, 0x0) 18:41:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect(r0, &(0x7f0000003d80)=@can, 0x80) 18:41:18 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x891b, &(0x7f0000000040)={'vlan0\x00', @ifru_names}) 18:41:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:18 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}], 0x12) 18:41:18 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000500)={0x0, 0x101000, 0x1000, 0x0, 0x3}, 0x20) 18:41:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x4000000) 18:41:18 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}], 0x12) 18:41:18 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x1f34, 0x1}, 0x40) [ 3297.648140][ T37] audit: type=1804 audit(1627152078.394:495311): pid=10676 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4143/cgroup.controllers" dev="sda1" ino=14305 res=1 errno=0 18:41:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x17, 0x15, [@remote, @multicast2, @multicast1, @loopback, @local]}]}}}], 0x28}, 0x0) 18:41:18 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, 0x0, 0x0) [ 3297.901614][ T37] audit: type=1804 audit(1627152078.654:495312): pid=10691 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3377/cgroup.controllers" dev="sda1" ino=14491 res=1 errno=0 18:41:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:18 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast1}}) 18:41:18 executing program 1: sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x40713cd994787c49) 18:41:18 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, 0x0, 0x0) 18:41:18 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x61) 18:41:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:19 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, 0x0, 0x0) 18:41:19 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x8}, 0x40) 18:41:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 18:41:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c1d1139a176830addcd1a5dfc1e0e7574eb98566da90b1745693063d189e1ba2be118067ab5b2ae043d71bfea2442e6aba41a1caf4adf2a6a345ddb5e6444b"}, 0x80) 18:41:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'veth0_vlan\x00', {0x3}}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000080)={0x7, 'batadv0\x00', {0x897b}}) 18:41:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, 0xa, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) [ 3298.399506][ T37] audit: type=1804 audit(1627152079.154:495313): pid=10711 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4144/cgroup.controllers" dev="sda1" ino=14131 res=1 errno=0 [ 3298.517507][ T37] audit: type=1804 audit(1627152079.154:495314): pid=10710 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3378/cgroup.controllers" dev="sda1" ino=14321 res=1 errno=0 18:41:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:19 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x4020940d, 0x0) 18:41:19 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) recvmsg(r0, &(0x7f0000002580)={0x0, 0x0, 0x0}, 0x40000040) 18:41:19 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440), 0x0) 18:41:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x38}, 0x40004) 18:41:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:19 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000013c0)=@bpf_lsm={0x2, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x3c}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:19 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000080)) 18:41:19 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440), 0x0) 18:41:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)={0x16, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x40) [ 3298.894231][ T37] audit: type=1804 audit(1627152079.644:495315): pid=10741 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4145/cgroup.controllers" dev="sda1" ino=14072 res=1 errno=0 18:41:19 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440), 0x0) 18:41:19 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5460, 0x0) [ 3299.144131][ T37] audit: type=1804 audit(1627152079.894:495316): pid=10757 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3379/cgroup.controllers" dev="sda1" ino=14611 res=1 errno=0 [ 3299.177500][T10757] __nla_validate_parse: 1 callbacks suppressed [ 3299.177515][T10757] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:20 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000d80)={0x0, 0x1, 0x6, @link_local}, 0x10) 18:41:20 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000080)) 18:41:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:20 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{0x0}], 0x1) [ 3299.537447][ T37] audit: type=1804 audit(1627152080.284:495317): pid=10771 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4146/cgroup.controllers" dev="sda1" ino=14436 res=1 errno=0 18:41:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast2}}}], 0x20}, 0x0) 18:41:20 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5452, &(0x7f00000007c0)) 18:41:20 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x4020940d, &(0x7f00000007c0)) 18:41:20 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{0x0}], 0x1) 18:41:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:20 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)) 18:41:20 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{0x0}], 0x1) 18:41:20 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x3a, 0x0, 0xe0, 0x0, 0x1}, 0x40) 18:41:20 executing program 3: modify_ldt$write2(0x11, &(0x7f00000000c0)={0xfff}, 0x10) 18:41:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:20 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x94, &(0x7f00000001c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:20 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)}], 0x1) [ 3299.913713][T10784] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:20 executing program 1: rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000140)) syz_read_part_table(0xfffffffffffffffc, 0x4, &(0x7f0000000340)=[{&(0x7f0000000000)="434ccca8e6db3a3bea4b663c5ca3cb10bfbbab9d7e90c4579392f72ad927278c75cce2d08e087bbc1cb2df581c14b3435ae003131d12a936c04a7ec9b1e546753875de57d3fcd2ab47b3fda5eb6933a3d80cd74dfb6debe514f0c0", 0x5b, 0x7}, {&(0x7f0000000080)="79b93f9376a43e9219ec5d114ff21680348cff5634e547f2384a2577d716288ab3c9522649a442bf015b97cbab9a8870b8a967c9c4a1cbb407d755775db460603a1a609da0aa72786a4e5f585fccf9bd7ff2a8bfc2dfc8845192824bcd4f63c9ba96c433eca2afdc97", 0x69, 0x1}, {&(0x7f00000001c0)="c6b2da9f30e833ccb50455c8b4ea82963ea7fa18808920c0bbf7550cbe790fab3b3143939a4d32842be774ba42b1dff352406be4f1fb431db5a2bcb87114df8cab6cc589bb034085d9d787da8e006aa8c616eaf89c693ebd8470aefa7b6b0fb20a5b62230f70d850f532377436ad2bd847129b77137210de2c1d513737e67d9dba7c70bfec75de2f9bc036b63647d9e3", 0x90, 0x200}, {&(0x7f0000000280)="bffa8aa07b060348224ad6ef81d8fc428ca6e3c3c5c95be215165e9898ef2e499ddaec303e49701c6e", 0x29, 0xfffffffffffffffe}]) 18:41:20 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x7, 0x94, &(0x7f00000001c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:20 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)}], 0x1) 18:41:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001b80)={0xa, 0x2, 0x7fff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) [ 3300.078583][T10807] loop1: detected capacity change from 0 to 264192 18:41:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:21 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000340)=[{0x0, 0x0, 0xfffffffffffffffe}]) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, &(0x7f0000000100)) 18:41:21 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)}], 0x1) 18:41:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000001c0), 0xc) 18:41:21 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) 18:41:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getnetconf={0x1c, 0x52, 0x1, 0x0, 0x0, {}, [@NETCONFA_FORWARDING={0x8}]}, 0x1c}}, 0x0) [ 3300.387231][T10820] loop3: detected capacity change from 0 to 16383 18:41:21 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/228) 18:41:21 executing program 2: bpf$MAP_CREATE(0x22, &(0x7f0000000000), 0x40) [ 3300.480990][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3300.521274][T10820] loop3: detected capacity change from 0 to 16383 18:41:21 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000006"]) 18:41:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004300)=[{&(0x7f00000000c0)={0x10}, 0x10}, {&(0x7f00000001c0)={0x10}, 0x10}, {&(0x7f0000000780)={0x10}, 0x10}], 0x3}, 0x0) 18:41:21 executing program 2: syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8008c4, &(0x7f0000000080)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) [ 3300.759305][T10847] fuse: Bad value for 'fd' 18:41:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:21 executing program 3: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x389c0ab9bb28ccc9) 18:41:21 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x81, &(0x7f0000000100)=""/129, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, 0x0}, 0x78) 18:41:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x20}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:21 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x4}, [@func]}, &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xc1, &(0x7f0000000300)=""/193, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 3300.792606][T10847] fuse: Bad value for 'fd' 18:41:21 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x1, &(0x7f0000000000)=@raw=[@ldst], &(0x7f0000000080)='GPL\x00', 0x1f, 0x84, &(0x7f00000000c0)=""/132, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:21 executing program 4: syz_mount_image$vfat(&(0x7f00000014c0), &(0x7f0000001500)='./file0\x00', 0x0, 0x0, &(0x7f0000001540), 0x0, &(0x7f0000001580)={[{@shortname_lower}, {@numtail}]}) 18:41:21 executing program 3: clock_getres(0x0, &(0x7f0000002940)) 18:41:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}]}, 0xffffff45}}, 0x0) 18:41:21 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x94, &(0x7f00000001c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:21 executing program 3: syz_read_part_table(0x0, 0x2, &(0x7f0000000340)=[{0x0}, {0x0}]) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, 0x0) [ 3301.020390][T10865] FAT-fs (loop4): bogus number of reserved sectors [ 3301.057344][T10865] FAT-fs (loop4): Can't find a valid FAT filesystem 18:41:21 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x430800, 0x0) [ 3301.136124][T10865] FAT-fs (loop4): bogus number of reserved sectors [ 3301.144186][T10865] FAT-fs (loop4): Can't find a valid FAT filesystem [ 3301.193410][T10871] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x20}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x200001cd, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x94, &(0x7f00000001c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:22 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x8, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 18:41:22 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x22, 0x0, 0x0) 18:41:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 18:41:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x30}}, 0x0) 18:41:22 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0xc, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 18:41:22 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x8, &(0x7f0000000040)=[{0x5}, {0x3, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}]}) 18:41:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x4}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x94, &(0x7f00000001c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 3301.518616][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 3301.518633][ T37] audit: type=1804 audit(1627152082.264:495323): pid=10893 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4150/cgroup.controllers" dev="sda1" ino=14834 res=1 errno=0 18:41:22 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x320ae20f1ddd9313, 0x0) 18:41:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 18:41:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x20}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:22 executing program 1: syz_emit_ethernet(0x2c, &(0x7f0000000140)={@multicast, @broadcast, @void, {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @current}, {@current, @broadcast}}}}}, 0x0) 18:41:22 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x9, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x7, 0x94, &(0x7f00000001c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:22 executing program 2: r0 = socket(0x11, 0x2, 0x0) getsockname$netlink(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 18:41:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:22 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xb, 0x0, 0x0) 18:41:22 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x2, &(0x7f0000000100)=@raw=[@map], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) 18:41:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x7, 0x94, &(0x7f00000001c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:22 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x8, 0x2, &(0x7f0000000140)=@raw=[@map={0x18, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 18:41:22 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x440000, 0x0) [ 3301.961718][ T37] audit: type=1804 audit(1627152082.714:495324): pid=10922 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4151/cgroup.controllers" dev="sda1" ino=14802 res=1 errno=0 18:41:22 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x6, 0x0, 0x7) 18:41:22 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000b0000000b000000007"], &(0x7f0000000100)=""/4087, 0xcf, 0xff7, 0x1}, 0x20) 18:41:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:22 executing program 2: r0 = socket(0x11, 0x2, 0x0) sendmsg(r0, &(0x7f00000025c0)={&(0x7f0000002100)=@qipcrtr={0x2a, 0x4}, 0x80, &(0x7f0000002440)=[{0x0}, {&(0x7f0000002280)="d9", 0x1}, {&(0x7f00000022c0)="8f", 0x1}], 0x3, &(0x7f00000024c0)=[{0x10}], 0x10}, 0x4840) 18:41:22 executing program 3: r0 = socket(0x11, 0x2, 0x0) getsockname$unix(r0, &(0x7f0000000340), &(0x7f0000000080)=0xffffffffffffffcf) 18:41:23 executing program 4: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800}}) [ 3302.261854][ T37] audit: type=1804 audit(1627152083.014:495325): pid=10937 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3384/cgroup.controllers" dev="sda1" ino=14722 res=1 errno=0 [ 3302.292629][T10937] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d07700"/122], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) [ 3302.385538][ T37] audit: type=1804 audit(1627152083.114:495326): pid=10947 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4152/cgroup.controllers" dev="sda1" ino=14707 res=1 errno=0 18:41:23 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x1c, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 18:41:23 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x1a, 0x0, 0x0) 18:41:23 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0x2, 0x0, 0x0) 18:41:23 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/46) 18:41:23 executing program 4: syz_mount_image$vfat(&(0x7f0000006480), &(0x7f00000064c0)='./file0\x00', 0x0, 0x0, &(0x7f0000007740), 0x0, &(0x7f00000077c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-9'}}]}) 18:41:23 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x8, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:23 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) connect$packet(r0, 0x0, 0x0) 18:41:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:23 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x13, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) [ 3302.677849][T10965] FAT-fs (loop4): bogus number of reserved sectors [ 3302.702194][T10965] FAT-fs (loop4): Can't find a valid FAT filesystem 18:41:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@deltaction={0x28, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x28}}, 0x0) [ 3302.778832][T10965] FAT-fs (loop4): bogus number of reserved sectors [ 3302.794441][T10965] FAT-fs (loop4): Can't find a valid FAT filesystem 18:41:23 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000240)=@raw=[@ldst], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 3302.857206][ T37] audit: type=1804 audit(1627152083.604:495327): pid=10971 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3385/cgroup.controllers" dev="sda1" ino=14642 res=1 errno=0 18:41:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d07700"/122], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:23 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x3fe, 0x0, 0x0) 18:41:23 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/185) 18:41:23 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x3, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x14, 0xffffffffffffffff}, 0xe4) 18:41:23 executing program 1: migrate_pages(0x0, 0x101, 0x0, &(0x7f0000000080)=0x5f) [ 3302.996475][ T37] audit: type=1804 audit(1627152083.694:495328): pid=10981 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4153/cgroup.controllers" dev="sda1" ino=14508 res=1 errno=0 18:41:23 executing program 3: modify_ldt$write2(0x11, &(0x7f00000000c0), 0x10) modify_ldt$write2(0x11, &(0x7f0000000080), 0x10) 18:41:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) 18:41:23 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x100007000) 18:41:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x3, &(0x7f0000000100), 0x10) 18:41:23 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f00000004c0)="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", 0xb41}], 0x0, 0x0) 18:41:24 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1, &(0x7f0000000040)=@raw=[@func], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x92, &(0x7f00000000c0)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 3303.262518][T11003] loop1: detected capacity change from 0 to 5 [ 3303.353483][ T37] audit: type=1804 audit(1627152084.104:495329): pid=11006 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4154/cgroup.controllers" dev="sda1" ino=14057 res=1 errno=0 [ 3303.409637][T11003] loop1: detected capacity change from 0 to 5 [ 3303.444760][ T37] audit: type=1804 audit(1627152084.194:495330): pid=11009 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3386/cgroup.controllers" dev="sda1" ino=15042 res=1 errno=0 [ 3303.493100][T11009] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d07700"/122], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:24 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000240)=@framed={{}, [@func]}, &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xc1, &(0x7f0000000300)=""/193, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x40049409, &(0x7f0000000080)={0x0, 0x0, 0x0}) 18:41:24 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0x6, 0x0, 0x0) 18:41:24 executing program 1: memfd_create(&(0x7f00000001c0)='\\\xf2\x00', 0x4) 18:41:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100007000) 18:41:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, &(0x7f00000002c0)) 18:41:24 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0xd, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 18:41:24 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 0xa92, 0x1}, 0x40) 18:41:24 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x3, 0x0, 0x0, 0x10001}]}) 18:41:24 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x11, 0x2, &(0x7f0000001600)=@raw=[@generic, @call], &(0x7f0000001680)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 3304.033571][ T37] audit: type=1804 audit(1627152084.784:495331): pid=11036 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4155/cgroup.controllers" dev="sda1" ino=14994 res=1 errno=0 18:41:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 18:41:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003580)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x0) 18:41:25 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000240)=@framed={{}, [@func={0x85, 0x0, 0x2}]}, &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xc1, &(0x7f0000000300)=""/193, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100007000) 18:41:25 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x1e, 0x0, 0x0) 18:41:25 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000100)=""/4087, 0xcf, 0xff7, 0x1}, 0x20) 18:41:25 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 18:41:25 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@generic]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 3304.415307][ T37] audit: type=1804 audit(1627152085.164:495332): pid=11061 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4156/cgroup.controllers" dev="sda1" ino=14131 res=1 errno=0 18:41:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100007000) 18:41:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x1f, 0x0, 0x0}) 18:41:25 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000200)=""/130, 0x26, 0x82, 0x1}, 0x20) [ 3304.623739][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:25 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 18:41:25 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0xf4240, &(0x7f0000000000)=@framed={{}, [@ldst]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x94, &(0x7f00000001c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:25 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x1c, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 18:41:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[], 0x30}}, 0x0) 18:41:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100007000) 18:41:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x40) 18:41:26 executing program 1: wait4(0x0, 0x0, 0x0, &(0x7f00000001c0)) 18:41:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100007000) 18:41:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x1ca}, 0x40) 18:41:26 executing program 3: bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xa0) 18:41:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x5460, 0x0) 18:41:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:26 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x23, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 18:41:26 executing program 2: syz_mount_image$vfat(&(0x7f0000001400), &(0x7f0000001440)='./file0\x00', 0x0, 0x0, &(0x7f0000001580), 0x0, &(0x7f0000001600)={[{@utf8}]}) 18:41:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002e40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 18:41:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100007000) 18:41:26 executing program 1: r0 = gettid() ptrace$getenv(0x4201, r0, 0x0, 0x0) 18:41:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004b80)={0x4c}, 0x4c}}, 0x0) [ 3305.768321][T11118] FAT-fs (loop2): bogus number of reserved sectors [ 3305.796977][T11118] FAT-fs (loop2): Can't find a valid FAT filesystem 18:41:26 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f00000011c0)=[{&(0x7f00000001c0)="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", 0xe41}], 0x0, 0x0) 18:41:26 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 3305.893295][T11118] FAT-fs (loop2): bogus number of reserved sectors [ 3305.910278][T11118] FAT-fs (loop2): Can't find a valid FAT filesystem 18:41:26 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x11, 0x1, &(0x7f0000001600)=@raw=[@generic], &(0x7f0000001680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 3306.006056][T11138] loop1: detected capacity change from 0 to 7 18:41:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x0) 18:41:26 executing program 2: socket(0x6c598415311d89a5, 0x0, 0x0) [ 3306.097519][T11138] loop1: detected capacity change from 0 to 7 [ 3306.127145][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0xc, 0x4) 18:41:27 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1890c0, 0x0) 18:41:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff, 0x2}, 0xc) 18:41:27 executing program 2: mq_open(&(0x7f0000000080)='\\]*\x00', 0x0, 0x0, 0x0) 18:41:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900"/214], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x0) 18:41:27 executing program 3: add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380), 0x8, 0x0) 18:41:27 executing program 1: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 18:41:27 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0x14, 0x0, 0x0) 18:41:27 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde3cfa06fcdafd25, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:27 executing program 3: clock_gettime(0x3, &(0x7f0000000900)) [ 3306.552280][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 3306.552296][ T37] audit: type=1804 audit(1627152087.304:495340): pid=11164 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4162/cgroup.controllers" dev="sda1" ino=15296 res=1 errno=0 18:41:27 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x7) 18:41:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}]}, 0x28}}, 0x0) sendfile(r3, r1, 0x0, 0x0) [ 3306.813160][ T37] audit: type=1804 audit(1627152087.564:495341): pid=11179 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3391/cgroup.controllers" dev="sda1" ino=14556 res=1 errno=0 [ 3306.847183][T11179] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3306.850430][ T37] audit: type=1804 audit(1627152087.594:495342): pid=11187 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir207927456/syzkaller.oICW4i/4163/cgroup.controllers" dev="sda1" ino=15286 res=1 errno=0 18:41:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900"/214], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000004c0)) 18:41:27 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getpeername(r0, 0x0, &(0x7f0000000080)) 18:41:27 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{}]}) 18:41:27 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) 18:41:27 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x15, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 18:41:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x0, 0xfffffffe, 0x3}, 0x40) 18:41:27 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x15, 0x2, &(0x7f0000000140)=@raw=[@map={0x18, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 18:41:27 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x700) 18:41:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) 18:41:27 executing program 0: memfd_create(&(0x7f0000005c80)='-\x00', 0x0) 18:41:27 executing program 4: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r0, &(0x7f00000000c0)={0x7}, 0x7) write$P9_RLOCK(r0, &(0x7f0000000140)={0x8}, 0x8) [ 3307.349550][ T37] audit: type=1804 audit(1627152088.104:495343): pid=11207 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3392/cgroup.controllers" dev="sda1" ino=15299 res=1 errno=0 [ 3307.392991][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900"/214], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:28 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x6, 0x0, 0x700) 18:41:28 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={0x0, &(0x7f0000000100)=""/4087, 0xcf, 0xff7, 0x1}, 0x20) 18:41:28 executing program 0: r0 = socket(0x11, 0x2, 0x0) getsockname$netlink(r0, 0x0, &(0x7f0000000100)) 18:41:28 executing program 4: modify_ldt$write2(0x11, &(0x7f0000000000)={0xf849}, 0x10) 18:41:28 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x7, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:28 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x94, &(0x7f00000001c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:28 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xa, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 18:41:28 executing program 0: syz_mount_image$vfat(&(0x7f0000001400), &(0x7f0000001440)='./file0\x00', 0x0, 0x0, &(0x7f0000001580), 0x2800, &(0x7f0000001600)) 18:41:28 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x0, 0x8}, 0xc) 18:41:28 executing program 2: r0 = socket(0x11, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0xc0000) [ 3307.975579][ T37] audit: type=1804 audit(1627152088.724:495344): pid=11245 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3393/cgroup.controllers" dev="sda1" ino=14511 res=1 errno=0 [ 3308.004454][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900"/229], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:29 executing program 4: r0 = socket(0x11, 0x2, 0x0) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0x0, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000014c0)=ANY=[], 0x10c8}, 0x0) 18:41:29 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) fanotify_mark(r0, 0x9, 0x12, 0xffffffffffffffff, 0x0) 18:41:29 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000140)=@raw=[@map={0x18, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 18:41:29 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000340)=[{0x0, 0x0, 0xfffffffffffffffe}]) 18:41:29 executing program 0: setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000), 0xfffffed5) [ 3308.384623][T11259] loop2: detected capacity change from 0 to 16383 18:41:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000041) 18:41:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001b80)={0xa, 0x2, 0x7fff, 0x6}, 0x40) 18:41:29 executing program 0: syz_open_dev$evdev(&(0x7f0000000040), 0x8, 0x0) 18:41:29 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xc}, 0x40) 18:41:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 18:41:29 executing program 3: socketpair(0x1, 0x0, 0x6, &(0x7f0000000000)) 18:41:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900"/229], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:29 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0x94, &(0x7f00000001c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:29 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x21, 0x0, 0x0) 18:41:29 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0x17, 0x0, 0x0) 18:41:29 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x18, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 18:41:29 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) 18:41:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000004380)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc, 0x0}, 0x0) 18:41:29 executing program 1: r0 = socket(0x11, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) 18:41:29 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xc5e06e0604c91d33, 0x0) 18:41:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001b80)={0xa, 0x2, 0x7fff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:41:29 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@target={'target ', {'PCI:', '1f', ':', 'b', ':', '1c', '.', 'd'}}, 0x15) 18:41:29 executing program 4: r0 = socket(0x11, 0x2, 0x0) sendmmsg(r0, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 3309.065156][ T37] audit: type=1804 audit(1627152089.814:495345): pid=11303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3395/cgroup.controllers" dev="sda1" ino=15427 res=1 errno=0 [ 3309.141443][ T37] audit: type=1800 audit(1627152089.814:495346): pid=11303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=15427 res=0 errno=0 18:41:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900"/229], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:29 executing program 1: openat$nvram(0xffffffffffffff9c, 0x0, 0x490400, 0x0) 18:41:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xc1, &(0x7f0000000300)=""/193, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x630f49e7d473ba0e, &(0x7f00000009c0)=ANY=[]) 18:41:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'gretap0\x00', 0x0}) 18:41:30 executing program 4: socket$inet(0x2, 0x0, 0x46f0) [ 3309.216681][ T37] audit: type=1804 audit(1627152089.854:495347): pid=11295 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3395/cgroup.controllers" dev="sda1" ino=15427 res=1 errno=0 18:41:30 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x23, 0x0, 0x0) 18:41:30 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000001840)=[{&(0x7f0000001980)=@abs, 0x6e, &(0x7f0000000400)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32], 0x20}], 0x1, 0x0) 18:41:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x40) 18:41:30 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0xe, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 18:41:30 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a5042, 0x0) 18:41:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x0) [ 3309.596485][ T37] audit: type=1804 audit(1627152090.344:495348): pid=11332 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3396/cgroup.controllers" dev="sda1" ino=15800 res=1 errno=0 18:41:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900"/237], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:30 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x11, 0x1, &(0x7f0000001600)=@raw=[@generic], &(0x7f0000001680)='syzkaller\x00', 0x0, 0x2e, &(0x7f00000016c0)=""/46, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:30 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:30 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0x1e, 0x0, 0x0) 18:41:30 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xbc03, &(0x7f0000000000)=@framed={{}, [@ldst]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x94, &(0x7f00000001c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:30 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x20, 0x1e, 0xffffff1f}, 0x20}}, 0x0) 18:41:30 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0xc, @multicast}, 0x10) 18:41:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x0}) 18:41:30 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xe0, &(0x7f0000000140)=""/224, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 3309.829603][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3309.896147][T11350] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 18:41:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=@deltaction={0x1c, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4}]}, 0x1c}}, 0x0) 18:41:30 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x20, 0x1e, 0xffffff1f}, 0x20}}, 0x0) 18:41:30 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x13, &(0x7f00000000c0)=""/19, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 3310.081065][ T37] audit: type=1804 audit(1627152090.834:495349): pid=11358 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3397/cgroup.controllers" dev="sda1" ino=15667 res=1 errno=0 [ 3310.143205][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 18:41:31 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900"/237], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:31 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="fa0c6e578c59"}, 0x14) 18:41:31 executing program 1: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000100)={'sit0\x00', 0x0}) 18:41:31 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000080)=@raw=[@jmp], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:31 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/time_for_children\x00') 18:41:31 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x20, 0x1e, 0xffffff1f}, 0x20}}, 0x0) 18:41:31 executing program 1: r0 = gettid() syz_open_procfs$userns(r0, 0x0) 18:41:31 executing program 2: syz_open_dev$evdev(&(0x7f00000000c0), 0x8, 0x4002) [ 3310.351994][T11375] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 18:41:31 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x20, 0x1e, 0xffffff1f}, 0x20}}, 0x0) 18:41:31 executing program 3: mq_open(&(0x7f0000000000)='\\@#&(\x00', 0x40, 0x0, &(0x7f0000000040)) 18:41:31 executing program 0: syz_open_dev$sg(&(0x7f0000000340), 0x7f, 0x0) 18:41:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@gettaction={0x24, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) [ 3310.532278][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3310.746062][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:31 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900"/237], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:31 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000a80)={&(0x7f0000000500)=@x25={0x9, @remote}, 0x80, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000600)=""/213, 0xd5}], 0x2, &(0x7f00000009c0)=""/174, 0xae}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000001880), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 18:41:31 executing program 4: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r0, &(0x7f00000000c0)={0x7}, 0x7) 18:41:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8003, &(0x7f0000000240)=@framed={{}, [@func]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0xc1, &(0x7f0000000300)=""/193, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:31 executing program 3: memfd_create(&(0x7f0000005c80)='-\x00', 0x3) 18:41:32 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x7, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 18:41:32 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4140, 0x0) 18:41:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) bind$netlink(r0, &(0x7f0000000080), 0xc) 18:41:32 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x94, &(0x7f00000001c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:32 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) 18:41:32 executing program 4: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) [ 3311.705590][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 3311.705605][ T37] audit: type=1804 audit(1627152092.454:495351): pid=11429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3399/cgroup.controllers" dev="sda1" ino=15699 res=1 errno=0 [ 3311.736043][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:32 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 18:41:32 executing program 2: r0 = socket(0x11, 0x2, 0x0) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0x0, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x10c8}, 0x0) 18:41:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}) 18:41:32 executing program 0: accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000005b40), 0x0) getresuid(&(0x7f0000005b80), &(0x7f0000005bc0), &(0x7f0000005c00)) 18:41:32 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:32 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)=ANY=[], 0xb, 0xfffffffffffffff8) 18:41:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0) 18:41:32 executing program 4: modify_ldt$write2(0x11, &(0x7f00000000c0)={0xfff}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000080), 0x10) 18:41:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001b80)={0xa, 0x0, 0x0, 0x6}, 0x40) 18:41:32 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0xb, 0x4) 18:41:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000940)={'ip6_vti0\x00', 0x0}) 18:41:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:33 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000006000000", @ANYRES32, @ANYBLOB="0000000000000100000000000030ff0f"]) 18:41:33 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x4, &(0x7f0000001140)=ANY=[], &(0x7f0000001180)='syzkaller\x00', 0x8, 0xc7, &(0x7f00000011c0)=""/199, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:33 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000006000000", @ANYRES32]) 18:41:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={[{@fat=@quiet}]}) 18:41:33 executing program 0: syz_open_dev$sg(&(0x7f00000001c0), 0x1, 0x0) 18:41:33 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:33 executing program 2: futex(&(0x7f0000000100), 0x0, 0x2, 0x0, 0x0, 0x0) 18:41:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}) [ 3312.553536][T11476] FAT-fs (loop3): bogus number of reserved sectors [ 3312.574233][T11476] FAT-fs (loop3): Can't find a valid FAT filesystem 18:41:33 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80084503, 0x0) 18:41:33 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32]) 18:41:33 executing program 4: socket(0x11, 0x2, 0x0) socket(0x11, 0x2, 0x0) [ 3312.821953][ T37] audit: type=1804 audit(1627152093.574:495352): pid=11494 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3401/cgroup.controllers" dev="sda1" ino=15815 res=1 errno=0 [ 3312.886324][ T37] audit: type=1800 audit(1627152093.614:495353): pid=11494 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=15815 res=0 errno=0 18:41:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:33 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000040)=@raw=[@exit, @generic, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x8d, &(0x7f00000000c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getnetconf={0x3c, 0x52, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x80000001}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x1f}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x40}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xb32}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x814}, 0x40) 18:41:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x102) syz_genetlink_get_family_id$SEG6(&(0x7f0000001880), r0) 18:41:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xc, 0x13, @l2={'eth', 0x3a, 'nr0\x00'}}}}, 0x28}}, 0x0) 18:41:33 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) accept$packet(0xffffffffffffffff, 0x0, 0x0) [ 3312.911338][ T37] audit: type=1804 audit(1627152093.614:495354): pid=11490 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3401/cgroup.controllers" dev="sda1" ino=15815 res=1 errno=0 18:41:33 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x2, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 18:41:33 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0xf, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) [ 3313.062745][T11509] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 18:41:33 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000001680), &(0x7f00000016c0)=0x4) 18:41:33 executing program 0: io_setup(0xae, &(0x7f00000001c0)=0x0) io_cancel(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 18:41:33 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x1, 0x0, 0x0) [ 3313.238115][ T37] audit: type=1804 audit(1627152093.984:495355): pid=11513 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3402/cgroup.controllers" dev="sda1" ino=15815 res=1 errno=0 18:41:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:34 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000140)=@raw=[@map={0x18, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x20000338) 18:41:34 executing program 3: r0 = socket(0x11, 0x2, 0x0) sendmmsg(r0, &(0x7f00000024c0)=[{{&(0x7f0000000200)=@hci, 0x80, 0x0}}], 0x1, 0x0) 18:41:34 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:34 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000280), 0x0, 0xfffffffffffffffe}]) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, &(0x7f0000000100)) 18:41:34 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000006c0)) 18:41:34 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000700)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long}, 0x80, 0x0}}], 0x1, 0x0) 18:41:34 executing program 3: perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 3313.456406][T11539] loop4: detected capacity change from 0 to 16383 18:41:34 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x4, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 18:41:34 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x15, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:34 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0xa, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) [ 3313.580217][T11539] loop4: detected capacity change from 0 to 16383 18:41:34 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000001840)=[{&(0x7f0000001980)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000100000001"], 0x20}], 0x1, 0x0) 18:41:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:34 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x25) 18:41:34 executing program 1: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x1}}) 18:41:34 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x200}]) 18:41:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 18:41:34 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0xf4240, &(0x7f0000000240)=@framed={{}, [@func]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0xc1, &(0x7f0000000300)=""/193, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:34 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, &(0x7f0000000040)=""/170, 0xaa, 0x2, 0x0, 0x0) [ 3313.952136][T11582] loop3: detected capacity change from 0 to 2 18:41:34 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000280)) 18:41:34 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000200)={0x4c, 0x12, 0x401}, 0x4c}}, 0x0) [ 3314.012044][T11582] Dev loop3: unable to read RDB block 2 [ 3314.029585][T11582] loop3: unable to read partition table [ 3314.060914][T11582] loop3: partition table beyond EOD, truncated [ 3314.081703][T11582] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 18:41:34 executing program 4: socket(0x28, 0x0, 0x80000001) [ 3314.161312][T11582] loop3: detected capacity change from 0 to 2 18:41:35 executing program 1: syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}}) 18:41:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:35 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0x18, 0x0, 0x0) [ 3314.231661][T11582] Dev loop3: unable to read RDB block 2 [ 3314.258461][T11582] loop3: unable to read partition table [ 3314.299452][T11582] loop3: partition table beyond EOD, truncated [ 3314.299504][T11582] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 18:41:35 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x6}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x94, &(0x7f00000001c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:35 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) 18:41:35 executing program 3: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', 0x0}) 18:41:35 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000001840)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}], 0x1, 0x0) [ 3314.380000][T11605] fuse: Bad value for 'fd' [ 3314.411455][T11605] fuse: Bad value for 'fd' 18:41:35 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0xb, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) 18:41:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xa4024, &(0x7f0000002640)=ANY=[]) [ 3314.511860][ T37] audit: type=1804 audit(1627152095.264:495356): pid=11614 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3405/cgroup.controllers" dev="sda1" ino=15810 res=1 errno=0 18:41:35 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0xfffffffffffffffc, 0x0) 18:41:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev}}}}) 18:41:35 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x0, 0x4, 0x0, &(0x7f0000001180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 3314.627835][ T37] audit: type=1800 audit(1627152095.264:495357): pid=11614 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=15810 res=0 errno=0 18:41:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:35 executing program 2: futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) 18:41:35 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time_for_children\x00') 18:41:35 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x1) [ 3314.762062][ T37] audit: type=1804 audit(1627152095.264:495358): pid=11609 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3405/cgroup.controllers" dev="sda1" ino=15810 res=1 errno=0 18:41:35 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x0, 0x0}) 18:41:35 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000001840)=[{&(0x7f0000001980)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32], 0x20}], 0x1, 0x0) 18:41:35 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @private1, @empty}}) 18:41:35 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x100000, &(0x7f0000000240)=@framed={{}, [@func]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0xc1, &(0x7f0000000300)=""/193, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:35 executing program 3: inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000002) 18:41:35 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0xa, 0x0, 0x0) 18:41:35 executing program 4: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'syztnl2\x00', 0x0}) 18:41:35 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x12, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 3315.161789][ T37] audit: type=1804 audit(1627152095.914:495359): pid=11641 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3406/cgroup.controllers" dev="sda1" ino=15838 res=1 errno=0 [ 3315.211279][T11641] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:36 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000001840)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000000000001"], 0x20}], 0x1, 0x0) 18:41:36 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x541b, &(0x7f0000000100)) 18:41:36 executing program 4: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}) 18:41:36 executing program 2: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000180)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-sse2\x00'}, 0x80) 18:41:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB='L'], 0x4c}, {&(0x7f0000002c40)=ANY=[], 0x1348}, {&(0x7f0000001340)={0x10}, 0x10}], 0x3}, 0x0) 18:41:36 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x1b, 0x0, 0x0) 18:41:36 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0x19, 0x0, 0x0) 18:41:36 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x94, &(0x7f00000001c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:36 executing program 3: fanotify_mark(0xffffffffffffffff, 0x84, 0x0, 0xffffffffffffffff, 0x0) 18:41:36 executing program 4: r0 = socket(0x11, 0x2, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:41:36 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@typedef={0x9}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000180)=""/164, 0x2e, 0xa4, 0x1}, 0x20) [ 3315.850015][ T37] audit: type=1804 audit(1627152096.604:495360): pid=11686 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3407/cgroup.controllers" dev="sda1" ino=14475 res=1 errno=0 [ 3315.887752][T11686] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:37 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x11, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 18:41:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000017c0)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001780)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001b00000329bd7000ffdbdf258bf7"], 0x4c}, {&(0x7f0000002c40)=ANY=[@ANYBLOB], 0x1348}, {&(0x7f0000001340)={0x10}, 0x10}], 0x3, 0x0, 0x0, 0x4000}, 0x0) 18:41:37 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x21, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 18:41:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=@deltaction={0x28, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x28}}, 0x0) 18:41:37 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000580)=""/4096) 18:41:37 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x42281, 0x0) 18:41:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000001a80)=0x15, 0x4) 18:41:37 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x1e, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 18:41:37 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x4020940d, 0x0) 18:41:37 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 18:41:37 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x2, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) [ 3316.924478][ T37] audit: type=1804 audit(1627152097.674:495361): pid=11723 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3408/cgroup.controllers" dev="sda1" ino=14507 res=1 errno=0 [ 3316.974272][T11719] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:38 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x0}) 18:41:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 18:41:38 executing program 2: socketpair(0x2, 0x0, 0x7fee, &(0x7f0000000080)) 18:41:38 executing program 4: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) 18:41:38 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x1d, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) [ 3317.381290][T11740] fuse: Bad value for 'fd' 18:41:38 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x81, &(0x7f0000000100)=""/129, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:38 executing program 0: socketpair(0x3e, 0x0, 0x0, &(0x7f0000000000)) [ 3317.404387][T11740] fuse: Bad value for 'fd' 18:41:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@deltaction={0x14, 0x31, 0x1}, 0x14}}, 0x0) 18:41:38 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 18:41:38 executing program 4: sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x93674a67ba1b2fcb) 18:41:38 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x3, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0xd) [ 3317.805091][ T37] audit: type=1804 audit(1627152098.554:495362): pid=11764 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3409/cgroup.controllers" dev="sda1" ino=15849 res=1 errno=0 [ 3317.821577][T11760] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:39 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x81, &(0x7f0000000100)=""/129, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x78) 18:41:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 18:41:39 executing program 2: futex(&(0x7f0000000100), 0x0, 0x2, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) 18:41:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x80, 0x0}}], 0x1, 0x0) 18:41:39 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x40084503, 0x0) 18:41:39 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)=0x5) 18:41:39 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0x94, &(0x7f00000001c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:39 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x4080, 0x0) 18:41:39 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1e, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:39 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1}}) 18:41:39 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x7, 0x94, &(0x7f00000001c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 3318.750329][ T37] audit: type=1804 audit(1627152099.504:495363): pid=11801 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3410/cgroup.controllers" dev="sda1" ino=15849 res=1 errno=0 [ 3318.784355][T11801] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:39 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x7, 0x94, &(0x7f00000001c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:39 executing program 1: r0 = socket(0x11, 0x2, 0x0) bind(r0, 0x0, 0x0) 18:41:39 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x17, 0x0, 0x0) 18:41:39 executing program 0: mq_open(&(0x7f0000000000)='&(\x00', 0x0, 0x0, 0x0) 18:41:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:39 executing program 4: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8008c4, &(0x7f0000000080)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) 18:41:40 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0x1a, 0x0, 0x0) [ 3319.232878][T11823] fuse: Bad value for 'fd' 18:41:40 executing program 0: socketpair(0x25, 0x3, 0x7, &(0x7f0000000000)) 18:41:40 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) getresgid(&(0x7f0000003100), &(0x7f0000003140), &(0x7f0000003180)) 18:41:40 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4003, &(0x7f0000000000)=@framed={{}, [@ldst]}, &(0x7f0000000080)='GPL\x00', 0x7, 0x94, &(0x7f00000001c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 3319.286899][T11823] fuse: Bad value for 'fd' 18:41:40 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x7, 0x94, &(0x7f00000001c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4}, 0x40) 18:41:40 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0xb, 0x4) 18:41:40 executing program 3: r0 = socket(0x11, 0x2, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 18:41:40 executing program 4: getresuid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) 18:41:40 executing program 1: r0 = socket(0x11, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000040)) [ 3319.650360][ T37] audit: type=1804 audit(1627152100.404:495364): pid=11847 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3411/cgroup.controllers" dev="sda1" ino=15866 res=1 errno=0 18:41:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:40 executing program 2: r0 = getpid() wait4(r0, 0x0, 0x0, &(0x7f00000001c0)) 18:41:40 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000340)={0x0, 0x1, 0x6, @multicast}, 0x10) 18:41:40 executing program 3: r0 = socket(0x11, 0x2, 0x0) sendmsg(r0, &(0x7f00000025c0)={&(0x7f0000002100)=@qipcrtr={0x2a, 0x4}, 0x80, &(0x7f0000002440)=[{0x0}, {&(0x7f0000002280)="d9", 0x1}], 0x2}, 0x0) 18:41:40 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0x4, 0x0, 0x0) 18:41:40 executing program 4: fanotify_mark(0xffffffffffffffff, 0x1, 0x1020, 0xffffffffffffffff, 0x0) [ 3319.732695][ T37] audit: type=1804 audit(1627152100.424:495365): pid=11845 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3411/cgroup.controllers" dev="sda1" ino=15866 res=1 errno=0 18:41:40 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x3}, 0x4) 18:41:40 executing program 3: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@ipv4, @mcast1, @remote}) 18:41:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xe0, 0x0, 0x1}, 0x40) 18:41:40 executing program 4: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 18:41:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x21, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:40 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1220c0, 0x0) [ 3320.253114][ T37] audit: type=1804 audit(1627152101.004:495366): pid=11877 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3412/cgroup.controllers" dev="sda1" ino=15862 res=1 errno=0 18:41:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:41 executing program 0: bpf$MAP_CREATE(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000001880), r0) 18:41:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x22d0008, &(0x7f0000001200)=ANY=[]) 18:41:41 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000200)=""/95) 18:41:41 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x9, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:41 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x6000, 0x0) 18:41:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@deltaction={0x24, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) 18:41:41 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1c}, 0x40) 18:41:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x40, 0x40, 0x800, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) 18:41:41 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x1c, 0x0, 0x0) 18:41:41 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f0000000200)=""/130, 0x2e, 0x82, 0x1}, 0x20) 18:41:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x5}, 0x40) 18:41:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='~'], 0x94}}, 0x0) 18:41:41 executing program 1: r0 = socket(0x11, 0x2, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) 18:41:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@gettaction={0x2c, 0x32, 0x0, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x10000}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x2c}}, 0x0) 18:41:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000a80)={&(0x7f0000000500)=@x25={0x9, @remote}, 0x80, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000600)=""/213, 0xd5}], 0x2, &(0x7f00000009c0)=""/174, 0xae}, 0x102) syz_genetlink_get_family_id$SEG6(&(0x7f0000001880), r0) 18:41:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x94, &(0x7f00000001c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:41 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000040)="a39c0ae7cc307e8417"}) 18:41:42 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:42 executing program 1: socket$inet6(0xa, 0x0, 0x69c) 18:41:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x94, &(0x7f00000001c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:42 executing program 0: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}) 18:41:42 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x94, &(0x7f00000001c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 3321.424576][T11941] fuse: Bad value for 'fd' [ 3321.450446][T11941] fuse: Bad value for 'fd' [ 3321.564815][ T37] audit: type=1804 audit(1627152102.314:495367): pid=11945 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3414/cgroup.controllers" dev="sda1" ino=15865 res=1 errno=0 18:41:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:42 executing program 4: perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 18:41:42 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x8c10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:42 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040), 0x8) 18:41:42 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000001400)='ns/mnt\x00') 18:41:42 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/163) 18:41:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x0) 18:41:42 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) 18:41:42 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) 18:41:42 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="1832000003763177e6562de5"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xc6, &(0x7f00000000c0)=""/198, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000c00), &(0x7f0000000c40)='./file0\x00', 0x0, 0x0, &(0x7f0000001240), 0x4008, &(0x7f0000001340)={[{@utf8no}]}) 18:41:42 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x1d, 0x0, 0x0) [ 3322.217457][T11975] FAT-fs (loop0): bogus number of reserved sectors [ 3322.233180][T11975] FAT-fs (loop0): Can't find a valid FAT filesystem [ 3322.318427][T11975] FAT-fs (loop0): bogus number of reserved sectors [ 3322.326219][T11975] FAT-fs (loop0): Can't find a valid FAT filesystem [ 3322.334191][ T37] audit: type=1804 audit(1627152103.084:495368): pid=11981 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3415/cgroup.controllers" dev="sda1" ino=15894 res=1 errno=0 [ 3322.413465][ T37] audit: type=1800 audit(1627152103.134:495369): pid=11981 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=15894 res=0 errno=0 18:41:43 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:43 executing program 4: syz_genetlink_get_family_id$tipc(0xfffffffffffffffe, 0xffffffffffffffff) 18:41:43 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x48}}, &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xc1, &(0x7f0000000300)=""/193, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={0x0}}, 0x0) 18:41:43 executing program 1: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty, 0x0, 0x7}}) [ 3322.466312][ T37] audit: type=1804 audit(1627152103.134:495370): pid=11978 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3415/cgroup.controllers" dev="sda1" ino=15894 res=1 errno=0 18:41:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x3, 0x0, 0x0) [ 3322.745343][ T37] audit: type=1804 audit(1627152103.494:495371): pid=11998 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3416/cgroup.controllers" dev="sda1" ino=15894 res=1 errno=0 18:41:43 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000340)=[{0x0, 0x0, 0x7}, {0x0, 0x0, 0x200}]) 18:41:43 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x9, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:43 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000240)=@framed={{}, [@func={0x85, 0x0, 0x3}]}, &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xc1, &(0x7f0000000300)=""/193, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:43 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) 18:41:43 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:41:43 executing program 1: r0 = socket(0x11, 0x2, 0x0) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10c8}, 0x0) [ 3323.170371][T12015] loop2: detected capacity change from 0 to 2 [ 3323.242156][T12015] Dev loop2: unable to read RDB block 2 [ 3323.250173][T12015] loop2: unable to read partition table [ 3323.282126][T12015] loop2: partition table beyond EOD, truncated [ 3323.298989][T12015] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 18:41:44 executing program 4: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) 18:41:44 executing program 3: bpf$MAP_CREATE(0xd, &(0x7f0000000000), 0x40) 18:41:44 executing program 0: syz_read_part_table(0xfffffffffffffffc, 0x3, &(0x7f0000000340)=[{&(0x7f0000000000)="434ccca8e6db3a3bea4b663c5ca3cb10bfbbab9d7e90c4579392f72ad927278c75cce2d08e087bbc1cb2df581c14b3435ae003131d12a936c04a7ec9b1e546753875de57d3fcd2ab47b3fda5eb6933a3d80cd7", 0x53}, {&(0x7f0000000080)="79b93f9376a43e9219ec5d114ff21680348cff5634e547f2384a2577d716288ab3c9522649a442bf015b97cbab9a8870b8a967c9c4a1cbb407d755775db460603a1a609da0aa72786a4e5f585fccf9bd7ff2a8bfc2dfc8845192824bcd4f63c9ba96c433eca2", 0x66}, {&(0x7f0000000280)="bffa8aa07b", 0x5, 0xfffffffffffffffe}]) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f00000003c0), &(0x7f0000000100)=0x80) 18:41:44 executing program 1: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000003c0)={'syztnl0\x00', 0x0}) 18:41:44 executing program 2: r0 = socket(0x11, 0x2, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 18:41:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) [ 3323.584171][T12032] loop0: detected capacity change from 0 to 264192 18:41:44 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x5452, &(0x7f0000000080)={0x0, 0x0, 0x0}) 18:41:44 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {}, {}, @rumble}) 18:41:44 executing program 2: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0xb, 0xfffffffffffffff8) [ 3323.710075][T12032] loop0: detected capacity change from 0 to 264192 18:41:44 executing program 1: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}) 18:41:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000004380)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc, &(0x7f0000004300)=[{&(0x7f00000000c0)={0xc4, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="1f51986fdcf55ca2518a4c9d7c93d859ebd5f531ffcde061108610d9e6f4eeade7d04ec14a2ef23d235dd36e39ff04be637ae34254f55467a95d84c94bac2f843108964cdfb74cd4f7646c5089784e47634b28b1cfa3443b254ab9fca2248b3aadc3605d3ca8b0e9ea19472079c8976bc4ce977f81d601d4bf23445625f10d32acd207e3c1f23bff8760ca8d5ec5da5098e870ab059c3c9e415ed8b066d2a46b48c74f88283d8e57f7"]}, 0xc4}, {&(0x7f00000001c0)={0x5b8, 0x0, 0x0, 0x0, 0x0, "", [@generic="21c3cabc8618157ac80cc8a1ec09cd83187488c53fbc758a84f0c30935abd2aba527db53f3813557ac9bb0ff1993efb226cdf0622d69c90ae77b0b66965edb9d60d2f56439053be8c6ef8f9ad2eab4e0504616204da9cf67438775f65838e76bc3f3a9b719d23cb01475e6a1732b548c90de7d466431c466089e13550927421c81df86a684af7900109c8d2421ecb9b9ce61dd50a093eb3e193b6fcad179da4b34f474f16f621e3ef63cf28763b4c14a3f8c4515d3fb9d441b879a921e16a2e03a277f7f30d0d85d5dc978d692cb3f380ade170d2f1e6bb98d795aedf8da4e08278b06226853a81b01dd797ad9dc", @generic="52eba865dac3bbe4d91289b7d08a7332519d6246feddc36819f2077be0f8900f86f5d7f0ff3a3dd85b85be52d8d0f046789e66c1abf1099c0fb9cd4c644e6129fdd011", @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}, @nested={0x329, 0x0, 0x0, 0x1, [@generic="de53587a1d19b27c664e1926af3d7ebb02e61dbf0e7fbede1e1506bf1d026de4c872af2554c93a7df65a51", @generic="4572ffebdacecf3b64d7e1365e0fae741628a5052affd73ff48b6e5cb3ee1871bf694c92274db245d193b91e7a4b", @generic="5fce39e1dc454030ac4d313460505ad2eec14ffef0bff8154f93988230f817e8624e0fbf5888167caf8fa932c1dc42e255b88652426336e1ee0efec89ea5a7f47d73936239c982c69050cceac892c1f956e11daf17b93fe55c9abdb99936cd0ef67b8064fd6f6929bfcfff67a152d1083fbe6b601fdd479c04d779769de496023fa295b2c165b54ad32f97f406146e782087e1a50e1fd93ecd446b36fb9fe2c3a5cd8b1414a47314eda6", @generic="b16b4a0b4ca21e1500352e2c457316ba13b90b02d3766ee3ffcaf549620fd910f4c8d5188af04e0218d6fe912a910b504a5b1ef899cddc3dfc39046ebf5d41c4a60c4fb48978fa8e38dd7bdd525eeb4dc003259fb992a8489b5c1539d6419370a32ec21622c1e399f6177de1c1c217d5d37bae5e7f9fcd4455f1bd7c5731abd839205a05e42e9665dd378f7cc02c3756e2c9fb9c241a63a2e2f7211f07496e92701e813fb1680854a82ca105868dbe722b468244956e62c4ebb4dc297821574bb84d6fee31a300e42e3f42871d99773d331e11404a9c826d4ffbb2569150d46495bee50a662d9b", @generic="5d65d50d106ee0f187fd65d9cc4e73fa9cfab21e7dbfb3706d37d71f29765aa251d855c0c7c1639263da1bd397f506ff706b05a0f8d50dec89fb484c14d5a4aabcfee572c9a75c5917374188c15f9b717068b19604e909d5c2f60499bed64004574b9c766857b7c4372d07e1f218a8ea59e22b6b859b8b3fbe2886d752b6c85a3a334fdd00b07310138b89d2e637633195733c12f3df0419eead4a596e9d7fbac99eb2b541594c5048000b0f2d6ea4d2c3fed9731b4fc7a132", @generic="6816e8b38adb3d8295646c1b7e4f7993454d94d9d9ee36baee0ecdfe354393945e22bd01046fc2fb515063a0afbefef0fb88faaaefd2314f5a54801673cac79cdee6a330eac1555aef790b", @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @generic="d947691b14f1868d595636b76bb7b48cc166e8b73b1c99e0846221d7bc6119936bd222457bf3743da30447e57b3ddc"]}, @typed={0x4}, @nested={0x12d, 0x0, 0x0, 0x1, [@generic="91a4cccd7b908219ad634a55f2fe20565e1ac301d084cf25f7f34ed6179e55412698549641929ef5ba5281bda39c4328edf57948299e7bd7d5ff0d62c3bf0547633d3a2212877b26966ad6842988fcf47ae8669c04d279059e654b1faf165dc5c1db52ed41ecdad6940472fded611cd1f239932f31a0115c2d3b6411bb9ab14e90c2897c5cb4e361d9b4137b7d5ca16ed38b70bea694ec9455d9c08a27affe68a63d1d7bb297e42b3ec1ddc550f10bc3ec60988cc8edc1a61c0f92f8f4d03cf03202e9b21eddd77dd9dd3b6a82ce570fb77001fbb0988bb8204ad9230c7fba4ff99538a5ac1cbe", @generic="70f0f99698b9e0d29b511992592ccf3733e95453f9a74759cf9ed3df77e5350adbd5d4f1d351a64515390452afab8f08069c2d47bee718c1ac27dceb57671bfdf3be"]}]}, 0x5b8}, {&(0x7f0000000780)={0xf0, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x4}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}, @generic="2d8d5c5eac313c3e1c82664aa6babb73f794916cfa85f7aca42e94db7829a60e51fe586edd1a3012e3c820dbb9beb1a31902faab8389002219b86edf4fc3e1e34d41277568a08e73a027597b16dc428106f3b1e96be62b8b2bffff001ff6b27236a097de3fda44c9a9601a11b1baaf8887411af5c8f53dcf15a379abac6f74b99daf8c735ab14ef08832ec5cd7aab75ac09226267d988613d04a77331707eef4696cc363310b8c5c8b0533077c22bc8ecc44708d68bd05032001ab2c7e4922664a"]}, 0xf0}, {&(0x7f0000000880)={0x758, 0x0, 0x0, 0x0, 0x0, "", [@generic="1e6f4bb0339e5ce7aefd3a8e8d9b2fcf9c472c612cf01c5c7f0f337d229931ab5f6c1c6843571da87bb5e35da3b4bc7e7f0e1a024974642b11fbae7345369249f7a1f32fb98a3e0fe268b6edffa5cda5bcd4dd976516248ccb2ebce08b37b7417e4e1a5b99e6c5e3f50b5b203b9eb77851b42462c9bd6066d9bb88adb7ed9eae4158c3a40597791bed897b5cd3d9134bebb4125b9b7bb39c34d1d8b745a644de6101a41c77f4a67652c0f55e43549ff75e8d51c34cbd11dde8cb7825", @generic="77cf241e1b4dd47645d2342951f5df6cce46a72de600639c14fb062fb814ae75ae161d9499e87855fdb53951d99b08ea4f8d4c499a8e9ee0784fc5d45c4362505524613fa3ce24fbabe2ba84f2a8a67e88c7f94420a106ef032dc4373fe1", @generic="d7a3e35aa8ebd8351e2c360f6879004da9522b5e8483a434dc009375e7836787de7c4cd78b59803476608c2ede6b73c9ba681fbda40f946f7df565cf0421deca7c2b03ad5e647b70be78cc86ec3fa3d588cff31c361bc82530111c71e8fecc44d5b061559e08d9e2cc246243682ae5323fae52489bb23ca7afc901a503e12b11a45a912c8cad5f7bbd0f8a9768e9bf47d80c852e1c9a0e5ee4310fb93f27a1e11fd4f5f252c05d393664e1556745725228b9900546d8ff7544d2541f046716", @nested={0xd, 0x0, 0x0, 0x1, [@generic="b7e9679c36b6c90ce6"]}, @generic="4d54a59adb00a7fbe87e271364ab9c7e149e22e27b4bdfd729e1f4462215d18be09c0feb4b2b2b50adfe91f53634405afc70088b30650ca160ac0bd9e14aab8031cfc4dca64a4a31861dffcfb61fb19c996d7095dd2cf7772befe16a1a9529bac7312891390618525b00f7436db784f36a33f07b12a98c309e7ac1fb80f1f6ee1f1deb0342a437367353c443db146ec025a47c4c53efb3aaca0333ebde7b97a779fb74dcd433dd0cd3dac21e1066b6014ad187e7e681f2f742b13a2ba979ef16", @nested={0x499, 0x0, 0x0, 0x1, [@generic="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"]}]}, 0x758}], 0x4}, 0x0) 18:41:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) 18:41:44 executing program 3: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x20, 0x22, 0xffffff1f}, 0x20}}, 0x0) 18:41:44 executing program 4: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:41:44 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xc1, &(0x7f0000000300)=""/193, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:41:44 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 18:41:44 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f00000015c0), 0x201, 0x0) 18:41:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:44 executing program 4: r0 = socket(0x11, 0x2, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xfffffffffffffe31, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 18:41:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000600)=""/213, 0xd5}, {0x0}], 0x3, &(0x7f00000009c0)=""/174, 0xae}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000001880), r0) 18:41:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x0, 0xfffffffe, 0x3, 0x1000}, 0x40) 18:41:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000001b80)={0xa, 0x2, 0x7fff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) 18:41:45 executing program 2: syz_open_dev$char_raw(&(0x7f0000000000), 0x1, 0x2a0800) 18:41:45 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0x8, 0x0, 0x0) 18:41:45 executing program 0: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) 18:41:45 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'sit0\x00', 0x0}) 18:41:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000a80)={&(0x7f0000000500)=@x25={0x9, @remote}, 0x80, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000600)=""/213, 0xd5}], 0x2, &(0x7f00000009c0)=""/174, 0xae}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000001880), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x880) 18:41:45 executing program 1: fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x4000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[0x0], 0x1}, 0x58) clone3(&(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:41:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227e, 0x0) [ 3324.574249][T12100] fuse: Bad value for 'fd' [ 3324.588974][ T37] audit: type=1804 audit(1627152105.344:495372): pid=12098 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3418/cgroup.controllers" dev="sda1" ino=15913 res=1 errno=0 [ 3324.619780][T12100] fuse: Bad value for 'fd' 18:41:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:45 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000080)={@dev, @broadcast, @val={@void}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast1, @loopback}, @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 18:41:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x20, 0x4) 18:41:45 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x5}]}) 18:41:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003580)=[@rights={{0x10}}], 0x10}, 0x0) [ 3324.717811][ T37] audit: type=1800 audit(1627152105.344:495373): pid=12098 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=15913 res=0 errno=0 18:41:45 executing program 1: fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x4000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[0x0], 0x1}, 0x58) clone3(&(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3324.827109][ T37] audit: type=1804 audit(1627152105.344:495374): pid=12095 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3418/cgroup.controllers" dev="sda1" ino=15913 res=1 errno=0 18:41:45 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{}, {}], 0x10) 18:41:45 executing program 2: prctl$PR_SET_MM_AUXV(0x19, 0xc, 0x0, 0x0) 18:41:45 executing program 0: prctl$PR_SET_MM_AUXV(0x39, 0xc, &(0x7f0000000100), 0x0) 18:41:45 executing program 4: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x6c, &(0x7f0000000100)={[0x1]}, 0x8) 18:41:45 executing program 1: fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x4000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[0x0], 0x1}, 0x58) clone3(&(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:41:45 executing program 2: pipe2(&(0x7f0000000140), 0x0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) [ 3325.317560][ T37] audit: type=1804 audit(1627152106.064:495375): pid=12150 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3419/cgroup.controllers" dev="sda1" ino=15123 res=1 errno=0 [ 3325.356801][T12150] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x31, 0x0, 0x0) 18:41:46 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x481) 18:41:46 executing program 0: socketpair(0x2, 0xa, 0x300, &(0x7f0000000100)) 18:41:46 executing program 2: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x16d682) 18:41:46 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xe, r0, 0x0, 0x0) 18:41:46 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_ident={0x2, 0x37f5a3ebe6e50d04}]}, 0x20}}, 0x0) 18:41:46 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f00000001c0)=""/149, 0xffffff8c) 18:41:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x19, 0x0, &(0x7f0000000380)) 18:41:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f00000000c0)=0x7, 0x4) 18:41:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227c, &(0x7f0000000080)) 18:41:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f00000002c0), 0x4) [ 3326.166323][ T37] audit: type=1804 audit(1627152106.914:495376): pid=12190 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3420/cgroup.controllers" dev="sda1" ino=14931 res=1 errno=0 [ 3326.211774][T12190] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:47 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe8000"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x22, 0x0, 0x0) 18:41:47 executing program 0: clone3(&(0x7f0000000380)={0x4000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000a40)=""/45, &(0x7f0000000a80)=[0x0], 0x1}, 0x58) clone3(&(0x7f0000000e40)={0x0, &(0x7f0000000b40), 0x0, &(0x7f0000000bc0), {}, 0x0, 0x0, &(0x7f0000000d00)=""/216, 0x0}, 0x58) 18:41:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x22, 0x0, &(0x7f0000000380)) 18:41:47 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000000)={&(0x7f0000001180)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 18:41:47 executing program 2: perf_event_open(&(0x7f0000000100)={0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:41:47 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 18:41:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x2284, &(0x7f0000000080)) 18:41:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000050000000800010000000002"], 0x1c}}, 0x0) 18:41:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x5411, &(0x7f0000000080)=@buf) 18:41:47 executing program 2: perf_event_open(&(0x7f0000000100)={0x7, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:41:47 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) [ 3326.909586][ T3262] ieee802154 phy0 wpan0: encryption failed: -22 [ 3326.915900][ T3262] ieee802154 phy1 wpan1: encryption failed: -22 [ 3327.082104][ T37] audit: type=1804 audit(1627152107.834:495377): pid=12227 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3421/cgroup.controllers" dev="sda1" ino=14180 res=1 errno=0 [ 3327.119752][T12227] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @dev, @multicast1}, 0xc) 18:41:48 executing program 1: r0 = getpgrp(0xffffffffffffffff) wait4(r0, 0x0, 0x0, 0x0) 18:41:48 executing program 2: perf_event_open(&(0x7f0000000100)={0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:41:48 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x1a, 0x0, &(0x7f0000000380)) 18:41:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe8000"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000001500)="37e74cebb7bb", 0x0, 0xfffffff5, 0x0, 0x0, 0x0}) 18:41:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x890b, &(0x7f0000000080)=@buf) 18:41:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a01050000000000000000000000000400048009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x90, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xda62}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x401}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfca}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x90}, 0x1, 0x0, 0x0, 0x48004}, 0x4000890) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000db88a4a64eab334100000a3c000000090ae7df00000000000000000000000008000540000000270900010073797a300000000008000a40000000000900020073797a310000000014000000110001000030118b0200000000000000"], 0x64}}, 0x0) 18:41:48 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 18:41:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) r3 = eventfd2(0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000001780)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) 18:41:48 executing program 3: ioperm(0x0, 0x4, 0x1) ioperm(0x0, 0x1, 0x0) 18:41:48 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000001140)={0xc}, 0xc) 18:41:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x802) ioctl$SG_SCSI_RESET(r0, 0x3, 0x0) 18:41:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a01050000000000000000000000000400048009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x90, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xda62}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x401}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfca}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x90}, 0x1, 0x0, 0x0, 0x48004}, 0x4000890) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000db88a4a64eab334100000a3c000000090ae7df00000000000000000000000008000540000000270900010073797a300000000008000a40000000000900020073797a310000000014000000110001000030118b0200000000000000"], 0x64}}, 0x0) 18:41:48 executing program 2: syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@dev, @local, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) 18:41:48 executing program 4: add_key$user(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x3}, &(0x7f00000006c0)="98", 0x1, 0xfffffffffffffffb) [ 3327.826207][T12272] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3327.914968][ T37] audit: type=1804 audit(1627152108.664:495378): pid=12276 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3422/cgroup.controllers" dev="sda1" ino=14324 res=1 errno=0 [ 3327.972274][T12271] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe8000"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000840)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000640)="7e160e8b4ed1", 0x0, 0x0, 0x0, 0x0, 0x0}) 18:41:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x7, 0x0, 0x0) 18:41:48 executing program 0: syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0x20301) 18:41:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x1276, 0x0) 18:41:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x87, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) pipe2(&(0x7f0000000140), 0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x1ffffffffffffe}]) 18:41:48 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x50) 18:41:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x14, 0x0, &(0x7f0000000380)) 18:41:48 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 18:41:48 executing program 4: prctl$PR_SET_MM_AUXV(0x1e, 0xc, 0x0, 0x0) 18:41:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r2, 0x2, &(0x7f0000001780)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0xfe, 0x5, 0x0, r0, 0x0}]) 18:41:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)={0x14, r2, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 3328.360407][T12302] block nbd0: shutting down sockets [ 3328.410353][T12312] nbd: must specify a device to reconfigure [ 3328.418198][ T37] audit: type=1804 audit(1627152109.164:495379): pid=12305 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3423/cgroup.controllers" dev="sda1" ino=14202 res=1 errno=0 [ 3328.419778][T12302] block nbd0: shutting down sockets [ 3328.471667][T12305] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:49 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:41:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x802) ioctl$SG_SCSI_RESET(r0, 0x2284, 0xc04a01) 18:41:49 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) getsockname(r0, 0x0, &(0x7f0000000980)) 18:41:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x2, 0x0, &(0x7f0000000380)) 18:41:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x3, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 3328.715934][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:41:49 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r0, &(0x7f0000000300)=""/154, 0x9a) 18:41:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 18:41:49 executing program 1: io_uring_setup(0x69b6, &(0x7f0000001fc0)) 18:41:49 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x3, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x98) 18:41:49 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf) 18:41:49 executing program 0: syz_io_uring_setup(0x4567, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3329.053621][ T37] audit: type=1804 audit(1627152109.804:495380): pid=12344 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3424/cgroup.controllers" dev="sda1" ino=14043 res=1 errno=0 [ 3329.082846][T12344] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x5, &(0x7f0000000000)={0x0, {{0x2, 0x0, @private}}}, 0x3) 18:41:50 executing program 2: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x6c, &(0x7f0000000100), 0x8) 18:41:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x17, 0x0, 0x0) 18:41:50 executing program 3: r0 = socket(0x11, 0x2, 0x0) clock_getres(0x0, &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x10000000) 18:41:50 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:50 executing program 0: mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x41, 0x0, @thr={0x0, 0x0}}) 18:41:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x5411, &(0x7f0000000080)=@buf={0xfffffe93}) 18:41:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8983, 0x0) 18:41:50 executing program 1: prctl$PR_SET_MM_AUXV(0x29, 0xc, 0x0, 0x0) 18:41:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 18:41:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a01050000000000000000000000000400048009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x27}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) 18:41:50 executing program 2: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:41:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x7, &(0x7f0000000000)={0x1, {{0x2, 0x0, @private}}}, 0x88) 18:41:50 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000001140), 0xc) 18:41:50 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000100)={0x4, 0x0, 0x8}, 0x0) 18:41:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 18:41:50 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:50 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}]}, 0x18}}, 0x0) 18:41:50 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x490002, 0x0) 18:41:50 executing program 3: add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000080)="4dbd", 0x2, 0xffffffffffffffff) 18:41:50 executing program 1: modify_ldt$write(0x1, &(0x7f0000000040), 0x10) modify_ldt$write(0xffffc90000000000, &(0x7f0000000300), 0x10) [ 3329.708302][ T37] audit: type=1804 audit(1627152110.454:495381): pid=12380 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3425/cgroup.controllers" dev="sda1" ino=14742 res=1 errno=0 18:41:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0xf8, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0x3, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xf8}}, 0x0) 18:41:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 18:41:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x11, 0x0, 0x0) 18:41:50 executing program 3: prctl$PR_SET_MM_AUXV(0x35, 0xc, &(0x7f0000000100)="a1", 0x1) 18:41:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x24, 0x0, 0x0) 18:41:50 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x5, r0, 0x0, 0xc) keyctl$read(0xb, r0, 0x0, 0x0) 18:41:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 3329.948956][T12400] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3329.989037][T12409] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3330.133490][ T37] audit: type=1804 audit(1627152110.884:495382): pid=12414 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3426/cgroup.controllers" dev="sda1" ino=14500 res=1 errno=0 [ 3330.185244][T12414] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:51 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:51 executing program 1: r0 = syz_io_uring_setup(0x352a, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000400)=[0xffffffffffffffff, r0], 0x2) 18:41:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x894c, 0x0) 18:41:51 executing program 3: prctl$PR_SET_MM_AUXV(0x1a, 0xc, 0x0, 0x0) 18:41:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000002c0)=0xf, 0x4) 18:41:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 18:41:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x3, 0x4) 18:41:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 18:41:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x802) ioctl$SG_SCSI_RESET(r0, 0x6, 0xd) 18:41:51 executing program 1: r0 = socket(0x11, 0x2, 0x0) accept4$alg(r0, 0x0, 0x0, 0x100000) 18:41:51 executing program 3: fsopen(&(0x7f0000001540)='proc\x00', 0x0) 18:41:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r2, 0x2, &(0x7f0000001780)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3, 0x0, r0, 0x0}]) [ 3330.766593][T12444] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3330.796608][T12444] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3331.013078][ T37] audit: type=1804 audit(1627152111.764:495383): pid=12454 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3427/cgroup.controllers" dev="sda1" ino=14835 res=1 errno=0 [ 3331.048580][T12454] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:52 executing program 0: prctl$PR_SET_MM_AUXV(0x34, 0xc, &(0x7f0000000100), 0x0) 18:41:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 18:41:52 executing program 2: prctl$PR_SET_MM_AUXV(0x29, 0xc, &(0x7f0000000100), 0x0) 18:41:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r2, 0x2, &(0x7f0000001780)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 18:41:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 18:41:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 18:41:52 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x2c, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, r0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) clone3(&(0x7f0000000380)={0x4000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000440), 0x4) clone3(&(0x7f0000000ac0)={0x0, &(0x7f0000000880), 0x0, &(0x7f0000000900), {}, &(0x7f0000000940)=""/241, 0xf1, 0x0, &(0x7f0000000a80)=[r1, 0x0], 0x2}, 0x58) getpgrp(0x0) clone3(&(0x7f0000000e40)={0x20080200, &(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0), {0x25}, &(0x7f0000000c00)=""/238, 0xee, &(0x7f0000000d00)=""/216, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) fanotify_mark(r0, 0x80, 0x48000003, 0xffffffffffffffff, &(0x7f0000000480)='./file1\x00') 18:41:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x15) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 18:41:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0453"], 0x14}}, 0x0) 18:41:52 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x0) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) 18:41:52 executing program 4: io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r0, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 18:41:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:52 executing program 0: r0 = socket(0x11, 0x2, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 18:41:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0xc, 0x0, &(0x7f0000000380)) 18:41:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0xc0189436, &(0x7f0000000040)) 18:41:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f0000001680)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3331.699005][ T37] audit: type=1804 audit(1627152112.444:495384): pid=12494 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3428/cgroup.controllers" dev="sda1" ino=14043 res=1 errno=0 18:41:52 executing program 4: io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r0, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 18:41:52 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:41:52 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xf, r0, 0x0, 0x0) 18:41:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x40049409, 0x3) 18:41:52 executing program 4: io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r0, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) [ 3331.971871][ T37] audit: type=1804 audit(1627152112.724:495385): pid=12512 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3429/cgroup.controllers" dev="sda1" ino=15251 res=1 errno=0 [ 3332.002341][T12512] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x21, 0x0, &(0x7f0000000380)) 18:41:52 executing program 2: syz_io_uring_setup(0x60ad, &(0x7f0000000200)={0x0, 0x4085}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) clone3(&(0x7f00000002c0)={0x10020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x58) 18:41:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) [ 3332.465147][ T37] audit: type=1804 audit(1627152113.214:495386): pid=12534 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3430/cgroup.controllers" dev="sda1" ino=15251 res=1 errno=0 [ 3332.494976][T12534] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:53 executing program 0: prctl$PR_SET_MM_AUXV(0x2f, 0xc, &(0x7f0000000100), 0x0) 18:41:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000840)={0x53, 0x0, 0x6, 0x7, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000640)="7e160e8b4ed1", 0x0, 0x0, 0x0, 0x0, 0x0}) 18:41:53 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 18:41:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x4, &(0x7f0000000000)={0x0, {{0x2, 0x0, @private}}}, 0x88) 18:41:53 executing program 2: socket$inet(0x2, 0x3, 0x7) 18:41:53 executing program 1: syz_io_uring_setup(0x352a, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x197b, &(0x7f0000000000), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 18:41:53 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="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", 0x133}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) 18:41:53 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 18:41:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:53 executing program 0: io_uring_setup(0x5bcb, &(0x7f0000000000)={0x0, 0x0, 0x2}) syz_io_uring_setup(0x4567, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 18:41:53 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 3332.972400][T12558] ptrace attach of "/root/syz-executor.3"[12557] was attempted by "/root/syz-executor.3"[12558] 18:41:53 executing program 1: fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) 18:41:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8982, &(0x7f0000000080)=@buf) 18:41:53 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000ec0), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x8000000) 18:41:53 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) 18:41:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1}, 0xc) 18:41:54 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 18:41:54 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) 18:41:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x8, &(0x7f0000000000)={0x1, {{0x2, 0x0, @private}}}, 0x88) 18:41:54 executing program 2: perf_event_open(&(0x7f0000000100)={0x8, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 3333.362746][ T37] audit: type=1804 audit(1627152114.114:495387): pid=12586 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3431/cgroup.controllers" dev="sda1" ino=15328 res=1 errno=0 18:41:54 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:54 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x2201, 0x0) 18:41:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002cc0)={{0x14}, [@NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x60}}, 0x0) 18:41:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0xc0481273, 0x0) 18:41:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0xb, 0x0, 0x0) [ 3333.473528][ T37] audit: type=1800 audit(1627152114.114:495388): pid=12586 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=15328 res=0 errno=0 18:41:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) io_setup(0x0, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 3333.530522][ T37] audit: type=1804 audit(1627152114.114:495389): pid=12580 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3431/cgroup.controllers" dev="sda1" ino=15328 res=1 errno=0 18:41:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x16, 0x0, &(0x7f0000000380)) 18:41:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a01050000000000000000000000000400048009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x27}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000000080)={{0x12}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) 18:41:54 executing program 0: pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x104000, 0xa, 0xffffffffffffffff) 18:41:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f00000000c0)=0x5, 0x4) 18:41:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) io_setup(0x0, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 18:41:54 executing program 1: syz_io_uring_setup(0x5a, &(0x7f0000000280), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000200)) [ 3333.891386][ T37] audit: type=1804 audit(1627152114.644:495390): pid=12609 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3432/cgroup.controllers" dev="sda1" ino=15328 res=1 errno=0 [ 3333.946176][T12609] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 18:41:54 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r2, 0x2, &(0x7f0000001780)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x3f000000}]) 18:41:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000040)={@multicast2, @loopback, @multicast2}, 0xc) 18:41:54 executing program 3: syz_open_dev$loop(&(0x7f0000000340), 0x0, 0x165c03) 18:41:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) io_setup(0x0, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 18:41:54 executing program 1: syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@dev, @local, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2, 0x2c00}}}}}}}}}, 0x0) 18:41:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8953, &(0x7f0000000040)) 18:41:54 executing program 1: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$read(0x5, r1, 0x0, 0x0) 18:41:54 executing program 3: prctl$PR_SET_MM_AUXV(0x21, 0xc, 0x0, 0x0) 18:41:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) io_setup(0xf8, 0x0) io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 18:41:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x20000190) 18:41:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc}]}], {0x14}}, 0x5c}}, 0x0) 18:41:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:55 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000140)={0xfffffffffffffffc, 0x0, 0x0}, 0x0) 18:41:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x1274, 0x0) 18:41:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) io_setup(0xf8, 0x0) io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 18:41:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x2270, &(0x7f0000000080)) 18:41:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x6, 0x0, 0x0) 18:41:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x7, 0x0, &(0x7f0000000380)) 18:41:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x2271, &(0x7f0000000080)) 18:41:55 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 18:41:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) io_setup(0xf8, 0x0) io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 18:41:55 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000000)=""/108, 0x6c}}, 0x120) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000001140), 0xc) 18:41:55 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 3334.821787][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3334.841025][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3334.858008][ T37] audit: type=1804 audit(1627152115.604:495391): pid=12666 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3434/cgroup.controllers" dev="sda1" ino=14692 res=1 errno=0 [ 3334.877683][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3334.905455][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3334.936118][T12666] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3334.936522][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3334.965365][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3334.973388][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3334.986788][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3334.997545][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.011942][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.023300][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.035283][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.045118][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.060547][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.082746][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.091282][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.102273][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.113303][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.121542][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 18:41:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 18:41:55 executing program 1: syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x882) 18:41:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) io_setup(0xf8, &(0x7f0000000300)) io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 18:41:55 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000006400), 0x0, 0x0) clone3(&(0x7f0000002400)={0x371224200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 18:41:55 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, &(0x7f00000002c0)) [ 3335.139210][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.146733][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.158090][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.168567][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.176039][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.206422][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 18:41:56 executing program 1: r0 = syz_io_uring_setup(0x54b8, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000040)) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1) 18:41:56 executing program 2: keyctl$read(0xc, 0x0, &(0x7f0000000300)=""/154, 0x9a) [ 3335.249538][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.284555][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 18:41:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000011c0), 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000040)) [ 3335.322965][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.344805][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 18:41:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) io_setup(0xf8, &(0x7f0000000300)) io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 3335.368061][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 18:41:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000004e1e7e"], 0x44}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) [ 3335.434384][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.474165][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.498002][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.513671][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.548198][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.566388][ T37] audit: type=1804 audit(1627152116.314:495392): pid=12702 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3435/cgroup.controllers" dev="sda1" ino=15335 res=1 errno=0 [ 3335.604866][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.630702][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.646408][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.655077][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.674591][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.722232][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.734319][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.743422][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.751658][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.759370][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.767583][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.775518][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.783386][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.802753][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.816741][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.824563][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.838631][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.846263][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.860109][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.869511][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.876979][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.884859][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.903959][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.922204][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.934690][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.942829][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.950959][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.958920][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.966395][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.974897][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.986398][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3335.997114][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.011543][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.022504][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.034311][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.045174][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.055955][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.066656][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.081466][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.092634][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.118116][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.126719][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.134513][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.142213][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.150279][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.157662][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.165343][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.173053][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.181358][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.189084][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.196476][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.238332][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.246194][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.268554][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.276152][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.308319][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.316095][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.338839][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.346353][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.391097][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.399075][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.406466][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.415358][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.423014][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.433502][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.442322][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.454127][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.462162][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.470146][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.477610][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.485713][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.493465][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.505149][ T2676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3336.526589][ T2676] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 3336.555917][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.567195][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.587003][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.597694][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.609715][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.617167][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.627522][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.638092][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.648657][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.656205][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.668522][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.675893][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.689360][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.696908][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.709472][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.717029][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.728339][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.735807][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.746376][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.754835][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.766758][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.775575][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.787445][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.795459][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.803068][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.810506][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.817880][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.825337][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.832978][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.840437][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.847834][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.855290][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.862944][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.870428][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.877828][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.885287][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.893134][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.900610][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.907991][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.915558][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.922999][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.930453][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.937834][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.945392][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.952898][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.960493][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.967957][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.975754][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.983373][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.991022][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3336.999173][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.006739][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.014338][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.021936][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.029528][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.037005][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.044651][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.052245][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.059991][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.067443][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.075256][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.082942][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.091397][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.099566][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.107036][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.114835][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.122581][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.130295][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.137779][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.145635][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.153999][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.161979][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.169797][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.177331][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.185342][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.193219][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.201759][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.209556][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.217069][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.224892][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.232721][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.241091][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.248938][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.256428][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.270061][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.278020][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.289737][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.297262][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.305525][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.313402][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.322102][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.334788][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.343718][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.354155][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.362609][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.374436][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.382897][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.395716][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.404039][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.417059][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.424577][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.432159][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.439617][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.447171][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.460214][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.467705][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.478932][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.486322][T30661] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3337.499651][T30661] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 18:41:58 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000100)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000000)=""/43, 0x2b}}, 0x120) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000240)={0xc}, 0xc) 18:41:58 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) move_pages(0x0, 0x20000047, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 18:41:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) io_setup(0xf8, &(0x7f0000000300)) io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 18:41:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, &(0x7f00000000c0)="c0", 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10) 18:41:58 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x301102, 0x0) syz_io_uring_setup(0x1241, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000000140), &(0x7f00000000c0)) 18:41:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000002) [ 3337.638587][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3337.646191][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 18:41:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000db88a4a64eab334100000a3c000000090ae7df00000000000000000000000008000540000000270900010073797a300000000008000a40000000000900020073797a31"], 0x64}}, 0x0) 18:41:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev}]}, 0x24}}, 0x0) [ 3337.715490][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 18:41:58 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r0, 0x0, 0x0) [ 3337.767346][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3337.794363][ T37] audit: type=1804 audit(1627152118.544:495393): pid=12753 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3436/cgroup.controllers" dev="sda1" ino=15344 res=1 errno=0 [ 3337.861734][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 18:41:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@rand_addr, @remote, @multicast2}, 0xc) 18:41:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000002) [ 3337.904850][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3337.944732][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 18:41:58 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0xa201) write$tun(r0, &(0x7f00000001c0)={@void, @void, @ipv6=@gre_packet={0x0, 0x6, "32f336", 0x44, 0x2f, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @empty}}}, 0xfffffdef) [ 3338.003806][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.051756][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.108476][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.115959][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.178342][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.185925][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.228303][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.235725][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.275162][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.300838][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.348435][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.356017][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.394148][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.416004][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.455785][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.490337][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.497840][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.564067][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.584498][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.619718][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.627301][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.668201][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.701199][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.730299][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.771960][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.792790][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.807874][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.828480][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.835983][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.867697][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.888195][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.896189][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.931988][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.952794][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.968120][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3338.988715][ T2676] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3339.013388][ T2676] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3339.044615][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.062624][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.088543][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.111891][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.136320][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.153157][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.168702][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.185543][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.201247][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.218048][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.240928][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.265788][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.289208][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.312352][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.326609][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.341915][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.358105][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.372551][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.387030][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.401985][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.416768][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.431206][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.445437][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.460834][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.475951][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.490362][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.497867][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.512875][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.528427][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.544029][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.561076][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.576891][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.592394][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.609159][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.624643][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.640556][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.655461][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.671100][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.686100][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.701556][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.715551][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.730412][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.737990][T30661] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3339.754483][T30661] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 18:42:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x15) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0xf8, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xc}}}]}, 0xf8}}, 0x0) [ 3339.957937][T12792] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3340.018678][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 18:42:01 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}]}, 0x38}}, 0x0) 18:42:01 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r0, 0x0, 0x0) 18:42:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x29, &(0x7f0000000000)={0x0, {{0x2, 0x0, @private}}}, 0x88) 18:42:01 executing program 2: add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x10, 0x0, 0x0, 0x0) 18:42:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000002) 18:42:01 executing program 1: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$khugepaged_scan(r0, 0x0, 0x0) 18:42:01 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x6, r0, 0x0, 0x0) 18:42:01 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, r1) 18:42:01 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0xa201) write$FUSE_ATTR(r0, &(0x7f0000000140)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) write$tun(r0, &(0x7f00000001c0)={@void, @void, @ipv6=@gre_packet={0x0, 0x6, "32f336", 0x45, 0x2f, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @empty}, {[], {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "ae"}}}}}, 0x6d) 18:42:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0xe0, 0x0, 0x0, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xf8}}, 0x0) 18:42:01 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r0, 0x0, 0x0) 18:42:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x1a, 0x0, 0x0) 18:42:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x18, 0x0, 0x4, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) 18:42:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x15, 0x0, &(0x7f0000000380)) [ 3341.282782][ T37] audit: type=1804 audit(1627152122.034:495394): pid=12809 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3438/cgroup.controllers" dev="sda1" ino=15312 res=1 errno=0 18:42:02 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000ec0), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x8000000) 18:42:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000002) 18:42:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x8, 0x4) 18:42:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)={0x1c, r2, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 18:42:02 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r0, 0x0, &(0x7f0000001780)) 18:42:02 executing program 2: syz_open_dev$sg(&(0x7f0000000040), 0x5, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x40049409, 0x3) 18:42:02 executing program 1: clone3(&(0x7f00000004c0)={0xc806200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x58) 18:42:02 executing program 3: r0 = socket(0x11, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 18:42:02 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0xa201) write$FUSE_ATTR(r0, &(0x7f0000000140)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) 18:42:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x3, 0x0, 0x0) 18:42:02 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r0, 0x0, &(0x7f0000001780)) 18:42:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8918, &(0x7f0000000080)=@buf) 18:42:02 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3}, {0x6}]}) 18:42:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000002) 18:42:02 executing program 2: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:42:02 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r0, 0x0, &(0x7f0000001780)) 18:42:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[], 0x14}}, 0x0) [ 3342.005090][ T37] audit: type=1326 audit(1627152122.754:495395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12862 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x0 18:42:02 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000001c0)=[{}, {}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 18:42:02 executing program 3: add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) 18:42:02 executing program 2: mmap$IORING_OFF_SQES(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0, 0x9a0f14b31b851cb8, 0xffffffffffffffff, 0x10000000) 18:42:02 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@loopback}]}, 0x38}}, 0x0) 18:42:03 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r0, 0x1, &(0x7f0000001780)=[0x0]) 18:42:03 executing program 0: modify_ldt$write(0xffffc90000000002, 0x0, 0x7) 18:42:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x12, 0x0, &(0x7f0000000380)) 18:42:03 executing program 2: socket(0x0, 0x100004, 0x0) 18:42:03 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000002) 18:42:03 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) clone(0x800200, &(0x7f0000000000)="e4eed7e48355926ec18f2b9fa13673a4fc76f4e8d3cb6e0580bd9fa84951c7dfefd5306156153158b0ca2169331f23c63629df9b4d4e53e5914e27e7bdb7a71e280ea76f856fd354e1595f9c80ecbe7d3cf84455d4f099e37502dacfe48e70c037d2000237e832164c14259a1fa480c2cc2801c45d76294ac6d2dfa7ef2e2f3fa8a7ee63ef2559ee2868f8668745ba507fc05ecc7beaccfda52fb61ff322e3af686ae1f6d6c448e2687184bf7e697268f6f336078f418d20153e13d2", 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="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", 0x133}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x1e) 18:42:03 executing program 0: add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 18:42:03 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r0, 0x1, &(0x7f0000001780)=[0x0]) 18:42:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x5421, &(0x7f0000000040)) 18:42:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r2, 0x2, &(0x7f0000001780)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0}]) 18:42:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000, 0x32, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/320, 0x140, 0x10000}, {&(0x7f0000010200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\a\x00'/32, 0x20, 0x10220}, {&(0x7f0000010300)="00000000000000000000000001000000000000e4000010000000000000004000000000000200000000000000000001000000000002000000000000000010000000100000001000000100000001000000000000000000100000000000d75eaab06fc243b288e5e7aed2214d5d00"/128, 0x80, 0x10320}, {&(0x7f0000010400)="000000000000000000000000105000000000000500000000000000001010000000000004000000000000000020500000000000050000000000000000005000000000000400000000000000007050000000000004000000000000000080500000000000040000000000000000000001000000000080000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f050000000000006000000000000000010100000000000040000000000000000c0500000000000060000000000000000d050000000000006000000000000000000510000000000060000000000000000b05000000000000600000000000000000000010000000000d0000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000005000000000000700000000000000001010000000000004000000000000000010500000000000070000000000000000d050000000000006000000000000000000510000000000060000000000000000b05000000000000600000000000000000000010000000000d0000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000505000000000000400000000000000001010000000000004000000000000000060500000000000040000000000000000005000000000000400000000000000007050000000000004000000000000000080500000000000040000000000000000000001000000000080000000000000010000", 0x276, 0x10b20}, {0x0, 0x0, 0x100000}, {&(0x7f0000010800)="000000000000000000000000000000001900000000000200000000000000000001000000000005000000000000000000010000000100001000000100010001000000000000000000690000000000d75eaab06fc243b288e5e7aed2214d5d00001900000000000200000000000000000001000000000005000000000000000000010000000100001000000100010001000000000000000000500000000000d75eaab06fc243b288e5e7aed2214d5d00004000000000000200000000000000000001000000000002000000000000000010000000100000001000000100000001000000000000000000100000000000d75eaab06fc243b288e5e7aed2214d5d010000000000000000000001000000000000720000000000001000000010000000100000000000000000000000000000000000000000000000000000000000000000d75eaab06fc243b288e5e7aed2214d5de76ed35274d74461bdaa670e3acfe92bcc53eb42c5623806a4559532ccc303f0dc36408756b265700804c4838ae10d83e76ed35274d74461bdaa670e3acfe92b00101000000000000100000000000001ab1d155a764b4f7ab0eb6522ab0a1a800400000000000000030000000000000004000000000100000000000000d80100000000000000390f0000620000000001000000000000e40000100000000000e90e0000500000000001000000000000e40000500000000000990e0000500000000001000000000000e40000690000000000490e0000500000000000000000", 0x22e, 0x100ea0}, {&(0x7f0000010b00)="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"/512, 0x200, 0x101ea0}, {&(0x7f0000010d00)="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", 0x140, 0x102f40}, {&(0x7f0000010f00)="000000000000000000000000000000000300000000000000000100000000000000001000000000000000400000000000ab1d155a764b4f7ab0eb6522ab0a1a8060cc6b6dce945a27dacfc093ed393f757b5720ee0ee7c3de3f7efdf479d4fc16e76ed35274d74461bdaa670e3acfe92b00401000000000000000000000000001ab1d155a764b4f7ab0eb6522ab0a1a8001000000000000000500000000000000", 0xa0, 0x103fc0}, {&(0x7f0000011000)="3355b0dd54c56c75cb4282d344c122dcc7dcd9790fe7b63ed8a88b2f80322740e76ed35274d74461bdaa670e3acfe92b00501000000000000000000000000001ab1d155a764b4f7ab0eb6522ab0a1a8001000000000000000700000000000000", 0x60, 0x105000}, {&(0x7f0000011100)="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", 0x1c0, 0x106000}, {&(0x7f0000011300)="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"/416, 0x1a0, 0x106f00}, {&(0x7f0000011500)}, {&(0x7f0000011700)="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", 0x100, 0x108f00}, {&(0x7f0000011800)="6f256587116197fdc1ae346056ebdf33da0ebe2dbac3ecfeedc3d2e9d4cb9e36e76ed35274d74461bdaa670e3acfe92b00005000000000000100000000000001ab1d155a764b4f7ab0eb6522ab0a1a80070000000000000001000000000000000a000000000200000000000000840000000000000000e40d0000b701000004000000000000008400000000000000002d0c0000b701000005000000000000000c06000000000000001c0c0000110000000500000000000000840000000000000000650a0000b70100000600000000000000010000000000000000c5090000a000000006000000000000000c0600000000000000b90900000c000000060000000000000054d2c2bf8d0000000094090000250000000700000000000000840000000000000000dd070000b7010000090000000000000084000000000000000026060000b7010000f7ffffffffffffff8400000000000000006f040000b701000000", 0x160, 0x500000}, {&(0x7f0000011a00)="0000000000000000000000000000000000000000040000000000000000010000000000000090500000000000000000000000000000100000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000400"/124, 0x7c, 0x500560}, {&(0x7f0000011b00)="00000000000000000000000400000000000000000000000000000000a050000000000000000000000000000010000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000040000000000", 0x60, 0x500720}, {&(0x7f0000011c00)="000001000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed410000000000000000", 0x40, 0x500840}, {&(0x7f0000011d00)="00000600000000000000000000000000000000b0500000000000000000000000000000100000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600"/96, 0x60, 0x5008e0}, {&(0x7f0000011e00)="00000000000000000000000000000000000000000000000000050000000000000084ffffffffffffffff0000000000000000000007000264656661756c74000000000000000002002e2e03000000000000000000000000000000000000000000000000100000000000000000000000000000010000000000000000000000ed41000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005cbc645f00000000000000005cbc645f00000000000000005cbc645f00000000000000005cbc645f000000000000000001000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed410000000000000000000000000080ffffffff00"/320, 0x140, 0x5009e0}, {&(0x7f0000012000)="000000000000000000000600000000000000000100000000000000d05000000000000000000000000000003000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000106000000000000005a8ee4e6eda54a729698a748ed73d196000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000005dbc645f0000000012d10c135cbc645f00"/211, 0xd3, 0x500b60}, {&(0x7f0000012100)="000000000000000000070064656661756c7401000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed41000000000000", 0x4e, 0x500c80}, {&(0x7f0000012200)="0000000000000000000000000000000000000600000000000000000000000000000000005100000000000000000000000000001000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000006000000000000", 0x68, 0x500d20}, {&(0x7f0000012300)="00000000000000000001000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed4100", 0x40, 0x500e40}, {&(0x7f0000012400)="0000000000000000000700000000000000000000000000000000105000000000000000000000000000001000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000007", 0x59, 0x500ee0}, {&(0x7f0000012500)="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", 0x1c0, 0x501000}, {&(0x7f0000012700)="0000010000000000000500000000000000010000000000000006000000000000000200000000000000b00400000000000000010000000000000006000000000000000200000000000000b00500000000000000010000000000000006000000000000000200000000000000b00500000000000000010000000000000006000000000000000200000000000000b00700000000000000010000000000000004000000000000000200000000000000b00900000000000000010000000000000004000000000000000200000000000000b0f7ffffffffffffff010000000000000006000000000000000200000000000000b00500000000000000010000000000000006000000000000000100000000000000b205000000000000000501000000000000000000000000000001000000010000000000000007000000000000000200000000000000b0020000000000000000c000000000000000010000000000000500000000000000010000000000000007000000000000000200000000000000b00100000000000000010000000000000004000000000000000200000000000000b00300000000000000001000000000000000010000000000000200000000", 0x1bd, 0x501e40}, {&(0x7f0000012b00)="000000000000000000000000000000000000000000000001000000000000050000000000000001000000000000000400000000000000000001000000000000050000000000", 0x45}, {&(0x7f0000012d00)="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"/574, 0x23e, 0x506000}, {&(0x7f0000013000)="0000000000000000000000000000000000000003010000000000000100000000000000000600000000000000000005000766696c653102010000000000000100000000000000000600000000000000000005000166696c653003010000000000000100000000000000000600000000000000000005000766696c653102010000000000000100000000000000000600000000000000000005000166696c65300200000000000000050066696c653006000000000000000600000000000000140000000000000000000000000000000000000000000000010000000000000000000000ed410000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000005dbc645f000000003e7e67125dbc645f000000003e7e67125dbc645f000000003e7e67125dbc645f000000003e7e671206010000000000000100000000000000000600000000000000000009000166696c652e636f6c6405010000000000000100000000000000000600000000000000000005000166696c653305010000000000000100000000000000000600000000000000000005000166696c653204010000000000000100000000000000000600000000000000000005000166696c653101010000000000000100000000000000000600000000000000000005000266696c653004010000000000000100000000000000000600000000000000000005000166696c653105010000000000000100000000000000000600000000000000000005000166696c653205010000000000000100000000000000000600000000000000000005000166696c653306010000000000000100000000000000000600000000000000000009000166696c652e636f6c6401010000000000000100000000000000000600000000000000000005000266696c6530000000000000000002002e2e030000000000000006000000000000003a0000000000000000100000000000000000000000000000010000000000000000000000ed41000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000005cbc645f00000000000000005dbc645f000000003e7e67125dbc645f000000003e7e67125cbc645f0000000000000000e1b494bdc4609b70d52b8e7087712cac82ff61cc521495b434717718b27acd19e76ed35274d74461bdaa670e3acfe92b00705000000000000100000000000001ab1d155a764b4f7ab0eb6522ab0a1a800400000000000000040000000000000003000000000100000000000000cc00001000000000006b0f0000300000000100000000000000cc00005000000000003b0f0000300000000100000000000000cc00006900000000000b0f000030", 0x40d, 0x506ca0}, {0x0}, {&(0x7f0000013600)="a35b4e402b90a7e2e376eea0fed72cc78dd79b8d33c24cbdd11b7bc8210f5920e76ed35274d74461bdaa670e3acfe92b00905000000000000100000000000001ab1d155a764b4f7ab0eb6522ab0a1a800400000000000000f7ffffffffffffff02000000000001000000000000010000000000000000fb0e0000a000000000010000000000000c0001000000000000ef0e00000c00"/158, 0x9e, 0x509000}, {&(0x7f0000013700)="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", 0x13b, 0x509f40}, {&(0x7f0000013900)="0000000000000000000000000000000000000000000000000500000000000000a0903a59e37f178020887974a8b304e63ce01f992418d596a0eebd4f418608c3e76ed35274d74461bdaa670e3acfe92b00b05000000000000100000000000001ab1d155a764b4f7ab0eb6522ab0a1a80060000000000000007000000000000000100000000f6ffffffffffffff8000305000000000003b0f000060", 0x9b, 0x50afe0}, {&(0x7f0000013a00)="686ede9288c391e7e05026e56f2f91bfd879987a040ea98445dabc76f55b8e5f686ede9288c391e7e05026e56f2f91bfd879987a040ea98445dabc76f55b8e5f686ede9288c391e7e05026e56f2f91bfd879987a040ea98445dabc76f55b8e5f11", 0x61, 0x50bfa0}, {&(0x7f0000013d00)="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", 0x260, 0x50ce40}, {&(0x7f0000014000)="63f1a32c0df153e7ed3c0ae7e95535e390bcc6c8552719e93c356b680a53cd58e76ed35274d74461bdaa670e3acfe92b00e05000000000000100000000000001ab1d155a764b4f7ab0eb6522ab0a1a800600000000000000050000000000000011000000000201000000000000010000000000000000fb0e0000a000000002010000000000000c0101000000000000ec0e00000f00000002010000000000006c0000000000000000bd0a00002f04000003010000000000000100000000000000001d0a0000a000000003010000000000000c01010000000000000e0a00000f00000003010000000000006c0000000000000000d30900003b000000040100000000000001000000000000000033090000a000000004010000000000000c0001000000000000240900000f00000004010000000000001822a8f12600000000f50800002f000000040100000000000018d65ba13500000000c60800002f00000004010000000000006c0000000000000000a70800001f000000050100000000000001000000000000000007080000a000000005010000000000000c0001000000000000e90700001e00000005010000000000006c0000000000000000b407000035000000060100000000000001000000000000000014070000a000000006010000000000000c0001000000000000010700001300000006010000000000006c00000000000000008806000079000000", 0x20e, 0x50e000}, {&(0x7f0000014300)="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", 0x930, 0x50e6e0}, {&(0x7f0000014e00)="0000000000000000000000000000000000000000040000000000000000010000000000000090500000000000000000000000000000100000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000400"/120, 0x78}, {0x0}, {0x0}, {&(0x7f0000015100)="00000600000000000000000000000000000000b0500000000000000000000000000000100000000000000000000000000000000000000000000001000000000000", 0x41}, {0x0}, {&(0x7f0000015400), 0x0, 0x50fb60}, {&(0x7f0000015500)}, {0x0}, {&(0x7f0000015700)="0000000000000000000100"/22, 0x16}, {&(0x7f0000015900)="0f6f97c25c4368e7dfb8b86809e72e75545111e729e1b07d342771aff13f6816e76ed35274d74461bdaa670e3acfe92b00005100000000000100000000000001ab1d155a764b4f7ab0eb6522ab0a1a800600000000000000040000000000000004000000000000000000000000f90100000000000000730f0000280000000100000000000000cc0000100000000000430f0000300000000100000000000000cc0000500000000000130f0000300000000100000000000000cc0000690000000000e30e0000300000", 0xc8, 0x510000}, {&(0x7f0000015a00)="00000000000000000300000000000000000100000000000000006900000000000000190000000000ab1d155a764b4f7ab0eb6522ab0a1a800300000000000000000100000000000000005000000000000000190000000000ab1d155a764b4f7ab0eb6522ab0a1a800300000000000000000100000000000000001000000000000000400000000000ab1d155a764b4f7ab0eb6522ab0a1a80", 0x98, 0x510f40}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000f5a287992dba88862fffe0498fb646c3eff89b3c136100dfe98591ab8712bd9f39f78884c0b7aa7de8bebc1148f9de391375e25aa81cf3bfd46bf14b10900c6a76d7e63d72ac4df4eae74afdfdafc713d4086"]) 18:42:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x13, 0x0, &(0x7f0000000380)) [ 3342.567141][T12902] ptrace attach of "/root/syz-executor.1"[12899] was attempted by "/root/syz-executor.1"[12902] 18:42:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x894b, &(0x7f0000000080)=@buf) 18:42:03 executing program 1: prctl$PR_SET_MM_AUXV(0x25, 0xc, 0x0, 0x0) 18:42:03 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r0, 0x1, &(0x7f0000001780)=[0x0]) 18:42:03 executing program 3: clock_gettime(0x9b7ca203b9c22430, 0x0) [ 3342.756723][T12914] loop0: detected capacity change from 0 to 32768 [ 3342.831043][T12914] BTRFS info (device loop0): disk space caching is enabled [ 3342.867027][T12914] BTRFS info (device loop0): has skinny extents [ 3342.892175][ T37] audit: type=1804 audit(1627152123.644:495396): pid=12915 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3441/cgroup.controllers" dev="sda1" ino=15352 res=1 errno=0 18:42:03 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x0) 18:42:03 executing program 2: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x3, 0x0) ioctl$RTC_SET_TIME(r0, 0x5452, &(0x7f0000000180)={0x7000000}) 18:42:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8902, &(0x7f0000000080)=@buf) 18:42:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) 18:42:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 3343.123137][T12914] BTRFS info (device loop0): enabling ssd optimizations 18:42:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3}}) 18:42:04 executing program 0: add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x7000000, 0xfffffffffffffff8) 18:42:04 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40003163) 18:42:04 executing program 1: syz_io_uring_setup(0x2352c, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 18:42:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 18:42:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x5460, 0x0) 18:42:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2, 0x0, 0x0) [ 3343.563192][ T37] audit: type=1804 audit(1627152124.314:495397): pid=12972 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3442/cgroup.controllers" dev="sda1" ino=15354 res=1 errno=0 18:42:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x0) 18:42:04 executing program 1: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x203000, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x8, 0x0) 18:42:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 18:42:04 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) 18:42:04 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x5452, &(0x7f0000000180)={0x7000007}) [ 3343.846975][T12987] [U] ^C 18:42:04 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r0, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 18:42:04 executing program 0: getresgid(&(0x7f0000000080), &(0x7f0000002180), &(0x7f00000021c0)) 18:42:04 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) 18:42:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x17, &(0x7f0000000000)=""/10, &(0x7f0000000040)=0xa) 18:42:04 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@upd={0xe0, 0x12, 0x1, 0x0, 0x0, {{'morus1280-generic\x00'}}}, 0xe0}}, 0x0) 18:42:04 executing program 0: prctl$PR_SET_MM_AUXV(0x16, 0xc, 0x0, 0x0) 18:42:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) [ 3344.087052][ T37] audit: type=1804 audit(1627152124.834:495398): pid=13008 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3443/cgroup.controllers" dev="sda1" ino=15945 res=1 errno=0 18:42:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000000000400800000000fe80000000000000000000000000000000000000000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}}, 0x0) sendfile(r3, r2, 0x0, 0x0) 18:42:04 executing program 2: syz_io_uring_setup(0x4567, &(0x7f0000000180)={0x0, 0xfffffffd, 0x8}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000240)) 18:42:05 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r0, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 18:42:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0)=0xfffffffc, 0x4) 18:42:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000100)) 18:42:05 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 18:42:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8981, 0x0) [ 3344.611362][ T37] audit: type=1804 audit(1627152125.364:495399): pid=13031 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293876878/syzkaller.ezCg24/3444/cgroup.controllers" dev="sda1" ino=15355 res=1 errno=0 18:42:05 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1}]}, 0x18}}, 0x0) 18:42:05 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r0, 0x1, &(0x7f0000001780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 18:42:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000011c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0xe6, &(0x7f0000000000)=""/230}, &(0x7f0000000100)="17b0a995384c", 0x0, 0x0, 0x0, 0x0, 0x0}) 18:42:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002cc0)={{0x14}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) 18:42:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0xf, 0x0, &(0x7f0000000380)) 18:42:05 executing program 5: getrusage(0x0, &(0x7f0000000000)) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 18:42:05 executing program 0: add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r0, 0x0, 0x0) 18:42:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) 18:42:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x4, 0x0, 0x7) 18:42:05 executing program 1: clone3(&(0x7f00000002c0)={0x10020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x58) 18:42:05 executing program 4: prctl$PR_SET_MM_AUXV(0x15, 0xc, 0x0, 0x0) 18:42:05 executing program 0: prctl$PR_SET_MM_AUXV(0x8, 0xc, 0x0, 0x0) 18:42:06 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000240)=@file={0x1, './file0/file0\x00'}, 0x6e) 18:42:06 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 18:42:06 executing program 2: perf_event_open(&(0x7f0000000100)={0x6, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:42:06 executing program 1: syz_io_uring_setup(0x6a5e, &(0x7f0000000240), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) 18:42:06 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x2}, 0x0) 18:42:06 executing program 0: prctl$PR_SET_MM_AUXV(0x7, 0xc, 0x0, 0x0) 18:42:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x802) ioctl$SG_SCSI_RESET(r0, 0x5, 0x0) 18:42:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x15) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x100, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x100}}, 0x0) 18:42:06 executing program 4: ioperm(0x0, 0x4, 0x1) ioperm(0x0, 0x1, 0x4) 18:42:06 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040), 0x4) 18:42:06 executing program 0: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f0000000140), 0x8) [ 3345.573433][T13083] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:42:06 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x14, &(0x7f0000000000)={0x1, {{0x2, 0x0, @private}}}, 0x88) [ 3345.614276][T13083] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3345.645104][T13089] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 18:42:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x18, 0x0, &(0x7f0000000380)) 18:42:06 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 18:42:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000005280)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 18:42:06 executing program 0: modify_ldt$write(0x1, &(0x7f0000000080)={0x1000}, 0x10) [ 3345.709857][T13094] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 18:42:06 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) 18:42:06 executing program 1: io_setup(0x3, &(0x7f0000000080)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 18:42:06 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000080)) 18:42:06 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x5411, &(0x7f0000000080)) 18:42:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000005280)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) [ 3346.000007][T13111] new mount options do not match the existing superblock, will be ignored 18:42:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev}]}, 0x24}}, 0x0) 18:42:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8907, 0x0) 18:42:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x802) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)="ffa0bb620776", 0x0, 0x0, 0x0, 0x0, 0x0}) 18:42:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a01050000000000000000000000000400048009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x27}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x2000000, &(0x7f0000002c40)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) 18:42:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x5452, &(0x7f0000000080)=@buf={0x7}) 18:42:07 executing program 3: io_setup(0x9, &(0x7f00000000c0)=0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 18:42:07 executing program 0: prctl$PR_SET_MM_AUXV(0x1c, 0xc, 0x0, 0x0) 18:42:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000280)) 18:42:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000140), 0x4) 18:42:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4) 18:42:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x541b, 0x0) 18:42:07 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x749183) select(0x40, &(0x7f0000000200), &(0x7f0000000240)={0x9}, 0x0, 0x0) 18:42:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 18:42:07 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) select(0x40, &(0x7f0000000200), &(0x7f0000000240)={0x9}, 0x0, 0x0) 18:42:07 executing program 2: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) fcntl$setstatus(r0, 0x4, 0x6800) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:42:07 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x28}, 0x300}, 0x0) 18:42:07 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) select(0x40, &(0x7f0000000200), &(0x7f0000000240)={0x9}, 0x0, 0x0) 18:42:07 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="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", 0x129}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0) clone(0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)="3ad54489588997823e863700f7a614a0ae3876d4e9d484a56970c5c228ee210e693e13bd5efcad0fa26c3dee8377d5d9745d4c702b917ea2f68bcf") ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x1e) 18:42:07 executing program 4: openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 18:42:07 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x32, 0x0, 0x0) 18:42:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0xb, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 3346.809578][T13162] ptrace attach of "/root/syz-executor.3"[13160] was attempted by "/root/syz-executor.3"[13162] 18:42:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) 18:42:07 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) select(0x40, &(0x7f0000000200), &(0x7f0000000240)={0x9}, 0x0, 0x0) 18:42:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000100)) 18:42:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x5c, 0x0, 0x0, 0x0, 0x24}, 0x40002024) 18:42:07 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:42:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0xc0189436, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000500)=""/4096}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:42:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x31, 0x0, &(0x7f0000000380)) 18:42:07 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) select(0x40, &(0x7f0000000200), &(0x7f0000000240)={0x9}, 0x0, 0x0) 18:42:07 executing program 0: syz_open_dev$vcsa(&(0x7f0000006400), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x86032, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x7e8f, &(0x7f0000000040)={0x0, 0x8569}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:42:07 executing program 2: perf_event_open(&(0x7f0000000100)={0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:42:07 executing program 4: add_key$user(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffc) 18:42:08 executing program 1: select(0x40, &(0x7f0000000200), &(0x7f0000000240)={0x9}, 0x0, 0x0) 18:42:08 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2}]}, 0x20}}, 0x0) 18:42:08 executing program 0: prctl$PR_SET_MM_AUXV(0x28, 0xc, 0x0, 0x0) 18:42:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x21, &(0x7f0000000000)={0x0, {{0x2, 0x0, @private}}}, 0x88) 18:42:08 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000600)={0x2, &(0x7f00000005c0)=[{}, {}]}) 18:42:08 executing program 1: select(0x40, &(0x7f0000000200), &(0x7f0000000240)={0x9}, 0x0, 0x0) 18:42:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5) 18:42:08 executing program 5: prctl$PR_SET_MM_AUXV(0x22, 0xc, 0x0, 0x0) 18:42:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xa6, &(0x7f00000000c0)=""/166}, &(0x7f0000000000)="6d538759af4e", 0x0, 0x0, 0x0, 0x0, 0x0}) 18:42:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000540)={'filter\x00', 0x4}, 0x68) 18:42:08 executing program 3: keyctl$update(0x2, 0x0, &(0x7f0000000140)="7f", 0x1) 18:42:08 executing program 1: select(0x40, &(0x7f0000000200), &(0x7f0000000240)={0x9}, 0x0, 0x0) 18:42:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, 0x0, 0x115}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r0) 18:42:08 executing program 2: prctl$PR_SET_MM_AUXV(0x1b, 0xc, 0x0, 0x0) 18:42:08 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0xf8, &(0x7f0000000300)=0x0) io_submit(r2, 0x2, &(0x7f0000001780)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 18:42:08 executing program 1: syz_open_dev$sg(0x0, 0x0, 0x0) select(0x40, &(0x7f0000000200), &(0x7f0000000240)={0x9}, 0x0, 0x0) 18:42:08 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000000280)={0x31000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, {0x7}, &(0x7f0000000100)=""/77, 0x4d, &(0x7f0000000180)=""/186, &(0x7f0000000240)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r0}}, 0x58) pidfd_send_signal(r2, 0x2c, &(0x7f0000000300)={0x2a, 0x6, 0x6b}, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x1000, r0, &(0x7f0000000000)='./file0\x00') setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000400)=0x1, 0x4) clone3(&(0x7f0000000380)={0x4000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_audit(0x10, 0x3, 0x9) clone3(&(0x7f0000000ac0)={0x0, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900), {0xf}, &(0x7f0000000940)=""/241, 0xf1, &(0x7f0000000a40)=""/45, &(0x7f0000000a80)=[r1, r1], 0x2}, 0x58) getpgrp(r4) clone3(&(0x7f0000000e40)={0x20080200, &(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0), {0x25}, &(0x7f0000000c00)=""/238, 0xee, &(0x7f0000000d00)=""/216, &(0x7f0000000e00)=[r3, 0xffffffffffffffff], 0x2}, 0x58) fanotify_mark(r0, 0x80, 0x48000003, 0xffffffffffffffff, &(0x7f0000000480)='./file1\x00') 18:42:08 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) keyctl$read(0xb, r0, &(0x7f0000000300)=""/154, 0x9a) 18:42:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x13, &(0x7f0000000000)={0x0, {{0x2, 0x0, @private}}}, 0x88) 18:42:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 18:42:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfffff469, 0x6, 0x0, 0x0}) 18:42:08 executing program 1: syz_open_dev$sg(0x0, 0x0, 0x0) select(0x40, &(0x7f0000000200), &(0x7f0000000240)={0x9}, 0x0, 0x0) 18:42:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0xa, 0x0, 0x0) 18:42:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000140)={@broadcast, @remote, @local}, 0xc) 18:42:08 executing program 4: prctl$PR_SET_MM_AUXV(0x24, 0xc, 0x0, 0x0) 18:42:09 executing program 1: syz_open_dev$sg(0x0, 0x0, 0x0) select(0x40, &(0x7f0000000200), &(0x7f0000000240)={0x9}, 0x0, 0x0) 18:42:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002cc0)={{0x14}, [@NFT_MSG_DELSETELEM={0x30, 0xe, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}}, 0x0) 18:42:09 executing program 3: add_key$user(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='*', 0x1, 0xffffffffffffffff) 18:42:09 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{}], 0x8) 18:42:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002cc0)={{0x14}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) 18:42:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227a, &(0x7f0000000080)) 18:42:09 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) select(0x0, 0x0, &(0x7f0000000240)={0x9}, 0x0, 0x0) 18:42:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002cc0)={{0x14}, [@NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "82"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) 18:42:09 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 18:42:09 executing program 4: add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)="da", 0x1, 0xfffffffffffffffb) 18:42:09 executing program 0: prctl$PR_SET_MM_AUXV(0xe, 0xc, 0x0, 0x0) 18:42:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002cc0)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) 18:42:09 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x37b7}, 0x0) 18:42:09 executing program 5: r0 = socket(0x10, 0x3, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) 18:42:09 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x4, r0, &(0x7f0000000300)=""/154, 0x9a) 18:42:09 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, &(0x7f0000000040)) 18:42:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8941, 0x0) 18:42:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x40) 18:42:10 executing program 0: modify_ldt$write(0x1, &(0x7f0000000000)={0x3ff}, 0x10) modify_ldt$write(0x1, &(0x7f0000000200), 0x10) 18:42:10 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) select(0x0, 0x0, &(0x7f0000000240)={0x9}, 0x0, 0x0) 18:42:10 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r0, 0x0, 0x0) 18:42:10 executing program 3: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000002, 0xffffffffffffffff) 18:42:10 executing program 5: syz_io_uring_setup(0x6abe, &(0x7f0000000000), &(0x7f0000003000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:42:10 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) keyctl$read(0xb, r0, 0x0, 0x0) 18:42:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000db88a4a64eab334100000a3c000000090ae7df00000000000000000000000008000540000000270900010073797a300000000008000a4000000000090002"], 0x64}}, 0x0) 18:42:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x8001, 0x1) ioctl$SG_SCSI_RESET(r0, 0x40049409, 0x3) 18:42:10 executing program 0: r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)="da", 0x1, 0xfffffffffffffffb) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, r0) 18:42:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000001440)) 18:42:10 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x84}, {0x6}]}) 18:42:10 executing program 4: r0 = syz_io_uring_setup(0x51c9, &(0x7f00000003c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000000c0)) r1 = socket$nl_audit(0x10, 0x3, 0x9) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r1], 0x1) 18:42:10 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x88, 0x2d, 0x0, 0x0) 18:42:10 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 3349.882119][ T37] audit: type=1326 audit(1627152130.634:495400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13332 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x0 18:42:11 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) select(0x0, 0x0, &(0x7f0000000240)={0x9}, 0x0, 0x0) 18:42:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x1267, &(0x7f0000000080)) 18:42:11 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000006400), 0x1, 0x0) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) 18:42:11 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x11, &(0x7f0000000000)={0x0, {{0x2, 0x0, @private}}}, 0x88) 18:42:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x29, 0x0, 0x0) 18:42:11 executing program 3: r0 = socket(0x11, 0x2, 0x0) clock_getres(0x0, &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) 18:42:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x8, 0x0, 0x0) 18:42:11 executing program 3: perf_event_open(&(0x7f0000000100)={0x8, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:42:11 executing program 2: syz_io_uring_setup(0x352a, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29ad, &(0x7f0000000140), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 18:42:11 executing program 0: modify_ldt$write(0x1, &(0x7f0000000040)={0x3ff}, 0x10) modify_ldt$write(0xffffc90000000000, &(0x7f0000000300), 0x10) 18:42:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8902, &(0x7f0000000080)=@req={0x28, &(0x7f0000000000)={'syz_tun\x00', @ifru_map}}) 18:42:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x10, &(0x7f0000000000)={0x0, {{0x2, 0x0, @private}}}, 0x88) 18:42:12 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) select(0x40, &(0x7f0000000200), 0x0, 0x0, 0x0) 18:42:12 executing program 2: add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffff8) 18:42:12 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 18:42:12 executing program 5: mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x1810, 0xffffffffffffffff, 0x0) 18:42:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x8, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) 18:42:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8934, 0x0) 18:42:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0xd, &(0x7f0000000000)={0x1, {{0x2, 0x0, @private}}}, 0x88) 18:42:12 executing program 4: socketpair(0x2, 0x0, 0x3e0, &(0x7f0000000100)) 18:42:12 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 18:42:12 executing program 3: mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) 18:42:12 executing program 0: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 18:42:12 executing program 5: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 18:42:13 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) select(0x40, &(0x7f0000000200), 0x0, 0x0, 0x0) 18:42:13 executing program 2: mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) 18:42:13 executing program 4: mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) 18:42:13 executing program 3: symlink(&(0x7f0000001200)='./file0\x00', &(0x7f0000000040)='.\x00') 18:42:13 executing program 0: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') mknod$loop(&(0x7f0000000080)='./file1\x00', 0x2000, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) 18:42:13 executing program 5: symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') open$dir(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) 18:42:13 executing program 0: symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x8) 18:42:13 executing program 2: symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 18:42:13 executing program 4: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7) 18:42:13 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) 18:42:13 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 18:42:13 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_freezer_state(r0, &(0x7f0000000000), 0x2, 0x0) 18:42:14 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) select(0x40, &(0x7f0000000200), 0x0, 0x0, 0x0) 18:42:14 executing program 4: mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 18:42:14 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) fcntl$lock(r0, 0x9, 0x0) 18:42:14 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000180)) 18:42:14 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_STATFS(r0, 0x0, 0x0) 18:42:14 executing program 5: openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) 18:42:14 executing program 2: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0) 18:42:14 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 18:42:14 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, 0x0, 0x0) 18:42:14 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) 18:42:14 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) 18:42:14 executing program 3: readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000003180)=""/227, 0xe3) 18:42:15 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) select(0x40, &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x0) 18:42:15 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp\x00') setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) 18:42:15 executing program 5: mknodat(0xffffffffffffffff, &(0x7f0000003cc0)='./file0\x00', 0x0, 0x0) 18:42:15 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) 18:42:15 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff}) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, 0x0, 0x0) 18:42:15 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 18:42:15 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) 18:42:15 executing program 4: timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) 18:42:15 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff}) openat$cgroup_type(r0, &(0x7f00000005c0), 0x2, 0x0) 18:42:15 executing program 0: openat$fuse(0xffffffffffffff9c, &(0x7f00000074c0), 0x2, 0x0) 18:42:15 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, 0x0, 0x0) 18:42:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 18:42:15 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) select(0x40, &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x0) 18:42:15 executing program 4: socket(0x0, 0x6556b7ed3428dff, 0x0) 18:42:15 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x349080, 0x0) 18:42:15 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000004ac0), 0x200400, 0x0) 18:42:15 executing program 2: openat$cgroup_type(0xffffffffffffffff, &(0x7f00000020c0), 0x2, 0x0) 18:42:15 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x800040, 0x0) 18:42:16 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp\x00') 18:42:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002740)) 18:42:16 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002300)='./cgroup/syz1\x00', 0x200002, 0x0) 18:42:16 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, 0x0) 18:42:16 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) 18:42:16 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 18:42:16 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) select(0x40, &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x0) 18:42:16 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_buf(r0, 0x0, 0x0, 0x0, 0x0) 18:42:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40) 18:42:16 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 18:42:16 executing program 4: syz_emit_ethernet(0x26, &(0x7f0000000040)={@random="5df64348a636", @local, @val, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "f0ed30af8a91dbe4"}}}}, 0x0) 18:42:16 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, 0x0) 18:42:17 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000200)) 18:42:17 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r0, 0x0, 0x0, 0x0) 18:42:17 executing program 2: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) 18:42:17 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 18:42:17 executing program 0: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 18:42:17 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff}) getsockname$unix(r0, 0x0, 0x0) 18:42:17 executing program 3: readlinkat(0xffffffffffffffff, &(0x7f0000003140)='./file0\x00', &(0x7f0000003180)=""/227, 0xe3) 18:42:17 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) 18:42:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={&(0x7f0000000040)=@abs, 0x6e, 0x0}, 0x0) 18:42:17 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000004d00), 0x383201, 0x0) 18:42:17 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x30100, 0x0) 18:42:17 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x109000, 0x0) 18:42:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002740)={0xffffffffffffffff}) bind$unix(r0, 0x0, 0x0) 18:42:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000363000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/36) 18:42:18 executing program 4: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) r2 = openat(0xffffffffffffffff, &(0x7f0000000640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@private0, @in6=@initdev}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xe8) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 18:42:18 executing program 3: poll(0x0, 0x0, 0xe5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000003c0)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clone(0x49104100, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 18:42:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f00000f8000/0x3000)=nil) lstat(&(0x7f0000000140)='.\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r2, 0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000340)={{0x1, 0x0, 0xffffffffffffffff, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 18:42:18 executing program 5: clone(0x38004100, 0x0, 0x0, 0x0, 0x0) semget(0x3, 0x2, 0x200) setitimer(0x0, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) semget(0x3, 0x7, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 18:42:18 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 18:42:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000000)={0xc}, 0x0, 0x0, 0x0) 18:42:18 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 18:42:18 executing program 0: clone(0x38004100, 0x0, 0x0, 0x0, 0x0) semget(0x1, 0x4, 0x204) semget(0x1, 0x0, 0x600) setitimer(0x0, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 18:42:18 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0xc0006300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') lseek(r1, 0x0, 0x2) pwrite64(r1, 0x0, 0x0, 0x100000004) clone(0x6900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setrlimit(0x0, &(0x7f0000000080)) clone(0x4100, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() prlimit64(0x0, 0x0, &(0x7f0000000180)={0x0, 0x100}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 18:42:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x4100, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000019e000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) clone(0x844640, &(0x7f00000001c0), 0x0, 0x0, 0x0) 18:42:18 executing program 0: clone(0xc0006300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000040)={0x0, 0x200000000000100}, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) getsockname$packet(r1, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 18:42:18 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="5a1400001a0025f00485bc04fef7001d0a0b49ff708800008003280008020100fe8000000000000036ede498534108e58342fa94a235a2a441f9", 0xfcae) 18:42:18 executing program 4: r0 = syz_io_uring_setup(0x7b4a, &(0x7f0000000240), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000729000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3a28, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 18:42:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0xc9, 0x0) ioctl$BLKDISCARD(r0, 0x1261, 0x0) 18:42:18 executing program 1: r0 = fork() r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2401, 0x0) 18:42:18 executing program 3: r0 = fork() wait4(0x0, 0x0, 0x20000000, 0x0) tkill(r0, 0x25) 18:42:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0xc9, 0x0) ioctl$BLKDISCARD(r1, 0x1261, 0x0) [ 3358.081875][T13784] netlink: 4662 bytes leftover after parsing attributes in process `syz-executor.5'. 18:42:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@timestamp], 0x18835372) setsockopt$sock_cred(r0, 0x1, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffff}, 0xc) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x9, 0x0, &(0x7f0000000080)) 18:42:19 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) 18:42:19 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0xc008240a, 0x0) 18:42:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:42:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 18:42:22 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) write$tcp_congestion(r0, &(0x7f0000000140)='illinois\x00', 0x3fffff) 18:42:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:42:22 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2401, 0x0) 18:42:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:42:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:42:22 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0xc9, 0x82801) fallocate(r0, 0x11, 0x2000, 0x100007e00) 18:42:22 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000140)='illinois\x00', 0x3fffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x0) 18:42:23 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000001c0)='htcp\x00', 0x2) 18:42:23 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:42:23 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0xc9, 0x82801) ioctl$BLKDISCARD(r0, 0x127d, &(0x7f0000000040)=0x2000) 18:42:23 executing program 1: perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41d2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 18:42:23 executing program 5: socketpair(0x10, 0x0, 0x14, &(0x7f0000000180)) 18:42:23 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x40082406, 0x0) 18:42:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x2, 0x3}]}}}], 0x18}, 0x0) 18:42:23 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0xc9, 0x82801) ioctl$BLKDISCARD(r0, 0x127d, &(0x7f0000000040)=0x2000) 18:42:23 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0xc9, 0x82801) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0x2000000) 18:42:23 executing program 0: perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 18:42:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:42:24 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='+]\x00') 18:42:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@timestamp], 0x18835372) setsockopt$sock_cred(r0, 0x1, 0x19, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x9, 0x0, &(0x7f0000000080)) 18:42:24 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0xc9, 0x82801) ioctl$BLKDISCARD(r0, 0x127d, &(0x7f0000000040)=0x2000) 18:42:24 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x20, 0x2) write$evdev(r0, &(0x7f00000001c0)=[{{}, 0x4, 0xac}, {{}, 0x11, 0xfff}], 0x30) 18:42:24 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11b11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 18:42:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:42:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 18:42:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x24}}, 0x0) io_uring_enter(r1, 0x911, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0100000008f04300"}) 18:42:24 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0xc9, 0x82801) ioctl$BLKDISCARD(r0, 0x127d, &(0x7f0000000040)=0x2000) 18:42:24 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2401, 0xe7) 18:42:24 executing program 3: keyctl$read(0x15, 0x0, 0x0, 0x0) 18:42:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fstat(r0, &(0x7f0000001100)) 18:42:24 executing program 1: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000140)='illinois\x00', 0x3fffff) [ 3363.643422][T13903] ------------[ cut here ]------------ [ 3363.651023][T13903] WARNING: CPU: 0 PID: 13903 at fs/io_uring.c:1535 io_poll_double_wake+0x4fb/0x760 [ 3363.660310][T13903] Modules linked in: [ 3363.664197][T13903] CPU: 0 PID: 13903 Comm: syz-executor.0 Not tainted 5.14.0-rc2-syzkaller #0 [ 3363.673131][T13903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3363.683188][T13903] RIP: 0010:io_poll_double_wake+0x4fb/0x760 [ 3363.689190][T13903] Code: d9 db ff f0 41 ff 4c 24 5c 0f 94 c3 31 ff 89 de e8 aa ba 95 ff 84 db b8 01 00 00 00 0f 84 6f fc ff ff 89 04 24 e8 55 b4 95 ff <0f> 0b 8b 04 24 e9 5d fc ff ff e8 46 b4 95 ff 4c 89 e5 e9 a1 fb ff [ 3363.709160][T13903] RSP: 0018:ffffc9000c58f830 EFLAGS: 00010016 [ 3363.715231][T13903] RAX: 00000000000097fa RBX: 0000000000000001 RCX: ffffc900018d1000 [ 3363.723378][T13903] RDX: 0000000000040000 RSI: ffffffff81dfd47b RDI: 0000000000000003 [ 3363.731519][T13903] RBP: ffff88806ab8991c R08: 0000000000000001 R09: 0000000000000001 [ 3363.739484][T13903] R10: ffffffff81dfd466 R11: 0000000000000000 R12: ffff88806ab898c0 [ 3363.747449][T13903] R13: 0000000000000000 R14: ffff88806ab898f0 R15: ffff888018c2f3a0 [ 3363.755417][T13903] FS: 00007f6af08b0700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 3363.764342][T13903] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3363.770921][T13903] CR2: 000000002000c000 CR3: 000000001697f000 CR4: 0000000000350ef0 [ 3363.778885][T13903] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3363.786849][T13903] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 3363.794812][T13903] Call Trace: [ 3363.798089][T13903] __wake_up_common+0x147/0x650 [ 3363.803119][T13903] __wake_up_common_lock+0xd0/0x130 [ 3363.808315][T13903] ? __wake_up_common+0x650/0x650 [ 3363.813342][T13903] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 3363.819149][T13903] n_tty_set_termios+0x73a/0x1010 [ 3363.824176][T13903] ? n_tty_receive_buf+0x40/0x40 [ 3363.829113][T13903] tty_set_termios+0x650/0x910 [ 3363.833883][T13903] ? tty_wait_until_sent+0x530/0x530 [ 3363.839340][T13903] ? lock_downgrade+0x6e0/0x6e0 [ 3363.844184][T13903] ? up_write+0x191/0x560 [ 3363.848514][T13903] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 3363.854756][T13903] ? n_tty_check_unthrottle+0x440/0x440 [ 3363.860303][T13903] set_termios.part.0+0x30e/0x530 [ 3363.865333][T13903] ? tty_termios_hw_change+0x1e0/0x1e0 [ 3363.870799][T13903] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 3363.877056][T13903] tty_mode_ioctl+0x9f1/0xe70 [ 3363.881741][T13903] ? set_termios.part.0+0x530/0x530 [ 3363.886938][T13903] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3363.893176][T13903] ? __ldsem_down_read_nested+0xcb/0x850 [ 3363.898814][T13903] ? __ldsem_down_read_nested+0xdc/0x850 [ 3363.904453][T13903] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 3363.910706][T13903] ? tomoyo_path_number_perm+0x24e/0x590 [ 3363.916344][T13903] ? __ldsem_wake_readers+0x3c0/0x3c0 [ 3363.921726][T13903] n_tty_ioctl_helper+0x53/0x2d0 [ 3363.926667][T13903] n_tty_ioctl+0x56/0x370 [ 3363.931004][T13903] tty_ioctl+0xef9/0x1600 [ 3363.935331][T13903] ? n_tty_flush_buffer+0x230/0x230 [ 3363.940533][T13903] ? tty_lookup_driver+0x550/0x550 [ 3363.945643][T13903] ? lock_downgrade+0x6e0/0x6e0 [ 3363.950493][T13903] ? __fget_files+0x23d/0x3e0 [ 3363.955169][T13903] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3363.961405][T13903] ? tty_lookup_driver+0x550/0x550 [ 3363.966523][T13903] __x64_sys_ioctl+0x193/0x200 [ 3363.971372][T13903] do_syscall_64+0x35/0xb0 [ 3363.975785][T13903] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3363.981679][T13903] RIP: 0033:0x4665e9 [ 3363.985565][T13903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3364.005268][T13903] RSP: 002b:00007f6af08b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3364.013681][T13903] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 3364.021642][T13903] RDX: 00000000200001c0 RSI: 0000000000005408 RDI: 0000000000000003 [ 3364.029602][T13903] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3364.037567][T13903] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3364.045528][T13903] R13: 00007ffc82be390f R14: 00007f6af08b0300 R15: 0000000000022000 [ 3364.053504][T13903] Kernel panic - not syncing: panic_on_warn set ... [ 3364.060074][T13903] CPU: 0 PID: 13903 Comm: syz-executor.0 Not tainted 5.14.0-rc2-syzkaller #0 [ 3364.068828][T13903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3364.078873][T13903] Call Trace: [ 3364.082142][T13903] dump_stack_lvl+0xcd/0x134 [ 3364.086735][T13903] panic+0x306/0x73d [ 3364.090629][T13903] ? __warn_printk+0xf3/0xf3 [ 3364.095441][T13903] ? __warn.cold+0x1a/0x44 [ 3364.099857][T13903] ? io_poll_double_wake+0x4fb/0x760 [ 3364.105139][T13903] __warn.cold+0x35/0x44 [ 3364.109379][T13903] ? io_poll_double_wake+0x4fb/0x760 [ 3364.114663][T13903] report_bug+0x1bd/0x210 [ 3364.118989][T13903] handle_bug+0x3c/0x60 [ 3364.123141][T13903] exc_invalid_op+0x14/0x40 [ 3364.127643][T13903] asm_exc_invalid_op+0x12/0x20 [ 3364.132494][T13903] RIP: 0010:io_poll_double_wake+0x4fb/0x760 [ 3364.138397][T13903] Code: d9 db ff f0 41 ff 4c 24 5c 0f 94 c3 31 ff 89 de e8 aa ba 95 ff 84 db b8 01 00 00 00 0f 84 6f fc ff ff 89 04 24 e8 55 b4 95 ff <0f> 0b 8b 04 24 e9 5d fc ff ff e8 46 b4 95 ff 4c 89 e5 e9 a1 fb ff [ 3364.158005][T13903] RSP: 0018:ffffc9000c58f830 EFLAGS: 00010016 [ 3364.164070][T13903] RAX: 00000000000097fa RBX: 0000000000000001 RCX: ffffc900018d1000 [ 3364.172035][T13903] RDX: 0000000000040000 RSI: ffffffff81dfd47b RDI: 0000000000000003 [ 3364.180001][T13903] RBP: ffff88806ab8991c R08: 0000000000000001 R09: 0000000000000001 [ 3364.187966][T13903] R10: ffffffff81dfd466 R11: 0000000000000000 R12: ffff88806ab898c0 [ 3364.195927][T13903] R13: 0000000000000000 R14: ffff88806ab898f0 R15: ffff888018c2f3a0 [ 3364.203896][T13903] ? io_poll_double_wake+0x4e6/0x760 [ 3364.209187][T13903] ? io_poll_double_wake+0x4fb/0x760 [ 3364.214474][T13903] __wake_up_common+0x147/0x650 [ 3364.219328][T13903] __wake_up_common_lock+0xd0/0x130 [ 3364.224531][T13903] ? __wake_up_common+0x650/0x650 [ 3364.229561][T13903] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 3364.235379][T13903] n_tty_set_termios+0x73a/0x1010 [ 3364.240416][T13903] ? n_tty_receive_buf+0x40/0x40 18:42:25 executing program 5: r0 = fork() pidfd_open(r0, 0x0) pselect6(0x40, &(0x7f00000003c0), &(0x7f0000000400)={0x8}, 0x0, &(0x7f0000000480)={0x0, 0x989680}, 0x0) 18:42:25 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x40042408, 0x0) 18:42:25 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) [ 3364.245364][T13903] tty_set_termios+0x650/0x910 [ 3364.250135][T13903] ? tty_wait_until_sent+0x530/0x530 [ 3364.255425][T13903] ? lock_downgrade+0x6e0/0x6e0 [ 3364.260284][T13903] ? up_write+0x191/0x560 [ 3364.264621][T13903] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 3364.270871][T13903] ? n_tty_check_unthrottle+0x440/0x440 [ 3364.276418][T13903] set_termios.part.0+0x30e/0x530 [ 3364.281447][T13903] ? tty_termios_hw_change+0x1e0/0x1e0 [ 3364.286912][T13903] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 3364.292805][T13903] tty_mode_ioctl+0x9f1/0xe70 [ 3364.297488][T13903] ? set_termios.part.0+0x530/0x530 [ 3364.302697][T13903] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3364.308941][T13903] ? __ldsem_down_read_nested+0xcb/0x850 [ 3364.314573][T13903] ? __ldsem_down_read_nested+0xdc/0x850 [ 3364.320204][T13903] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 3364.326443][T13903] ? tomoyo_path_number_perm+0x24e/0x590 [ 3364.332073][T13903] ? __ldsem_wake_readers+0x3c0/0x3c0 [ 3364.337541][T13903] n_tty_ioctl_helper+0x53/0x2d0 [ 3364.342492][T13903] n_tty_ioctl+0x56/0x370 [ 3364.346835][T13903] tty_ioctl+0xef9/0x1600 [ 3364.351177][T13903] ? n_tty_flush_buffer+0x230/0x230 [ 3364.356383][T13903] ? tty_lookup_driver+0x550/0x550 [ 3364.361505][T13903] ? lock_downgrade+0x6e0/0x6e0 [ 3364.366363][T13903] ? __fget_files+0x23d/0x3e0 [ 3364.371041][T13903] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3364.377367][T13903] ? tty_lookup_driver+0x550/0x550 [ 3364.382481][T13903] __x64_sys_ioctl+0x193/0x200 [ 3364.387248][T13903] do_syscall_64+0x35/0xb0 [ 3364.392361][T13903] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3364.398345][T13903] RIP: 0033:0x4665e9 [ 3364.402237][T13903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3364.421854][T13903] RSP: 002b:00007f6af08b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3364.430268][T13903] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 3364.438237][T13903] RDX: 00000000200001c0 RSI: 0000000000005408 RDI: 0000000000000003 [ 3364.446204][T13903] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3364.454169][T13903] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3364.462135][T13903] R13: 00007ffc82be390f R14: 00007f6af08b0300 R15: 0000000000022000 [ 3364.470111][T13903] [ 3364.470120][T13903] ====================================================== [ 3364.470128][T13903] WARNING: possible circular locking dependency detected [ 3364.470136][T13903] 5.14.0-rc2-syzkaller #0 Not tainted [ 3364.470142][T13903] ------------------------------------------------------ [ 3364.470150][T13903] syz-executor.0/13903 is trying to acquire lock: [ 3364.470156][T13903] ffffffff8b88a6e0 (console_owner){-.-.}-{0:0}, at: console_unlock+0x2e6/0xc40 [ 3364.470181][T13903] [ 3364.470186][T13903] but task is already holding lock: [ 3364.470191][T13903] ffff888098a47528 (&tty->write_wait){-.-.}-{2:2}, at: __wake_up_common_lock+0xb4/0x130 [ 3364.470214][T13903] [ 3364.470219][T13903] which lock already depends on the new lock. [ 3364.470224][T13903] [ 3364.470228][T13903] [ 3364.470232][T13903] the existing dependency chain (in reverse order) is: [ 3364.470238][T13903] [ 3364.470242][T13903] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 3364.470261][T13903] _raw_spin_lock_irqsave+0x39/0x50 [ 3364.470268][T13903] __wake_up_common_lock+0xb4/0x130 [ 3364.470274][T13903] tty_port_default_wakeup+0x26/0x40 [ 3364.470280][T13903] serial8250_tx_chars+0x4f3/0xad0 [ 3364.470286][T13903] serial8250_handle_irq.part.0+0x305/0x3a0 [ 3364.470293][T13903] serial8250_default_handle_irq+0xb2/0x220 [ 3364.470300][T13903] serial8250_interrupt+0xfd/0x200 [ 3364.470306][T13903] __handle_irq_event_percpu+0x303/0x8f0 [ 3364.470313][T13903] handle_irq_event+0x102/0x280 [ 3364.470319][T13903] handle_edge_irq+0x25f/0xd00 [ 3364.470325][T13903] __common_interrupt+0x9d/0x210 [ 3364.470331][T13903] common_interrupt+0x9f/0xd0 [ 3364.470337][T13903] asm_common_interrupt+0x1e/0x40 [ 3364.470343][T13903] _raw_spin_unlock_irqrestore+0x38/0x70 [ 3364.470349][T13903] uart_write+0x30d/0x570 [ 3364.470354][T13903] do_output_char+0x5de/0x850 [ 3364.470360][T13903] n_tty_write+0x4c3/0xfd0 [ 3364.470366][T13903] file_tty_write.constprop.0+0x526/0x910 [ 3364.470373][T13903] redirected_tty_write+0xa1/0xc0 [ 3364.470379][T13903] do_iter_readv_writev+0x46f/0x740 [ 3364.470385][T13903] do_iter_write+0x188/0x670 [ 3364.470391][T13903] vfs_writev+0x1aa/0x630 [ 3364.470396][T13903] do_writev+0x139/0x300 [ 3364.470402][T13903] do_syscall_64+0x35/0xb0 [ 3364.470408][T13903] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3364.470413][T13903] [ 3364.470416][T13903] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 3364.470436][T13903] _raw_spin_lock_irqsave+0x39/0x50 [ 3364.470442][T13903] serial8250_console_write+0x91a/0xb70 [ 3364.470449][T13903] console_unlock+0x859/0xc40 [ 3364.470454][T13903] vprintk_emit+0x1ca/0x560 [ 3364.470460][T13903] vprintk+0x8d/0x260 [ 3364.470465][T13903] printk+0xba/0xed [ 3364.470470][T13903] register_console+0x55f/0x780 [ 3364.470476][T13903] univ8250_console_init+0x3a/0x46 [ 3364.470482][T13903] console_init+0x3c1/0x58d [ 3364.470487][T13903] start_kernel+0x30b/0x49b [ 3364.470494][T13903] secondary_startup_64_no_verify+0xb0/0xbb [ 3364.470499][T13903] [ 3364.470503][T13903] -> #0 (console_owner){-.-.}-{0:0}: [ 3364.470521][T13903] __lock_acquire+0x2a07/0x54a0 [ 3364.470527][T13903] lock_acquire+0x1ab/0x510 [ 3364.470533][T13903] console_unlock+0x359/0xc40 [ 3364.470539][T13903] vprintk_emit+0x1ca/0x560 [ 3364.470544][T13903] vprintk+0x8d/0x260 [ 3364.470549][T13903] printk+0xba/0xed [ 3364.470555][T13903] report_bug.cold+0x72/0xab [ 3364.470560][T13903] handle_bug+0x3c/0x60 [ 3364.470566][T13903] exc_invalid_op+0x14/0x40 [ 3364.470571][T13903] asm_exc_invalid_op+0x12/0x20 [ 3364.470578][T13903] io_poll_double_wake+0x4fb/0x760 [ 3364.470584][T13903] __wake_up_common+0x147/0x650 [ 3364.470590][T13903] __wake_up_common_lock+0xd0/0x130 [ 3364.470596][T13903] n_tty_set_termios+0x73a/0x1010 [ 3364.470602][T13903] tty_set_termios+0x650/0x910 [ 3364.470607][T13903] set_termios.part.0+0x30e/0x530 [ 3364.470614][T13903] tty_mode_ioctl+0x9f1/0xe70 [ 3364.470619][T13903] n_tty_ioctl_helper+0x53/0x2d0 [ 3364.470625][T13903] n_tty_ioctl+0x56/0x370 [ 3364.470631][T13903] tty_ioctl+0xef9/0x1600 [ 3364.470637][T13903] __x64_sys_ioctl+0x193/0x200 [ 3364.470642][T13903] do_syscall_64+0x35/0xb0 [ 3364.470648][T13903] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3364.470654][T13903] [ 3364.470658][T13903] other info that might help us debug this: [ 3364.470663][T13903] [ 3364.470667][T13903] Chain exists of: [ 3364.470671][T13903] console_owner --> &port_lock_key --> &tty->write_wait [ 3364.470697][T13903] [ 3364.470701][T13903] Possible unsafe locking scenario: [ 3364.470706][T13903] [ 3364.470710][T13903] CPU0 CPU1 [ 3364.470716][T13903] ---- ---- [ 3364.470721][T13903] lock(&tty->write_wait); [ 3364.470733][T13903] lock(&port_lock_key); [ 3364.470746][T13903] lock(&tty->write_wait); [ 3364.470759][T13903] lock(console_owner); [ 3364.470770][T13903] [ 3364.470773][T13903] *** DEADLOCK *** [ 3364.470778][T13903] [ 3364.470781][T13903] 5 locks held by syz-executor.0/13903: [ 3364.470787][T13903] #0: ffff888098a47098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 3364.470812][T13903] #1: ffff888098a472e8 (&tty->termios_rwsem){++++}-{3:3}, at: tty_set_termios+0xfe/0x910 [ 3364.470839][T13903] #2: ffff888098a47098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1d/0x80 [ 3364.470868][T13903] #3: ffff888098a47528 (&tty->write_wait){-.-.}-{2:2}, at: __wake_up_common_lock+0xb4/0x130 [ 3364.470895][T13903] #4: ffffffff8b96aac0 (console_lock){+.+.}-{0:0}, at: vprintk+0x8d/0x260 [ 3364.470919][T13903] [ 3364.470922][T13903] stack backtrace: [ 3364.470928][T13903] CPU: 0 PID: 13903 Comm: syz-executor.0 Not tainted 5.14.0-rc2-syzkaller #0 [ 3364.470938][T13903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3364.470946][T13903] Call Trace: [ 3364.470951][T13903] dump_stack_lvl+0xcd/0x134 [ 3364.470956][T13903] check_noncircular+0x25f/0x2e0 [ 3364.470962][T13903] ? stack_trace_consume_entry+0x160/0x160 [ 3364.470968][T13903] ? print_circular_bug+0x1e0/0x1e0 [ 3364.470973][T13903] ? memcpy+0x39/0x60 [ 3364.470978][T13903] ? lockdep_lock+0xc6/0x200 [ 3364.470984][T13903] ? call_rcu_zapped+0xb0/0xb0 [ 3364.470989][T13903] __lock_acquire+0x2a07/0x54a0 [ 3364.470995][T13903] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3364.471001][T13903] lock_acquire+0x1ab/0x510 [ 3364.471006][T13903] ? console_unlock+0x2e6/0xc40 [ 3364.471012][T13903] ? lock_release+0x720/0x720 [ 3364.471017][T13903] ? lock_downgrade+0x6e0/0x6e0 [ 3364.471023][T13903] ? do_raw_spin_lock+0x120/0x2b0 [ 3364.471028][T13903] ? rwlock_bug.part.0+0x90/0x90 [ 3364.471034][T13903] console_unlock+0x359/0xc40 [ 3364.471039][T13903] ? console_unlock+0x2e6/0xc40 [ 3364.471044][T13903] ? devkmsg_read+0x7d0/0x7d0 [ 3364.471049][T13903] ? lock_release+0x720/0x720 [ 3364.471054][T13903] ? vprintk+0x8d/0x260 [ 3364.471059][T13903] vprintk_emit+0x1ca/0x560 [ 3364.471064][T13903] vprintk+0x8d/0x260 [ 3364.471069][T13903] printk+0xba/0xed [ 3364.471074][T13903] ? record_print_text.cold+0x16/0x16 [ 3364.471080][T13903] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3364.471086][T13903] ? __lock_acquire+0x162f/0x54a0 [ 3364.471092][T13903] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 3364.471098][T13903] ? report_bug.cold+0x66/0xab [ 3364.471103][T13903] ? io_poll_double_wake+0x4fb/0x760 [ 3364.471109][T13903] report_bug.cold+0x72/0xab [ 3364.471114][T13903] handle_bug+0x3c/0x60 [ 3364.471119][T13903] exc_invalid_op+0x14/0x40 [ 3364.471124][T13903] asm_exc_invalid_op+0x12/0x20 [ 3364.471130][T13903] RIP: 0010:io_poll_double_wake+0x4fb/0x760 [ 3364.471141][T13903] Code: d9 db ff f0 41 ff 4c 24 5c 0f 94 c3 31 ff 89 de e8 aa ba 95 ff 84 db b8 01 00 00 00 0f 84 6f fc ff ff 89 04 24 e8 55 b4 95 ff <0f> 0b 8b 04 24 e9 5d fc ff ff e8 46 b4 95 ff 4c 89 e5 e9 a1 fb ff [ 3364.471156][T13903] RSP: 0018:ffffc9000c58f830 EFLAGS: 00010016 [ 3364.471166][T13903] RAX: 00000000000097fa RBX: 0000000000000001 RCX: ffffc900018d1000 [ 3364.471175][T13903] RDX: 0000000000040000 RSI: ffffffff81dfd47b RDI: 0000000000000003 [ 3364.471183][T13903] RBP: ffff88806ab8991c R08: 0000000000000001 R09: 0000000000000001 [ 3364.471192][T13903] R10: ffffffff81dfd466 R11: 0000000000000000 R12: ffff88806ab898c0 [ 3364.471200][T13903] R13: 0000000000000000 R14: ffff88806ab898f0 R15: ffff888018c2f3a0 [ 3364.471208][T13903] ? io_poll_double_wake+0x4e6/0x760 [ 3364.471214][T13903] ? io_poll_double_wake+0x4fb/0x760 [ 3364.471220][T13903] __wake_up_common+0x147/0x650 [ 3364.471225][T13903] __wake_up_common_lock+0xd0/0x130 [ 3364.471231][T13903] ? __wake_up_common+0x650/0x650 [ 3364.471237][T13903] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 3364.471243][T13903] n_tty_set_termios+0x73a/0x1010 [ 3364.471248][T13903] ? n_tty_receive_buf+0x40/0x40 [ 3364.471254][T13903] tty_set_termios+0x650/0x910 [ 3364.471259][T13903] ? tty_wait_until_sent+0x530/0x530 [ 3364.471265][T13903] ? lock_downgrade+0x6e0/0x6e0 [ 3364.471270][T13903] ? up_write+0x191/0x560 [ 3364.471276][T13903] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 3364.471283][T13903] ? n_tty_check_unthrottle+0x440/0x440 [ 3364.471289][T13903] set_termios.part.0+0x30e/0x530 [ 3364.471294][T13903] ? tty_termios_hw_change+0x1e0/0x1e0 [ 3364.471300][T13903] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 3364.471306][T13903] tty_mode_ioctl+0x9f1/0xe70 [ 3364.471312][T13903] ? set_termios.part.0+0x530/0x530 [ 3364.471318][T13903] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3364.471325][T13903] ? __ldsem_down_read_nested+0xcb/0x850 [ 3364.471331][T13903] ? __ldsem_down_read_nested+0xdc/0x850 [ 3364.471337][T13903] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 3364.471344][T13903] ? tomoyo_path_number_perm+0x24e/0x590 [ 3364.471349][T13903] ? __ldsem_wake_readers+0x3c0/0x3c0 [ 3364.471355][T13903] n_tty_ioctl_helper+0x53/0x2d0 [ 3364.471361][T13903] n_tty_ioctl+0x56/0x370 [ 3364.471365][T13903] tty_ioctl+0xef9/0x1600 [ 3364.471371][T13903] ? n_tty_flush_buffer+0x230/0x230 [ 3364.471377][T13903] ? tty_lookup_driver+0x550/0x550 [ 3364.471382][T13903] ? lock_downgrade+0x6e0/0x6e0 [ 3364.471387][T13903] ? __fget_files+0x23d/0x3e0 [ 3364.471393][T13903] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3364.471399][T13903] ? tty_lookup_driver+0x550/0x550 [ 3364.471405][T13903] __x64_sys_ioctl+0x193/0x200 [ 3364.471410][T13903] do_syscall_64+0x35/0xb0 [ 3364.471416][T13903] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3364.471421][T13903] RIP: 0033:0x4665e9 [ 3364.471431][T13903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3364.471446][T13903] RSP: 002b:00007f6af08b0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3364.471459][T13903] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 3364.471468][T13903] RDX: 00000000200001c0 RSI: 0000000000005408 RDI: 0000000000000003 [ 3364.471476][T13903] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 3364.471485][T13903] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 3364.471493][T13903] R13: 00007ffc82be390f R14: 00007f6af08b0300 R15: 0000000000022000 [ 3364.477295][T13903] Kernel Offset: disabled [ 3365.548299][T13903] Rebooting in 86400 seconds..