348}, 0x1, 0x0, 0x0, 0x40}, 0x4)

[ 1462.793734][ T6955] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
05:06:49 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x1a00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:06:49 executing program 0:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f00000002c0)={'team_slave_1\x00', {0x2, 0x4e24, @local}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x7}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x14, 0x2, [@TCA_TCINDEX_HASH={0x8}, @TCA_TCINDEX_MASK={0x6}]}}]}, 0x44}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

05:06:49 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe00000009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x0)

05:06:49 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000001)
recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x40000000000020c, 0x0, 0x0)

[ 1463.152751][   T84] tipc: TX() has been purged, node left!
[ 1463.159959][ T6983] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1463.205520][   T84] tipc: TX() has been purged, node left!
[ 1463.224874][   T84] tipc: TX() has been purged, node left!
[ 1463.231074][   T84] tipc: TX() has been purged, node left!
[ 1463.247294][   T84] tipc: TX() has been purged, node left!
[ 1463.252038][ T6992] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1463.269041][ T6988] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
05:06:49 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x1a01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:06:49 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001105000000bd7000fedbdf2508004a000100000024003e000100000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x24000810)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0)

05:06:49 executing program 3:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r0 = socket$inet(0x2, 0x3, 0x2)
r1 = socket$inet(0x2, 0x6, 0x0)
ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000000180)={'tunl0\x00', @ifru_hwaddr=@link_local})
r2 = socket(0x10, 0x80002, 0x0)
r3 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x90000020})
setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000040)=0x4, 0x4)
setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)

05:06:49 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00')
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f00000000c0)={{0x2, 0x0, @identifier="9bc47265d42fd083398ca0b97393cbd2"}, 0x7c, [], "c78ce0cdef141bf4accf67fc6729b38ce08d9b7b03cef3b7d9fbec1c7962b9ae1098794f2821ff1f3bfd91cbdebd42dc52a0553b7c75857c1f892d3e94fa0105d2f89685c145a22e877935e450124db39641ff0dd7ad24755a71fc18978d00e03bf2277e78fabf81cb60d82de7fd400c1e519c9b30a892cda3fd5b3e"})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cfe8b00", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f100000080003"], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

05:06:49 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000001)
recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x40000000000020c, 0x0, 0x0)

[ 1463.394155][   T84] tipc: TX() has been purged, node left!
05:06:49 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x1a02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1463.441921][ T6998] IPVS: ftp: loaded support on port[0] = 21
[ 1463.518639][ T6998] virt_wifi0 speed is unknown, defaulting to 1000
[ 1463.559185][   T28] audit: type=1804 audit(1591160810.000:1135): pid=7004 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir158484738/syzkaller.dWzPkU/2597/cgroup.controllers" dev="sda1" ino=16381 res=1
05:06:50 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x15}, 0x24008814)
ioctl$SIOCAX25ADDFWD(r1, 0x89ea, 0x0)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32=r2, @ANYBLOB], 0x50}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0)
syz_genetlink_get_family_id$devlink(0x0)
gettid()
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r4=>0x0})
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
sendmsg$inet(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40448c4)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0)

05:06:50 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x1a03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1463.730733][   T28] audit: type=1804 audit(1591160810.040:1136): pid=7008 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3503/cgroup.controllers" dev="sda1" ino=15908 res=1
[ 1463.840690][ T7018] IPVS: ftp: loaded support on port[0] = 21
05:06:50 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x1b00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:06:50 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a30"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x0)

05:06:50 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x1b01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:06:50 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
pwrite64(r1, &(0x7f0000000400)="4ebefa1e923f1e018b6e53bf4815b78e1f2ef9212b93090c1ff6b35c208d50aef3fd759f995b53dd37c58cf8332b8a6b66575478e02ef0145bf122ba2e2c53a7ec45e375683475a6495f8d7b7a088f5e32dc266569074319bf8c8d3d8007cc92e2ba0d9082c41b63e330f353a3f675a98d2e74a08e38400f7f5eb113a0e25fd90115d57a7acdcab1128cf4f9c719f3f29d460c507f8a2a6594d259217d32eae9be93c6ed17a67ae2e7e689a31fa8449da12fd62bf423cff702b09e6ee1ff0e698b8bb517819eb712ba2b34b54b28b79d9399d920d5a5507e8a85f37060dfe3051f06f8d7cc9b068495ee5d5fcce85410bcd9f91d1f198353ce94b2e03370e43875c1a035bb88fd26fbb5b1252e2056d6b67e2b2f424051a40ad9170e76a81a6ca4f149ff643db76f8f2c1aa8024a6279952027489bbad6479e47ea5ba9e47d8136df398665f6cdfd15e93cfbf2ce1151afe9321ed63fe7100e704b232646fc1e0e936b90cceaaa70225ce71640e10316d2cc637355eddb3c4e16ff1635fa4e65a66eb5ab2cbf9d6f063e05f0e46fcc14bf31eedfb9f33c215fc14946cc6f7493924442e939f71ac4bd3e35e78857f9624c663f3669a47a7146e3249ee3eaaf681f371d515af5b934f9252c7ac2a164bf318fc2b194ee087b2b28ed5e4618c0906fc3f32c43a3b9e08a2e0d509f65a7de909e8c3c535f1d8cb9c236716e5ad709", 0x200, 0x0)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:shell_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x4080}, 0x844)
r3 = socket$pptp(0x18, 0x1, 0x2)
ioctl$FICLONE(r1, 0x40049409, r3)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002d00)={0x20, 0x1405, 0x401, 0xfffffffd, 0x0, "", [{{0x8}, {0x8, 0x3, 0x3}}]}, 0x20}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
openat$cgroup_int(r4, &(0x7f0000000280)='pids.max\x00', 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000240)={0x1, 0x8, 0x101, 0x10000, 0x1})

[ 1464.236602][ T7032] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
05:06:50 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x1b02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:06:50 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x40000000000020c, 0x0, 0x0)

[ 1464.376683][ T7018] virt_wifi0 speed is unknown, defaulting to 1000
[ 1464.431856][ T7003] IPVS: ftp: loaded support on port[0] = 21
[ 1464.592620][ T7020] netlink: 'syz-executor.5': attribute type 5 has an invalid length.
[ 1464.600750][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1464.676216][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:10) already exists on: macvlan2
[ 1464.708485][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1464.749704][ T7020] device ipvlan3 entered promiscuous mode
[ 1464.855447][ T7062] IPVS: ftp: loaded support on port[0] = 21
[ 1465.185094][ T7003] virt_wifi0 speed is unknown, defaulting to 1000
[ 1465.201359][ T7083] netlink: 'syz-executor.5': attribute type 5 has an invalid length.
[ 1465.236044][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1465.302294][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:10) already exists on: macvlan2
[ 1465.322064][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1465.341059][ T7083] device ipvlan3 entered promiscuous mode
[ 1465.569618][ T7062] virt_wifi0 speed is unknown, defaulting to 1000
05:06:54 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x1b03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:06:54 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x2c4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x6, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "e389abbafc209837", "2c4977d7001081db0cf37d6c2b9088b653112d9040b3fb4c4f1b6d18b7bc6e43", "316cef8e", "7274ffff00007e5f"}, 0x7b)

05:06:54 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:06:54 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a30"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x0)

[ 1468.304101][ T7185] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1468.350872][   T28] audit: type=1804 audit(1591160814.790:1137): pid=7183 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3505/cgroup.controllers" dev="sda1" ino=15921 res=1
05:06:54 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x4)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x44b83, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000000c0)=0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@int={0x10, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x5c, 0xa}]}, {0x0, [0x2e, 0x5f, 0x20ab5ab7a2a0407a, 0x30, 0x5f, 0x2e]}}, &(0x7f0000004600)=""/210, 0x30, 0xd2, 0x8}, 0x20)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c)
sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x11000000)
r3 = socket(0x10, 0x80002, 0x0)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f00000002c0)=""/133, &(0x7f0000000200)=0x85)
r5 = accept4(r2, 0x0, &(0x7f0000000100), 0x0)
setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000240)=0x1, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x50)

05:06:54 executing program 3:
unshare(0x40000000)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, 0x1, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0xb871, 0xffffffffffffffff, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={<r5=>r4}, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
r7 = epoll_create(0x9)
pipe(&(0x7f0000000380))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000000)={0x90000020})
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f00000002c0)={r5, @in={{0x2, 0x4e23, @private=0xa010102}}, 0x6, 0x7fffffff, 0x401, 0xfffff072, 0x7f}, &(0x7f0000000240)=0x98)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000001680)={r4, 0x2, 0xfad}, 0x8)
socket(0x0, 0x0, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}})

05:06:54 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010800000000084)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000001200)=0x5, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000080)="fd", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000180)="7c438c4950e66c2539fcdd1d1a17d0b4b37386dfbc7f62fee6ee5922c2d8d2b0d14db307a75b83186510a54e2c0a8cccebdd3df19401a33441a6f92b7527517752fb51a805142ed7b334fef55c100f4af937d1dd5e7483ec48cfd8b658a339c934f236e87bd0726b701eaabb88fce86d9f3f5968be12eb1a3c54395a50bc298c1c91e626b6c19d973492a9837054bff76a6f1bd8cfe9f542eee5f0ad3a3b0362b22f1b5c2dfa874555951a555c97846177eb35364c3a56d4926b9f894366adda2d73193ebd349b5e12432e9e2d515f10f30646329895a0fbd6e38d8b0fe4d809eda1b6a612", 0xe5}, {&(0x7f0000001240)="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", 0x48c}], 0x2}}], 0x2, 0x4000040)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @private}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000000000)=""/5, 0x5}, {&(0x7f0000000340)=""/116, 0x74}, {&(0x7f00000003c0)=""/158, 0x9e}], 0x4}, 0x2)

05:06:54 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x1c00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:06:55 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x1c01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1468.609013][ T7195] IPVS: ftp: loaded support on port[0] = 21
[ 1468.631189][ T7197] BPF:[1] Invalid name_offset:16
[ 1468.673299][ T7195] virt_wifi0 speed is unknown, defaulting to 1000
05:06:55 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x1c02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:06:55 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x1c03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:06:55 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a30"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x0)

05:06:55 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x1d00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:06:55 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x40000000000020c, 0x0, 0x0)

[ 1469.122723][ T7203] BPF:[1] Invalid name_offset:16
05:06:55 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x1d01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1469.244955][ T7217] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
05:06:55 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x1d02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1469.410437][ T7214] IPVS: ftp: loaded support on port[0] = 21
[ 1469.430279][   T28] audit: type=1804 audit(1591160815.870:1138): pid=7220 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3506/cgroup.controllers" dev="sda1" ino=16034 res=1
05:06:55 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
socket(0x11, 0x800000003, 0x0)
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000280))
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000002dc0)=@deltfilter={0x1f08, 0x2d, 0x2, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x8, 0x10}, {0x8, 0xb}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x1eb4, 0x2, [@TCA_FW_ACT={0x1e94, 0x4, [@m_police={0x1de8, 0xe, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x1db0, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffffffffff, 0x3f, 0xffff, 0x7, {0x4, 0x2, 0x8, 0xa187, 0x1, 0x4}, {0x5a, 0x2, 0x4, 0x8, 0x2, 0x80}, 0x2, 0x690, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xe, 0x2, 0x3, 0x4, {0x4, 0x1, 0x1, 0x5, 0x6, 0x1}, {0x8, 0x1, 0x9, 0x8000, 0x7d0, 0x6}, 0x101, 0x7f, 0x100}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xfffffffe, 0xff, 0x10000000, 0x2e, 0x800, 0x40, 0x101, 0x36d, 0xfffffffd, 0xffffffe1, 0x101, 0x7, 0x1, 0x2, 0x401, 0x800, 0x200, 0x39, 0x7, 0x2, 0x8, 0xffffffff, 0xfffffffd, 0x9, 0x9, 0x1000, 0xd, 0xef, 0x5a3, 0x4b, 0x6, 0x1, 0x10ab, 0x1, 0x6, 0xbd, 0x8a18, 0x100, 0x1000, 0x20, 0x9, 0x0, 0x4, 0x5, 0x3, 0x200, 0x9d, 0xbe45, 0x7ff, 0x8, 0x2, 0x81, 0xffffffff, 0x7fffffff, 0xfffffc01, 0x7, 0x5, 0x3, 0x40, 0x3ff, 0x3, 0x81, 0x4, 0x2, 0x2, 0x5, 0x6, 0x7fff, 0x8, 0x401, 0x3, 0xfffffff8, 0x7, 0x4, 0x8, 0x101, 0xda4, 0xfffffffa, 0x3, 0xffff, 0x6, 0x5, 0x0, 0x1ff, 0x6, 0x3ff, 0x6, 0x10000, 0x977f, 0x6, 0x10000, 0x25b, 0x2, 0x8, 0x548, 0x5, 0x81, 0x101, 0x101, 0x77b5, 0xb909, 0x7, 0x1fffe, 0x6, 0x0, 0x5, 0x7ff, 0x8, 0x5, 0x1c56de4a, 0x7fff, 0x3da6, 0xda8, 0x5, 0x7f, 0xffff, 0xfffffffb, 0xa48, 0xff, 0x7d6, 0x915, 0x8, 0x10001, 0xfffffffe, 0x1, 0x166, 0x5, 0x6, 0xfe48, 0xe3, 0x8, 0xc708, 0x10000, 0x100, 0x0, 0x69, 0x5, 0x6, 0x80000, 0x9, 0x0, 0xbf5f, 0x2, 0x1, 0x1, 0x40, 0x9, 0x7f, 0x20, 0xe5, 0x6c, 0x5, 0x1, 0x3, 0xec, 0x800, 0xffffffff, 0x4, 0x7, 0x1, 0x1f, 0x373, 0x1, 0x9, 0x7fff, 0x6317, 0x8, 0x1, 0x0, 0x1000, 0x2, 0x3f, 0x1, 0x6, 0x9, 0x7e, 0x5, 0x8, 0x0, 0xb7, 0xfffffff9, 0x8, 0x80000000, 0x0, 0x20, 0x5bc, 0x2, 0x3, 0x7, 0x5, 0x0, 0x6, 0x51b, 0xe65, 0x3, 0x7f, 0x4, 0xf623, 0x9, 0x0, 0xfffffffb, 0x6, 0x8000, 0x2, 0x1, 0x1, 0x45, 0x2e, 0x9, 0x2, 0x1, 0x6, 0x2, 0x8, 0x8, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffff9, 0x5, 0x4, 0x80000000, 0x6, 0x8, 0x4, 0x6, 0x1, 0x1, 0x6, 0x5, 0x8, 0x7, 0xffff0001, 0xffffffff, 0x3f, 0x2, 0x5, 0xdd3c, 0x101, 0xf9d, 0x343cedf7, 0x3, 0x5a7, 0x7fff, 0x1ff, 0xfffffff8, 0x7fff, 0x1f, 0xf6, 0x4, 0x6d, 0x6, 0x81, 0x8000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x9, 0x1, 0x2, 0x3, 0x200, 0x5, 0x4, 0x6, 0x8, 0x8, 0x6, 0x11, 0x5, 0x0, 0xd0, 0x9, 0x7fffffff, 0x6421, 0x81, 0x1, 0x10001, 0xbb0, 0x1c, 0x3, 0x0, 0x8000, 0x85, 0x401, 0x0, 0x7, 0x800, 0x0, 0x0, 0x400, 0x10000, 0x6, 0x6, 0x9, 0x8001, 0xfff, 0x9e7, 0x0, 0x4, 0x6, 0x9, 0x3, 0x0, 0x7, 0x6b7ba8e, 0x4, 0x0, 0x8, 0x7fffffff, 0x1, 0x1ff, 0x401, 0xf341, 0x3, 0x0, 0x4, 0x5, 0x6, 0xfcae, 0xffff0001, 0x100, 0x9, 0x80000001, 0xc2, 0x8, 0x1, 0x6, 0x45, 0x0, 0x1, 0xae5, 0x1, 0x6, 0x1ff, 0x101, 0x5, 0x20, 0x5, 0x80, 0x6, 0x3, 0x20, 0xff, 0x3, 0x4, 0x2, 0x1, 0x0, 0x6, 0xfffffff7, 0xa0000000, 0x80000000, 0x11f, 0x401, 0x226, 0x0, 0x7fffffff, 0x0, 0x3000, 0x3, 0x5, 0x1, 0x1ff, 0x8, 0x800, 0x8, 0x1ff, 0x2, 0x8001, 0x1000000, 0x9, 0x3, 0xb05, 0x9, 0x4, 0x5, 0x0, 0x5, 0x4, 0xfffffff7, 0xfffffffe, 0x7, 0x4, 0xffff, 0x0, 0x9, 0x9, 0x5, 0x5, 0x3, 0x3ff, 0xbcc, 0x4, 0x4, 0x3, 0xffff, 0xffffff7f, 0xa3db, 0x1, 0x0, 0x2, 0x0, 0x4, 0x2d7, 0x3, 0x800, 0x9, 0x8001, 0x5, 0x6, 0x7fff, 0x1, 0x8, 0x80, 0x1101426c, 0x4, 0xfffffffd, 0x1, 0x470f2f2f, 0x79, 0x6, 0x6, 0x8, 0x40d1, 0x20, 0x80000001, 0x7, 0x2eaa, 0x7, 0x9, 0x6, 0x7, 0x329d, 0x80000001, 0x3, 0x8, 0x7fffffff, 0x1, 0x80000000, 0x37e930f, 0xbe, 0x8, 0x3, 0x2, 0x7, 0xb5, 0x3, 0x41d, 0x6d, 0x200000, 0x0, 0x9, 0x3, 0x5, 0x7ff, 0x480000, 0x80000001, 0x2, 0x7, 0x1, 0x6, 0x8, 0xe3, 0x1, 0x51bf, 0x0, 0x2, 0x1, 0xf78, 0x0, 0x26, 0x8117, 0x8001, 0x3f, 0x80000001, 0x5, 0x12, 0x9, 0xc7e0, 0xef23, 0x81, 0x9, 0x3, 0x0, 0x5, 0x9, 0x6, 0xb9, 0xffff, 0x8, 0x4, 0x1, 0x1, 0x44, 0x3, 0x5, 0x6, 0x401, 0x3, 0xffff, 0x400, 0x2, 0xfffffffb, 0x0, 0xfffffffe, 0x7, 0x6, 0x3, 0x7, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xffffff47, 0xfff, 0x2000007, 0x2, 0x9, 0xffffffc1, 0x2c, 0x81, 0x2, 0x40, 0xfff, 0x5, 0x8, 0x9, 0x40, 0x1ba, 0xf0, 0x2, 0x40, 0x6, 0x2, 0x7f, 0x734, 0x20000000, 0x1ff, 0x8, 0x5, 0x100, 0xdf47, 0x6, 0x0, 0x4, 0xffffffff, 0x68, 0x7fff, 0x3045e646, 0x0, 0x9b94, 0xff, 0x1, 0x1, 0x79e7e14d, 0x80000000, 0x3ff, 0x7, 0x5, 0x8001, 0x400, 0x6, 0x800, 0x6, 0x7, 0x1, 0xffffffff, 0x2, 0x80000001, 0x0, 0x400, 0x4, 0x4, 0x3, 0x5, 0xffffffff, 0x80000000, 0x8, 0x10001, 0x2, 0x0, 0x7, 0x7, 0x6, 0x8, 0x11, 0x8, 0x81, 0x1be, 0x100, 0x1f, 0x80, 0x3, 0x5, 0xfffff801, 0x4, 0x4, 0x0, 0x4ef2, 0xffff, 0xa414, 0x8001, 0x7, 0x7fffffff, 0x100, 0xfffffc01, 0x7ff, 0x7, 0x0, 0x10001, 0x0, 0x5, 0x80000001, 0x8, 0xfffffffa, 0x0, 0x0, 0x2, 0x100, 0x1, 0x720afec0, 0x401, 0x8, 0x7, 0x100, 0xf710, 0x2, 0x7fffffff, 0x7, 0x7, 0x9, 0x2, 0x9, 0x0, 0x1, 0x4, 0x10000, 0xfffffc00, 0x400, 0x47d92428, 0xfff, 0xc3, 0x4272, 0x7, 0x7, 0x8, 0x400, 0x5, 0x9c, 0x400, 0x2, 0x0, 0x1, 0xd2, 0x8000, 0x6, 0x8, 0x800, 0x9, 0x2e, 0x1, 0x7, 0x9, 0xfffffffe, 0x0, 0x700, 0x10001, 0x3416, 0x0, 0x2, 0x7, 0xfffffffe, 0x8, 0xfda, 0x401, 0x85, 0x26e180, 0x5, 0xffffffff, 0xffffffff, 0x7, 0xfffff5aa, 0x5, 0x6, 0x1, 0x2, 0x2bcb, 0x7fff, 0xaee, 0x3, 0x2, 0x0, 0x3, 0xa9dd, 0x7, 0x1, 0x9, 0x20, 0x3f, 0x2, 0x0, 0x5, 0x1, 0x2, 0x1f, 0x9, 0x1, 0x0, 0x4, 0x8000, 0xffffffff, 0x10001, 0x3, 0x8001, 0xa8, 0x7, 0x3, 0x5, 0x6, 0x6, 0x20, 0x3f, 0x40, 0x6, 0x1, 0xffffffff, 0x1, 0xfffff049, 0x5, 0x81, 0x3, 0xd958, 0x2, 0x80000000, 0xfff, 0x80000001, 0x7, 0xffff, 0x5, 0x80, 0x3ff, 0x80000000, 0x101, 0x8, 0x9, 0x401, 0xa81, 0x101, 0x7, 0x2, 0x5, 0xffffffe0, 0x3f, 0x6, 0x2b9, 0x10000, 0xc34, 0x7fffffff, 0x400, 0x6, 0xfff, 0x4, 0x34, 0x2, 0x0, 0x8, 0x4b5, 0x4f]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x7, 0x4, 0x2, 0x2, 0xb7, 0x101, 0x6, 0x80000001, 0x2ecc, 0x5, 0x6, 0x9, 0x81, 0x6, 0x0, 0x10000, 0xa3fd, 0x9, 0x8, 0x0, 0x9, 0x3, 0xfffffff7, 0x80, 0x8, 0x80, 0xfffffff7, 0x601e, 0x3, 0x3ff, 0x101, 0xfffffffe, 0x0, 0x2, 0x1ff, 0x401, 0x1000, 0x5000000, 0x4, 0x5, 0xdd3c, 0x4, 0x9, 0xc70a, 0x40, 0xfffffff7, 0xfffffffa, 0x8, 0x4, 0x2f8880, 0x6, 0x2, 0x3, 0x3, 0x6, 0xfff, 0x7, 0xfffffff9, 0x80, 0x7fffffff, 0x2, 0xc0d, 0x5, 0x4, 0x3f, 0x200, 0x8, 0x8, 0xb13a, 0x7, 0x3f, 0x8, 0x8, 0x4, 0x4, 0x3, 0x7a1, 0x7, 0x5, 0x81, 0x101, 0x3, 0x0, 0x800, 0xf66, 0x0, 0x7, 0x81d, 0x40, 0x3f, 0x3, 0x0, 0x6, 0x200, 0x0, 0x3, 0x2, 0xd1a5, 0x456, 0x4e, 0x1, 0x1, 0x9, 0xffffffff, 0x3, 0x200, 0x0, 0x81, 0x40, 0x0, 0xfffffffd, 0x8, 0x7, 0x5, 0x980, 0x8, 0x1000, 0xfe8, 0x7, 0x7, 0x3, 0x0, 0x7, 0x2, 0x7fffffff, 0x4, 0x7, 0x80000001, 0x9, 0x1, 0xbd3, 0x401, 0x4, 0x5, 0x3ff, 0x8, 0x8, 0x0, 0x1000, 0x72, 0x6, 0x1, 0x1f, 0xad, 0xfffffbff, 0x8, 0x4, 0x6, 0xa22, 0xfffff141, 0x101, 0x5, 0x30559313, 0x4, 0x6, 0x6, 0x5, 0x1, 0x3, 0x40, 0x1, 0x7f, 0x4, 0x3b, 0x81, 0x40, 0x9, 0x8, 0x1, 0x7, 0x4, 0x7, 0x694, 0xbcd, 0xfffff800, 0x800, 0x4, 0x7fff, 0xcf4b, 0x2, 0x101, 0x9, 0x9, 0x6, 0x101, 0x8, 0x401, 0x8001, 0x0, 0x2, 0x1, 0x2, 0x5, 0x99676d04, 0x5, 0x1, 0xfff, 0x9, 0x3, 0xffffffff, 0x800, 0x5, 0x2, 0x7f, 0x19eb, 0x8, 0x800, 0x2, 0x6, 0x7fffffff, 0x48b1, 0x8ad, 0x1, 0x80000000, 0x9, 0x1, 0x3, 0x4, 0x0, 0x10000, 0x3725, 0x1, 0xbf, 0x200, 0x3, 0x7c0, 0x7, 0x4, 0xb2, 0xfffffff7, 0x3, 0x1, 0xe5, 0x24, 0xcd1e, 0x800, 0x400, 0x0, 0x2, 0x0, 0x5171, 0x0, 0xb1d, 0x7, 0x0, 0x416, 0x4, 0xdf09, 0x97, 0x6, 0x101, 0x200, 0x9, 0x7fffffff, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x4, 0x1ff, 0x8001, 0x2, 0x9, 0x0, 0x0, 0x6, 0x5, 0x5, 0x1, 0xff, 0x9, 0x3, 0x7ff, 0xfffffffc, 0x3f, 0x20, 0x33, 0x5, 0x4, 0xffffffff, 0x81, 0x7fffffff, 0x4, 0x1, 0x9, 0x20, 0x79, 0x0, 0x0, 0x6, 0x9, 0x6, 0x2, 0xe305, 0x452, 0x7f, 0x8000, 0x7ff, 0x0, 0x10000, 0xfffff004, 0x5, 0x80, 0x80000001, 0x7100, 0x8, 0x81, 0x7, 0xffff, 0x5, 0x6, 0xc9, 0x2, 0x0, 0x401, 0x3fe00, 0x7, 0x8, 0x3f, 0x1, 0x6, 0x2, 0x5, 0x8, 0x4, 0x5, 0x1, 0x3, 0x8, 0x9, 0x8, 0xa1, 0xfffffffe, 0x2, 0x334c000, 0x7, 0x400, 0x2, 0x7, 0x6, 0x5, 0x400, 0xae, 0xbe, 0xb9e, 0xfffffff8, 0x8c5f, 0x8, 0x4, 0x5, 0x4, 0xe49, 0x1ff, 0x8001, 0x80000000, 0x4, 0xce65, 0x9, 0x1, 0xa0000000, 0x800, 0x6, 0x4, 0x7, 0x7fffffff, 0x5, 0x80000000, 0xd2, 0x40, 0x1, 0x1, 0x8, 0x1, 0x5d92d64f, 0xffffffff, 0x81, 0xd9, 0x1, 0x5, 0xffff7fff, 0x8001, 0x1, 0x6, 0x9, 0x6, 0x7, 0x3, 0x1, 0x80, 0x1, 0x8b3c, 0x5df3, 0x80000000, 0x441d, 0x1, 0x7, 0x8000, 0x0, 0x7f, 0x7, 0x1, 0x8000, 0x6, 0x80000001, 0x80000000, 0x7, 0x1, 0x3f, 0x9, 0x0, 0x0, 0x5, 0x1, 0x6, 0x2, 0x3ff, 0x94e, 0x8000, 0x1000, 0x2, 0x1, 0x8, 0x2, 0x5, 0xff, 0x7ff, 0x3f, 0x6a3, 0x81, 0x0, 0x7ff, 0x1, 0x504, 0x3, 0x9, 0x4, 0x1ff, 0x8, 0x9, 0xffffffc1, 0x3ff, 0x5, 0x6, 0xc0, 0xd9b0, 0xc00f2206, 0x101, 0x8, 0x802b, 0xfffffffe, 0x7fff, 0x7, 0xfffffffc, 0xaf9a, 0x8a, 0x8, 0x9, 0x8, 0x269e, 0x1496, 0x4, 0x6, 0x1, 0xddc, 0x5, 0x3, 0x7fffffff, 0x46, 0x2, 0xd5, 0x1cdb, 0x6b, 0x6, 0x10000, 0x1c40, 0x1000, 0x81, 0x8001, 0x5, 0x6, 0x2, 0x3, 0x1, 0x5, 0x7f, 0x0, 0x0, 0x40, 0x5, 0x401, 0x5, 0x9, 0x8001, 0x5, 0x8, 0x903, 0x5, 0x8, 0x3, 0x7, 0x1, 0x0, 0x7f, 0x7fff, 0xfffffff9, 0x5, 0x8f, 0x0, 0x0, 0x5, 0x9, 0x7, 0x40]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x3f, 0x40000000, 0x7, 0x10000, 0xa4, 0x2, 0x7c5f, 0x6, 0x7, 0x8, 0x3, 0x401, 0x5, 0xc6, 0x4, 0x2, 0x0, 0xb787, 0x8, 0x81, 0x100, 0x7, 0x3ff, 0x8, 0x1, 0x7, 0xfffffff7, 0x1, 0x7, 0x6, 0x7fff, 0x3ff, 0x4, 0x0, 0x5, 0x9bc9, 0x4, 0x3, 0x4, 0x6, 0x20, 0x7, 0xffffffff, 0x0, 0x4879, 0x4, 0x9c7, 0xcffd, 0x0, 0x0, 0x20, 0x1, 0x3e7, 0x8e3b, 0x0, 0x401, 0xcfaf, 0xcb, 0x4, 0x8, 0xfffffff9, 0x1, 0x4, 0x4, 0x51, 0xcd, 0x7f, 0xd5, 0x1, 0xe07, 0x6, 0xff, 0x6, 0x8376, 0xffffffff, 0x3ff, 0xce99, 0x8ec0, 0x4, 0x8, 0x8001, 0x3c9, 0x0, 0xdf1, 0x4, 0x7fffffff, 0x3, 0x20, 0xe, 0x800, 0x100, 0x400, 0xffffffff, 0x101, 0x2, 0x8d, 0x7f, 0x400, 0x100, 0x2, 0x1f, 0x7, 0x7ff, 0x7, 0x3, 0xae5, 0x9, 0x6, 0x80000001, 0x8000, 0x6, 0x7, 0x4, 0x390, 0x7fffffff, 0x8, 0x6, 0x6, 0x1000, 0x9, 0x3, 0x0, 0x7, 0x8, 0x9, 0x415b1f1b, 0x9, 0x1ff, 0x9, 0x0, 0x3, 0x80000000, 0x6, 0x5, 0x6, 0x1000, 0x8e0, 0x80, 0x4, 0x8, 0x27, 0x0, 0x7f, 0x8, 0x2, 0xffffffff, 0x0, 0x6, 0x10000, 0x3, 0x81, 0x73, 0x2, 0x3f, 0x2, 0x6, 0x688f, 0x271, 0x20, 0x7fffffff, 0x2, 0x6, 0x3, 0x9, 0x8, 0x3, 0x1, 0x5d, 0x1, 0x40, 0x3, 0x0, 0x40, 0x2, 0x3, 0x7, 0x6, 0x7, 0x3, 0x6, 0x3, 0x80000000, 0x5, 0x2, 0xaaea, 0xfff, 0x2, 0x9e2, 0x8a, 0x9, 0x5, 0xf0, 0x5, 0x0, 0x56f7ad36, 0x7, 0x1, 0x5, 0x80, 0x400, 0x0, 0x8, 0xf21, 0x1, 0x1, 0x7, 0x4, 0x1, 0x6, 0x80000000, 0xbe32, 0xf5e, 0x9, 0xfffffffc, 0x7, 0x3, 0x8, 0xb3c7, 0x9, 0xfffffffd, 0x8, 0x6, 0xfff, 0x4, 0x10001, 0xbaad721d, 0x7fff, 0x4, 0xfa, 0xfff, 0x9798, 0x9, 0xbbd, 0x1ff, 0x40, 0x80, 0x1, 0xffff81be, 0xfffffffa, 0xa5a, 0x2, 0x17be, 0x0, 0x3, 0xfffffc00, 0x5, 0x80, 0x7fffffff, 0x800, 0x101, 0x3, 0x4, 0x8, 0x4, 0x7]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0xffffffff, 0xac000000, 0x40, {0x2, 0x0, 0x59f, 0x1, 0xfffc, 0x7f}, {0x4, 0x1, 0x1ff, 0x400, 0x100, 0x80000001}, 0xace, 0x3, 0x3ff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa7b, 0x10000000, 0x5, 0xd4e, 0x5, {0x8, 0x1, 0x4, 0xd713, 0xffff, 0x1000}, {0x81, 0x1, 0xfffa, 0xc000, 0x3d}, 0x1, 0x2, 0x8d5}}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xff, 0x3, 0xfffffffb, 0xdd, 0x87, 0x7, 0xfff, 0x6, 0x0, 0x1f, 0x2, 0x5, 0x3, 0xffffffff, 0x5, 0x7f, 0x20, 0x2f6, 0x9, 0x5, 0x1, 0x7, 0x8000, 0x1, 0x1b07, 0x3, 0xe9, 0x200, 0x103, 0x4, 0x2, 0x3, 0x3ff, 0x5, 0x8, 0x400, 0x5, 0x3, 0x8, 0x401, 0x80000001, 0x9, 0x3, 0x5, 0xffffffff, 0xffff, 0x3, 0x4, 0x4, 0xc0f, 0x8, 0x10001, 0x3, 0x6, 0x40, 0x800, 0x2, 0x10001, 0x1, 0x3, 0x7, 0x34, 0xef1, 0x9, 0x5, 0x10001, 0x5, 0x63c7, 0x409, 0xfffffffc, 0x0, 0x8, 0xf2, 0xffffffff, 0xc, 0x3, 0x16, 0x0, 0x9, 0x3, 0xff, 0x8, 0x446, 0x40, 0x1, 0x33f1, 0xfffffffd, 0xc9, 0x0, 0x2, 0x3f, 0x5, 0xffff, 0x2, 0x5, 0xee55, 0xfffffe00, 0x7fffffff, 0x3, 0x6, 0x7ff, 0xff1f, 0x9, 0x5, 0x9, 0x0, 0x6, 0x57b, 0x8000, 0x80000000, 0x2, 0x5, 0x1, 0x2, 0x3, 0x1000, 0x5, 0x9, 0xb03, 0x7f, 0x6, 0xffffffff, 0xd1, 0xbdf6, 0x3, 0x100, 0x8000, 0xffffffff, 0x9, 0x6, 0x849, 0x3354553d, 0x0, 0x2, 0x1, 0x7, 0xdf, 0x8, 0x400, 0x10000, 0xf5, 0x5, 0x5, 0x39, 0x2, 0x9, 0x27, 0x0, 0x7, 0x1, 0x400, 0xfffffffb, 0x2, 0x0, 0x6, 0x8, 0x0, 0x80000001, 0x81, 0x4, 0x8001, 0x3, 0x9, 0x8400, 0xffffff4a, 0x3, 0x6, 0x1, 0xd68, 0x1, 0x6, 0x401, 0x3, 0x8, 0x401, 0xfff, 0x7, 0x2, 0x6, 0x7fffffff, 0x4, 0x8, 0x4, 0x2, 0x21, 0x63, 0x8001, 0x8, 0x2000, 0x7, 0x6, 0x80, 0x5, 0xb86, 0xfffffff9, 0x3, 0x5, 0x3, 0x228, 0x0, 0x5111c93a, 0x5, 0x4, 0x2, 0x6, 0x3a25, 0x0, 0x1c00000, 0xdc65, 0xfff, 0x84, 0x0, 0x2, 0x100, 0x80000000, 0xfffffffa, 0x2, 0x80000001, 0x40, 0xa7, 0x2, 0x81, 0x9d0, 0x6, 0x2d06d0e2, 0xfffffffe, 0x4, 0x6, 0x3, 0x9, 0x631, 0x1f, 0x5, 0x100, 0x4, 0x1, 0xa2, 0x1, 0x3, 0x0, 0x40, 0x5, 0x9, 0x7fff, 0x2, 0x4, 0x5, 0x4, 0x200, 0x1, 0x1, 0x200, 0x92, 0x4, 0x3e5, 0xb4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x101}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]]}, {0xe, 0x6, "6123d10949a68566f4c4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_mpls={0xa8, 0x3, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x9, 0x2, 0x1ff, 0xffffffdc}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x4, 0x6, 0x60000000, 0x2}, 0x1}}, @TCA_MPLS_TC={0x5, 0x6, 0x4}]}, {0x2a, 0x6, "fac71a3e27a858d52636e6fe9b5362c99f436b2a958de54424beacc5c816e99be33e77525046"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_team\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x100}]}}, @filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x20, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'team_slave_0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xf, 0x3}}]}}]}, 0x1f08}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000801)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x72)
getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0302000000000000140012000c000100626f6e64"], 0x34}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="3c00000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="060200000900000008800a00", @ANYRES32=r5, @ANYBLOB="14001280090001007866726d0000000004000280"], 0x3c}}, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000300)=@rc={0x1f, @none, 0xc0}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000000)={'lo\x00'})

[ 1469.607615][ T7233] IPVS: ftp: loaded support on port[0] = 21
[ 1469.715379][ T7214] virt_wifi0 speed is unknown, defaulting to 1000
[ 1469.956183][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1470.022408][ T7235] 8021q: adding VLAN 0 to HW filter on device bond18
[ 1470.030382][ T7262] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
05:06:56 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000000)=@raw=[@generic={0x6, 0x6, 0x7, 0x8, 0x97e}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x1, 0x0, 0x7, 0x4, 0x8, 0x1}], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x5, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)

[ 1470.067105][ T7233] virt_wifi0 speed is unknown, defaulting to 1000
05:06:56 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(0xffffffffffffffff, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:06:56 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x1d03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:06:56 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$inet(0x2, 0x0, 0x0)
r3 = accept4(r2, &(0x7f00000000c0)=@alg, &(0x7f0000000180)=0x80, 0x80000)
getsockopt$nfc_llcp(r3, 0x118, 0x2, &(0x7f0000000200)=""/59, 0x3b)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001006959008000000b000500010007"], 0x1}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r1, 0x0, 0x100000003)

05:06:56 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x0)

05:06:56 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x1e00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:06:56 executing program 3:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0xb00000000065808, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000140), 0xff4d)
sendfile(r2, r1, 0x0, 0xffffffff800)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
pwrite64(r3, &(0x7f0000000200)="4ebefa1e923f1e018b6e53bf4815b78e1f2ef9212b93090c1ff6b35c208d50aef3fd759f995b53dd37c58cf8332b8a6b66575478e02ef0145bf122ba2e2c53a7ec45e375683475a6495f8d7b7a088f5e32dc266569074319bf8c8d3d8007cc92e2ba0d9082c41b63e330f353a3f675a98d2e74a08e38400f7f5eb113a0e25fd90115d57a7acdcab1128cf4f9c719f3f29d460c507f8a2a6594d259217d32eae9be93c6ed17a67ae2e7e689a31fa8449da12fd62bf423cff702b09e6ee1ff0e698b8bb517819eb712ba2b34b54b28b79d9399d920d5a5507e8a85f37060dfe3051f06f8d7cc9b068495ee5d5fcce85410bcd9f91d1f198353ce94b2e03370e43875c1a035bb88fd26fbb5b1252e2056d6b67e2b2f424051a40ad9170e76a81a6ca4f149ff643db76f8f2c1aa8024a6279952027489bbad6479e47ea5ba9e47d8136df398665f6cdfd15e93cfbf2ce1151afe9321ed63fe7100e704b232646fc1e0e936b90cceaaa70225ce71640e10316d2cc637355eddb3c4e16ff1635fa4e65a66eb5ab2cbf9d6f063e05f0e46fcc14bf31eedfb9f33c215fc14946cc6f7493924442e939f71ac4bd3e35e78857f9624c663f3669a47a7146e3249ee3eaaf681f371d515af5b934f9252c7ac2a164bf318fc2b194ee087b2b28ed5e4618c0906fc3f32c43a3b9e08a2e0d509f65a7de909e8c3c535f1d8cb9c236716e5ad709", 0x200, 0x0)
r4 = socket$inet6(0x10, 0x2, 0x14)
sendto$inet6(r4, &(0x7f0000000000)='E', 0x10a73, 0x8c0, 0x0, 0x4b6ae4f95a5de35b)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"])
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000100)={0x8, 0x200, 0x4, 0x80000001, 0x9})
sendfile(r2, r1, &(0x7f0000000040), 0x100000001)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")

[ 1470.270026][ T7324] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1470.330985][   T28] audit: type=1804 audit(1591160816.770:1139): pid=7320 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir158484738/syzkaller.dWzPkU/2601/cgroup.controllers" dev="sda1" ino=16034 res=1
[ 1470.375273][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
05:06:56 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x1e01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1470.420102][ T7235] IPVS: ftp: loaded support on port[0] = 21
[ 1470.458155][   T28] audit: type=1804 audit(1591160816.840:1140): pid=7331 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3507/cgroup.controllers" dev="sda1" ino=16193 res=1
05:06:57 executing program 3:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r1 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)

05:06:57 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(0xffffffffffffffff, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x40000000000020c, 0x0, 0x0)

[ 1470.627187][   T28] audit: type=1804 audit(1591160816.900:1141): pid=7334 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir186924865/syzkaller.hjDaT3/2634/memory.events" dev="sda1" ino=16145 res=1
05:06:57 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x1e02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1470.756867][   T28] audit: type=1800 audit(1591160816.900:1142): pid=7334 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16145 res=0
[ 1470.878464][   T28] audit: type=1804 audit(1591160816.930:1143): pid=7334 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir186924865/syzkaller.hjDaT3/2634/memory.events" dev="sda1" ino=16145 res=1
[ 1470.916979][ T7235] virt_wifi0 speed is unknown, defaulting to 1000
[ 1470.964802][   T28] audit: type=1804 audit(1591160816.950:1144): pid=7334 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir186924865/syzkaller.hjDaT3/2634/memory.events" dev="sda1" ino=16145 res=1
[ 1471.124984][   T28] audit: type=1800 audit(1591160816.990:1145): pid=7339 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16145 res=0
[ 1471.220129][   T28] audit: type=1804 audit(1591160817.320:1146): pid=7344 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3508/cgroup.controllers" dev="sda1" ino=16050 res=1
[ 1471.346558][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1471.446369][ T7233] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1471.462160][ T7336] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
05:06:58 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(0xffffffffffffffff, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:06:58 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x1e03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:06:58 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x0)

05:06:58 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000003c0)={0x2, 'ip6erspan0\x00', 0x2}, 0x18)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x3281bfa8604144d3})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
pwrite64(r6, &(0x7f0000000400)="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", 0x200, 0x0)
r7 = socket$pptp(0x18, 0x1, 0x2)
ioctl$FICLONE(r6, 0x40049409, r7)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r6, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x100000001, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x8, 0x1}, &(0x7f0000000140)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x1}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b80)=ANY=[@ANYBLOB="500e0000a46e554e0000000000000000000000003c0e0100380e00000b0001006d69727265640000240002802000020000000000000000000000000000138bcb1a3d00000000000000000000007f19f5facf2d8367b962f2d6b630fcf2a90d0000bc285fbce921adb3a90fe92c538c526e1ccdcfc1e96d3a96437001488737108630c6e3703af4b705aa18402607ff2598660a772cad00484a0ce692aab787c1c6c9b2c6781a988decfac6323fce7d9072b81d92c4412ff1", @ANYRESDEC, @ANYBLOB="030e060079196163debb15877eceb85a684816b31947c749727a9be525b8e51befa53061e93891bc2d6b339285db72528dedbe6adf11a1a3df80cba161794dd4d9096facb7d394d4263fd01a53f631e96c40f8b2849557faaf42e51596ae405e62b85c7fd4544db10c2218e10c7f8d449c07e18c9b1437e3ad50dea219358cba832a6d8434f0ae915daec4533184e289fb6ddd756bf76b608a0c71f5484b729d194a40142cbed75024489fe997eb86453c7d47ad2be0b60b2509fbf042d0b18c3fc04f228bb26da3c25c074f2ab1fd4dbbf1286206ad400942187339af6e245686b2d04d99859a32c4c0276b0a8d813db4fa41a253e1494d0824a56d140b8c72932e967f403349b92580e8cfb49c0c055ef37e6cc4c29e31f9a7448bd5df80f4fc2e5f6fcefe37f148b2a8b7fa45d2e253fb441982600ad15413085de4c6df8f29bc0f88556a8b57e5477b62fb104fe92dfb5b7516740b27b3354ae8c350b3f1b82fffb6841991cceca4e9c37283d24cb5c4bcd7a099febdcf91ba4f9cc285b960f65b9172fdb3c587e370e280378f469722ffec7196f044db1da194a29e5c18784c5b7f6b8daf0d307bf43ee771b6dca09de311b852af8bbcd96d4f4278a11276775fcab625dd71ab3631395681265f1a7b383d082d5d2010bfc10027b1e0a56081930817fe73619c471a9f7ebb838b29621ba597661d2df0dad3fdd7d31beab3c41a90cb0a5788228ee4a766a5ced12efd728db03745680a10f9a42e4b18b0b0c18b6c196beca541de5a73b0d381cf83a1ddfb37e5ec97a85bfb798a66de0fbd75e40362b2381631fdaa18cea9a2ef531be5d72f758cbd47f406be6cd49fc596944bd58e77d7eae3c9bcc9b77baa1b39cfe219fe4b63044688890e7b589fc1f1e626a61032552c280324402a0e1512a71e603aa313a193465384d15cce0c694f07ceb7bf066b1683ac38f48ad387c85871fedf15c3885f4f16908bed28cf1995fc1cb7660503bcadd5bb79cecfbd3e1a5804fbdeed088bc28ad94b6fe23ca98988006d2eb6bfbbced413f385093bdc123ef6fe00835ffe6e0d3c63ebf0599dd56a7648646fb641768fc46be85e195868fa72467181157d921e7e267818320d917e20fe3f1eda07c5126024552b98d4a1d823911a59752ebdb4170ae2d529088153ee7780d217b158cfc605060ca49209ff1837e4ab00403ad76bbf235a1b351dea9a260a792fb13d30c4ba5b78d9fdb9140110972da9d091285491a83770a74a993eb117363cacb7ef3f83544e3af3bd36ffa8061a03a940316109060a9e3ecfb6a7b6a42e6b86dac1b680e1abb73964aa7ce52bcb2e1e4ccd94fb"], 0x3}}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7}})
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x4240a543)
r8 = socket(0x1, 0x5, 0x0)
recvfrom$rose(r8, 0x0, 0x0, 0x0, 0x0, 0x0)

05:06:58 executing program 3:
socket(0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)={{0x10b, 0x5, 0x2, 0x11, 0x37b, 0x6, 0x2f, 0x3f}, "c98b774e6832a1f8a8223fb8369fc463ac6510fe3f7a32d436bc615a46a30c665c71dbb3cfe8fb509cf54da563bc3de8ad008a3aa4daeee580424a193f0a75cf460ab896d70f864d154e", [[], []]}, 0x26a)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
sendfile(r4, r3, 0x0, 0x100000001)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
sendfile(r6, r5, 0x0, 0x100000001)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
sendfile(r8, r7, 0x0, 0x100000001)

05:06:58 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(0xffffffffffffffff, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:06:58 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x1f00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1471.899914][ T7456] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
05:06:58 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x1f01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:06:58 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x1f02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:06:58 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
getsockopt$bt_BT_SECURITY(r6, 0x12, 0x3, &(0x7f00000000c0), 0x770000)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
getsockopt$bt_BT_SECURITY(r7, 0x12, 0x3, &(0x7f00000000c0), 0x770000)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001418335ffe010000", @ANYRESDEC=r1, @ANYBLOB="0020a9b6000000000000751dc23d8e008672391e51823799a0837eb904c9cedb383db4eff9d3f961ea48af33fb086dd809e74b05008b925b759fb97b84434f357bf55290ae2254db822b9f4b0a0256facb44521fa875669dd65b11c470252c5c3d9f4636bd897ff950e796e68a63ff88ba4600f241c913de3520493f7aa263989ac3f7d250dba5e5bc918809c9ee4a16e2703708f0dd2edb3783000000001036ccfb8ff6364146ed27c6293f550510d96a5f9046ac5dfd29ec9f4addaf501f5d0516b2ad082197b2092b3bafe6d0da1a4fb8857fb3442e1a81d7a35114b55ea7a7fbaa8cd09e220dce5b7fda6f686d17259e173a8e583433ac842dcc740fa0d9f669e81c6b2c9bde45cff10efcad5bef640d1ddccc2a14f5db4711c9cca325fa4e4ff1d2fd07f84fcc6d1da8fd1835db0c36205453461ed66fb4968882dde340afacbc2d3a1ba612ecb8a357"], 0x48}}, 0x0)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x80, 0x1)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000800010071667100480002b7082bb332d0ed64f3c3540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c300"/99], 0x74}}, 0x0)
r8 = socket(0x10, 0x80002, 0x0)
r9 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000000)={0x90000020})
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000000080)=0x7fffffff, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r5, @ANYBLOB="001300000008000000000000949f0cfaa9a0a4d191ad79ff0f0000b85f021e9929449b8b0bf7377a04cb8fb706a2c48a9d8b6cacd2938bf9e77089ed62b98ae7b47fe90beb37a5b1773ba64262c8ac8b8f4e05b04b21788c8f4d0d57c2d92d4ec2513331bd7fdcbfba8add31dbdff1ea"], 0x24}}, 0x0)

05:06:58 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000900020073797a320000000011000300686173683a6e65742c6e6574000000000c000780081a0d233200000005000100070000000900020073797a3200000000050005000a000000042a850a2f6eb7441d7c120d1ca8ba"], 0x5c}}, 0x24000000)

05:06:58 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x1f03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:06:58 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)

05:06:59 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f00000000c0)="240000005a001f00ff03f4f9002304000a04f51108000500020100020800028001000000", 0x24)
writev(r0, &(0x7f00000004c0)=[{0x0}], 0x1)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x18, r2, 0x2f45de73e75c9df7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0)
r3 = accept4(0xffffffffffffffff, &(0x7f0000000500)=@sco={0x1f, @none}, &(0x7f0000000380)=0x80, 0x80000)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/353, @ANYBLOB], 0x169)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4)
sendto$inet(r0, &(0x7f00000012c0)="1e268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r5, 0x2f45de73e75c9df7}, 0x14}}, 0x0)
ioctl(r4, 0x8913, &(0x7f0000000040)="08bd8ffb370be073ffffff650d8400000000000040aefee10b797cde583b5c83ce6b45316de8")

[ 1472.580059][ T7475] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
05:06:59 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x0)

[ 1472.702684][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1472.832532][ T7502] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
05:06:59 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)

05:06:59 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2000}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:06:59 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000140)={'nat\x00'}, &(0x7f0000000000)=0x78)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000040)="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", 0xfc)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)={'batadv0\x00', <r4=>r3})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@mpls_getroute={0x48, 0x1a, 0x8, 0x70bd28, 0x25dfdbff, {0x1c, 0x80, 0x80, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1f00}, [@RTA_VIA={0x14, 0x12, {0x2c, "a986329a920dcca30c582dc29431"}}, @RTA_OIF={0x8}, @RTA_DST={0x8, 0x1, {0x3}}, @RTA_TTL_PROPAGATE={0x5}]}, 0x48}}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bond\x00'}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0)

05:06:59 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)

05:06:59 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1473.295322][ T7511] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
05:06:59 executing program 3:
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10)
ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000001100)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000001f40)='dctcp\x00', 0x6)
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000011c0)="18738697962d777ae15647267fc043ac708e5c5791d6bcbee33a246153eaa0a79d9c648f4a5aa4e4663042b1171906150257569429b7811c8785e70079dd156aa400a3528d89a725c61ba8dc03d066c5652bd849ee3edc70857074bc674b6fe1386024ed9d3a850dd88a7c324e22eff3d3509ab83cfeafbbf6dd0a69758ea2b5e98c27140c77fbc8f4bea436c4288c1474a6036e2b39ce2bbca2bbe2f4b28683a6d207b5edda655612bf9fe4a0217ae54071a94c9bf205f001eb28fcfb5554d34404c69317a768f22b5847385785c0e7d8ffc4540df2a60b05144a0b72d03e28bdc6bdf25f88a0f2614de02b82915cd3c15d4c4c4169e586a160278a428c57f0")
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xb, 0x800, 0x8, 0x41, 0x1, 0x70, [], 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x40)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r2, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001080)={r2, &(0x7f0000000040), &(0x7f0000000080)=""/4096}, 0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000201030000000000000000000000000008000840ffffffea"], 0x1c}}, 0x0)
splice(r2, &(0x7f0000000040)=0x42, r3, &(0x7f00000010c0)=0x1, 0x7f, 0x7)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x44841)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x5}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x0)

[ 1473.339183][ T7511] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
05:06:59 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2002}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1473.412151][   T28] kauditd_printk_skb: 6 callbacks suppressed
[ 1473.412167][   T28] audit: type=1804 audit(1591160819.851:1153): pid=7518 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3511/cgroup.controllers" dev="sda1" ino=16372 res=1
[ 1473.441324][ T7520] 8021q: adding VLAN 0 to HW filter on device bond19
05:07:00 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2003}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1473.499633][ T7520] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
05:07:00 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a30000000000800"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x0)

05:07:00 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2100}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1473.576786][ T7520] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
[ 1473.702154][ T7567] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[ 1473.719858][   T28] audit: type=1804 audit(1591160820.161:1154): pid=7519 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir158484738/syzkaller.dWzPkU/2603/cgroup.controllers" dev="sda1" ino=16382 res=1
05:07:00 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

05:07:00 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2101}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1473.784298][ T7567] device geneve0 entered promiscuous mode
[ 1474.143732][ T7583] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
05:07:00 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)

05:07:00 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2102}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:00 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)

05:07:00 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2103}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1474.435850][   T28] audit: type=1804 audit(1591160820.881:1155): pid=7590 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3512/cgroup.controllers" dev="sda1" ino=16374 res=1
05:07:01 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a30000000000800"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x0)

05:07:01 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)

05:07:01 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2200}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1474.698499][   T28] audit: type=1804 audit(1591160821.141:1156): pid=7593 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir158484738/syzkaller.dWzPkU/2604/cgroup.controllers" dev="sda1" ino=15921 res=1
05:07:01 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00), 0x0, 0x0, 0x0)

05:07:01 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2201}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1475.096048][   T28] audit: type=1804 audit(1591160821.541:1157): pid=7608 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3513/cgroup.controllers" dev="sda1" ino=16384 res=1
05:07:01 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2202}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1475.216230][   T28] audit: type=1804 audit(1591160821.571:1158): pid=7605 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir186924865/syzkaller.hjDaT3/2639/cgroup.controllers" dev="sda1" ino=16305 res=1
05:07:01 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00), 0x0, 0x0, 0x0)

05:07:01 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2203}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:01 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00), 0x0, 0x0, 0x0)

05:07:01 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0xfffffffd, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000206010200000000000000000200000011000300686173683a69702c7024fec8f55cbe914d6f7274000000000c000780"], 0x34}}, 0xc000)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f00000001c0)=0x8c7)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@nested={0x34}]}, 0x48}}, 0x0)
r4 = socket(0x9, 0x6, 0x7)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r5, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x191)
sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c005fe3f6121863780ae30000", @ANYRES16=r5, @ANYBLOB="010026bd7000ffdbdf25040000000800020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x800)
sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r5, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x30}, 0x1)

05:07:02 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a30000000000800"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x0)

05:07:02 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2300}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:02 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601030000000040000000000000000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r2})
r3 = socket(0x10, 0x80002, 0x0)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000180)=0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r5, r1, 0x0, 0x100000001)

[ 1475.739353][   T28] audit: type=1804 audit(1591160822.181:1159): pid=7625 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3514/cgroup.controllers" dev="sda1" ino=16379 res=1
05:07:02 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)

05:07:02 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2301}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1475.879648][ T7637] __nla_validate_parse: 5 callbacks suppressed
[ 1475.879660][ T7637] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
05:07:02 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00), 0x0, 0x0, 0x0)

[ 1475.995649][   T28] audit: type=1804 audit(1591160822.441:1160): pid=7628 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir072520096/syzkaller.f0iguO/3361/cgroup.controllers" dev="sda1" ino=16369 res=1
05:07:02 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2302}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1476.110453][   T28] audit: type=1804 audit(1591160822.481:1161): pid=7638 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir158484738/syzkaller.dWzPkU/2606/cgroup.controllers" dev="sda1" ino=16290 res=1
05:07:02 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2303}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1476.305163][   T28] audit: type=1804 audit(1591160822.751:1162): pid=7646 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3515/cgroup.controllers" dev="sda1" ino=16365 res=1
05:07:03 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00), 0x0, 0x0, 0x0)

05:07:03 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2400}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:03 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r1, 0x0, 0x47fe1, 0x0)

05:07:03 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2401}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:03 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x3e4, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x0, @local}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xe1}, @NL80211_ATTR_BEACON_TAIL={0x37c, 0xf, "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"}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x0, @broadcast}, {0xa}, {0xa, 0x0, @multicast}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x9}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_PBSS={0x4}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x4040000}, 0x4890)
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000000240))

05:07:03 executing program 2 (fault-call:7 fault-nth:0):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:03 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2402}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1477.001645][ T7666] IPVS: ftp: loaded support on port[0] = 21
05:07:03 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)

[ 1477.060063][ T7666] virt_wifi0 speed is unknown, defaulting to 1000
05:07:03 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2403}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1477.200915][ T7675] FAULT_INJECTION: forcing a failure.
[ 1477.200915][ T7675] name failslab, interval 1, probability 0, space 0, times 0
[ 1477.261062][ T7675] CPU: 1 PID: 7675 Comm: syz-executor.2 Not tainted 5.7.0-rc7-syzkaller #0
[ 1477.269703][ T7675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1477.279894][ T7675] Call Trace:
[ 1477.283215][ T7675]  dump_stack+0x188/0x20d
[ 1477.287578][ T7675]  should_fail.cold+0x5/0xa
[ 1477.292105][ T7675]  ? fault_create_debugfs_attr+0x140/0x140
[ 1477.297942][ T7675]  should_failslab+0x5/0xf
[ 1477.302377][ T7675]  kmem_cache_alloc_node+0x25c/0x760
[ 1477.307688][ T7675]  ? mutex_trylock+0x2c0/0x2c0
[ 1477.312471][ T7675]  ? debug_check_no_obj_freed+0x213/0x449
[ 1477.318227][ T7675]  __alloc_skb+0xba/0x5a0
[ 1477.322587][ T7675]  ? __kmalloc_reserve.isra.0+0xe0/0xe0
[ 1477.328158][ T7675]  ? quarantine_put+0xf5/0x1a0
[ 1477.332943][ T7675]  ? trace_hardirqs_off+0x50/0x220
[ 1477.338081][ T7675]  netlink_dump+0x6d6/0xf50
[ 1477.342608][ T7675]  ? rcu_read_lock_any_held.part.0+0x50/0x50
[ 1477.348616][ T7675]  ? __netlink_sendskb+0xb0/0xb0
[ 1477.353578][ T7675]  ? kfree_skbmem+0xef/0x1b0
[ 1477.358192][ T7675]  ? kfree_skbmem+0xef/0x1b0
[ 1477.362813][ T7675]  ? consume_skb+0xfb/0x400
[ 1477.367340][ T7675]  netlink_recvmsg+0xb2c/0xee0
[ 1477.372129][ T7675]  ? netlink_dump+0xf50/0xf50
[ 1477.376832][ T7675]  ? aa_af_perm+0x260/0x260
[ 1477.381355][ T7675]  ? __might_fault+0x190/0x1d0
[ 1477.386143][ T7675]  ? rw_copy_check_uvector+0x2cd/0x390
[ 1477.391625][ T7675]  ? security_socket_recvmsg+0x8e/0xc0
[ 1477.397105][ T7675]  ? netlink_dump+0xf50/0xf50
[ 1477.401813][ T7675]  sock_recvmsg+0xca/0x110
[ 1477.406249][ T7675]  ____sys_recvmsg+0x208/0x580
[ 1477.411039][ T7675]  ? kernel_recvmsg+0x80/0x80
[ 1477.415732][ T7675]  ? find_held_lock+0x2d/0x110
[ 1477.420516][ T7675]  ? __fget_files+0x30d/0x500
[ 1477.425216][ T7675]  ? lock_downgrade+0x840/0x840
[ 1477.430093][ T7675]  ___sys_recvmsg+0xe4/0x150
[ 1477.434706][ T7675]  ? recvmsg_copy_msghdr+0x80/0x80
[ 1477.439842][ T7675]  ? ksys_dup3+0x3c0/0x3c0
[ 1477.444281][ T7675]  ? __fget_light+0x20e/0x270
[ 1477.448969][ T7675]  ? sockfd_lookup_light+0xc6/0x170
[ 1477.454182][ T7675]  do_recvmmsg+0x24a/0x720
[ 1477.458619][ T7675]  ? ___sys_recvmsg+0x150/0x150
[ 1477.463491][ T7675]  ? lock_downgrade+0x840/0x840
[ 1477.468385][ T7675]  ? wait_for_completion+0x270/0x270
[ 1477.473690][ T7675]  __sys_recvmmsg+0x23e/0x250
[ 1477.478384][ T7675]  ? __ia32_sys_recvmsg+0xb0/0xb0
[ 1477.483422][ T7675]  ? ksys_write+0x1a5/0x250
[ 1477.487939][ T7675]  ? __ia32_sys_read+0xb0/0xb0
[ 1477.492813][ T7675]  ? __ia32_sys_clock_settime+0x260/0x260
[ 1477.498555][ T7675]  __x64_sys_recvmmsg+0xde/0x130
[ 1477.503520][ T7675]  do_syscall_64+0xf6/0x7d0
[ 1477.508037][ T7675]  entry_SYSCALL_64_after_hwframe+0x49/0xb3
[ 1477.513941][ T7675] RIP: 0033:0x45ca69
[ 1477.517843][ T7675] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1477.537541][ T7675] RSP: 002b:00007f45899f0c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1477.545969][ T7675] RAX: ffffffffffffffda RBX: 00000000004fb700 RCX: 000000000045ca69
[ 1477.553951][ T7675] RDX: 040000000000020c RSI: 0000000020000e00 RDI: 0000000000000005
[ 1477.562011][ T7675] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000
[ 1477.569986][ T7675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1477.577965][ T7675] R13: 00000000000008a2 R14: 00000000004cb788 R15: 00007f45899f16d4
05:07:04 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r1, 0x0, 0x47fe1, 0x0)

05:07:04 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2500}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:04 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00), 0x0, 0x0, 0x0)

[ 1477.765072][ T7669] IPVS: ftp: loaded support on port[0] = 21
05:07:04 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:04 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2501}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:04 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000200)=0x10001, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000d40)=ANY=[@ANYBLOB="e40200002000040026bd7000fedbdf253c000000ff020000000000000000000000000001000000000000000000000000000000004e2100004e2380010a0080202b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="48000100626c616b6532732d3136302d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c0017000400000025bd700025bd700026bd700025bd700000000080ffffffff04000000010400002000000008000b0008000000e400060000000000000000000000000000000001ac1e01010000000000000000000000004e2300034e2201000a0020005c000000", @ANYRES32=0x0, @ANYBLOB="000000ef000000000000000000000000000004d43200000000000000000000000000ffff000000070200000000000000ff0f00000000000001800000000000008809000000000000e5"], 0x6}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], 0x208e24b)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x410}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a5900df00000000e9000500010007"], 0x1}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r6, r5, 0x0, 0x100000001)
recvmmsg(r6, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:04 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2502}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1478.270084][ T7669] virt_wifi0 speed is unknown, defaulting to 1000
[ 1478.457780][   T28] kauditd_printk_skb: 7 callbacks suppressed
[ 1478.457793][   T28] audit: type=1804 audit(1591160824.901:1170): pid=7713 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir186924865/syzkaller.hjDaT3/2642/cgroup.controllers" dev="sda1" ino=16384 res=1
05:07:05 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r1, 0x0, 0x47fe1, 0x0)

05:07:05 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2503}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:05 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
ioctl$SIOCAX25ADDFWD(r1, 0x89ea, 0x0)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000002c0)=0x14)
bind$xdp(0xffffffffffffffff, &(0x7f0000000000), 0x10)
gettid()
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001a00000226bd7000fcdbdf250a14101fff03fe070000000008001900", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="14000500fc0200000000000000000000000000000500140081000000e299095df4a8d18b49260624e9d4558a276bfad8aedc37bea97ede98c5c8779fec2212a0b9f58c0210fbe99b5e7e8438e6134bf6e991e3916593f7369387d68ee302843df2b22fc7091ed519f084a5748f6a628ccbfe0a068a8fb5372ce2b7b9fe9f9f2062e8f35d8ba46f037a8caf97524f942d682b648f302e8e8e8fe111811100e6a98ab67e9f3e66204dc0e7835f72a199ee47980da4b11a4ddfa76067d7996a739d7effd77ff468195881bed265009961014728275446c6f68d5b05dc82ee81c8c3c609674e90f50651fae77b1c99b7f493ca9729be219e3428e4c7c90e13fc8a04f5a86231b44150c821da350c816fb843ae2b733e851e2b6b87497839e5497e4076bdc94e6d340cd688565d80ffad04bee19970731c5395c1334e4bd8526423ceb2214455846ea18ae8b4f8410ca5c7000000"], 0x48}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0)
syz_genetlink_get_family_id$devlink(0x0)
socket$l2tp(0x2, 0x2, 0x73)
gettid()
syz_genetlink_get_family_id$ethtool(0x0)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0)
getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)

05:07:05 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:05 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
sendfile(r2, r0, 0x0, 0x7fffffff)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x2343a726)
gettid()
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x1}, 0x8)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f000000a6c0)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001640)}}], 0x4, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)={<r4=>0xffffffffffffffff})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
write$binfmt_elf32(r5, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0xdb, 0x3f, 0x0, 0x13, 0x101, 0x2, 0x3, 0x1, 0x18d, 0x38, 0xcf, 0x3f, 0xffff, 0x20, 0x1, 0x1, 0x4}, [{0x7, 0x6, 0x800, 0x7, 0x3, 0xffff, 0x8, 0x7f17}, {0x6, 0x1ce, 0x5, 0x4, 0x7, 0x7f, 0xbf, 0x2}], "87a05a0aa952b9025e797d0f644838463df74a80f783ccb507f55c61ba81ccfd032c9877879ee08e97bd25cf31d295384d96b4e142bc6d23806358c2bbafd19193f43c111cfcdfa9ed00c5b6e8"}, 0xc5)
socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x17, 0x1f, @l2={'ib', 0x3a, 'vcan0\x00'}}}}, [""]}, 0x34}}, 0x4094)
recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0x1005c}, 0x3f00)

05:07:05 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2600}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1479.198290][ T7753] IPVS: ftp: loaded support on port[0] = 21
05:07:05 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r1}, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200)={<r2=>r1, 0x7}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={r2, 0x53, "a2164de49ed4ff9dca329378ab9a63002635a9a3f76bf03b7241e08cf47d50d0b32a23b32474664f8ab03fae3580d94b84880a145a05e14dd77e78ed47261848ffa7f38988c7b30b2cedbe8ff9817d223d8f02"}, &(0x7f0000000300)=0x5b)
pipe(&(0x7f0000000040))
socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00')
socket$kcm(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r7], 0x4}}, 0x0)
sendfile(r5, r4, 0x0, 0x100000002)
getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68)

[ 1479.231249][   T28] audit: type=1804 audit(1591160825.671:1171): pid=7751 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3518/cgroup.controllers" dev="sda1" ino=16374 res=1
[ 1479.269931][ T7753] virt_wifi0 speed is unknown, defaulting to 1000
05:07:05 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2601}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1479.538347][   T28] audit: type=1804 audit(1591160825.981:1172): pid=7767 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir186924865/syzkaller.hjDaT3/2643/cgroup.controllers" dev="sda1" ino=16365 res=1
05:07:06 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2602}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:06 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2603}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:06 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x1, 0x0, @remote, 0x3}, 0x1c)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="df", 0x1}], 0x3e}}], 0x2, 0x0)

05:07:06 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2700}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:06 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, 0x0, 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x0)

05:07:06 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x3, 0x0}}], 0x40000000000020c, 0x0, 0x0)

[ 1480.099244][   T28] audit: type=1800 audit(1591160826.541:1173): pid=7757 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="cpuacct.usage_user" dev="sda1" ino=16367 res=0
[ 1480.305674][ T7782] IPVS: ftp: loaded support on port[0] = 21
[ 1480.322741][   T28] audit: type=1804 audit(1591160826.771:1174): pid=7804 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3519/cgroup.controllers" dev="sda1" ino=16376 res=1
[ 1480.424435][ T7782] virt_wifi0 speed is unknown, defaulting to 1000
05:07:07 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x1e, &(0x7f0000000080)={@local, @random="e2653faa0d20", @void, {@can={0xc, {{0x3, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "aaad940f00c463e5"}}}}, 0x0)

05:07:07 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2701}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:07 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:07 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, 0x0, 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x0)

05:07:07 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
sendfile(r2, r0, 0x0, 0x7fffffff)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x2343a726)
gettid()
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x1}, 0x8)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f000000a6c0)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001640)}}], 0x4, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)={<r4=>0xffffffffffffffff})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
write$binfmt_elf32(r5, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0xdb, 0x3f, 0x0, 0x13, 0x101, 0x2, 0x3, 0x1, 0x18d, 0x38, 0xcf, 0x3f, 0xffff, 0x20, 0x1, 0x1, 0x4}, [{0x7, 0x6, 0x800, 0x7, 0x3, 0xffff, 0x8, 0x7f17}, {0x6, 0x1ce, 0x5, 0x4, 0x7, 0x7f, 0xbf, 0x2}], "87a05a0aa952b9025e797d0f644838463df74a80f783ccb507f55c61ba81ccfd032c9877879ee08e97bd25cf31d295384d96b4e142bc6d23806358c2bbafd19193f43c111cfcdfa9ed00c5b6e8"}, 0xc5)
socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x17, 0x1f, @l2={'ib', 0x3a, 'vcan0\x00'}}}}, [""]}, 0x34}}, 0x4094)
recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0x1005c}, 0x3f00)

05:07:07 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2702}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:07 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, 0x0, 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x0)

[ 1481.074661][   T28] audit: type=1804 audit(1591160827.521:1175): pid=7808 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3519/cgroup.controllers" dev="sda1" ino=16376 res=1
05:07:07 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x4, 0x0}}], 0x40000000000020c, 0x0, 0x0)

[ 1481.219821][   T28] audit: type=1804 audit(1591160827.661:1176): pid=7855 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir186924865/syzkaller.hjDaT3/2645/cgroup.controllers" dev="sda1" ino=16367 res=1
05:07:07 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2703}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:07 executing program 4:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x47fe1, 0x0)

05:07:08 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2800}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1481.506432][   T28] audit: type=1804 audit(1591160827.951:1177): pid=7872 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3520/cgroup.controllers" dev="sda1" ino=16375 res=1
05:07:08 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000300)='sit0\x00', 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={<r3=>r1})
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f00000001c0)={0x27, "195eec11e9d530f372a73fb31fb27db3c1ac86636b462badbd8aab5fb096762b5e1388b27370ec8a5f450d203832407c1fe00f911147ae4f8a6af407c16ce6db7855789d47127a707b7e4ab5e1a293c2eba6d7231c17797882c14cdb86cec41679e8aad89e02fd8a6aa2f80dbfde143dc73096ca63d6d5e2423769567fa83d86"})
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x10000}, 0x14)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x2, 0x5, 0x6, 0x1, 0x2}, 0x14)
write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xff11)
socket$packet(0x11, 0x3, 0x300)
splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0)

05:07:08 executing program 0:
r0 = socket(0xb, 0x6, 0x5)
getsockopt$inet6_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000000)=""/201, &(0x7f0000000100)=0xc9)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000001c0))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000019c0)={<r2=>r0})
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x44, 0x13, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004010)
getpeername(r1, &(0x7f0000001b40)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f0000001bc0)=0x80)
connect$inet(r2, &(0x7f0000001c00)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/net/tun\x00', 0xc00, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001c80)=<r4=>0x0)
ioctl$TUNSETOWNER(r3, 0x400454cc, r4)
r5 = accept$inet(0xffffffffffffffff, &(0x7f0000001cc0)={0x2, 0x0, @loopback}, &(0x7f0000001d00)=0x10)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000001d40)={&(0x7f0000bfe000/0x400000)=nil, 0x400000}, &(0x7f0000001d80)=0x10)
connect$phonet_pipe(r2, &(0x7f0000001dc0)={0x23, 0x1, 0xc1, 0x40}, 0x10)
r6 = epoll_create(0x200)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000001e00)={0x20000000})
getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000001e40), &(0x7f0000001e80)=0x18)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000001ec0), 0x80000)

05:07:08 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2801}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:08 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2802}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:08 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0xa, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:08 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="f824510b95fc81763fe4bc0bda73c67da3d5e46b1ecb146a0b6cbabe9d9bbed9419e5283e4361350b1064230a2e90bcf6f8ca33a3529b65447078994bd7ed3feef9c2598d78b98000079c43566b2ce82c4ad2461a8c1c169271234dd53f4a432eb051af935f56381ddf775b31be71f60ddae0b401579f15a"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a01000000000087a3db980000000009000100737b7a300000000084000000080a8381933a000000000000000000000900010073797a30000000000c00024000000000000000032e000240"], 0x1}, 0x1, 0x0, 0x0, 0x4048400}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x4000011}, 0x90)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100736974001400028588000100991c485d89e1812e9f97b549ea76f390698894c67580e98d449d3b44e98895c77e5b233e9ea671908b1b27782fc94a3ce229414159f4ecdbc64070e229d5f3e1", @ANYRES32=r6, @ANYBLOB="08000300ac1414aa"], 0x40}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d001030031b95c463b733e304d7de829fc96ea3cee4841538733e7656f6d70a520050000008948af8e7ddb8a7d7add5828cdc3b42c47e8711014d22dbab8c01841ecd2968f97e8ed515006d48bb3ccf39888299acdb8f89a44e94fe1f289ce25fe00339d332866f6f3529d5e7e836e9174c9ab2ede1aa31203e01081dfecd3b2217995", @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="b400028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004005fc9000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040001000000"], 0xd0}, 0x1, 0x0, 0x0, 0x20040000}, 0x2400c000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x100000002)

05:07:08 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
sendfile(r3, r2, 0x0, 0x100000001)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
sendfile(r5, r4, 0x0, 0x1000001a8)
r6 = socket(0xa, 0x6, 0x0)
close(r6)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7, @private1, 0x8}], 0x1c)
accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14, 0x80000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000000)={r8, 0xfffffffa}, 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={r8, @in6={{0xa, 0x4e22, 0x1, @local}}, [0x2, 0xffffffffffffffff, 0x6c9b, 0xfff8000000000000, 0x20, 0x0, 0x13b7418c, 0x4bdb9a8e, 0x3fe000000, 0x23, 0x2040000000, 0x1, 0x2, 0x6, 0xffffffffffff8000]}, &(0x7f0000000000)=0x100)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r8, @in={{0x2, 0x4e22, @broadcast}}, 0x3, 0x4}, 0x90)

05:07:08 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2803}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:08 executing program 4:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x47fe1, 0x0)

[ 1482.479810][   T28] audit: type=1804 audit(1591160828.921:1178): pid=7898 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3521/cgroup.controllers" dev="sda1" ino=16369 res=1
05:07:09 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2900}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1482.567815][ T7902] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1482.618914][   T28] audit: type=1804 audit(1591160829.011:1179): pid=7902 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir072520096/syzkaller.f0iguO/3366/cgroup.controllers" dev="sda1" ino=16379 res=1
05:07:09 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2901}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:09 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2902}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:09 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2903}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1482.798756][ T7902] 8021q: adding VLAN 0 to HW filter on device bond20
05:07:09 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'veth0_to_batadv\x00', {0x4}, 0x14})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00')
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "cfd1e49b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}]}, 0x44}, 0x2}, 0x0)

05:07:09 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2a00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:09 executing program 3:
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002580)=[{0x6, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}, {0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000240)="07252b26800c56336f93945c5da70295fab071dad9710092c21eb347450d371738ade93b73291dacaa541083bd3bea78e008e9dc14ad6ec448592610ed464f0e6f9ed06c1e9c875651813b7f17d306230c6510d2bd8a0024172be73afac936b75cac3cbcf89594af2fda3c9a6e61a8bfb5db3cde904f089fdd92ade87ade2fdca52537f68888bf128ea80c4f96cd69e2e5948281e00ae5a420e9f283f9a971e1dec4caab4905542f81e240f1afa8407cc32d5920299444a3da5d16615cdcff542060ed0106fb283989a1722629df75e4151e6a7ffeb8df4e72ed389cb6fd", 0xde}, {&(0x7f0000000080)="1a6e10ad453506551ab5823fa4887d222529", 0x12}, {&(0x7f00000000c0)="e2e974cdeafda304ce7744f3984424154b", 0x11}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001440)="4b8a0b36efa6a74346d9c2d5d623791f28542a9725cf9b623c9d67c0b911aac1a76491132f53e151dc53f578de9599f124e2c8a250e6b01c35930880ad4c687232987e0c312997d3d1833f83b51039c146c8932b04c6e58ea302f141dd670a592a5839e1092fa9bc04e40bb27b", 0x6d}, {&(0x7f0000002600)="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"/4281, 0x10b9}, {&(0x7f00000023c0)="0cd1dad7bb14a67153f8f417ab72fd99e8e07774f21f533d57bb47e2f9206b80f82495dee94716a4c88f51a9a4d8cc9f7ad4c45ff5750fb72f0b19d7648ff6cdc4816459806ccf65ef1f1942c308742f678a0c821cb18a38a22e86f4d1e60c33b3fc1161340cb4d384a638c0028b73097d7244bac151fc2831186be551a6e62c179b86fc", 0x84}, {&(0x7f0000000180)="67cc437a6c3c32976c97e8", 0xb}], 0x8, &(0x7f0000002500)=[@assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x24088800}], 0x2, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x15, "f70e98290c563e88cfcc483036fa8eab567264bcde"}, &(0x7f0000000200)=0x39)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000015c0)=ANY=[@ANYBLOB="200000006800030800000000a90300000a0000000000000008000500024645a964b3cf91a9ef417b35a3e6fcaa6171f68258ac88324682ed098148c4c2cf8672d77ec1e1a2a25655248b126ec375e919c40f7013da4797b0d4bd35eab8f1095e0db95a17eab18448f0749d103c5028768b95bd768fe50721a256cbf412e4f0298361c2338d973a13a8880e427f389b4c2b76", @ANYRES64=r1, @ANYRESOCT=r1, @ANYRESOCT=r2], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000001340), &(0x7f0000000140)=0x68)

[ 1483.204184][   T84] tipc: TX() has been purged, node left!
05:07:09 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0xe, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:09 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df00000000fdff050001"], 0x1}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="74000000660000042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x20000044}, 0x4040000)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=<r5=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r5}, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)={r5, 0xa7}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r6, r1, 0x0, 0x100000001)

05:07:09 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2a01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:09 executing program 3:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r1 = openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000140), 0xff4d)
sendfile(r4, r3, 0x0, 0xffffffff800)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @nested={0xc, 0x26, 0x0, 0x1, [@typed={0x5, 0x6b, 0x0, 0x0, @str='\x00'}]}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x34}}, 0x0)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r7 = socket(0x10, 0x80002, 0x0)
r8 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000000)={0x90000020})
setsockopt$inet6_udp_int(r7, 0x11, 0x65, &(0x7f00000001c0)=0xfffffffb, 0x4)
connect$llc(r6, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
connect$llc(r6, &(0x7f0000000280)={0x1a, 0xcb, 0x1f, 0x1, 0x3, 0x1f, @broadcast}, 0x10)

05:07:09 executing program 4:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x47fe1, 0x0)

05:07:09 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0xa, 0x0}}], 0x40000000000020c, 0x0, 0x0)

[ 1483.361504][   T84] tipc: TX() has been purged, node left!
05:07:09 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2a02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1483.444670][ T7977] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1483.462202][   T28] kauditd_printk_skb: 6 callbacks suppressed
[ 1483.462214][   T28] audit: type=1800 audit(1591160829.911:1186): pid=7978 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16380 res=0
05:07:09 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x14, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000240)="1a2df485e592a7bce2cb398193f27b9a6d23c26f7834d0215d9c687e86424037f27aa0b605e5679fc6f1e53dbd172927ceff64f13e97989c8bc09654577ca4806a453570a486744c6e583d3e860ef049bdfb4ba741cb7527fcf9e8c988ddf2bbb8ade5f6829d432f2054d34ae386", 0x6e}, {&(0x7f00000002c0)="54a3d9f9f3f0ae40a8efb4e2eb34372c29b5620d6e65c7ce230b756e362bc32874c817b49883bcb8d1cfb45ea6a569b0e262d436be12dbb9e719870ea57bccd4571f29", 0x43}, {&(0x7f0000000340)="67d26d7022b4cce2d76a0004bca422aff20c911f7cfe837dc03d84ff59b1b85de1db5dfe362889649982001a59eabb138cbd4e63db49b3ca3bd82f830a14b467268a227b0f9bb08dcc832b880a8f89903f177f672beb040c87260cc93892f5c7e97dc250df3c4f90e762d5ad496b25e3c6c8e8bbde2355cf5f45d45bda39b43020b2691b7188440706ca0a62a6aa6793ccd68bca5753210294c34be374d4555b0e0e5051b9a3b54ca02406d22e03d1198e942eaa9a7d77a5800848622d622a99f387d2c4841f41729d26000627f05a7db6a88410bf1662d1dc5f7d49bf3056d6098b37ae7c9e49156d0f", 0xea}, {&(0x7f0000000c80)="8152bcf7693319f82fb00487cca633e243c318f7fcf03926f4bf9eeee10ff7e0d43c13b0040acfc36ddb0c727c9dff6b3af814f4c100a594b344d92bf887162c3a4ae904cf6ef059213b884cae4a019728892341ab396c2cc3d1c183dd889da452951447728e09c5551f457f2cf1e477b6ff4dd9cb690909a72ce11f99fb5326b0a4f33a89c390faeec580622a1bdfe891c6284345baaab0e02e23029f0a73689ca609c93b0b8ae94d8d118ed3425fcef2ac04c1332aabe4587b901dc1b7d1c9067c123dd948d1e5ac1e4fbac3e7754b62d4f2762afdac30dcbeaf98faa8fe6813c9ca5fe56d0f829b4969409d8bf245bf88f709763fd9673bbae33c2195edee45a5a34461c875358a8e93d3695b91ecb8f679b8f151fda1d5216bbc34b29db67f87f2394bd03a1dac1d68e14285e9f1d3c4eb5459f4bfb1afa212389c31ff0cda9fbfe218cc7613cbdf0801a0c19ecac5bd06a2d59f234fffc7a5392e111e37563b64dc28c5c17ad13f9d95dbfdb127693cfde7b4e3b0bd9238f7b07f30ae899965f25a6aeae6078c25ec1ea4985404df0d86ce9788fab883525f02624575c9a4a452e591a995f463aa6afb312315871c04cc93ecb61a259adb5a94ba5b4cee5782eb1b419b5596e86402b6298bf063bece668fff2a270e353c06b28f7130e070469bbb5fe5dcd086ac1df56d5682371d43ea7cc900de98c7a34f334b00319cac5255cd9540962d893d4fa687050ac244a1b3b195b38219ebd72eb8d93c8995bdd1840ee79beb7b197ba2730497dfffe0187b790b1054595f1ebb8fe249acd94b507a93d869b3d513807e72b5e6f03063b0a84a1ac648145de14d18ec4bae201d81b470d6ef9752ff044f71e062f362fb6f3261cc61ebb53a6f2d7ea5d3dd85637ded02f283a71e999eaa734d7f9be981ae5ab35b0f7e994c6651e5a6bac48f4fc811553d88e11bf40c9e0e4c64dc9d52c7e5fe1ffed559c5252e4784cfc8671d304b3e22f57b6f45df5a86869ed202eea45bb6854aa4fdc2c9849bb27cb1a008b208ef52902415d3b59f31ce6f59c1a79989e1750a96bcfea9aebdffe0be1fdd260c258753ea2b26d8322276abce2449b11489f74024efa8195a115e59ce103f56de8df967982e373a91f29f4f87ec6aaf48ae0c93cbc83ac8149d1c03fff2c9ab7860e61b93f0a2c85f581ad48e6b62425af0d3b2d0ee90f6bda008a3d436d507f50a1290fcd3a3f0b4b6737e386717973aa5c2d3906d746ac083237d1972eaeda87e31067f98d2a35170038fc4b04a4ed146f6b13556c1abd746a44c8c768941907280d1234a795468f1a745858a4c566be7f460d7e1e29945cd1f6b9b33d8b7a30ec4e079a69862bb094535f631a41b18ff21d3b30da83d90dab734276c68e0ffc5a06b523123afe82834078090ae8e81a0774d48a76733b801764339fe66fa7f1b8a0afefa6768a5e0e11468da23aabaf8dba2798506806cec7dc39925a634cd56244dd60d54aad0839c4ebd8ddea5e5deb72175ce6b3eed2163d030f732066aa894e864527557bd81f39f3a1c35b3274161c4b35a94f2fcab594c713bbeb80fef316adf592ce09d45a5126618d788b98abd95a9e7aad2a98df2fd14f5399ba52140ad4fa9e916dec51b027dfa8b6667b38f8560deb78d3234bab0680f01c4e2aab0a98748d7401e8d2c957cf026328bab39c9e6812bc66c543d5665a20b00c641d68bb2d6e6310b253012ce96a20b18706fb096b316c6e060dc22bb5aaf911d0a83c9f14cac52b0dd59531ea91ac2935ad51f059e9774958ee2f996cf59c0e4be2859683cb40641046553e18cc54cf89f196064c41f95b029b0a97c850b6ee8dded5712be656007f28b4fc587ca02eb52a0c84b99d6d84682004eefc53fe795386fdc3749830a6fbb91bd92d790bce7dfb32ba562fb2415bd62b1be184341d9af954cefd932c61472562770bbecd341072f5659877387f1fb9e7423a66fb616b3f256c3e1223cc448dc79e97ea5814ab1b50c768972fdb3fac91bf547a503c64ecf227603a616e64c09491cca525bb5b55c8098183f94e0263100cc51f71c3c9e3b359c8972df7ce0d375bd7c3946a6881567f92641a7b52ea34984b8844a894a77ee4868576837e4efa0d205a980d813bcb81fb3f883985529e6c9a7eaab34142bf96a7ef300663cd46883e225c4a7d81e003b4bd5f9d460700186b943695abd7f9206fc26da9ff55ea6db20a0246d0ab0a165bafbf53abe27b3bb2e67c9c88cbef2fa6e49bf007b8a81df9d53c1870d85b7849f7c3b0ce6ffcabcf8d110d772eab1250ccba004f6d2ca8ce1c2fe3ab5510ed1f65a9fb39136f04d17efb92965550663ad32430b8e4a5b01014c5495cdd467242e1f105e28190c701c84102adf9a195eebe12f7ea69a03382afbcd442812827d0af5a3c23f997b84da82624ae6203cdac4f9ddd986389719a4dab1a7f933e51d475b1b6d6edde76bf618df67e7366411e23c1f6cd13120430f1eebfe18d0d8cc00f68a9cf19458b0d4c98b2b88bc4401f6f31611c5eba6d7efd976566ddd127a96456055a392390a8fe3ec057e64d0d6217de01e04723e9828c55cdac96d16461dc3073b7b181a018ab2bd2ef1d3a2ed110cacd29411455cd6f0fb249eacc49191e3de4ee3742050385e377fb067eef338a5be407239e0578244caaff1d24e7544a27ccab59f4e4f974fabdb280c64cd365661923ee1fb771819db0cca2da0a03a8579c60bdc392141e9e18d04aa0bb0a7388fccefe6abe401d86cf0dd0a3f7c5a0ff7ede057581c7b6cd47cda74025cb0d10a161867093671aec4697a3c79c34d4cead877fa5b3e885bf064994ff6c63f8420644ae7c665107863911cf4acee83dff01a35ec2767e813e539cd3b46db7316ddd7a63ab02302307e418709555d418bd43d42c6b7f7cf0c151492a3799bec76c140281850b644d58a741be55df717c8330fc14ef7f71c734ea651b8b67f9d85faeb2b1ceb1faa0b8bd0eba9f355e695a501fc7bdaed4781250f4f9716438592491b224bf70376fc05109db0a239c931791fb173bf9a9aeb9e872f84d84b9c1f4172295b7b6ff0bbbdb58bc9721fc82c911fbaf29d29dfe1e267cabd280ee9f986f4508cbbd7750271ef12bc2eaa2de34575cbbaa2a3b512b0dedb8f304c48fb14edbfaae339de79a689cee846f9b64f859c4c08b520262ad829bf80a026f691577923d3fb5d8addf0be38007325e650e2497d5758e3ea21a3432c365398d0b35e96b439245162b6580e4c50b851d116d91c7021be8ba5647a6561c3e41a561e645a76dadf5bd280b30f4778c0c1f708e3301e108347cf243d72aa7ff63f3437350441e2910716087267772985b6752722eb7f83cdbfe93536148d2fabea48fda66aeca252cac6bdd892ec6111ad88e5e7edae5b5686e7630283756e87c4b7aa507e92ef0ce85ff7c568f545caf60ea35abc8a435c0522adeaae892db7842b75fe2631ff4e731ada0580148f4ebaf2c847696871ddf435ad81215601b06750eb24b7aeab1124e780c1a2b02a0574eec5c5c98d0dfa7b898954ce9633b57d4f18e1c47d4880cd3a0137a2575f20daac6f5762555cf43c476b6af56844b11b5e751cd22f283b5abb5612804d6bb3ada8c7a03eee0d55a0be373232834fac6822dc2df1847957303a69cef4a1da87326640f7dc54d21868b7c3e44c5f3e3e0045176c2e18e57594bf32b65a66576e7a1f24526bf1684a7a1afc4140a2bd05f9cd52fec82630a6cfef6877bd1ee28cec751c3ae931a49a22d6dcd26b3666fdfd234a260f05fe129b5c71d71d68d3659f8ceaba12cc89e7285cad9e1721abc4687b098e85d976630710ad7ed5587d839d19d176faa10bed96f53fea55172ad2d34c3ce369b5607454f03bbd1fd2f93a7999ca0ad52b6e45ac108608f0268975a1942f37ef25097dea37463fe09808527ea9e1389bb61b715faf1c6901607f6e0ad43264a8ef1134693fb85b7db297eedeffa3ebe78dd2cbf16c6c35ed0f7db7fba8bcb55fe9d246341a65c1011ac94863b7a77879fa39997d5a12938d7541017dc3bdb91aaf5030a245a7811d4dd36425502860e98570c860b66276e290b9ef3f2d7dba06a515baad30720a8e905a0ed710a66f6ee9e5bc4c346acdd88102fce30ad977b0c311006ca289ec1ae3f627f405077a441f8945e1c099e4829d5f1399d6c2effbf45e91fd31cf141541a6623a909df40e08a6354c3c46c20c050467cb9ac03c639df4d6b454cdd2d7b728d85ab9332991c50be75bb7f3be338e59bdf224e9489dc53756a5a4d6eefd36f07f8444eeecc232820e9f9821f5c90e4f8d7df3a807699b058e8c3ab59c7e91af3960d21b9ccd19cc056a16c1dab17e62fe3eca235a9a939ff7b3712e0ee61714f2a5c06e86436de44ed0be6f335734cf47987c996bf6c17b06d47f91b5eaed951caeed1b200f77a48d770eb09dea61feeec29b6dfb9012c0cb83b7c8e3c34d43679806cdbca914fbb678e463a48ddd3dc331b33d98f4e84015f6b6035f6eb30835622401b5cb82db79b73087d64b5922f76d0b72359229951e051476f34ad90cd932be282de0633fd8abf9720fb7d346a02f8d8e651a3faf7625b4b404e0ef92f0dce8d5a96d083717ac902639083eb526fba5df432f90d7a743cd8e112706f3f84adcdefc1526ac5fb35242ed0fa9fb59fb8dd373c53895891f4c17f74e4691eda64f6aa3a975889b84cb250ab4a96382859cb685512d8e20f6a6d4e0adabb9dc9708d5f88508d94b073a791f34708db686d5f85dac4ceacf8516fd4fcc60864ef179b435221133dab5f0e99316695ba0f0e152c30f20ab0ecc30692d4f824fdded6586558862ddb237f0edb6f341053f1055bc2da57b5b2fd0dda564bf5725a17bd92cb6932e82be6f094991d4b0b586f820dd1c651cb37ebf5fb1a4231fbd4748956c5bba03f1f6d5688a588404c94b07af792fd2f61eec091e04019f12e21db0d6fdfd4ffffbfbaa90818c85e3eb75fbb55f856c7f09a4ba367d411cff65a92c021f2363b9d5b967dcb110af871a8dcf0ccbd9f173b7aa908267582eb60b35e99982e17c6b6ee1c6650f23fd52ad5c88678cce409e4b3df0529dfcc2dc81be3cb8c6484b5d14e9d7e964086e0668ab00815172bebc5f7ef0de29775525ef12fa74c1bb902e5b8967a70cc75d1ced044199811dd127a0bf156b8d6725c5a2bc730b7d1fdddb2616258d0a1bacb1818ea811bf20e82759912366fed3cd0834abff7fdb009b89c92bed4011fd988f9fbe1d144522780e34563e01bf347e6acc63741440ed930aa92a8c70fd9c05220d7fe2b590fd6d7bce75ae9e4b4ea6c76c6252d56b2243cdac96d16cc291deddd513d0ee6ef1e69014f2b2adeff0408e184e99fd6b2b0848f9c0d4410cc99a3ff6d2b59e37b24df8d8dacdddd0fceabb614c4cf83aac3d304c63a303921f2c75573ac278fe9d212be294967a69ef12904389455d10f9d677b5f7cd168ba53a77037c631bfcf5d8230457b766fb8c0f62ffb388de7d66996b1c12d133cb3920507eeba0cee887f325b87ad67f9f5a0def099453ac3c2b9259c3258a3a764110884828592991ce4c6bfc1cbcfa6eb8c6658d19977d0a4528c27361cc9d8532435bbeba80f8dc874c86584f42eb90dd5e1fdd9038d24a6734abe9ea462795d59dda0abc44c7d84f0e3f19765bf69d4c1f5500fbe4690a185f4b2d06659b543e8fac077cb70e02119e9efd7d7476d181e9047e50ecfca5021f684e84fcfb", 0x1000}, {&(0x7f0000000480)="f515116f7719d147bbc6b82085e630e857863f6822faf2b53eefad4358365400b40768fcc5270da25b1c5581a70532310e920711c0764e9c1d278c241807efd2fe053e3fa5e37d79df1b6f2e4b57a8a4a021307e823f5faeaddc6c346977aa1429f0cebf54b86ed95115ad95398bfaef2b86688422af65f362077ee0e6a39cadbb4c92fbdf7a7cc9de97b3772837381e914684e11f71dc2c6155d4062102dcbe2f", 0xa1}, {&(0x7f0000000540)="e8efc8018840643ff514da58336db82f42b36db6a810c0f64eb3edfa4c231f29b9ef1b8ed56bff55d48fba9b40977ec8c2e6b52b34553e03661149fea0e4a80da489f340b9dd516c636e2246c35707fb920f9e9b68c9ebbe86746a1089c29c65311f1d1154be8d86bc2fbd2e6e598925af65acdbf1e653291d22ec53f6d669f4f81f686e84b39d4b8ea6dd1c6d16593d68e76bdb4ff2eec24439", 0x9a}, {&(0x7f00000000c0)="2163f680b15c", 0x6}], 0x7, 0x5)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32=r3, @ANYBLOB="080009004d9f3caad0ecc572a0efb13b14f2e79b73d6ceb6348c588688aa4a0565626675753cc7fa00f69e25b4b9b12758b770476649e083bfd191d5f69df84aff0000004491f00cd951f37fd564ca03cd72b0", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0)

[ 1483.511758][   T84] tipc: TX() has been purged, node left!
[ 1483.575191][   T28] audit: type=1804 audit(1591160829.911:1187): pid=7983 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir186924865/syzkaller.hjDaT3/2649/memory.events" dev="sda1" ino=16380 res=1
05:07:10 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2a03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1483.671525][   T84] tipc: TX() has been purged, node left!
[ 1483.735283][ T7997] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1483.757135][   T84] tipc: TX() has been purged, node left!
[ 1483.767497][   T84] tipc: TX() has been purged, node left!
[ 1483.801935][   T84] tipc: TX() has been purged, node left!
[ 1483.812516][   T28] audit: type=1804 audit(1591160830.261:1188): pid=7996 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3523/cgroup.controllers" dev="sda1" ino=16376 res=1
[ 1483.866164][   T84] tipc: TX() has been purged, node left!
[ 1483.886511][ T7998] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1483.898585][   T84] tipc: TX() has been purged, node left!
[ 1483.936284][   T28] audit: type=1804 audit(1591160830.261:1189): pid=7989 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir158484738/syzkaller.dWzPkU/2612/cgroup.controllers" dev="sda1" ino=16366 res=1
05:07:10 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x4000000043)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="eea50000", @ANYRES16=0x0, @ANYBLOB="000328bd7000000000000100000006000a004e220000140007000000000000000000000000000000000108000b00", @ANYRES32=0x0, @ANYBLOB], 0x38}}, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r4, &(0x7f0000000100), 0x8)
listen(r4, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES32, @ANYRESDEC=r2, @ANYRES16=r5, @ANYRESOCT, @ANYRESDEC=r3, @ANYRES16], 0x80}}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', r7})
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5f0660a11850283821954a58ca3606000000000000001f634f", @ANYRES16=0x0, @ANYBLOB="100029bd7000fbdbdf2d02000000060001154e24000014020900200100"/42], 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000000)

05:07:10 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2b00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:10 executing program 5:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00')
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000002c40)={0x1c, r1, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}]}, 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="0f86fd770503000000", @ANYRES16=r2, @ANYBLOB="00022dbd7000fbdbdf2512000000060028000100000008002c0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044810}, 0x8000)
socket$netlink(0x10, 0x3, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
accept(r3, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000080)=0xfffffed1)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000000c0)=0x800000002, 0x8)

[ 1484.101453][   T84] tipc: TX() has been purged, node left!
[ 1484.137690][ T8014] IPVS: ftp: loaded support on port[0] = 21
[ 1484.204355][ T8014] virt_wifi0 speed is unknown, defaulting to 1000
05:07:10 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2b01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:10 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2b02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:10 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x47fe1, 0x0)

[ 1484.401505][   T84] tipc: TX() has been purged, node left!
05:07:11 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@delqdisc={0x24, 0x25, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff, 0xa}, {0xd, 0x10}, {0x1000e, 0x2}}}, 0x24}}, 0x0)
r6 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r6, &(0x7f0000000200), 0x4924924924926d3, 0x0)

05:07:11 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x60, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:11 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'batadv0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000005b40), 0x4000000000001a9, 0x0)
r1 = accept(r0, 0x0, &(0x7f0000000280))
setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000003c0)={'nat\x00', 0x0, 0x4, 0xe0, [], 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f00000002c0)=""/224}, &(0x7f0000000140)=0x78)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000440)='threaded\x00', 0x9)
r2 = socket$kcm(0x29, 0x1000000000002, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5452, &(0x7f000031aff8))
ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000200))
sendmmsg(r2, &(0x7f0000002780), 0x3fffffffffffe8a, 0x0)
ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000100))
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000000c0))
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc6004000d000a0003000200000037153e370a00098002000000d1bd", 0x33fe0}], 0x1}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {0x0, 0xffff}}}, 0x24}}, 0x840)

05:07:11 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2b03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:11 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x38, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x41004)

[ 1484.804868][   T28] audit: type=1804 audit(1591160831.251:1190): pid=8040 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3524/cgroup.controllers" dev="sda1" ino=16228 res=1
05:07:11 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2c00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1484.860425][ T8047] netlink: 'syz-executor.0': attribute type 9 has an invalid length.
05:07:11 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2c01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:11 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2c02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1485.346814][ T8050] netlink: 'syz-executor.0': attribute type 9 has an invalid length.
[ 1485.364429][ T8058] IPVS: ftp: loaded support on port[0] = 21
[ 1485.470274][ T8058] virt_wifi0 speed is unknown, defaulting to 1000
05:07:12 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x8c, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:12 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x47fe1, 0x0)

05:07:12 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2c03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:12 executing program 3:
pipe(&(0x7f0000000d00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="20012cbd7000fddbdf25030000000800010003000000080001"], 0x4c}}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
ioctl$FITRIM(r5, 0x40305839, &(0x7f0000000000)={0x0, 0x8001, 0x200})
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="ee08aa49", @ANYRES16=r6, @ANYBLOB="040026bd7000fcdbdf250800000008000400ac1414aa2400070073797374656d5f753a6f626a6563745f723a7373685f657865635f743a733000"], 0x40}, 0x1, 0x0, 0x0, 0x8048094}, 0x8805)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, r6, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:syslogd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0)
close(r2)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac0000000001190500000000000000000a0000003c0001002c0001001400030016f8bcd383af9b1577def13edad6b8bf14000400fe8000000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c000100140003800000000000000000000000000000000014000400ff010000000000000000000000000001080007000000000018000600140003"], 0x1}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

05:07:12 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'batadv0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000005b40), 0x4000000000001a9, 0x0)
r1 = accept(r0, 0x0, &(0x7f0000000280))
setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000003c0)={'nat\x00', 0x0, 0x4, 0xe0, [], 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f00000002c0)=""/224}, &(0x7f0000000140)=0x78)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000440)='threaded\x00', 0x9)
r2 = socket$kcm(0x29, 0x1000000000002, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5452, &(0x7f000031aff8))
ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000200))
sendmmsg(r2, &(0x7f0000002780), 0x3fffffffffffe8a, 0x0)
ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000100))
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000000c0))
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc6004000d000a0003000200000037153e370a00098002000000d1bd", 0x33fe0}], 0x1}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {0x0, 0xffff}}}, 0x24}}, 0x840)

05:07:12 executing program 5:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00')
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000002c40)={0x1c, r1, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}]}, 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="0f86fd770503000000", @ANYRES16=r2, @ANYBLOB="00022dbd7000fbdbdf2512000000060028000100000008002c0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044810}, 0x8000)
socket$netlink(0x10, 0x3, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
accept(r3, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000080)=0xfffffed1)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000000c0)=0x800000002, 0x8)

[ 1486.221712][ T8148] IPVS: ftp: loaded support on port[0] = 21
[ 1486.243019][ T8148] virt_wifi0 speed is unknown, defaulting to 1000
05:07:12 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2d00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1486.269033][ T8153] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[ 1486.288134][   T28] audit: type=1804 audit(1591160832.731:1191): pid=8147 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3525/cgroup.controllers" dev="sda1" ino=16372 res=1
[ 1486.305952][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1486.346436][ T8156] netlink: 'syz-executor.0': attribute type 9 has an invalid length.
05:07:13 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2d01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:13 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2d02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:13 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)="6cf4de22d3eecf47df1e72f8873ee8fa543c9dc99a42974d318e08734f18ed041858df859b1362f3268169fae2586bc98f221e26af45a280e3eaf7c35f0ca063cdf3d2d0381645d8c71bc7aecf69266a92186f24388f336f032555224463167ef9b2f30058d93563c953904d2e53133e6c9d271beab1c8eb8e0e85090331addefbb72255e33e24834d1c41e0969170717c76da25657519491a23afcecbe89ac61b5a12243aa52a63f0db2de4c97cbe652057a0c5814c69b900b2c0665770bdef13807de2c4d07a492581", 0xca}, {&(0x7f0000000340)="a46324931a5f70f54cd7cb8285624b074a331de1acb309de9b5a6ac4607db923c4c0ba8e7e9eed37d2d3bc5642f3027a4b26f98257a39610c8782da86ed98b55d582000c3d7be9cc58a1518876b9c08bfd147e8ebd6fdd4412b6dca64cbb533d2af14c5dd54d19af7682e4194aa9d93cc9ff619bd1052067acd0511c0ac2450c34c9960432599042814e9d04f889f9400763296703647bd397b15a2da085ae6f2c2f1c3f77de2e91fa25d19923afe639a840d9f846e8434fe99685da1d956753dccec8499e135d0932fba19fd9da5adfc2e9cbce578e", 0xd6}, {&(0x7f00000000c0)="f7f7158fea7f6ae781c6ae96b9993c9d242698c9bc8df3a0afea84", 0x1b}, {&(0x7f0000000240)="15ede518c3044eb48dca9ba920663c60f667625eeaad09e8d85b3429b5f716d9", 0x20}, {&(0x7f0000000280)="3b45f836de3fad06f06dd6d8d2", 0xd}, {&(0x7f0000000440)="2da43cd1a3c14db53f0c936b05395373919cdf8e930ab027a5394fa07df5f1f5a23ac1304aeebc283a21e66c9c07f29725c7bc52e18755a3862464a00d338c3aae7778708b291e2a519aa59c90480ecc0964b85d7f7745a15afd0ff4032015c0bc9779614f9c1fff358be3542c7f11c82ebb76f110372802b86504cdffbd6ae4e3e93513d4c75d3148751ffc7942f4ed4c53021d913fa471cffb176c9888f2697a6fd1e0f474f43f9bbb1b6f4c734e0ac3bd6788aac4052c7be43e7bc61d5e8bfa1c6ab12fe281667b78a29711727201ed7a2816ebe006", 0xd7}, {&(0x7f0000000540)="abc06cd2ddd87427480e52e63ba9976142bc1f9e1beaaf7a2b8ea07a49cdb0a0901d7c4fed7d285ef5bd25c7d973214b7ffa127752d3c808d2209a2080b2d696ac59ed51a20c74445d46e504c7a03b26b731654d703b1a239d1807ef52e1bc55815661e8debe19aa2a08592cba738433d86d7fa88ef6fe0ff5329450e9d9b9d03992d3621bca22", 0x87}], 0x7}, 0xc100)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="b10b938636ea69df7b5a9984", 0xc}], 0x1}, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x90000020})
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[], 0xa4)
splice(r3, 0x0, r1, 0x0, 0xd86dac9, 0x0)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000042c0)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000004280)={0x10, 0x0, 0x0, 0x4002}, 0xc, &(0x7f00000043c0)={&(0x7f0000004300)={0x60, r4, 0x300, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'batadv\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, '-wlan1GPLGPL^:\xa1)+-\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="380802001ff10485a1437531a5b95f4ac34cad0ef4db7698df40809f8b643186099313f64b589fb1aca676447e03f89e68b2893549b88c3dac7885abbe5fdc9f54899c8ea99eccb5ec24e541000000000000", @ANYRES16=r4, @ANYBLOB="008100000000fcdbdf2505000000050001000000000008000400ffffffff14000600"/50], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20008040)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="60201400772dddc1818231373ccfc539eb0f2ed0ab99989c9b64c711c8f1cdb1c0f4f3712f941e1080a351420816ce31df20ec00"/65, @ANYRES16=r4, @ANYBLOB="00022dbd7000ffdbdf250300000008000400ffffffff14000500fe88000000000000000000000000010108000700e000000206000b000900000006000b002b00000008000c00020000000f000100776c616e31776c616e300000"], 0x60}, 0x1, 0x0, 0x0, 0x4000891}, 0x4040050)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x78, r4, 0x320, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'ppp0\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x4}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004800}, 0x24040804)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x80, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, [], 0x4}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, ':bdevlo--^nodev\\\\$\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x80}}, 0x2ec7c5d94b07e478)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r4, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)

05:07:13 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2d03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:13 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2e00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:13 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x47fe1, 0x0)

05:07:13 executing program 3:
pipe(&(0x7f0000000d00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="20012cbd7000fddbdf25030000000800010003000000080001"], 0x4c}}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
ioctl$FITRIM(r5, 0x40305839, &(0x7f0000000000)={0x0, 0x8001, 0x200})
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="ee08aa49", @ANYRES16=r6, @ANYBLOB="040026bd7000fcdbdf250800000008000400ac1414aa2400070073797374656d5f753a6f626a6563745f723a7373685f657865635f743a733000"], 0x40}, 0x1, 0x0, 0x0, 0x8048094}, 0x8805)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, r6, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:syslogd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0)
close(r2)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac0000000001190500000000000000000a0000003c0001002c0001001400030016f8bcd383af9b1577def13edad6b8bf14000400fe8000000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c000100140003800000000000000000000000000000000014000400ff010000000000000000000000000001080007000000000018000600140003"], 0x1}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

05:07:13 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x300, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:13 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2e01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1487.279764][   T28] audit: type=1804 audit(1591160833.721:1192): pid=8204 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3526/cgroup.controllers" dev="sda1" ino=16379 res=1
05:07:13 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2e02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1487.396274][ T8213] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[ 1487.426901][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
05:07:13 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x8c, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:14 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2e03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:14 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2f00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:14 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x8c, 0x0}}], 0x40000000000020c, 0x0, 0x0)

[ 1487.840067][   T28] audit: type=1804 audit(1591160834.282:1193): pid=8218 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir072520096/syzkaller.f0iguO/3370/cgroup.controllers" dev="sda1" ino=16380 res=1
05:07:14 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2f01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:14 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)

05:07:14 executing program 3:
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "fd4e00", 0x10, 0x11, 0x0, @local, @local, {[], {0x4e21, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x0, 0x3}}}}}}}}, 0x0)

05:07:14 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0xa00, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:14 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2f02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:14 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x2f03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1488.230594][   T28] audit: type=1804 audit(1591160834.672:1194): pid=8230 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir158484738/syzkaller.dWzPkU/2616/cgroup.controllers" dev="sda1" ino=16381 res=1
05:07:14 executing program 3:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000140), 0xff4d)
sendfile(r2, r1, 0x0, 0x91)
sendfile(r2, r1, &(0x7f0000000040), 0x100006500)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)}], 0x1)
write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0x58)
write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000008f40))
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$fou(0x0)
sendmsg$FOU_CMD_DEL(r4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x4)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000001780)={0x44, r5, 0x0, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0xffffffb8, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}]}, 0x44}}, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvlan1\x00'})
writev(r6, &(0x7f0000000240)=[{&(0x7f0000000580)="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", 0xff0}], 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)

05:07:14 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3000}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1488.414652][   T28] audit: type=1804 audit(1591160834.862:1195): pid=8242 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3527/cgroup.controllers" dev="sda1" ino=16375 res=1
05:07:15 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="21e4196acfb7def4e4f10a7c173e1eccaad2dd75df8e0b9078554c9f2e116e57a086aa157c58480ddc27442a9358440ac29391a4ff87e4aeb89a329a1d3885e05d990a6282cd6b89cfac8c1424db7635d1f4ec4bc04a78b0f86702432824877dc0806ff9ac11f1d60783c3becc3382309ad99a0ada202c825257c5bb0f74ac123aeb79df54d58c39227cc45de98a2ca47f02d3827ebc857761bb35af5887ae9b440e701708f9de2ea57a7b2248ac4306c27c711a6ba1d0e4350af1148bf092e60a7538278f9225330e967bcb539dff863c8071347332bbf6d22a73076a875b2762955c4d45d870a4ac4e8ff04f6803eecab41f914769c39a9f99ee54b517538e")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601030000000040000000060000000500010007"], 0x1}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f00000010c0)="7461c3f82f76deaf3c2ebd56db69004b4b8d85a0c6cedbbfe044465e0e54b02a62bc7abf30a20ecf3753d05d37e63d3b967beedef551199bf50bf43cd3f60fe961650dec44bf34e094ed909a684995cb589d31ef2864cfffd799bc034977cf48347a12df82bc24cc2c72c2d2cfeb856d8beb522cb1888c540ec1733a9f3c38c7e4d00e45fb6e5b1147550c7f665795761e175c3d61ce34e5488f2b9330feaadd5cf7266d7ffd5bd813e0ce1e5bdc225a6c086659671248a56fd99f15261c5c31637c505caf3e3f5477348e5bed04b3d38aae1d473fc59c3401f92323f0572371d2aacc1e1a61bc21c1005390891ee0c20c461ef3bb900cda313d7f341b11e716ec4990f5202cd6f9ab3631452e2dda00ad4c3c226b81651435345b3152690221a8601c6cedf340331ccccfef805518a0d76f9273d1b00c032414d78a65fec3a51c1aa58b96b09d3919ae06f9ca6212956e912b9c42ebb4313dbed1f09c3ff44d35e8d308c209ce6c8d0027be53d694e7d38c97545f8b73cc212c7f8a62c14beccf3fe795246f5effc1a7103aa73d538c6fe87136d4ec104b6b7810d0f6fb56ba6b18e666bb221c32f3f3ff8870771edf2bc564c08ea9a54336914767a10914c153e1528c28c38b995c27cb8b08be91282f8cbf61dda1b9dc89820eb5516f94bfd5b1c84f1bacff31258770b050d0e635cb04b6c856b4f0b4176075c1610b7ee35775cb8f7d359483fd24c0461c587489931c6aaea130be81c404fe6553ce801340e8fb3f2863cf2b45d9b7ef57f105fa0b697413f2411443a2a8094d54f09d1035c7d265eb3f3369b29b62060caad41122c7443cdc84377882f317d187126987f632895b13219af060fb14ac599c8b40dbbb8999d79dc9afb1d35e35130301f7a34e4bc7f76d5aaa1ff18ab670a0fce267be1ddce63d0a540ab5e3e431b726b4f17dd4b5f608cca439fb13781a8cc7ae589d070eca8a22f3ccaff749ff40bf52593da5e77db376d2b5f963175326779faca60d0315b5179a5bcf616bc8418575f93dd1bacf38b201319502740de7e5b2d731ef2a1e509248c0501aa0affaae432cf27135c5b28d0395e67fd19d8465eaebbdce32a1c6da035d9c3ae763798ad806e47919ede08536b5525feb6907a10ac15d303a05c598d02568fda7477b62d7a4d8878e75ae63d544f538926c34b2aa5753ba8ef5f71964a732cf7d18f4c0c15bb2bd6468b37ee2afb33845ff611216d33255f4dc7836cf25bc2c66165cbe33a0f828768c18d0e57b81c3de8b2ba4d86735c11d7704717ebff67cefb4334519fd0c49b48c8376240211afae46434c94461d1a17a0aa390a630becafb70fdafc972ba5c91899f7aff4f36e4a1f942793dff0920472f07f98fe3583c6d89e1247df943b327373b5d8416b0a09a81ccdf55e6a74a5a7e0841e794166f96f63a251cabd98aa4d3b83853bc0d88b18cddada0891b3ffdf6bf6c495dd4d20dab246b9cb3d4af7f52d5f372b292842a5f4a1b965c54556bba7bc0eb8c308b15bfdc777bc8aad4be704f6be5795194e782db02edb5aa0de4365637a36bab79a9deb170a1f22e238c3897b16896778ecd68d7d53ddc5615e95273442e7ad198c147f7453ffcf717d58aba47ba9dcab84571b56c99d140c1ab8a05b738d84ce17ce293cd9a0399aac5cab6e231a21fd8999884567e041492638c4fcf9171ae336c1b0ca42c7cf782d393b9a9a0577b7464b434fb5b820c47d67e149a9835229814d218bcae12ab88a72cc9b9e8988ebf366d5817a05fd70226f7dc7c08e25503bc1ced1be7333206aae7384bd1a8dba80853612faefd2cc63356f2e4f353209d8cbd7203318ad7830b2553dacbdf9f4a1475252f360d9415fad0dc7bb068d94f1832a6a9af73780158e6ea8eea3ba37159941af9ea9abb5cc9c794db60e7235c8492670dd204c906691d169f960b58b541f03d503c8ee5584fe9e8dd8b3c34edb656165833756df4e3f1a5de99447998393b58a36b12f097643f17bc9e4a783f3ffbaf2fba225a382c81b76a068c6173b4b81d3942d5bc890a475101556ea9f157d5949a0199da6b2d9b7a7abad4f60e297d3c79e751dc454a6700abf5632decea30a77f0aee097519538c7c42a4631b4adf1f9f2ffa248308ee34b5a9506779f27acee7e874fb1fda5e6a1cad13dd4977f0e6317dc8d4ac014e77ee7c8063c728f5f33a925959ce4fd2d1f2243a47d286cf26bff24abb2eb2132ed3ce141bfcd405a9931879c0bb4d262e6092611963d0d5120c8056cdd27f5128c223009b3a7793c927a5c415602071fff8976e7fe4d952301796fd44c6fd18795ffd6aed6660765bca14112e64bb15ed5b901dc06f4d0061bcb497dad9bf6fc2816ac9df9f4805b2d47c15e7bf17b39afd35efdf5fb20b0e8ce564203e7e72c96ac5a2060b426638cf3b60f948c1a1f8c997cced676a2fbad27667bfb3cda0df98e59c6dc74620c26c66de69b1d004aecb49b02b636eafad41404bbfa4ff1f1ab5549f85d00deeacb9a2c9a4fa4dbfc07657c939011286c13cfbfd075eac1a2dfb8e4b47395474a502be754bb84fbaf82835f804c88b5df15ebc9ea1203c646d6a2756d26ca49f8bd4c2adc3525b7bdd177c5cc3426a3c1d49e2ff8be7b329a23742e774d570bde1093fb25d68b9a7ad0a6afea8a38de8b36824c28a58b71366f35bb80c0c925b5571a27e805ffc50f3353f8cb4f1eb859591d7b837193587919dc4696cd8a1e3aa11302c9933b099eeaccd0e4b3933530fad6f3762b176bc8efbe4694c53e22918e081ae7a894b85125f762e6747fb7fc6754e10c94922ba8f73f5dcbaa3bd7087fe57e46c93a5638f68ed6f2497029ed42d7f6775dde0e7c13d05b1ff5b6f0ddf57639a83dc36b6891141c6034a982b17ef8f6f52bf319eb115d501ca90d6a720c2d6c66834ea1684d8c0845970a680fe8c648aca961f5066ed8b63e4fef922ccfc3cc613ba73b8e0a00e8a622d3bc43eabdef720cc4080317677e3d6c5bd2923f5beee0f56461d465f4b1020ecc656ff6ec2146e6eb73196298adec5c1a9712345c17e80da2b99058b3d938a82dbc90b57cc5dad32631b34b1594b8999078518be0b9873844f63e8240eedcd3dbdb3e02a77fdff1894e96c11bd6848b2ccfc8ab5618497832376b5166a644e25a61230bfddd6657791c4e50fca5394c7be5749ea866c85745f00161f91b64bf7a42f3d3c8632be1bf367f4ea32bcfe7cacb563404367169d817be5072cd501a1667d8ab4cb83d8f25ef0115ec347d145b0c0ea535088a814612a6848e2c26924c09189973a867a25d5c9af7a753e4b9fa178fd656ace3c9aaabe1bb0adb6d7439e96641d37fc6b02d99e6e354f945a700be87de17573e16e8c1106894fa0e4e94c8e661ff2c63cbb706418d4aa924975617b69add41dccae29af59dc219f97411f9adfdfe462aecd4e89033ce20ff03f22579dddf58fbff8be3022a11e1c9df3d514cf0bad978026ade19b2b0b73b34debaebd2fecc566a8c041e3c710560bd6ab7054bf77fbdd5ea68a7a00de6660e0710b93e32e5e2661c8950a249c7f55704d53e91192cd75bb0bf09dea88fe9eeddb5e406d592f666eb5e214c1f87de621dfbc52d277a6289d4a1067c9706928e3da8f5e1c63361d2477615f877d2a9fdcc57746286419c1dadee0ae5e259d7626a5488fd17b972a2f9965329cd999d54e3e75a67cccd09c1d826bfb11629d1236517dfdc7a7cbc8a1c952afb00b42eee29b23c7fd50c833130d3d36db8b0a31cb906d413ce66afb26c1f54ce968f412f0065ff7ce38aea3ebfe809ce530068e9063ec870c95f81d22762f3901b7542d3bf361036cd5265bf088efb69a84e4e25b2cf90a8de9bcedc643f440e64b3c6089a4db0d8f344b342dda566b7ea5d627a547cec6262e08c5f8e7bc15a7a468f93ca98c635030db90997cfd46537016185cf56601f4aa1641b52ee4149cc8562c4ca1cb78b86b58380b581203d22a3130b32e6a61c4571f394c13ff36d22dbe8edf061b3f3be2d8adaee96c7119eb11f24e240f51dc84f99e20dae500300461852a55e285161429b31d979e4f6559d816720391c5e9e3e37e2d89677317f6644e78b3dc22b95b70be27a1dab172f7dc989fb37577288608ec944d6586199df43ef25d1a048bc36080d0e0716fb217a483b46903b5629c65394eaa1a414a9c075a2d36d7f9cf09010ae6b0e46478a611c43924715278e0b684d8118f79063b79ce2ed983190d5426685e3a5cc8fb7894b1c1f51e88e19d00f95dcd24229d0e3d17473017aeba88ccd61481eae907a794a82b84476a68dfe0c44ed99fae54700e09ed61c471af8c3a4cefa6ba1f20107ba417fb5efb658dd1f0f84d3be914282607ec338319e9c0246ddfd68e0015489e9f0fea99fe6d9a093a7643f3810d9940824f921d20f499faa49a1178cf992ea35f6078964fee457a98690fbc5047e33009e62e56744d800c80c83df120e3812f5828f801f895ff68953588f1623ead87a96e06f9adeb3247d3bb84ebc3abb7041ae44aecfb7012ed802a36130e495becf2b23a0f8072432882cbba953ba3e7be4dab9b349fa18ad1b2c44950946fcb85046f5cec7ea33113d99205485af4107d356e9c2acfff684f4d3a53873621ef8b84c811fcdcb18030ecf7ee6a0952939cdd8b23c72444b2a5ef5c33cafca05bd4d0ab8c87b43f8f3be15d2e802a3349526936e67c425b5c79f080e3e7905a5c710548f308ee2fa0b1ffcb4ea8ba8efa5fdb5faaf9a937f2862d558bfc25a48e31cb489c4dea2f392aa2a7638a46f113a1ad87b5a401db0adbbfc37e260587ef5aeff13bf15ebb367d75e08b038e7a7923f32840902acb6cb95894c764d35e921ffe6e34374ddb6e9d178e920a1b5d409fd5cd7d68d622d4d068ae90952bd81d3c2e60c6d0030fa9c60b27c885886811726ef6540ff96465b1461c232dbd22182626f177cdedeb1248f954aefad38c3c6414c7e4c414f4ac2da827079b61f8e84f7f928890a6836ff9203dabb3495dd6734ffdcbc75f7926c98f87022fa4a559edca04532d863d45bd9ca030a833a2b2201df51cdf0094f61413f2ec979665ad178132ba0f79a681c4d83addacd318ef0e32fa577bea7b20aa1fccff7135b8cc11971b7759b43204c8aaaf4074f3dd49266d5f8ff6b6ca100d697c3711eeb6ff2d9f1f4c27439e0547cb568d9d4626038362db502756ec8d2775b32c6427b6a0810026ab5a79eaffca992f12c78a1bed312fe8f82294d7e4a9035b721307a49dd2ef77ea9e5d602d796a8a17602e5a7b7caca70706be488a423f0ad418cd6ba81b589d5cc85d7970e679841d54114e41704f2f036063dd53b77e825611297113d5c22bc182af574c7fd93d12cb37190d0323ca7f7410c960e0135640ba0c954ac9357a0d4c499291a9854a1c3dc38c53a7895538f2cf010f0881e600d5080f37b68f6ae19b8241b8cfb6294b479ba6e2d2761d6d7a0ed1e5ceff2bb213dec2a473c654e7343d7aac1d91fe26f8c3d95599accad2ab9e66d7f414de7a3d155fb229c1e9e7442635f6015a97fc614538096854758b9e72a017f5d8af4e2de7a29718dc55e43e5707ae7cf2c46bd6f322067be0bb2044927c711d10251b487c085db889bc36e251cdf2875076e5c9142b563b5a951bec69683bed4cd8b02cf80da56b7de89855c1f4c60022ba1e6293469f9b43a92d8793ba32c97b30f8e0b2a35e4fde8356414bd27a6b46108c616e7a10e9a33f9497b5842")
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x100, 0x8, 0x1, 0xffff})
sendfile(r2, r3, 0x0, 0x100000001)

[ 1488.542073][   T28] audit: type=1804 audit(1591160834.942:1196): pid=8248 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir186924865/syzkaller.hjDaT3/2657/memory.events" dev="sda1" ino=15737 res=1
05:07:15 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1488.704631][   T28] audit: type=1800 audit(1591160834.952:1197): pid=8248 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=15737 res=0
05:07:15 executing program 3:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000140), 0xff4d)
sendfile(r2, r1, 0x0, 0x91)
sendfile(r2, r1, &(0x7f0000000040), 0x100006500)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)}], 0x1)
write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0x58)
write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000008f40))
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$fou(0x0)
sendmsg$FOU_CMD_DEL(r4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x4)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000001780)={0x44, r5, 0x0, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0xffffffb8, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}]}, 0x44}}, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvlan1\x00'})
writev(r6, &(0x7f0000000240)=[{&(0x7f0000000580)="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", 0xff0}], 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)

[ 1488.839195][   T28] audit: type=1804 audit(1591160834.952:1198): pid=8248 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir186924865/syzkaller.hjDaT3/2657/memory.events" dev="sda1" ino=15737 res=1
05:07:15 executing program 0:
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000040)="82c2178d", 0x4}], 0x1}, 0x0)
socket$inet(0x2, 0x6, 0x7ff)

05:07:15 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3002}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1488.921226][   T28] audit: type=1804 audit(1591160835.082:1199): pid=8248 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir186924865/syzkaller.hjDaT3/2657/memory.events" dev="sda1" ino=15737 res=1
05:07:15 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)

[ 1488.955056][   T28] audit: type=1804 audit(1591160835.322:1200): pid=8261 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir072520096/syzkaller.f0iguO/3371/cgroup.controllers" dev="sda1" ino=16378 res=1
05:07:15 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
close(r1)
sendmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)="d5f1195edb34cdac3fb79032724417d95ad783c83d37b518ca40c22430e66d5950d32b2447a1572490cf19c40120e1b25ae00037e2ca431b5f3b0425acc4e38abbc43f12140968f024aee1489a9b7b7d7c3e98b61a110af2f8a21695b8acb62dc619a0da9b4eb0cd306093204a5f41d26feaa4328feac902d2e4c0aa1db074318788e00b68684b7b792c218bfdfd6130bfda717becbc997d415c706a955a5472eca586e7c8f6640021b7e5e4c5960bdaed0adee029cd3803f8672fe1aba476d08a0cadecaef748bccc3a29a5ea9043a8623c3acd4c04b4c4", 0xd8}, {&(0x7f0000000200)="a649c68e17571655c22775e43b39844f9c58a2aed02c864806503d6b51931d0dc750968a96d5174565955ea1b33c3408ba6490132f534f4bf0da95331accf9b6724ff290a36799e95da98f3170c5defc648c195bb2a520100a5bd3a8ac89bf079f93", 0x62}, {&(0x7f0000000280)="5908855cf2772984a4e20f1cc596f5a79508bc7340debad4db6f8cfcec64e199a08bc659274e0095a8c767cbda25453181a3820e50f4aebc8304a251bf9c8644a9ed21b41ffa8272a6ad6dab90270bea476224963f054ebf1d", 0x59}], 0x3, &(0x7f0000000340)=[{0x10, 0xad, 0x10001}, {0xc8, 0x10a, 0x0, "81e4dd0b23dc9fbacff419085eef3f50d3953cd63b19746eaec5161fdbab6efaed0f42cfaccc42566556a77f01fdf2a4932cda0fdf68450e54342dc3af1016449c1337e531c7ec84f8f416b3156e25695d67c70aece7b762b4e20404032340971f535c2b152d9bd7f84a0d9847eddc26742d09cf0e410660b18b4524de248700b019a9bf63b4fa13c851b9970d43cc24c854ccd59c54b2295c936fcb99ae6697a80d8bfa8b6ca1ff41033e3c7123530391dc66cbd66a"}, {0xb8, 0x10b, 0x25, "193e8b9cc8a371a04ee124aa25047e6215e1aeaad31a6f73b1c7ae8775399fa8f5726dff25de3e1a03580b36a45e053b1045cff5823417138cd814cf2d6efe843f2c705c20af89a62ad62f7e5f72a04ae7b0efe487bd6a4326a0903efaa8b81e11b5035da4716c10f6d6f94d275bb6878d842c1c36d7b1b9c9942488e5bb9af82cfbc7c44d0aa55f0f1bce8df13f11d416304c60a998296fc5a0bfc25ad461a5249445168ca2f3f7"}, {0x28, 0x110, 0x8, "1b78d3e59d866265af9daf039b586943535dde5e"}], 0x1b8}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
r3 = socket(0x10, 0x80002, 0x0)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000000)={0xfd, [0x7, 0x7c], 0x100}, 0x10)
connect$inet6(r2, &(0x7f00008c0000)={0xa, 0x0, 0x0, @loopback={0x0, 0xd}}, 0x1c)

[ 1489.089958][   T28] audit: type=1804 audit(1591160835.532:1201): pid=8268 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir186924865/syzkaller.hjDaT3/2658/memory.events" dev="sda1" ino=16377 res=1
[ 1489.196184][   T28] audit: type=1800 audit(1591160835.532:1202): pid=8268 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16377 res=0
05:07:15 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0xe00, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:15 executing program 0:
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0xc0800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x1a}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x28}}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r2, 0x807, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x24044015}, 0x20000000)
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4010, 0xffffffffffffffff, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000240)=0x54)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB="01deff005a3ed90c00b55361f1fd137f985d335177c1aa165d94eac0a9bd97b57e387f086bbac8967635d8160b115088812385cae15ae8001249b757feb26096da1374e2f1368c84b93434420e1dcb086304708f386908cb00"/98, @ANYRES32=<r10=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f00000000c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r10}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000000)={r10, @in6={{0xa, 0x4e20, 0x7, @empty, 0x2}}, 0x7, 0x101, 0x3, 0x3, 0x1}, &(0x7f00000000c0)=0x98)

05:07:15 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3003}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1489.228830][   T28] audit: type=1804 audit(1591160835.532:1203): pid=8268 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir186924865/syzkaller.hjDaT3/2658/memory.events" dev="sda1" ino=16377 res=1
[ 1489.256510][   T28] audit: type=1804 audit(1591160835.672:1204): pid=8268 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir186924865/syzkaller.hjDaT3/2658/memory.events" dev="sda1" ino=16377 res=1
05:07:15 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00')
getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0)
sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xc0, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x4}]}, 0xc0}}, 0x804)
sendfile(r2, r1, 0x0, 0x100000002)

05:07:15 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3100}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1489.394972][ T8285] IPVS: ftp: loaded support on port[0] = 21
[ 1489.486118][   T28] audit: type=1804 audit(1591160835.932:1205): pid=8287 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3528/cgroup.controllers" dev="sda1" ino=16378 res=1
05:07:16 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3101}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1489.715547][ T8285] virt_wifi0 speed is unknown, defaulting to 1000
05:07:16 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3102}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:16 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)

05:07:16 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3103}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:16 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3200}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:16 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3201}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:16 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'bond_slave_1\x00', {0x2, 0x4e21, @rand_addr=0x64010100}})
r1 = socket(0xa, 0x800000003, 0x80000001)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0xb4c, 0x1, 0x1, 0x9, 0x1, 0x5, 0x3}, 0xc)
socket$phonet(0x23, 0x2, 0x1)
r2 = getpid()
syz_open_procfs$namespace(r2, 0xfffffffffffffffd)
r3 = socket(0x10, 0x80002, 0x0)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7}}, &(0x7f0000000180)=0x5a)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r7}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={<r8=>r7, @in6={{0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, [], 0x1}, 0x9}}, 0x4, 0x7, 0x6, 0x1ff, 0x90, 0x0, 0x20}, &(0x7f00000001c0)=0x9c)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={r8, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}}}, &(0x7f00000002c0)=0x84)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'wg2\x00', 0x2}, 0x18)
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r2)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x9000)

[ 1490.193340][ T8288] IPVS: ftp: loaded support on port[0] = 21
05:07:16 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0xec0, 0x0}}], 0x40000000000020c, 0x0, 0x0)

[ 1490.578870][ T8288] virt_wifi0 speed is unknown, defaulting to 1000
05:07:17 executing program 0:
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x5})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
ioctl$sock_ifreq(r0, 0x8918, &(0x7f00000000c0)={'bridge_slave_1\x00', @ifru_ivalue=0x2})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000000), &(0x7f0000000080)=0x4)
ioctl(r1, 0x8b04, &(0x7f0000000040))

05:07:17 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00')
getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0)
sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xc0, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x4}]}, 0xc0}}, 0x804)
sendfile(r2, r1, 0x0, 0x100000002)

05:07:17 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3202}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:17 executing program 4 (fault-call:6 fault-nth:0):
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x0)

05:07:17 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3203}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:17 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x1400, 0x0}}], 0x40000000000020c, 0x0, 0x0)

[ 1491.263166][ T8379] FAULT_INJECTION: forcing a failure.
[ 1491.263166][ T8379] name failslab, interval 1, probability 0, space 0, times 0
[ 1491.332135][ T8379] CPU: 0 PID: 8379 Comm: syz-executor.4 Not tainted 5.7.0-rc7-syzkaller #0
[ 1491.340785][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1491.350860][ T8379] Call Trace:
[ 1491.354185][ T8379]  dump_stack+0x188/0x20d
[ 1491.358547][ T8379]  should_fail.cold+0x5/0xa
[ 1491.363085][ T8379]  ? fault_create_debugfs_attr+0x140/0x140
[ 1491.368932][ T8379]  should_failslab+0x5/0xf
[ 1491.373379][ T8379]  kmem_cache_alloc_node_trace+0x27c/0x790
[ 1491.379221][ T8379]  ? lockdep_hardirqs_on+0x463/0x620
[ 1491.384530][ T8379]  ? __local_bh_enable_ip+0x159/0x270
[ 1491.390005][ T8379]  __get_vm_area_node+0x126/0x3b0
[ 1491.395122][ T8379]  __vmalloc_node_range+0xdc/0x7a0
[ 1491.400259][ T8379]  ? netlink_sendmsg+0x605/0xe10
[ 1491.405218][ T8379]  ? netlink_sendmsg+0x605/0xe10
[ 1491.410174][ T8379]  vmalloc+0x67/0x80
[ 1491.414101][ T8379]  ? netlink_sendmsg+0x605/0xe10
[ 1491.419055][ T8379]  netlink_sendmsg+0x605/0xe10
[ 1491.423841][ T8379]  ? aa_af_perm+0x260/0x260
[ 1491.428364][ T8379]  ? netlink_unicast+0x740/0x740
[ 1491.433322][ T8379]  ? __lock_acquire+0xcbb/0x4c50
[ 1491.438292][ T8379]  ? netlink_unicast+0x740/0x740
[ 1491.443260][ T8379]  sock_sendmsg+0xcf/0x120
[ 1491.447702][ T8379]  sock_no_sendpage+0xf1/0x130
[ 1491.452502][ T8379]  ? sock_kzfree_s+0x60/0x60
[ 1491.457130][ T8379]  ? sock_kzfree_s+0x60/0x60
[ 1491.461756][ T8379]  kernel_sendpage+0x82/0xd0
[ 1491.466373][ T8379]  sock_sendpage+0x8a/0xb0
[ 1491.470816][ T8379]  ? kernel_sendpage+0xd0/0xd0
[ 1491.475663][ T8379]  pipe_to_sendpage+0x2aa/0x380
[ 1491.480541][ T8379]  ? direct_splice_actor+0x160/0x160
[ 1491.485852][ T8379]  ? splice_from_pipe_next.part.0+0x29c/0x350
[ 1491.491955][ T8379]  __splice_from_pipe+0x3e6/0x7b0
[ 1491.497014][ T8379]  ? direct_splice_actor+0x160/0x160
[ 1491.502328][ T8379]  ? direct_splice_actor+0x160/0x160
[ 1491.507656][ T8379]  splice_from_pipe+0xd9/0x140
[ 1491.512441][ T8379]  ? splice_shrink_spd+0xc0/0xc0
[ 1491.517418][ T8379]  ? splice_from_pipe+0x140/0x140
[ 1491.522460][ T8379]  do_splice+0xaf1/0x1520
[ 1491.526828][ T8379]  ? ksys_dup3+0x3c0/0x3c0
[ 1491.531263][ T8379]  ? default_file_splice_write+0x90/0x90
[ 1491.536908][ T8379]  ? fput_many+0x2f/0x1a0
[ 1491.541262][ T8379]  __x64_sys_splice+0x198/0x250
[ 1491.546141][ T8379]  do_syscall_64+0xf6/0x7d0
[ 1491.550700][ T8379]  entry_SYSCALL_64_after_hwframe+0x49/0xb3
[ 1491.556601][ T8379] RIP: 0033:0x45ca69
[ 1491.560562][ T8379] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1491.580178][ T8379] RSP: 002b:00007f47a9b93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[ 1491.588612][ T8379] RAX: ffffffffffffffda RBX: 0000000000507a00 RCX: 000000000045ca69
[ 1491.596602][ T8379] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003
[ 1491.604590][ T8379] RBP: 000000000078bfa0 R08: 0000000000047fe1 R09: 0000000000000000
[ 1491.612578][ T8379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1491.620574][ T8379] R13: 0000000000000bae R14: 00000000004cea37 R15: 00007f47a9b946d4
05:07:18 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0xec0, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:18 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3300}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:18 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3301}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:18 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x3f00, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:18 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x581, 0x70bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfddfd94c68f40707}}}}}}]}, 0x48}}, 0x0)

05:07:18 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3302}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:19 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3303}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1492.561260][ T8405] device vxcan2 entered promiscuous mode
05:07:19 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3400}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:19 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000040)=0x8, &(0x7f0000000080)=0x4)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x10)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x7}, 0x8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e35, 0x0, @ipv4={[], [], @rand_addr=0x7fffffff}}, 0x1c)
sendmmsg(r3, &(0x7f0000000240), 0x5c3, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
r5 = epoll_create(0x9)
r6 = socket(0x10, 0x80002, 0x0)
r7 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000000)={0x90000020})
epoll_pwait(r7, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0x9b56, &(0x7f00000001c0)={[0x2]}, 0x8)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000000)={0x90000020})
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0x3d}, 0x1}, 0x1c)

[ 1492.953202][ T8379] syz-executor.4: vmalloc: allocation failure: 4416 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1492.977840][ T8379] CPU: 0 PID: 8379 Comm: syz-executor.4 Not tainted 5.7.0-rc7-syzkaller #0
[ 1492.986470][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1492.996538][ T8379] Call Trace:
[ 1492.999876][ T8379]  dump_stack+0x188/0x20d
[ 1493.004228][ T8379]  warn_alloc.cold+0x87/0x164
[ 1493.008923][ T8379]  ? zone_watermark_ok_safe+0x260/0x260
[ 1493.014489][ T8379]  ? __local_bh_enable_ip+0x159/0x270
[ 1493.019871][ T8379]  ? __get_vm_area_node+0x2e2/0x3b0
[ 1493.025085][ T8379]  __vmalloc_node_range+0x452/0x7a0
[ 1493.030308][ T8379]  ? netlink_sendmsg+0x605/0xe10
[ 1493.035261][ T8379]  vmalloc+0x67/0x80
[ 1493.039171][ T8379]  ? netlink_sendmsg+0x605/0xe10
[ 1493.044120][ T8379]  netlink_sendmsg+0x605/0xe10
[ 1493.048898][ T8379]  ? aa_af_perm+0x260/0x260
[ 1493.053418][ T8379]  ? netlink_unicast+0x740/0x740
[ 1493.058371][ T8379]  ? __lock_acquire+0xcbb/0x4c50
[ 1493.063446][ T8379]  ? netlink_unicast+0x740/0x740
[ 1493.068399][ T8379]  sock_sendmsg+0xcf/0x120
[ 1493.072832][ T8379]  sock_no_sendpage+0xf1/0x130
[ 1493.077609][ T8379]  ? sock_kzfree_s+0x60/0x60
[ 1493.082235][ T8379]  ? sock_kzfree_s+0x60/0x60
[ 1493.086835][ T8379]  kernel_sendpage+0x82/0xd0
[ 1493.091440][ T8379]  sock_sendpage+0x8a/0xb0
[ 1493.095871][ T8379]  ? kernel_sendpage+0xd0/0xd0
[ 1493.100645][ T8379]  pipe_to_sendpage+0x2aa/0x380
[ 1493.105516][ T8379]  ? direct_splice_actor+0x160/0x160
[ 1493.110821][ T8379]  ? splice_from_pipe_next.part.0+0x29c/0x350
[ 1493.116914][ T8379]  __splice_from_pipe+0x3e6/0x7b0
[ 1493.121964][ T8379]  ? direct_splice_actor+0x160/0x160
[ 1493.127266][ T8379]  ? direct_splice_actor+0x160/0x160
[ 1493.132571][ T8379]  splice_from_pipe+0xd9/0x140
[ 1493.137355][ T8379]  ? splice_shrink_spd+0xc0/0xc0
[ 1493.142323][ T8379]  ? splice_from_pipe+0x140/0x140
[ 1493.147538][ T8379]  do_splice+0xaf1/0x1520
[ 1493.151894][ T8379]  ? ksys_dup3+0x3c0/0x3c0
[ 1493.156330][ T8379]  ? default_file_splice_write+0x90/0x90
[ 1493.161972][ T8379]  ? fput_many+0x2f/0x1a0
[ 1493.166322][ T8379]  __x64_sys_splice+0x198/0x250
[ 1493.171192][ T8379]  do_syscall_64+0xf6/0x7d0
[ 1493.175711][ T8379]  entry_SYSCALL_64_after_hwframe+0x49/0xb3
[ 1493.181605][ T8379] RIP: 0033:0x45ca69
[ 1493.185504][ T8379] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1493.205119][ T8379] RSP: 002b:00007f47a9b93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[ 1493.213547][ T8379] RAX: ffffffffffffffda RBX: 0000000000507a00 RCX: 000000000045ca69
[ 1493.221560][ T8379] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003
[ 1493.229549][ T8379] RBP: 000000000078bfa0 R08: 0000000000047fe1 R09: 0000000000000000
[ 1493.237541][ T8379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1493.245532][ T8379] R13: 0000000000000bae R14: 00000000004cea37 R15: 00007f47a9b946d4
[ 1493.314115][ T8379] Mem-Info:
[ 1493.321762][ T8379] active_anon:64542 inactive_anon:6199 isolated_anon:0
[ 1493.321762][ T8379]  active_file:6993 inactive_file:53234 isolated_file:0
[ 1493.321762][ T8379]  unevictable:0 dirty:358 writeback:0 unstable:0
[ 1493.321762][ T8379]  slab_reclaimable:22197 slab_unreclaimable:131119
[ 1493.321762][ T8379]  mapped:61674 shmem:6434 pagetables:895 bounce:0
[ 1493.321762][ T8379]  free:1227173 free_pcp:739 free_cma:0
[ 1493.410156][ T8379] Node 0 active_anon:258168kB inactive_anon:24796kB active_file:27832kB inactive_file:212936kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:246696kB dirty:1432kB writeback:0kB shmem:25736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 245760kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1493.481744][ T8379] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1493.541669][ T8379] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1493.610767][ T8379] lowmem_reserve[]: 0 2517 2517 2517 2517
[ 1493.616553][ T8379] Node 0 DMA32 free:1124924kB min:35932kB low:44912kB high:53892kB reserved_highatomic:0KB active_anon:258168kB inactive_anon:24796kB active_file:27832kB inactive_file:212936kB unevictable:0kB writepending:1336kB present:3129332kB managed:2580292kB mlocked:0kB kernel_stack:13508kB pagetables:3576kB bounce:0kB free_pcp:2956kB local_pcp:1504kB free_cma:0kB
[ 1493.676593][ T8379] lowmem_reserve[]: 0 0 0 0 0
[ 1493.688991][ T8379] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1493.729614][ T8379] lowmem_reserve[]: 0 0 0 0 0
[ 1493.737287][ T8379] Node 1 Normal free:3767196kB min:53952kB low:67440kB high:80928kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:16kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1493.778160][ T8379] lowmem_reserve[]: 0 0 0 0 0
[ 1493.786727][ T8379] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
[ 1493.809259][ T8379] Node 0 DMA32: 1340*4kB (UME) 457*8kB (UME) 298*16kB (UME) 173*32kB (UME) 126*64kB (UME) 49*128kB (UME) 26*256kB (UME) 13*512kB (UME) 7*1024kB (ME) 2*2048kB (UM) 261*4096kB (UM) = 1127288kB
[ 1493.839107][ T8379] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1493.868104][ T8379] Node 1 Normal: 109*4kB (UME) 201*8kB (UME) 176*16kB (UME) 95*32kB (UME) 35*64kB (UME) 24*128kB (UME) 6*256kB (U) 3*512kB (U) 3*1024kB (UME) 2*2048kB (ME) 914*4096kB (M) = 3767196kB
[ 1493.896708][ T8379] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1493.917230][ T8379] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1493.928000][ T8379] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1493.938707][ T8379] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1493.957806][ T8379] 52141 total pagecache pages
[ 1493.963484][ T8379] 0 pages in swap cache
[ 1493.967662][ T8379] Swap cache stats: add 0, delete 0, find 0/0
[ 1493.982192][ T8379] Free swap  = 0kB
[ 1493.986041][ T8379] Total swap = 0kB
[ 1493.989849][ T8379] 1965979 pages RAM
05:07:20 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x0)

05:07:20 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00')
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000009140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r3, 0x390c179b360adb45}, 0x14}}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f00000003c0)={0x0, @adiantum})
recvfrom$inet6(r1, &(0x7f0000000740)=""/64, 0x2c, 0x12140, &(0x7f00000004c0)={0xa, 0x4e20, 0x6, @remote, 0x5}, 0x1c)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00')
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket(0x10, 0x803, 0x0)
clock_gettime(0x7, &(0x7f0000000500))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[], 0x34}}, 0x44004001)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506003282835f5b9e46ac000000", @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="6000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0011040004040500380012800b000100697036746e6c00002800028008000700ffff0000080007000180000004001300080008001d000000060011004e23000008000a00", @ANYRES32=r7, @ANYBLOB="6b794a90a8c36c6c81"], 0x60}}, 0x0)

05:07:20 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3401}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:20 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x6000, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:20 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344, <r4=>0x41424344}, 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000140)={<r5=>0x41424344}, 0x1, 0x0)
write$tun(r1, &(0x7f00000001c0)={@void, @void, @eth={@remote, @local, @val, {@mpls_mc={0x8848, {[{0x3, 0x0, 0x1}], @ipv6=@tcp={0x4, 0x6, "a8185c", 0x431, 0x6, 0x1, @loopback, @ipv4={[], [], @multicast2}, {[@hopopts={0x2f, 0x3, [], [@hao={0xc9, 0x10, @mcast2}, @pad1, @enc_lim={0x4, 0x1, 0x11}]}, @srh={0x0, 0x4, 0x4, 0x2, 0x1, 0x28, 0xffd9, [@private1={0xfc, 0x1, [], 0x1}, @mcast1]}, @hopopts={0x51d3a72c55955cb3, 0x39, [], [@generic={0x3f, 0xe2, "5e7b381056adffe43df25caef5a0f37074d529f5727c6d67def9a5b3afc5d4190573d0dda46c4555d41ce25370408b519095898a5f2d970595d3a1a848851cb506b7e8bfa56249f2eeb5369a2e17de31a19a4b5d82aa104ac604e58aab6e37e56a0020aa0bd71eec1775da4c646e0ca383adee7e302ce8ff6dfc6b4dd5bd5f38214963def9479eaf82e3aa25c20f114325c2b5ed827cca1c50415b39c32274b66dcb486a4373d2f21312ccb0d29e61e635995e52176ac77ed8198ba7a0bb0397892a014d545dcdef39af222bd3d3493343cddfd48a8ba86a23ff5c917036dcc349e9"}, @pad1, @calipso={0x7, 0x38, {0x4, 0xc, 0xff, 0x81, [0x4, 0xffffffffffff0000, 0x7fffffff, 0x6, 0x8, 0x6f]}}, @pad1, @generic={0xf9, 0x6f, "245cd505dec2ea623845d411efdefc168e5873eaacba83722a150370b662412f148561a60a10a714cc38286810c83aea8f160e906953f2cb129454c18c0c3bf70d91b4f5024d2b1e0633f647c645c7804e29b07694ac504f0b58f93af9bc0c4a68eb8f550ef8c7c30a512b5998624b"}, @calipso={0x7, 0x28, {0x1, 0x8, 0x9, 0x1, [0xfffffffffffffffc, 0xadd8, 0x4, 0xffff]}}, @jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0x2e2b}]}, @srh={0x6c, 0xa, 0x4, 0x5, 0xde, 0x40, 0x7, [@remote, @mcast2, @ipv4={[], [], @multicast2}, @private1, @loopback]}, @hopopts={0x3a, 0x16, [], [@padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private1}, @enc_lim={0x4, 0x1, 0x81}, @enc_lim={0x4, 0x1, 0x6}, @pad1, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x20, {0x1, 0x6, 0x0, 0x2, [0x3, 0x80000000, 0x200]}}, @calipso={0x7, 0x18, {0x1, 0x4, 0x70, 0x4, [0x8, 0xd34]}}, @generic={0x20, 0x40, "e8be49330979a3d6073667a5c82244247a03d4eb328a1d546b0b03e6d437a1dfa0e1849a265312e03b8d389d93157ccac139ebfefaab3e8c3b2b37d7a2d7d20e"}]}], {{0x4e21, 0x4e24, r4, r5, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x8000, {[@timestamp={0x8, 0xa, 0x101, 0xfffffffa}, @eol, @sack={0x5, 0xa, [0x8, 0x3]}, @mss={0x2, 0x4, 0xb6}, @mptcp=@syn={0x1e, 0xc, 0x3, 0x1, 0x2e, 0x7, 0x10001}]}}, {"663d5997f4ec95a20fcdfb4b34beda717a734882d0f83fa1e2c4d68a29e2d6e80ab98730dcce5501503c662292cb1ce00f2c35ffbad4ed6b291368bdf26bb3ce78df18f536703f97b763808a84d5916449ea3f6bc6cd9e49fb674e4302ca0504280147963ac3104643d7896d052ff2827020440dabf77ac004058ae2ea7205a70fc73dc367320131396be3a53f8e4f0fa64a1c1ae14b61daf5a5598b8b60813995b0185d6244f009407b3e0ec8bb2f2273189a95c390cd354d4887de57"}}}}}}}}}, 0x473)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)

05:07:20 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88042, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$tun(r2, &(0x7f00000001c0)={@void, @void, @ipx={0xffff, 0xa2, 0x6, 0x1, {@broadcast, @current, 0x7f}, {@random=0x1, @random="2b440bc75d9b", 0x8}, "2c03140742e5fe3b3f7f53f3891fc056490ffba68899ebfafa0f7bd8c9406ad2b2f72329742e68a9955e0218219084c60dbcdedfb3724df76ef74ae5e7df26deb98bce4e29bcf6ccdf57cbc401eda0b3dcabe8495555358b4bf0a4f57f67c70a2621220594a3dd0071b33fb50b733c580ce1c80c3b019a4e46322f81eab05b9fcb77ec2d"}}, 0xa2)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$cgroup_ro(r2, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x0, 0x2, 0x98, &(0x7f00000000c0)="44b3", &(0x7f0000000280)=""/152, 0xfffffffe, 0x0, 0xa8, 0x44, &(0x7f0000000340)="303c428f7d7d1c8e7cf54126f7517a25ecd710741314510e5efeef0ed3ba64460697961cd58239ac038fc4263dced0ff77deeed85ec8817009d4c175c7b2bf6531ce544f6839469bf92b4bbab29f1588559e2bb3e8de50fa7633aba23234cffd0a6145b7cade8c6145917e0295eee000cb681baa7ed5396399d094ec86742a03f3f9834a9f0687a385859e378c00b660fc8a0ac6de31c05436d561e04411ed6a536ee07c7ac6834e", &(0x7f0000000400)="fb8539a569f8bfb310d569ce7a7da1f8889ad00abe140548fbe0ebffdcfeb760d2bdf1e77fa6060bae057195b2f68df97d4bf1cd75f2370bf602052a7a25fa44dc30d2e3"}, 0x40)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
write$tun(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5, @ANYRES32=r7, @ANYRESHEX=r5, @ANYRESHEX=r6], 0x8a)

[ 1493.999732][ T8379] 0 pages HighMem/MovableOnly
[ 1494.007702][ T8379] 349379 pages reserved
[ 1494.014166][ T8379] 0 pages cma reserved
05:07:20 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3402}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1494.256305][   T28] kauditd_printk_skb: 6 callbacks suppressed
[ 1494.256318][   T28] audit: type=1804 audit(1591160840.702:1212): pid=8447 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3532/cgroup.controllers" dev="sda1" ino=16367 res=1
[ 1494.349394][ T8452] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1494.381145][ T8446] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 1494.392740][ T8452] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
05:07:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x2343a726)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x2010, r1, 0x82b05000)
r2 = socket$netlink(0x10, 0x3, 0x7)
ioctl(r2, 0x8914, &(0x7f0000000000)="080db5055e0bcfe847a0719e3ce3c8b86acaac344b08c44ce033fe72c0c05fb0b173b9320a6777160b22d2b1ed378fe69fb555979b8c776b08186f264551692bae264469dd8c231747b83a68038ed28b6c6b175120cf45a08e2f6555e562848f")
getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000029c0)=""/4096, &(0x7f00000003c0)=0x1000)
ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000080)={'netpci0\x00', @ifru_map={0x7f, 0x9, 0x401, 0x2, 0x1f, 0xa0}})

[ 1494.431939][ T8446] 8021q: adding VLAN 0 to HW filter on device bond38
[ 1494.458096][ T8450] bond38: (slave ip6tnl2): The slave device specified does not support setting the MAC address
05:07:20 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3403}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1494.532303][ T8450] bond38: (slave ip6tnl2): Error -95 calling set_mac_address
05:07:21 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3500}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:21 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3501}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:21 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x8c00, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:21 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x2)

[ 1495.223396][   T28] audit: type=1804 audit(1591160841.672:1213): pid=8511 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3533/cgroup.controllers" dev="sda1" ino=16369 res=1
[ 1495.255756][ T8515] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1495.311724][ T8515] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1495.610337][ T8506] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
05:07:22 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00')
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000009140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r3, 0x390c179b360adb45}, 0x14}}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f00000003c0)={0x0, @adiantum})
recvfrom$inet6(r1, &(0x7f0000000740)=""/64, 0x2c, 0x12140, &(0x7f00000004c0)={0xa, 0x4e20, 0x6, @remote, 0x5}, 0x1c)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00')
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket(0x10, 0x803, 0x0)
clock_gettime(0x7, &(0x7f0000000500))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[], 0x34}}, 0x44004001)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506003282835f5b9e46ac000000", @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="6000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0011040004040500380012800b000100697036746e6c00002800028008000700ffff0000080007000180000004001300080008001d000000060011004e23000008000a00", @ANYRES32=r7, @ANYBLOB="6b794a90a8c36c6c81"], 0x60}}, 0x0)

05:07:22 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3502}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:22 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x6000, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:22 executing program 5:
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e48000037000510d25a80648c63940d0224fc60100010400a000000053582c137153e370948018000f01700d1bd", 0xfd99}], 0x1, 0x0, 0x0, 0x60000000}, 0x10)
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r4}, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={r4, 0x0, 0x5e, "307aa4ae46055a46f8f119bbebcaf88a6bc228232e9b565699fa29a97a25d2257e538ce4c72cda8a42e707549398464059246699f67d2f4fd8376eba7848e045601df5200bcbff6cda30dd6caeb7b43894a92bdbfda89f51523e3511119b"}, 0x66)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x4000000)

05:07:22 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3503}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:22 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3600}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:22 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
close(0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r3}}, 0x20}}, 0x0)

05:07:22 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x3)

05:07:22 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0xc00e, 0x0}}], 0x40000000000020c, 0x0, 0x0)

[ 1496.009092][ T8535] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 1496.071184][   T28] audit: type=1804 audit(1591160842.522:1214): pid=8530 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir186924865/syzkaller.hjDaT3/2665/cgroup.controllers" dev="sda1" ino=16180 res=1
[ 1496.105746][ T8535] 8021q: adding VLAN 0 to HW filter on device bond39
[ 1496.197247][ T8555] bond39: (slave ip6tnl2): The slave device specified does not support setting the MAC address
05:07:22 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3601}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1496.277088][ T8555] bond39: (slave ip6tnl2): Error -95 calling set_mac_address
[ 1496.344206][ T8590] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1496.376768][ T8590] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1496.399854][   T28] audit: type=1804 audit(1591160842.842:1215): pid=8587 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3534/cgroup.controllers" dev="sda1" ino=16384 res=1
05:07:22 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3602}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:23 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3603}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1496.757453][ T8584] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1496.844955][ T8584] device bond21 entered promiscuous mode
[ 1496.886072][ T8589] bond21: (slave veth15): making interface the new active one
[ 1496.897550][ T8589] device veth15 entered promiscuous mode
[ 1496.914256][ T8589] bond21: (slave veth15): Enslaving as an active interface with an up link
[ 1496.940087][ T8591] bond21 (unregistering): (slave veth15): Releasing backup interface
[ 1496.959071][ T8591] device veth15 left promiscuous mode
[ 1497.078436][ T8591] bond21 (unregistering): Released all slaves
05:07:23 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3700}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:23 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)
pipe(0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x12)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)

05:07:23 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x4)

05:07:23 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x1a000, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:23 executing program 0:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=ANY=[@ANYBLOB="900e000030003deb0000000000000000000000007c0e0100780e01000a0001007065646974000000640e0280200e02000000000000002576000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d29a24e80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000960000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000034a400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000255904706332e884000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000012000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400005001400060006000100000000000600020000000000140006000600010000000000060002000000000014000600060001000000000006000200000000000400060058f825a0c53749a8bac9d00699ba5b52cdd001c4a3aedc36578bbbbf40f079df65fa16ac88c1ca65f09b6c95b80279b5a5c07d91b0d2b84f64c150868c89131db164bd1aceb407c90d77395f54cce8dea416448b6d52dcaa5d487accad3eeb6a5e6305f531f6fb0bf7678e32b25d514dcd4ebbcc531f4dc9f1e09d9342de538d1e910f9fcf97ab882da31ccc6962d5629bd94217383ea0b9c500d0e9fc67ad5ddbe2ea9a6c057b75352ec7bc8b9b2dfd107ac4ee6c52ce03d30645fb742c2e12abb6dea58b685741da108752b93f4c0908a6c976f9c2f0b368cae5595f0055a2595e2a12a45cb54abc0610a001fc2671ef36dfdee698"], 0xe90}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={<r3=>r0})
getpeername$tipc(r3, &(0x7f0000000200)=@id, &(0x7f0000000240)=0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
shutdown(r4, 0x1)
r5 = socket(0x1000000010, 0x80003, 0x0)
sendmmsg$alg(r5, &(0x7f0000000100), 0x492492492492711, 0x0)

05:07:23 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3701}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1497.251015][   T84] bond0 (unregistering): Released all slaves
[ 1497.289994][ T8687] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1497.339942][ T8687] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1497.376344][   T28] audit: type=1804 audit(1591160843.822:1216): pid=8686 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3535/cgroup.controllers" dev="sda1" ino=16382 res=1
[ 1497.522398][ T8584] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
05:07:24 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x2000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r1, 0x0, 0xf03b0000)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xffff)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x208000, 0x800}, 0x18)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x1)

05:07:24 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)
pipe(0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x12)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)

05:07:24 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3702}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:24 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3703}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1497.801442][ T8714] IPVS: ftp: loaded support on port[0] = 21
05:07:24 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)
pipe(0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x12)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)

[ 1497.916013][ T8714] virt_wifi0 speed is unknown, defaulting to 1000
05:07:24 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3800}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:24 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x5)

05:07:24 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x34000, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:24 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3801}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:24 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)
pipe(0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x12)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)

[ 1498.275048][ T8740] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1498.326455][ T8740] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1498.382921][   T28] audit: type=1804 audit(1591160844.832:1217): pid=8747 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3536/cgroup.controllers" dev="sda1" ino=15750 res=1
05:07:24 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x1e, 0x2, 0x70bd2c, 0x25dfdbff, {0x3}, [@typed={0xf, 0x8c, 0x0, 0x0, @str='ip6gretap0\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x4c085)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000002c0)={@private=0xa010100, @rand_addr=0x64010102, 0x1, 0x6, [@private=0xa010100, @multicast1, @empty, @rand_addr=0x64010100, @multicast1, @multicast2]}, 0x28)
bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc)
pipe(&(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ff000000", @ANYRES16=r7, @ANYBLOB="010000000000000000001a0000000700210062620000040022800500920000000000"], 0x28}}, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80140004}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x80, r7, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "9b0e8591bc"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0xffffffffffffff86}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "8240b58cdf"}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000680)={0x207, 0x2f, 0x9, 0x0, 0x0, [{{}, 0x5}, {{}, 0xfffffffffffffa71}, {{}, 0x8}, {{}, 0x4}, {{}, 0xd9}, {{r2}}, {{r6}, 0x80000001}, {{}, 0x80}, {{r8}, 0x2}]})
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)

05:07:24 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3802}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1499.309443][ T8714] IPVS: ftp: loaded support on port[0] = 21
[ 1499.337911][ T8714] virt_wifi0 speed is unknown, defaulting to 1000
05:07:26 executing program 5:
pipe(&(0x7f0000000100))
r0 = socket(0x29, 0x809, 0x9)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x4, [0x3, 0x9, 0x1000, 0x0]}, &(0x7f0000000040)=0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000300)=""/4096, &(0x7f00000000c0)=0x1000)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x58}}, 0x0)

05:07:26 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3803}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:26 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)
pipe(0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x12)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)

05:07:26 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x1a000, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:26 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x6)

05:07:26 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x40000, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:26 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3900}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1500.160988][   T28] audit: type=1804 audit(1591160846.612:1218): pid=8815 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3537/cgroup.controllers" dev="sda1" ino=16131 res=1
[ 1500.194796][ T8823] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1500.242549][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:10) already exists on: macvlan2
[ 1500.248860][ T8823] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
05:07:26 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)
pipe(0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x12)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1500.285123][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1500.301971][   T28] audit: type=1804 audit(1591160846.722:1219): pid=8814 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir158484738/syzkaller.dWzPkU/2625/cgroup.controllers" dev="sda1" ino=16132 res=1
05:07:26 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3901}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:26 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)
pipe(0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x12)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)

05:07:27 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3902}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:27 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)
pipe(0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x12)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)

05:07:27 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)
pipe(0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x12)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)

05:07:27 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)
pipe(0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x12)
socket$alg(0x26, 0x5, 0x0)

05:07:27 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3903}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:27 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x40000, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:27 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x7)

05:07:27 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x400300, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:27 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)
pipe(0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x12)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)

05:07:27 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3a00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:27 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)
pipe(0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x12)

[ 1501.191878][ T8879] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
05:07:27 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3a01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1501.241826][   T28] audit: type=1804 audit(1591160847.692:1220): pid=8871 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3538/cgroup.controllers" dev="sda1" ino=16211 res=1
[ 1501.260318][ T8879] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
05:07:27 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)
pipe(0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x12)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

05:07:27 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3a02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:27 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)
pipe(0x0)

[ 1501.462809][   T28] audit: type=1804 audit(1591160847.912:1221): pid=8876 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir158484738/syzkaller.dWzPkU/2626/cgroup.controllers" dev="sda1" ino=16227 res=1
05:07:28 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3a03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:28 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)
pipe(0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x12)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)

05:07:28 executing program 0:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)
pipe(0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x12)

05:07:28 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)

05:07:28 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3b00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:28 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x9)

05:07:28 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)
pipe(0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x12)
socket$alg(0x26, 0x5, 0x0)

05:07:28 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0xa00100, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:28 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3b01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1502.168917][ T8926] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
05:07:28 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)
pipe(0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x12)

[ 1502.213763][   T28] audit: type=1804 audit(1591160848.662:1222): pid=8929 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3539/cgroup.controllers" dev="sda1" ino=16323 res=1
[ 1502.245678][ T8926] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
05:07:28 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:28 executing program 0:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)
pipe(0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x12)

05:07:28 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:28 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3b02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:28 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)
pipe(0x0)

05:07:29 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:29 executing program 0:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)
pipe(0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x12)

05:07:29 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0xa)

05:07:29 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3b03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:29 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x1000000, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:29 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)

05:07:29 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:29 executing program 0:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)
pipe(0x0)

05:07:29 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3c00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1503.038862][ T8981] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1503.121080][ T8981] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
05:07:29 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:29 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3c01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1503.245491][   T28] audit: type=1804 audit(1591160849.692:1223): pid=8988 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3540/cgroup.controllers" dev="sda1" ino=16378 res=1
05:07:29 executing program 0:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)

05:07:29 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:29 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:30 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0xe)

05:07:30 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3c02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:30 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x3000000, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:30 executing program 0:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:30 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:30 executing program 3:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:30 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3c03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1503.915607][ T9016] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1503.928292][ T9016] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
05:07:30 executing program 3:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:30 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:30 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3d00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:30 executing program 0:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:30 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

[ 1504.225958][   T28] audit: type=1804 audit(1591160850.673:1224): pid=9026 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3541/cgroup.controllers" dev="sda1" ino=15953 res=1
05:07:31 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0xf)

05:07:31 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3d01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:31 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x4000000, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:31 executing program 3:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:31 executing program 0:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:31 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:31 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3d02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:31 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3d03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:31 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, 0x0, 0x0)

05:07:31 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:31 executing program 0:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

[ 1505.157789][   T28] audit: type=1804 audit(1591160851.603:1225): pid=9062 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3542/cgroup.controllers" dev="sda1" ino=15953 res=1
05:07:31 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3e00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:32 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x10)

05:07:32 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, 0x0, 0x0)

05:07:32 executing program 5:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:32 executing program 0:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:32 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3e01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:32 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, 0x0, 0x0)

05:07:32 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0xa000000, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:32 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:32 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3e02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:32 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:32 executing program 5:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

[ 1506.079524][   T28] audit: type=1804 audit(1591160852.523:1226): pid=9093 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3543/cgroup.controllers" dev="sda1" ino=16371 res=1
05:07:32 executing program 0:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:32 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x30)

05:07:32 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)

05:07:32 executing program 5:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:32 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3e03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:32 executing program 0:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:33 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, 0x0, 0x0)

[ 1506.710149][   T84] tipc: TX() has been purged, node left!
05:07:33 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0xe000000, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:33 executing program 0:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:33 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3f00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:33 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, 0x0, 0x0)

05:07:33 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)

[ 1506.870008][   T84] tipc: TX() has been purged, node left!
05:07:33 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, 0x0, 0x0)

[ 1506.990248][   T84] tipc: TX() has been purged, node left!
[ 1507.024603][   T28] audit: type=1804 audit(1591160853.473:1227): pid=9140 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3544/cgroup.controllers" dev="sda1" ino=16368 res=1
[ 1507.196473][   T84] tipc: TX() has been purged, node left!
[ 1507.339931][   T84] tipc: TX() has been purged, node left!
05:07:33 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x48)

05:07:33 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3f01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:33 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, 0x0, 0x0)

05:07:33 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)

05:07:33 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:33 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, 0x0, 0x0)

[ 1507.541355][   T84] tipc: TX() has been purged, node left!
05:07:34 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x14000000, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:34 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, 0x0, 0x0)

05:07:34 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3f02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:34 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)
pipe(0x0)

05:07:34 executing program 3 (fault-call:1 fault-nth:0):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:34 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3f03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1507.998855][   T28] audit: type=1804 audit(1591160854.443:1228): pid=9176 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3545/cgroup.controllers" dev="sda1" ino=16367 res=1
05:07:34 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x4c)

05:07:34 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:34 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:34 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)
pipe(0x0)

05:07:34 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4000}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:34 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:35 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:35 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0x2, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:35 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc//net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf4\x02\x00\x00\x00n'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$inet6(0xa, 0x0, 0x0)
pipe(0x0)

05:07:35 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:35 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x3f000000, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:35 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4002}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1508.951877][   T28] audit: type=1804 audit(1591160855.403:1229): pid=9218 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3546/cgroup.controllers" dev="sda1" ino=16371 res=1
05:07:35 executing program 5 (fault-call:1 fault-nth:0):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:35 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xa, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:35 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:35 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x60)

05:07:35 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4003}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:35 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:35 executing program 0:
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:35 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4100}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:35 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x5, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:35 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0x2, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:36 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x60000000, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:36 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xa, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:36 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:36 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4101}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:36 executing program 0:
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

[ 1509.919855][   T28] audit: type=1804 audit(1591160856.363:1230): pid=9258 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3547/cgroup.controllers" dev="sda1" ino=16371 res=1
05:07:36 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x68)

05:07:36 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:36 executing program 0:
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:36 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4102}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:36 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x5, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:36 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:36 executing program 0:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

[ 1510.599874][   T28] audit: type=1804 audit(1591160857.033:1231): pid=9281 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3547/cgroup.controllers" dev="sda1" ino=16371 res=1
05:07:37 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x8c000000, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:37 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:37 executing program 0:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:37 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4103}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:37 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x10e, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

[ 1510.669785][   T28] audit: type=1804 audit(1591160857.103:1232): pid=9283 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3547/cgroup.controllers" dev="sda1" ino=16371 res=1
05:07:37 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x6c)

05:07:37 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:37 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x300, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:37 executing program 0:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:37 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4200}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:37 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0xc00e0000, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:37 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:37 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, 0x0, 0x0)

05:07:37 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4201}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:37 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x600, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

[ 1511.303284][   T28] audit: type=1804 audit(1591160857.753:1233): pid=9312 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3549/cgroup.controllers" dev="sda1" ino=16384 res=1
05:07:37 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4202}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:37 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x10e, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:38 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x74)

05:07:38 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, 0x0, 0x0)

05:07:38 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xe01, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:38 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4203}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:38 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x500, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:38 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0xffffff7f, 0x0}}], 0x40000000000020c, 0x0, 0x0)

05:07:38 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, 0x0, 0x0)

05:07:38 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x600, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:38 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4300}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:38 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x3}}], 0x40000000000020c, 0x0, 0x0)

05:07:38 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3000000, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:38 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xe01, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

[ 1512.506795][   T28] audit: type=1804 audit(1591160858.953:1234): pid=9357 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3551/cgroup.controllers" dev="sda1" ino=16365 res=1
05:07:39 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x7a)

05:07:39 executing program 0 (fault-call:1 fault-nth:0):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:39 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4301}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:39 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6000000, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:39 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x5000000, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:39 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x4}}], 0x40000000000020c, 0x0, 0x0)

05:07:39 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:39 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xe010000, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:39 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6000000, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:39 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4302}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1513.180758][   T28] audit: type=1804 audit(1591160859.633:1235): pid=9372 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3552/cgroup.controllers" dev="sda1" ino=16378 res=1
05:07:39 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0x2, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:39 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default={0x98, 0x92, 0x9c, 0xaa, 0xb0, 0x1c}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:40 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0xf0)

05:07:40 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4303}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:40 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xe010000, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:40 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0xa}}], 0x40000000000020c, 0x0, 0x0)

05:07:40 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xa, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:40 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default={0x98, 0x92, 0x9c, 0xaa, 0xb0, 0x40, 0x5}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:40 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4400}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:40 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:40 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x5, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:40 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default={0x98, 0x92, 0x9c, 0xaa, 0xb0, 0x1c}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

[ 1514.124475][   T28] audit: type=1804 audit(1591160860.573:1236): pid=9406 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3553/cgroup.controllers" dev="sda1" ino=16371 res=1
05:07:40 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4401}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:40 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x3, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:41 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x300)

05:07:41 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default={0x98, 0x92, 0x9c, 0xaa, 0xb0, 0x40, 0x5}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:41 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:41 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4402}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:41 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0xe}}], 0x40000000000020c, 0x0, 0x0)

05:07:41 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x6, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:41 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4403}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:41 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:41 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:41 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

[ 1515.099070][   T28] audit: type=1804 audit(1591160861.543:1237): pid=9436 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3554/cgroup.controllers" dev="sda1" ino=16375 res=1
05:07:41 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x3, 0x0}, @bcast]}, 0x40)

05:07:41 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x5, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:42 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x500)

05:07:42 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x10e, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:42 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4500}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:42 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x14}}], 0x40000000000020c, 0x0, 0x0)

05:07:42 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x6, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:42 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x6, 0x0}, @bcast]}, 0x40)

05:07:42 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4501}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:42 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast={0xa2, 0xa6, 0xa8, 0x1c}]}, 0x40)

05:07:42 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x600, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:42 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

[ 1516.072136][   T28] audit: type=1804 audit(1591160862.523:1238): pid=9468 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3555/cgroup.controllers" dev="sda1" ino=16368 res=1
05:07:42 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4502}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:42 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x5, 0x0}, @bcast]}, 0x40)

05:07:43 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x600)

05:07:43 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast={0xa2, 0xa6, 0xa8, 0x40, 0x1c}]}, 0x40)

05:07:43 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xe01, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:43 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x6, 0x0}, @bcast]}, 0x40)

05:07:43 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4503}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:43 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x60}}], 0x40000000000020c, 0x0, 0x0)

05:07:43 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast={0xa2, 0xa6, 0xa8, 0x1c}]}, 0x40)

05:07:43 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast={0xa2, 0xa6, 0xa8, 0x40, 0x40, 0x1c}]}, 0x40)

05:07:43 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6000000, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:43 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4600}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1517.014197][   T28] audit: type=1804 audit(1591160863.463:1239): pid=9503 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3556/cgroup.controllers" dev="sda1" ino=16371 res=1
05:07:43 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast={0xa2, 0xa6, 0xa8, 0x40, 0x1c}]}, 0x40)

05:07:43 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4601}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:44 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x700)

05:07:44 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:44 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xe010000, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:44 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast={0xa2, 0xa6, 0xa8, 0x40, 0x40, 0x1c}]}, 0x40)

05:07:44 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4602}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:44 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x8c}}], 0x40000000000020c, 0x0, 0x0)

[ 1517.779307][   T84] tipc: TX() has been purged, node left!
05:07:44 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:44 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast={0xa2, 0xa6, 0xa8, 0x40, 0x40, 0x40, 0x3}]}, 0x40)

05:07:44 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4603}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1517.894443][   T28] audit: type=1804 audit(1591160864.343:1240): pid=9532 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3557/cgroup.controllers" dev="sda1" ino=16373 res=1
05:07:44 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default={0x98, 0x92, 0x9c, 0xaa, 0xb0, 0x1c}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:44 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast={0xa2, 0xa6, 0xa8, 0x40, 0x40, 0x40, 0x6}]}, 0x40)

05:07:44 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast={0xa2, 0xa6, 0xa8, 0x40, 0x40, 0x40, 0x5}]}, 0x40)

05:07:45 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x900)

05:07:45 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4700}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:45 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x300}}], 0x40000000000020c, 0x0, 0x0)

05:07:45 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default={0x98, 0x92, 0x9c, 0xaa, 0xb0, 0x40, 0x5}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:45 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x1c)

05:07:45 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast={0xa2, 0xa6, 0xa8, 0x40, 0x40, 0x40, 0x6}]}, 0x40)

05:07:45 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x1c)

05:07:45 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x20000600)

05:07:45 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4701}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:45 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

[ 1518.916925][   T28] audit: type=1804 audit(1591160865.363:1241): pid=9562 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3558/cgroup.controllers" dev="sda1" ino=16374 res=1
05:07:45 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x20000600)

05:07:45 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x6, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:46 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0xa00)

05:07:46 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4702}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:46 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@loopback, @in=@multicast1, 0x4e22, 0x9, 0x4e23, 0x7, 0xa, 0xa0, 0x20, 0xc, r5}, {0x686d, 0x2, 0x8, 0x5d6965b3, 0x80, 0x40, 0x3, 0x800000000}, {0xffffffff, 0x0, 0x3, 0x162}, 0x7, 0x6e6bb6, 0x3, 0x1, 0x2}, {{@in6=@empty, 0x4d4, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3502, 0x3, 0x3, 0x7f, 0x9, 0x401, 0x4}}, 0xe8)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r6, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:46 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0xa00}}], 0x40000000000020c, 0x0, 0x0)

05:07:46 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:46 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00')
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000009140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r1, 0x390c179b360adb45}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4008001)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x40080)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r2, &(0x7f00000005c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c)

[ 1519.791153][ T9592] __nla_validate_parse: 2 callbacks suppressed
[ 1519.791166][ T9592] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
05:07:46 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4703}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:46 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x6, 0x0}, @bcast]}, 0x40)

05:07:46 executing program 5:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000080)=0x80)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000000c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r3}, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={<r4=>r3, @in6={{0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1ff}}}, &(0x7f0000000180)=0x84)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r4, 0x3}, &(0x7f0000000200)=0x8)

[ 1519.908239][   T28] audit: type=1804 audit(1591160866.354:1242): pid=9598 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3559/cgroup.controllers" dev="sda1" ino=16367 res=1
05:07:46 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast={0xa2, 0xa6, 0xa8, 0x1c}]}, 0x40)

05:07:46 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4800}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1520.084151][ T9592] 8021q: adding VLAN 0 to HW filter on device bond33
[ 1520.142875][ T9602] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
05:07:46 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, [@default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20020000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2a3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffffffff80000000}]}, 0x34}}, 0x200408c0)

05:07:47 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0xe00)

05:07:47 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000000c0)={0x0, 0x3})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000000))

05:07:47 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4801}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:47 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast={0xa2, 0xa6, 0xa8, 0x40, 0x1c}]}, 0x40)

05:07:47 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0xe00}}], 0x40000000000020c, 0x0, 0x0)

05:07:47 executing program 5:
r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000001000))
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000001040)=[@in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0x40, @loopback, 0x2}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}], 0x84)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r1, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:47 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4802}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:47 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast={0xa2, 0xa6, 0xa8, 0x40, 0x40, 0x1c}]}, 0x40)

05:07:47 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
sendmsg$NFT_MSG_GETGEN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0xc, 0x0, 0x7}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x80)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)

05:07:47 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x40)
socketpair(0x21, 0x5, 0x4e, &(0x7f0000000000))

[ 1520.852003][   T28] audit: type=1804 audit(1591160867.304:1243): pid=9665 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3560/cgroup.controllers" dev="sda1" ino=16371 res=1
05:07:47 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4803}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:47 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:48 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4900}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:48 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]})
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:48 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0xf00)

05:07:48 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast={0xa2, 0xa6, 0xa8, 0x40, 0x40, 0x40, 0x6}]}, 0x40)

05:07:48 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0xec0}}], 0x40000000000020c, 0x0, 0x0)

05:07:48 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socketpair(0xb, 0x6, 0x10000, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x44, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x44}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0}, &(0x7f00000002c0)=0x14)
bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x0, r5}, 0x10)
r6 = gettid()
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="4000000010003904000000000000007c725e7f00", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100736974001400028008000100", @ANYRES32=r7, @ANYBLOB="0800000000000000007f43821414aa"], 0x40}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000780)={0x4f4, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x5af5}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2000000}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x1, 0xad, 0x3, 0x2b31}]}}}]}}, {{0x8, 0x1, r5}, {0x210, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x40010}, 0x10)
r8 = getuid()
r9 = getgid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="000000000000000000000000000000000000000099e01274d6059c2bc411f6f3bc44041eb079f26273bd089f79092285a01cae0f6cf26aee4038d02239d92c6add6ecb8188a1e405b29dda73aa938e", @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0x4e24, 0x0, 0x4e23, 0x2, 0x2, 0x80, 0x0, 0x3a, r5, r8}, {0x6db, 0x5, 0x0, 0x401, 0xffffffff98a8f3c8, 0x1, 0x9, 0x8}, {0x0, 0x1, 0xd82e, 0x4}, 0x1f, 0x6e6bb6, 0x0, 0x0, 0x2, 0x2}, {{@in6=@local, 0x4d3}, 0xa, @in6=@mcast2, 0x34ff, 0x0, 0x2, 0x7f, 0x7, 0x4d117b3, 0x100}}, 0xe8)
ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000180)={0x3, @null, r8})
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x502, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x2040840)

05:07:48 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4901}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:48 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x1c)

05:07:48 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast]}, 0x40)

[ 1521.775376][   T28] audit: type=1804 audit(1591160868.224:1244): pid=9701 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3561/cgroup.controllers" dev="sda1" ino=16372 res=1
05:07:48 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x20000020})
setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x2, 0x1, 0x1, 0x0, 0xdc, 0x19, 0x6, 0x40, 0x4, 0x7c, 0x1, 0xb2, 0x3, 0x4}, 0xe)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
recvmmsg(r1, &(0x7f0000000180)=[{{&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/28, 0x1c}, {&(0x7f0000000100)}], 0x2, &(0x7f0000000600)=""/4096, 0x1000}, 0x44}], 0x1, 0x40002100, &(0x7f00000001c0))

05:07:48 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x20000600)

05:07:48 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4902}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:48 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000002f000511d25a80648c63940d0224fc60100006400a0005000200000037153e370a000180020a0000d1bd", 0x33fe0}], 0x1}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
r3 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x90000020})
getsockopt$inet6_tcp_int(r2, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x4, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r4 = socket(0x10, 0x80002, 0x0)
r5 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000000)={0x90000020})
connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'veth0_macvtap\x00'}}, 0x1e)

05:07:48 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4903}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:48 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0xfa0)

05:07:48 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)=0x1)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000140)=0x3, 0x2)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r1, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000240))
r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100736974001400028008000100", @ANYRES32=r7, @ANYBLOB="080050120300ac1414aa"], 0x40}}, 0x0)
ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f00000000c0)=r7)

05:07:48 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4a00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:48 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = epoll_create(0x100)
epoll_pwait(r1, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x7, &(0x7f00000000c0)={[0x3]}, 0x8)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r2 = socket(0x1a, 0xa, 0x102)
r3 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x90000020})
sendto$x25(r2, &(0x7f0000000000)="6c511629ebaa1bbcb3459630192b4d005116efc71f515706f8a05b011c39d873df605df3", 0x24, 0x40081, &(0x7f0000000040)={0x9, @null='               \x00'}, 0x12)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2baa}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40004)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000100)={0x6, 'netdevsim0\x00', {0x1000}, 0x3})
r5 = socket(0x10, 0x80002, 0x0)
r6 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000000)={0x90000020})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r8, 0x1, 0x0, 0x0, {{}, {}, {0xa, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r8, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048880}, 0x880)

05:07:49 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x1400}}], 0x40000000000020c, 0x0, 0x0)

05:07:49 executing program 0:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
bind$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)

05:07:49 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4a01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1522.665230][   T28] audit: type=1804 audit(1591160869.114:1245): pid=9737 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3562/cgroup.controllers" dev="sda1" ino=16369 res=1
05:07:49 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000))

05:07:49 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f00000046c0)=0x1, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000004680)={0x0, 'geneve1\x00', {0x1}, 0x3ff})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r5=>r3})
sendmmsg(r5, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)="211fed2b3b5ebde0a182d005b875358ad7795d7dfd9808644430e68f1e97c5c87ebd9d00316518f7700a49fd8ca82f87a2f13ab38269cdcac7195f60e6f7cfc1510ecb2c7597c57e25f0c8845c74b75796d7bb4aff234de028b39a3b8dd6033dfe76a626a9021bb950ede101c6a17833363d7ef58a1992576158783bd6a338993ac2156efdd7c1c8df4844f0f942aeda74a1602b504de2f1bee1e94f0e31a54c41ec9d27a00f7d7f0be70be37de9def6c54aea2f9d426671c653b9d923b02c47722d8929a69a902c83ce7c25b750d80c54ed36e0415de5513e84ebdb2e3ea4bdc7744fa1eaf6", 0xe6}, {&(0x7f0000000200)="f7689e7de01d55df9fd9202d1a1e0c6b0308365615972cd357e2c02d5fd02c58e8fe1f6503574cc8a7f6d644036ac3ebd270b1f9c710f2f38810c7563f4addbe940dd0833bd2fb779b362e0faf382b1360", 0x51}, {&(0x7f0000000280)="22a68318165e9f600243dba187c7860153fb359476812da65ac71ab6cb94137c3dd8bc13fb51043423d936cd8e744be2eaee39d8a56a48a8af2cb90e2b71430b5259b1faaaaea1d78e046ef664b121f9b1acfcdf07b502cc6d392b4b4780ce70e07f6b0b84966e4e72b83185a7538c36b20b330a4d6e5aa2711b07496f585dedfe03ea486a039c050b261832bf31aec48d1a77b15cc7aef00a2d7b16e9de8d4d7d57fe6159e5a5b6c36e067b49a8bd86bbcc87e3e80bf3b16895ec0b1ff84b0b623e89b8eaec4845d6dec9893d611a2b51ea53e14f1d39b16dfa91e81881d5e8", 0xe0}, {&(0x7f0000000380)="4873f5f7620ab2a08cf14599bef20275c8ada5acfdd5a0cd8a448dc3f5b2cb673d23b8facce801f79733ace50e7fa1c2375a3eb0f749350b554619b2844a3a1d5481a2bc8b633b689c87d04c88b2c7af3670794e9d3c871e67b31e93e3a7b26cf676a59baec0a79cc35728fdec3ad9fca3355e310ba558cb8855c59819c872fe0aab332a9a91eb5f1b13ccdd4328381542c7ce95929b53e0e41f", 0x9a}, {&(0x7f0000000440)="3af009a9b074175dbd2a6bf42a711ffe66313a28c6608db598628871aafb0852fd275539c7cac486b2d20cc45ad9d8cffb58cca0c28435f298b52ce76598b6ef2b070d74810fab022ee8a0d317027634e95804d3a31a898bac47a51d431785cb5899", 0x62}, {&(0x7f00000004c0)="78c4d4419a7d60653d3926c1765f877f533754475cf02478cc73d763b0c9ea174e90a2663af1c4f3e30ba31307ab061744e614eaf56cfb9f6a02faa6ac751a191a6c10c7768ef454667fb6dc9703c44b58e6c0f627263b0c38ca1499a4bb374637cf8de71a46b27584a2ce", 0x6b}, {&(0x7f0000000540)="082ca5b54be6ebbbfcf891092092bef21201d4be344f80f95350dcc6ec14fe06758bd9d98461aba12b", 0x29}], 0x7}}, {{&(0x7f0000000680)=@l2tp={0x2, 0x0, @multicast2, 0x1}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000700)="c4cb5173c8af14f91cc789763996656e7c7158172ce5d667371bba0759ec22ccf4bafff9065cefc99631c0dd1e5444294ab84e6764503630d3a8abc93ad33bf1cf69fa5e125be2dbb21d1d36310f2c74f07537d4a06ed73f2095b1c479644ff2db12e6cf4bb9471968ce01", 0x6b}, {&(0x7f0000000780)="3ef38ab67ec0d7b86c2509fbc24ed739cd36532ea4ea93b2f50a00f837534511bd3eee6de29cbf96f25f8abcf3b47ea95cba9654e5f98dc43853cbda0b595fa675294ee8c176e076ba42baf07297b31881a5f7bd160e6c69ddf235a42eb5a48b40387a549a1c", 0x66}, {&(0x7f0000000800)="27719d4cde83eea9dd9f89c255f54c51b2cc08695ad63f6c026111273153881748653dc0ca4729fcfbb0fae1cb1bbc8ae26a3f408a39d58dec4e6c7ebd6a3f54b0a7dd6f253a91bf635ab74b55bb61430872dc73868fafb2bbe5bd2cfe03b2901963281d1ff93220226c73f164a92b1fcbc26efb8cae5ab51d5409590408c3cffa387048882a5c804b7357a772fc66cf64f5b8f8393524605745d8393b0912830ca01ba10e810b4017c2860f4a609a3da218a2b0ee363cd284257f36b15e14c1", 0xc0}, {&(0x7f00000010c0)="e1d7275d143472d7c5e67062b17ceb360498d1c2c1e286eeee427af83dfc270d7489b9c5e3ae4f105f20fe5fcaf197024d63bc2ce4f47d5a6de0f984b76d949cdf207a976e4bdc8d5b4523f791a73c5c92b8d92258acd84535386f0f66bdc3947ef74f2aa6ecb93da92af69ee0fe095b64e6055461c70f499f9d0261f45a705259873dae5930bb040ea8c696e409fb8ec92a223222c983ec753e67bd36013cc15d6dd9e08b78a8fabb33738f8b699ec5d3bf4ba959693c87583d763df722842f411dfb07c67ae8a57d22b31dbcecc1c1e7821f90cafcbccb6ed357d3cd0780afbf512658f1541144d14098f8db1a3e60f8bf62c6348bcf11ed739b96ca114ac36cebc2722ea2ee1fde490c41f074be2b6512e753d104aaa9ab655547a2d1119cfb7efd20b59df56cbe39fbc212a6cb29ca24f0f8b86e65ced037d96b84d4ed5a50259d8962382321450192ee8fb866cbf0243138d65cb8be2a1bdc16571c632f10116236ddee00bd3fc2fca7623297ceeede9ec453f4d57ab489a1b0e19aee7bf318fe86f9588426580c06df532aff9f07fe127ee7d4845521eef587be55a7476c4c19cc10c25245416b8ab96f030aa61c33ad46e2ed8acf2c0ebb8bd8f0a75e8f1be847a509641e5373f901206261c5b97af289f315e66763e76108cd63ca31e72113dff324b308202a359adb40e4f4354f00d814d7113e43d5f328123f425b80f2f183e8a1fec176979ebb628d80464f1a45788f82ac4724e60cdc3b28e407b4906e679f445b511ca8cb24ac978a0ad631a25d78fa752fa8c84b7fcfb2c16c374c30300f7bf5741830d1170d9d769d488661700d87b75ad2a415548f9de747a31781456d48337da49b7d8d92425368c8e1d4241863ddeeffb9bb3aa4893f0c57a7a38273a304349bb2e86ba2789d3cdfaf44e37b77b3f2075191be4de8c6debf829680cac362e09b44e6872efab13900466f7178e807887db17af1763298889e6c5d53339c2a33f922ad9b89e14b0b44956f490eb55303bb55d4ee5c91b4bb4df7294bb9af19f50f297e4512c9f1935b0a5436a97711294688e76c9c180241610f2f8c51bcd1cd71b7647e92b005161acb9b4bec252956feedd596dde7bcc1634b220bf27827296ad803c8c9fdeacb89d42038645b10ca24737b992c2d46495bfd8a94b28a3f477040c027990d13ba2c9a1365bcdf8de2e7b4c79c285860e3880bf88f12fba795a4dfe505c84ec84c598a6b534a17f2dfe3fae2205ea4df4ee6c50289c10ed09c28fa7ccde06fb30a3147a05bf0d971d56c751d6d3f8fd2ed617c38a71b9f98f8f39a402176b3b4b702f1ba6cdd82828cfb775a3da49229c24b627d4c6079a5474b7a59dc230e0186663c31b1470816dfbc9bd28e36785d3e24431b69a293dbab10c13528185b31bbb9607511203e043ae305b03c9bb9105edf74d764f8fcbc5394d142576fa6be1f750f551279db8bfddb2d423c6e390e94320213415550437ccaf7eef6f83fad763b55d41620d9df8a11cce0d12c932ed2ec9cb4145d186431f55a0d57d910217c995cd69f6bc4c8821d6368d267dc6993ac1e1efc06baa0047a866f2a2aa89fb0fece838812be43cc7cb0bb212eac557dddc8f20a98a6680e87ae1e8fb7e9aeb68088237b83363d786473794b7fa2dcea566178afd7e64d8a063d8c2b0ab62c1b74c3ec462ed2fa6b9d09eecfbe5dfa57ce843628b4100026277904ed7ff7faf1a41f8696b03e68a40106b4fd66631a592d0abea4554c3db192a5067407d3b43cee682697e05685e3fca17f8211df39f03e50e13fd4821f9f7fc98ddf364cf311a54ee64f4dff843a040ec2b98a072f5c8bd36288aea40f851f88c9cc1eba445329a24c21f6a854fed29ee54a88acfafb6e65a18ec53aceefb48f11f29a1e268add41d25d8b6e41abbadcc6aa6fdc51838bc9e8275b3c913a3982e1fa836cf3845f48690a212f119ef1501c4d11e76903fb20da750039e8aea48079851f1877de51fe015666a9718d8103474abcfe320ab30b1dd605c37eadb8259a1359925c08856ac6348f64c9353fcddab5836b99b5266d53fe42d6689e4a830fb71e87aa54e239d8813fa7f0e4210a9963925f46e0b7a6a948a481da909f7dd4956d196d4ca0ce66af7dc721a927af134604d9c116b826104237794f797d3cc2f636c5963ce1f9bcbec2560e1b17da073171600f3e74229b47c8f347cfb45debe6c88b8d9699bc85aa91c583cb20f217ff457bf96996450befb5d25364c007c7fea6b968b45be476c1ccc975b2f465cbacacab7c06feb4a6cb5948c2d57cfc3336502efbc792e1db6103e7396d677cbf4f33910025877289be5b64acdb96e046158cbf5da559d037fb4fdfc4f97a8551a5194deb647b05125e6ecadb66e78f5a215bde7acc668aaa889ace459c1021f801f0c2260927a366cdef306843bbaff7045e231b9884aaf565bd86a2e44e06a43d637405881cd4437127a7b577924099514c4115c769db222d7ee1f93e0319c953374904c4ad197e3d95cb5227e7b3db1efc30f535d9a56d3e1431e4ec826b0c8154301d64c1182171cfc37d36951bc887296b52b35efbb94c86309848d6695b5249e3e4bba05761daf6ce77157127661ed3f9b8e7d1bdddec453bb55006408ad9dddfaaa6053c244b43ec69f47c824402f99fbc2255e503f3cade82c6e43fb6be3d7f8b879af56a8a06126c59f63149dd0a78e52ac7d4948067af627e7a7c2bcfc187bacc0bfa5efc351dce79898b77ecc340d7c8a54e639ecdb0759543ae39cafdad6206954eb105c42c097f1ef11b7b6de346855191ae87fd01cf5a93d8fc09ebc82617b95e1ff59fa6344764c88bc456db5256861d2ba91a9935377bda8b554f7f4bc9d286b127f0fd8eb2649e2d22e69352892e744e0da25e0191f5c1695f8996e61ca32ca4b0157cd02e6f91222b09ff84ff9e99996018bfa79f402f7e5ae6704b095a08435dcd60c137c6aafec86cb62f85890607dfa218789ec5846d6bf89410700ee1ff146594b4328dc836c09e741b8c9fc2fbe7a2520781cf83b4b66208de3045f12ccce612ae3724d0257e49cb1524431f9ffb4f89de8d4b0d308e5903e17b70d2c34952ba142386427bd1882a3c16b082bc2bc6abd0c3de553823984046d67c4c19bde78f86f29277e48af9f874f5e871b0b5ecfe9971fcdd414e0d6e08cdf8db4f09eca9dc653adaed89c9496e7fe7f05a6fd5639fafccb66da5114240ce5c987b9974f5ff1cc6d5fbe634ca4bb2537c0e4cf635999ed35c9f1de40d9c792d95413d3e0ba2bd40edc5c782a52f6ac698926136b8611f3514cf869f0e87a1d4e20bc108ce373adfd980cb9cfc37b5e57c35c23ec79fc4518ffe3612717bdc9e08449cabf4405f52a1a26a9cedcae9167b2014464981369e9a4a8af1bcd9dda4c034cbaa20889d9c970bde21b4bc3d2bfe3db2fd7e5b84a180236f612e86b67ca5f996cac69f4fb4b22b048811eab3394dbf0984070b1a63101b59b133d04153d4cd001730a04c45225732c354639cbb803fe49b69566b3149352109847f0eea52fcb6c859578fa245bb4bc7f298cfa18c5cb6b94f2757e266a9af108315797a46ec908ca3dc293b44a231e5e90ae61dc0374949ea8b43ca00a0f89396d0e1010582d378ffb5b890eed70d002b93ee0adb1c3e3e0d6536953df7b18fa9bde8c9e68e31076bffc5e7c1d82662f2650dbeff8c255a3d05b2146a2fd04ae8c6093b96a325bfcd7903627eb1e5ca64faa950ec15e6fbac863620bb002c01820a6d16ba2b36911778f1c8c1c5538a76bc77773e214c8a52bfc9cc1bf2f14e6dbe16456e5b0b13beb6212fa0488f2690b310bc83849cae426465d3211d23989882f8953962249e393a99e399d1bacdcdbf70034ebb70531fb16fd0fad9ba3ba185a88de84c26f749a17b3b57c77fec1fa9c32d894d4c40a6e6a39cd3d3144ea96e09a265d5ae71ce72ae9a5d3732d94d9ac5fb3671b33b5c67bb7e73683a712bc08732377d1ed9cfdc1ebaaf8a99f1078bb853b1bb6fd11170b196d13de57c09f88bca5ae409e81b73a01083c6c0fafe28a4d823556395a71acc7b5466ea68a2c0c1a53a99001b5a5acc881050639a969a198649e3995b596c4c60029c96f267dd273e912a53f29d69c723e68383d130edd106a81c62eff236ae05984865611117905a82ff291bc28d9ea34ce68eee8522a3927a309ad2b38208b02ed65a00a16d521801202f90efa1b606768cb91163829874b64da96e1f6fd8332e24c377a6aa633138196690dbbc4d06dbd8fa6ff7dfb1a7cb9b49a452ce42fb5fc628ad73d62568271f1713e0f69b55c8d75b26395ca756616e5ab67de8d5beb5b6e865aa8eed99c93789e3dba9added6a62b8fd5c87c07711b18882f3a0e67f0d0941e7116760b506883c829a112f6511c05d715d99a1726119e580f735506ba33d7440f77a2ebc5b3e20771d055101e864bd47389de82dd84e3eba79d24cd2909e4fa6a779b1f081d5b991012fc3b37109dc18555e8025bd0696157d4ff041b97132c8e18b7b795d924ceeeb71d6fdebfaa57c61ed690e6a85a662175a209d21d3077b48f5e3a36a0f0684bb6e5876213a0befb4bbd3f2ee81bdb1725c17207a28d3c1cd19853a0ecdec0e7103899f981ae39331e21a25284a4b84fa58969f9cd26682d0e241f02d7ae075b73fde243eeecb9608493a9edc3ce597846cabd72ec70f4a831f1e0b8860c93f016cc6f907084b5241b923c55398aa9944a79a7b790e1cd147d55645498136229ab76662e6fbdb4c73543ff589ca92aafcc3ee5c9666bae451e7bffedd4836ccabe0db33eed0c24ded573d95c78ef3f6f2c4fc97959f87794fbbb15fffb5db3c8c558d358c2faec8623cb4dda77ee6d09c1a8ce781d8ca6b9112043e765b885d4f8e582cadb91115433f1da0df86fcce8bb3372d5c9284d1888c41129e7c3b4c0eefeb25a36b7c611ce16a81dd0fb4ad49816e823f806079c238a4f6982dab945de49a7f68a73bd29edd7417002dbd1f69516d1e15ee3c051c479a3a27ca06746ed48d65088bbac8bd1a19f509da9618a63242cb89eef8e26b39c94c91c54bdfb2e4d40492cfed37640a5a82e62f52c03c849fa9453e72a60884cca56bbc96665e251557fb1ffd9acc52421009e3d65306ba6d52c571c308aed9d6b1f70af89204b2106bc258ca40aed74dd6e488b0055a07dc3692652b7b3cc6f3d10e65ccbe91c0b256fa5e8cd3f10022d3118838deed62c48a4ece16c02fc2e1bb65d40180e1cb8faeb7df4a27f5428465485bdc8f829fe9fb5a220a189f71eb68ef000e09d3ecc51f8219d9cd6f60aa1950dd26a51e5bb27bb3e31223eaded1ec579690c5cd1d34ef8c0b98c5d8526e520d2e3318e44e3653e09b602d6e0a56d1b94d0ca891404f4918cb5aadf28555f4bfce3c1dde8f71bf381ff6f3ce90bd73f4105f51870ea863f595debd9e4f2cb7ce5f86ce3bca154e2d6681aa50e9445950d22dc3d3c62427c438d1b49812b9f4ffa74190bee4c4b22a61a2de8d1e527f8aea698d82e4eeac419117db51d968a2fedca27d0ea0894f32d1934d6fcce2d647bdb7b1621100d33eddc77d34508c4769b8ff01662c3c2b65172fd4a957557c5447aac38643d5bb762a1a8a145fb87b75f88f0e44c028260562c3ac0fb54151bd7f2888605dc3c8dc2c6fe76fcd17b2f7e306f0dec0745abf1983297910b0a9df3c09b2fa9b913eab62ab74609fbc796b4e673ce059f4c6b8567739d7ec8", 0x1000}, {&(0x7f00000008c0)="58b72973c7ae40d01b0b36c8bbb3668a61b986bc87dabdb9d9cd33a3397f470fb0a4afdb9a5152aa48103d529229a83b8bda8d2f580e7f4661fa0f63335b4e569f3d4b2d6497df569491077c4f044871de1872530e43a15f03dee0c225cd1bf062ba0753c49cd3dd53a5fe897036c5a21030fcfd5a0788b4a8373051b160a784abc5561d2a51c0f1008f757ca4fd8f59a8df43601ca4601b183c001f105e804001f4d367b84374b52b1fc36fb675f502a9ab18df3a69b3d3932b963fb11bf766e9a83b0653bfa7edfb362835d8c25ea6d8472903c94663df", 0xd8}, {&(0x7f00000009c0)="e639e2618b49198c181277ea93bed8439abe3d222080ae725cf25e00cb222cb37424b125d7ccf49086ff8aca6027e7c8c6c51d9308a150e128137d506171a403547f4aa3666afef7520e80fc5b55b0c43e45cf8c1a79028a6b02568f83cc86be2b7157a21247e8ab617e51cf39d3bf7f3549542e31882d822e92a3a196586b72acea6a99183c682d76489fd0560ae207352270c9ffb23fa3fe6fb71dd24d908f0a61b077cb9729a1e6839a60e6a0811b221d2e469ff08f82f8720d28280ba69e0ac23a0ab236e51ba5a398", 0xcb}, {&(0x7f0000000580)="61be2bbf6059f4590ce31fb3daea8ee313f0a897af249b9b82d966c9ff83c45048492dc9e108c28eb993449a46ecc122d133f6633d3e39", 0x37}, {&(0x7f00000020c0)="3910fc3440574dbfd3aab07df07c5f7c50dbc8c95d90096db8f184829ccdb913afb7a9c0a174c372affcdc10adc7b041920960e1f69ae7e21cdce1f585902756be65a03f1660e8a1d4d0aec8d3d678ebff98b971948ded41d048e3c34cb5a9ac447fed0cba3a1290b9f3080b898616ed4bade9d736ac703d4843942c86e9b2a049dcd373bca18e332d5f50f4fad2c224b4510659a9243d8641b4697f79a3621a3d4fc16265e38be3213309ec02a52558faf403e0c2e0afe44f7d6b84e5dd3cbce68f5163bcba1323ee0e0aabe9caa83829e944f8ebcc1724e3f9db50bbaf6060a8bc86b83e34e19d61de5c5135cc977f346d52b32bfb8099fa8e7165b487e4d7be955b37ed51984ed8f3f296e619654f84dd71184d7d586dd0322af17ee54fc734944f7ef57c5378232ee7862b48e6984d186a7d53cd0b0224caf443f95603b79451b04edd2dc21dbbdf3a88cdccb92b1f05c980ba8f2bcedab7313a11ed6291fd77834d2f6dd087000d6b0344fa27069ea280b82ee6ee87b56a18dfd87e169cedd6784afe1e75370265d79ccdd7cbdab3c62d34e560a5e3b27803b65ff9c91533344d61af5ae87bcc104083f97c2dcd1d94de442eeca1b65579d61b33eb5187d74bc33cb4815fe52ea3ac9d0c125f6a4f8a30e7bc282cc00d59a723e751f81f81c9ba9b02cdd34c4653c2da02fb525ecf60d95805cec4ebfe115527e95f6e7d03cece3854ad17a2b728d410564309dc49cbbe834393f0a21012fea4cccb340bf21dc5604faf3b842c308b1f4a8ac96f7a0e7edd61096dfc10d3538321ae214d624d9c2fcd9b1638cc05d3b6d1b3ea4751db3d7270af60b980f81d73aabc35f33c1c3a09d7074ffe788b3422b67169b26cc640e0de38da8979848f07d1fd0dd6be4863212df2599d83917bc6a789bfa8a54eb76ee5e6009113e35a5d2df52d8a4053064394cd017ab36140d78dd8e4c9adeda5e2ee9c9bb8c4afd48d39a328714c0aa0997f417c5aa95d8560a14ad89c35c022fae925bfa829c2d03287beb3a94722feed894a5b5a205d4ea2f5aa76ac70872263bf40531501afd33c7e65168fad91c23f3b91b1e61f07fd58cd0fb7687206af91180391672022adb9ee9200f06c9b2e7b3e56b6dfb01abee76f75045ef53715b02c66d31f7d088147ceabeb712b00c6bd1242a6cedb6c24894fb82d55bbb501c82a4e3511c63d6a873db68aa8ddad122bc408fd39ad738f038c100bbad1ad34878730741f30a37cb20706389d47bc44365d32b1feb7600bbb4fb7965bef29c5b7ef38f57d6778d5751daa4054f9569c959ca703bc704d6b282ae7204c8f09d4c0d3c09bdc31e59c52c4f06ae240313ad54fbe249cc62fb2188860aac713ccc3cf806dc932c5c23d5ddeb8e7c672ad0b21185e5cc20d015e9e09529967707457e34d2f2e0ed22313ae9bbfbfaae1bee9d1bda8bc1f254233cdb8ab3233248cd6f12bdc48065ff62331431e968eb33642631378e9c00bccbfbacc4efd4f7a9d83eaa36b16c338583da63967948628afd2187e00b319733fe38442200abbd10559cc8bd62ea4e031940de8bd36312489ed557542f1ed3a9b4ec1cb4793d4749c3055beb4ab0d4cab175ccfc11bfed8960d8436c2b4a150bcc3c73dd076b2acc699a63fcb2ec2d10be32c697104f9a88c5892520670c2833b2ea62807f2922f37c90d44fd6184b58ec116e55fda5c68c912acc722be1467650753c32da3d7a88112180e2a489d21553784169537680f77eef0c2d90a4cc34089e4e69e608d142a1cf00819ef6fa5685e8b9337ddd9bb76b8ecb14fa9e27013faa18780886d9787a0d76d596081cffacf6c71e11c7f3ec4255532a837f264e456c57c1cbacb4fd6312c88d2211282dbff477980f74472788a0d35ffc5372087fb3350af14040d4a139259d215b5c9467c61e959b0b74c9445945d3dbc4eacde89621ca025a937d31b065907a9110fe7543c53cb37ff6fa3176eac75935c280a9387d1d4201135ee473aea09e131aad10391722942a2b37383ace9e59a092ff59433e597c7bfaea95483e1881737ffedc26c5db3b0d03f42628d1642360ef744924e26f01aab0a9d519adc3c42efb8e4180f5afbcbea93edb76f4ac02800fd2c10873cacf12692d42ede28b75772c598b5a68f26f25ae3b1bfb8980cd660bc11918872b3836ce38f368cac4c2bdac70c65bf91f162c89ed25df09691f627b0821257cd1ba8304c0294a5c3fbdafcb4a141347d63e22c795bf84a8ae5942f13e079099912e767b9ca5cd83c640d985a343596f20f59f6c3f61cd13a15f23bf7fc14340c1c8dd44423857171a6441c44d010cd80b32fd9e07a372e7f42c7b5decfa1218a501bb29df38dbad9c238ccb466b0ccef655a49c00806c53b9e2355718d5646b27ce414a80c3f0f82188a7a3ac3037df11cc8eb499cfecac5d27552d24eaf8eb3f087246c70982142c15083ba0fa1610f41eff2421821875d90dd92ac7bab55dfd0ae77b02d94f63b7982f90be1597af941a69ab3ea6781e49979daadf33fdeae82b92291adbe04b6f9908bef7d2776e84d0fec36f63bfeaf6b61933fcf6029ec34c80b49b0ea6b1ade2f177ce80628ed0484b7a83bf2567fce489e3d3d8528d2ddf0f757954b00647a543a98726c0c4177eca2dd71b60d27e5467eac55d5bd167b7df17d63ce892b9b96c136c7698616299bcb996a78b81aa998a9009a958cea3b7e7fb011a6c000a0554990de161aa282958e2a2800c3b99ff95953af99017b046a6893d39a60975154ec9bedee40a0623431a8eda09d4c3f663759c425201d17c500bf64a257d26fe48539278b0359ebf0f7c783df4496d51e788d4d967236305224e089530b913ec18864b00d1e7e227261ea33d97ddcd583b1efa0153f12c0005443086e4809fcd079c8705f9c915e52f864f43bd546ed0887d081cb4e6703f819898790173bf15a1a7858deba25b71e5cf90120352b42df2d448d6f42d5df2b168cd6191b0ed7400d37f3e4154fc538d4a8164ee30d3adb114c29fadfc0c4e4cf3214fd625a53bf0e8b121466ae78441bc3da54651b21c24743481f36a1bf5ae8ce2d103cb4f5a54d4a42cf13efcd67f8daa85c31a595cf682a0ae8b02d89e94e5886003c28c738548d89468c10d5fa2d5fafa5d576898d4ce9b022fb5c2d3779542e5e1243915baa076992a6d34df1a67bf693229a9924c254db491653759d8dea553eb907cfa2d2de3e1986d79079132de74e8eaab4933315baf6bf9a63361a6e2a425c95674fbe75f21e065bdaab4af042d2331a7f4ea2c777fe138c1982be68fd167d969770c29671e3db9056f53a32aa0feda81983069523adbd8ad42fce898df85bafad3cea0e9e0868837b79de01f357feb587b1ee0177d1929708e7ca81671b05dd9dc6ca8f749fe32cd0b11bc56d13accdbbe7ffddeb3b019a77848eccae456f434a393f2f49700d3b26760223c184900afd93e38bd06aa1f1dfc4be8d25a9c0acfacf67da961729271a2cc7c00e9428216e46e5aa62465c088ec777912d39d0710c4ac31353363824f8f9d0e3cde678bbdb3a5c459cf57ce152cca1b722b693c2efe3b5a16bf6eb98e903c8b5eb19f8580128f582783f958a42f90de7c747e5e0fea12f2003fb9722cf94de080fc78f9bfc9ea8839b133b1e21db6aaf939aa4a3ff0488ca527a58fe7c114a424841ad53b40ffe0f2de4190ce37bd6c385b6a02c69a1e8b6a3422cdffd351a01620bd530325f2b8b24dd1a2984d0bde66f3b61fa85017a5f611363f0e9004cbfbc3c61f2e525974b5bc207e625e93aa255854e9e28d55f57bba561b8b8d37d8fece371b223777ecd9f8c46ed663c03d83ddc92674b0bcbd66fe5b96729b46dd5dc09b6fb870b1b91d576d8ee0ce95edcbd71ee7ce17cd1f7bfc9f5d54ca98a52e59255f134548d0c3389d8f77fe0c7fef4099b6d6128859f14b0e54a494aa74a14535c2892580ec0891c247582385c4fb62741bf9156b57fc905506b856f58bd8c9dbe6e6e4a8ae042ff57c45948e80c66210b20f7a6a5121541e6890fc7566142b5353ec8c159631369cecd9c0afca08001487cf587ee3d29b4bcaa86f6a8be12136054c09cb6a3ad63dc8f1617a34444bea03c80f0d41ea92b39f5d4cfc100b9a356e04928c8f25d74a07c73a86949d53ad3f963a8bc092e36525ddc601be4b2422d67222f6b8305793035e8875c0a8748921fee0d861cd50710c266453df6303b911a193a0c42a7017dc24ff335d4f0e2e654c2519a8f31b9a3a89f27afccef6a3fa963e15abd33c0636c59da75389854d6a02b7483d77d41c5fe6e810488828414980144b3550ab6a1c50e08d8ccf3d5ff56f8fa33a5d8b3443ea249f86be3de49b005760018c5260dde32fd0085f65c0fcab8315edd177b244fbd2a2cb5f3dfdde65b54ec420792223855b17f7818d67824227e63c45afe01b8d164bfe7b9785a4aa4eb0a677dbf3efea393dd7006f7f45ff6f0bdba9e4485ac24f41fb30cd35a9cdb29736f31e5495bd03f7e559b5e4655e5d1f21b6cb6731d8dbeebb28b828d880861b8e9ed484335d8b324a09a526f97080ae60fc532592d6b0289bf155c78c57e1a99abfaef319592242cad329136171b93996d560af266c39bb3f21152d4cc7a599cf551389fc992d9ca04513e08677fc339156294791c40d669621c0a06f918a9412263c32e2b3b7159416515eb5fa3cd1a233bc41ecb797bddb5d6aad18662138b081bb0a150270126b5dcd15b2b2cd76ebfe1bafb5988bc4fe6184c4e431f463d9167ef73a330842921bf8e4d3e0fe0f300f3eddc6c82fcfb93cc74fe0a7c303fede17e7483f02eb4750ffb38eba05a6ad46ccd2ac36dfb516a0ec46562aa80d0ffb9f509dff50c0186d417f45143803b89b0186e592227a1c00bd09c0f173e3506843b841027895e6bb3d3fe8310f79ee19da9f2c92c817136b4fba72f33bfad9472a2c26f450f47cd7db699f9b5523943d634e405645425e55088717f40e485f6e2f687660f2de5882de44b37743663cb2ca4957c29adbe7c477ea62a97eb463f8e93ca61a39de1f1aaaf29f5079fc6162a7485957179688a7df72f0599af0fc225b8866dbeaf50ce97bdfe93d8fca3bcc2be584077d6cd15201b7bbe0c8794a18045275533fef5e83aeeec7ab7a31dbad32ceee224340daca5d3264e83c336feb794b2eb745bc9ee68cccbf705b0d517a025bc16cde899975458ab3e62a07230fa7aac5dc16d8148c71d8f1e94095ee87bdd45c60a22c2f566b1fe50a52fc3431bd350c40aa1a0b99683f5bf8d7b03900486f35574e77118e40d1da36e1b5e1ba1dca7965d0af1782ea85b9d1ff1794bd9f74fe66465c254a1d753742228c16a28208fb445e3aac14396de565132fff2ac56141524fadf700bbb6d54992c20501370da6e2f4e4e58cfb615ae347dfa0c71e7c035642c5cf64d2374a70fa04ac1055b0918b99d269a1bb40f4a98331d65cd171f490871a161206b8978ed75f2f5f46187ea1a41db1f542883fb82469cf636f961672c9d6112f241e80424f9c5817e015829537e7673c19133ca1c9ee672c2d55f2b665110a09839532d0b90b8f1c84175e417f39e7569af84d815d06054eaf6d3351a105399941561ae65d29bc5d8ee80754b33438183b3f00e319930b630f83fd3c105356c2e958e72f0cd68e40e7909e484285d80131df8befdd9efcbe9cca01492ae74ff3c940b061ef0f13341e2d744f365ec976b952996f45eb272839779b1dce6a3", 0x1000}, {&(0x7f0000000ac0)="a6f6958638842e30663b9f836692440a3e7d4b370ebef9063906efa185035476e6496ee2116daf33570645acfadaace71c2afa49e420f5ea616e6ddf8276238d344f2e1e2aff5c557e2f77eefacf456ca3feae50401f998adeb198d8bd239efa531ae7c8852b8a005b05040d8e0bc11b37efa3ea0ff0f60496caa2bc08f36af096cd792b600b2a49421edab71fa75d97cd2b2aae4d7ab02082ecbbe509be91e56e905fa971e099114b07340ff98e8880901951828c6ef2c6d0a5aa59dfe955aa0273d16798e84be2e4b32e8bf49e39f98d9322c6e4080acb8fd7cc1dc0b1d9bf", 0xe0}], 0x9, &(0x7f0000000c80)=[{0xc8, 0x29, 0x693edb00, "9f0f7dd86c1187a9e166b55b52496ae6cfc6b8a1cd46d35c84537ca03a38879f347198163d0a2286db23109c4b9f61adad99aa53b09aa09d9710e119b4acb014053be72eea65fe1abb6c07009bb2005b3f52bcb40c40849ea75117a0c60d02e385812e10d756716aa229565e058ab2c03c2acfa0548f73f90d00e7318cdab3a88898e2d5f6124b36bf316104dc2e36c34790edab144c001d5067c85623a8793a2f0097912d234a934b907c184013e610baa11d"}, {0x28, 0xff, 0x1, "e0f0d7fba0a8dafa7978a59521ebd07085b4121704"}, {0x90, 0x100, 0x6, "88741e11b8da5bbeaa0d4b053e2b8dd88c269824dbb7ac4a7fb0a7ca6b9329615d97702bbfc5f4e019cb4372d5ad8b517e7a1871aa43b05a92fdf415a937de0539781769f76fd1c685a71d8a89e8ced0c6f98f01d97d25b614060b048091b068981fab8788753d7c3bb52f4685e15648b7b633f52c1b6fcd3c42"}], 0x180}}, {{&(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x2, @multicast, 'veth1_vlan\x00'}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e80)="8ef5cc32a6b3f8790cbab33f07bcad0a2690e8a20fc8300b74398d9a5bc97ae9af86ea8603c1fd176aa94f842a69517c6c2b3bb1c34b60be90740ea1feae6e8a2fea3f79b0dcc8684d2a97ee82a1790a398b4b5dacb6e4bf0be13c3dcdbbeaa375ebbba2573a2fc8b95c262aa935ff7d8534a0e3060760289e2108", 0x7b}], 0x1, &(0x7f00000030c0)=[{0x1010, 0x108, 0x5, "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"}, {0x100, 0x100, 0x93, "687d12e19d0c5646df299628ec1de90b1668240366f4ae1309275108168cdd180d4e6c1baf3371e926e780154eb81ca5a0a4b3a5bac392c0c289c1b11836bd2d876992b1f10f9da18f91a2263ad686e5f96b9fb0fed359ca56247ae52a08a49e520e9bd2880b7a1f921dfe5ce7ac7d3df03027b97d71ed7c1c067596adcb6115db1244d16729df7a15218a96dac10d54de699c9391e981f7d698e96f312965f6e65c5aa5357f062fe797cdfe3fb6a3a5346f0c79345bbeb983a6fb447b2a2dd553ba1ba37b9c2987a1aa30afb082f9bea2f4786ae9ac655c1aa468fd0cc27ae7e2445ea0af20f6565613f748a034cd7e"}, {0x70, 0x107, 0xffff0000, "72f662cabc36273b4b90d31ec49281230bc24fbf8810889e33c9591725fa59f0b825d22516b3227459e5089524612cae7f504c9f236f2af0e0aedbc5fd7c7c80eec1bc2e46d174b23b64a6fc8b6ee8d65dff1a286a7cf733df"}], 0x1180}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000001000)="9128da0ed87b1f747fc7d21699a34d724aeaffd75365da1450a4b78074ef494618e870e5e811f7ae4ee4b680a6f5b0f5e28a10e63e20f677770b43906eb0b1169127bdf78b44dd3ad5f92c9a2e862eb4ab57f24c61acfeac25c6e716dac7f5dfd0d8c4e63ac83e", 0x67}, {&(0x7f0000004240)="8b6842d153636f422e604d4f91cb9cfe75ffcd93990311f828e71f8b83bf5a568c5d858bc7e0086895d107014bd339076f24902fbb535507069852ba31e41a8da072adf273f08cd0cf3b474d3e44040176515cc06196438ec993110ccf51d71965976f383dffb9f0c1b63a847ab7fd964a6d37009a2187861392e743fb8e0258e0d3fdd2fda8f53a9c62d36946e189e0c293f10646158e27", 0x98}, {&(0x7f0000004300)="3a4c1a048a26b266a099bd847a33f077fd7e85682ddadb3eebac64fe27030c26bf818a47c18ede68f50598ff358e10899bb6b171e1a4790a67a7c92b9fb7974fd1d2e88614acd22211d7ebec170db7632af4dc0e2fc383bea96c58bd4ff5455afc7f87b7a0e57a33d923dc8b4e15b4166181bba0e315a86eb867012fd0580a729221f8f57c788b21572a73c51f4d0650bb1e15a8dc4e63f6", 0x98}], 0x3, &(0x7f00000043c0)=[{0x110, 0x13, 0x7, "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"}, {0x40, 0x115, 0x10001, "0ecc473a55121db13cfed3cedfe703468e29ffcb4189f56c0da631491af272862e8db8572d56ab9590810a40"}, {0x50, 0x0, 0x25b0, "b25606dfa5466b5d3147187dd03c829d425bee57fb516f2af0f42f52fd10c25626e927e4b45d4d9484a36b0fa0ba1acaf8eae48919c1fa9b03b4645376"}], 0x1a0}}], 0x4, 0x4)
r6 = socket(0x10, 0x80002, 0x0)
r7 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000000)={0x90000020})
connect$bt_sco(r6, &(0x7f0000004700)={0x1f, @none}, 0x8)
ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000040)="e7a4da8dbd0c81bc7ad10b89ca6370510a801a0c51a4b8b1d56de4b1c1f8ddf5ea69694a69e99a24c66492ebea650f1027c506265404f86ed5821021290a24d1ab8d8de2262196a3107e9f83a6cd01e26ce45e6c630a4d6e25a8c4ab7dd25e12f5fbd5bbb47bc657f1409ac1bcbf98d7c9030742fcaa4e008cc6ae36c80672290df83a64d5b91d9b367f6183ac85f9b5252e8f9542ac1cc49dd852bf6b204cb0d49e")

05:07:49 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4a02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:49 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
epoll_create(0x9)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000200)={0xd0000028})
sendmsg$unix(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)="9155bd9a8af6f8bd795149f37d5fe71cc61ffb861916e65e8ed4619f726a110cf6faa56aec52e703f3ca377917a16258c6f77965424ee8794a86f1c2fc55de1ed396e6cb29913aa331", 0x49}, {&(0x7f0000000100)="930d3684dedebb57944f4d6ec7ceb9bcf8202d889c76317eb8be2c888fd69d7ea27f4ee35957101959737046d608502516226518fb0f91ca5e015b3e4d31c77f39541fe2cb64761883960696f6f42506e47ea7031184a0f68e95856947d24d650960122f103ad71760cc6dd0108fd9200d16", 0x72}], 0x2, 0x0, 0x0, 0x850}, 0x81)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:49 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000001, 0x8010, r6, 0xdb4)
r7 = openat$cgroup_ro(r4, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0xe, r3, 0xc, r7}, 0x10)

05:07:49 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x1a60)

05:07:49 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4a03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:49 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x3f00}}], 0x40000000000020c, 0x0, 0x0)

05:07:49 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0xa, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r4, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xe4c}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20048810}, 0x0)

05:07:49 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = accept(r0, &(0x7f0000000440)=@isdn, &(0x7f00000004c0)=0x80)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
r5 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000000)={0x90000020})
r6 = accept4$unix(r4, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80000)
ppoll(&(0x7f00000000c0)=[{r3, 0xb401}, {r1, 0x618}, {r6, 0x3000}, {r1, 0x80}, {r1, 0x1}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x100]}, 0x8)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x278, r2, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe59}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x67c7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe30f}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff2b}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x604}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd820}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3a0}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9da5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x54}, 0x20000040)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:49 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000000)={0x7, 'lo\x00', {}, 0x5})

05:07:49 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4b00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:50 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40)

05:07:50 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:50 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r5}, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={r5, 0x6d8633a6, 0x9}, &(0x7f0000000040)=0x10)

[ 1523.627407][   T28] audit: type=1804 audit(1591160870.074:1246): pid=9789 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3563/cgroup.controllers" dev="sda1" ino=16382 res=1
05:07:50 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000000)={@none, 0x3, 0x3, 0xf7e2})
r3 = socket(0x10, 0x80002, 0x0)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{@none}, {}, {@none}]})

05:07:50 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4b01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:50 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
ioctl$SIOCRSACCEPT(r1, 0x89e3)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:50 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}, 0x40)

05:07:50 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x2000)

05:07:50 executing program 0:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
getsockopt$rose(r1, 0x104, 0x6, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r3 = epoll_create(0x408)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000000)={0x90000020})
bind$rose(r0, &(0x7f0000000200)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0xa, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004014}, 0x90)

05:07:50 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4b02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:50 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x6000}}], 0x40000000000020c, 0x0, 0x0)

05:07:50 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4b03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:50 executing program 3:
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x100, @dev={0xfe, 0x80, [], 0x23}, 0x1645e791}], 0x1c)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040), 0x4)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:50 executing program 5:
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xffffffff, [@bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40)
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/255, &(0x7f0000000100)=0xff)

[ 1524.525302][   T28] audit: type=1804 audit(1591160870.974:1247): pid=9824 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3564/cgroup.controllers" dev="sda1" ino=16383 res=1
05:07:51 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00')
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000002c40)={0x1c, r4, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}]}, 0x1c}}, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
r7 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000000)={0x90000020})
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000740)=0xe8)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3d}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x20004000)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r9 = socket(0x10, 0x80002, 0x0)
r10 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f0000000000)={0x90000020})
bind$llc(r9, &(0x7f0000000000)={0x1a, 0xfffe, 0x79, 0x3f, 0x1, 0x7, @local}, 0x10)

05:07:51 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4c00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:51 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000001c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0xfffffffffffffe6c)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r5}, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={r5, 0x2c, &(0x7f0000000000)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e21, 0x7, @mcast1, 0x2}]}, &(0x7f0000000080)=0x10)

05:07:51 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)

05:07:51 executing program 0:
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000)=0x8000, 0x4)
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000040))
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r2, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:51 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x3000)

05:07:51 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4c01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:51 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x8)
r2 = socket(0x10, 0x80002, 0x0)
r3 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x90000020})
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
bind$rose(r0, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @bcast}, 0xffffffffffffff0a)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
clock_gettime(0x0, &(0x7f0000004ac0)={<r5=>0x0, <r6=>0x0})
recvmmsg(r4, &(0x7f00000048c0)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/169, 0xa9}], 0x1, &(0x7f0000000280)=""/113, 0x71}, 0x10000}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=""/23, 0x17}], 0x1, &(0x7f0000000380)=""/101, 0x65}, 0x2}, {{&(0x7f0000000400)=@phonet, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/44, 0x2c}, {&(0x7f00000004c0)=""/103, 0x67}, {&(0x7f0000000540)=""/165, 0xa5}, {&(0x7f0000000600)=""/190, 0xbe}], 0x4, &(0x7f0000000700)=""/254, 0xfe}, 0x7}, {{&(0x7f0000000800), 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)=""/167, 0xa7}, {&(0x7f0000000940)=""/57, 0x39}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/185, 0xb9}, {&(0x7f0000001a40)=""/74, 0x4a}, {&(0x7f0000001ac0)=""/181, 0xb5}, {&(0x7f0000001b80)=""/38, 0x26}], 0x7, &(0x7f0000001c40)=""/232, 0xe8}, 0x2}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000001d40)=""/87, 0x57}, {&(0x7f0000001dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000002e00)=""/87, 0x57}, 0x7}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000002e80)=""/127, 0x7f}, {&(0x7f0000002f00)=""/184, 0xb8}, {&(0x7f0000002fc0)=""/82, 0x52}, {&(0x7f0000003040)=""/11, 0xb}, {&(0x7f0000003080)=""/147, 0x93}, {&(0x7f0000003140)=""/4096, 0x1000}], 0x6, &(0x7f00000041c0)=""/108, 0x6c}, 0x2}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000004240)=""/17, 0x11}, {&(0x7f0000004280)=""/226, 0xe2}, {&(0x7f0000004380)=""/246, 0xf6}, {&(0x7f0000004480)=""/12, 0xc}], 0x4, &(0x7f0000004500)=""/186, 0xba}, 0x8}, {{&(0x7f00000045c0)=@phonet, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004640)=""/108, 0x6c}, {&(0x7f00000046c0)=""/207, 0xcf}], 0x2, &(0x7f0000004800)=""/157, 0x9d}, 0x80}], 0x8, 0x12041, &(0x7f0000004b00)={r5, r6+10000000})
ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0))

05:07:51 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x8c00}}], 0x40000000000020c, 0x0, 0x0)

05:07:51 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(0xffffffffffffffff, 0x104, 0x7, &(0x7f0000000000)=0x80, 0x4)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:51 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200), 0xf000)
sendfile(r4, r5, 0x0, 0xf03b0000)
sendfile(r4, r3, 0x0, 0x8000000000004)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00')
sendmsg$NLBL_CIPSOV4_C_LIST(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1d54a038cec019f1}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r6, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4004)

05:07:51 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00')
sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4)

05:07:51 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4c02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:51 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:51 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x1c}}, 0x20000010)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r2, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @default}, 0x1c)

[ 1525.487497][   T28] audit: type=1804 audit(1591160871.934:1248): pid=9875 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3565/cgroup.controllers" dev="sda1" ino=15732 res=1
05:07:52 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4c03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:52 executing program 0:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
r5 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000000)={0x90000020})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000140)={<r7=>r6})
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x8, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', r3})

[ 1525.889101][ T9896] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1525.947337][ T9896] 8021q: adding VLAN 0 to HW filter on device bond40
[ 1525.971972][ T9914] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
05:07:52 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0xc00e}}], 0x40000000000020c, 0x0, 0x0)

05:07:52 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x4, 0x2, 0x9b1)
r2 = socket(0x10, 0x80002, 0x0)
r3 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x90000020})
setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000080)=0xffffffff, 0x4)
getsockopt$rose(r1, 0x104, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4)

05:07:52 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x3f00)

05:07:52 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4d00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:52 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0)
sendmsg$xdp(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, 0x1c, r6, 0x19}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="b1aa52cd3583573f2ebdb4e21c947d6858648ed44a3b90ef86dfa7d2bd4505431048294ac67c3d3e5fbd98d71c3c246e7361d5722c25fe18279c9af5268643c4e0a4e7a32968e756eadef994c30e8e6c1be95830d49f5d7dc3bc765edd53808f1651840e4440b8742c42adcbcb3b338ba5b96065744d4b56b3cc10b9a3e2ce040b0ae550b45bf91ddc90f936dc4d222268ce557ba5", 0x95}], 0x1, 0x0, 0x0, 0x10}, 0x40800)

05:07:52 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x40)

05:07:52 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r0, 0x104, 0x7, &(0x7f0000000000)=0x5, 0x4)

[ 1526.315909][ T9944] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
05:07:52 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4d01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:52 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x1a000}}], 0x40000000000020c, 0x0, 0x0)

[ 1526.530194][   T28] audit: type=1804 audit(1591160872.984:1249): pid=9973 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3567/cgroup.controllers" dev="sda1" ino=16376 res=1
05:07:53 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000)=0x1)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r1, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:53 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast]}, 0x40)

[ 1526.580523][ T9944] 8021q: adding VLAN 0 to HW filter on device bond41
05:07:53 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4d02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1526.659859][ T9956] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
05:07:53 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:53 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast1, 0x1}, 0x10)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0xa21ce9be6fabfd29, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000000))

[ 1526.895350][T10013] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1526.954340][T10014] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:07:53 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x4000)

05:07:53 executing program 5:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_group_source_req(r0, 0x29, 0x7, &(0x7f0000000600)={0x9, {{0xa, 0x4e22, 0x4, @private0, 0xfffffffb}}, {{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, [], 0x1f}}}}, 0x108)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = socket(0x10, 0x80002, 0x0)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000080)=0x1, 0x4)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r5, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40)

05:07:53 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4d03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:53 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
r2 = socket(0x10, 0x80002, 0x0)
r3 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x90000020})
sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe0, 0x13, 0x20, 0x70bd2d, 0x25dfdbfd, {0x2, 0x3f, 0x0, 0x3e, {0x4e22, 0x4e20, [0x400, 0x4, 0x5, 0x20], [0x496, 0x2, 0x80, 0xfffff001], 0x0, [0x80000001, 0x1]}, 0x4, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x92, 0x1, "d6fcbb1bdad93b5ee9a8e1b5087489ee811d33640f49f1fbe7de917b1370de02e0d24cd217793bea0725e9d83fc966b4fe5b3fd22960b15b4f405e7fb6f83bb93e7d54e6c499af9ca58a47a18caf8eac8830ee9cbdfcfbc6467b5e2e59d6b9732fe6bcf4d870779eb27b78b9886583a670d4ba90ac921a97b5409b3da2bffef5638660dc74c2cf29f8fad51f11b9"}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2b49b1f878b2c146}, 0x0)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r4, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:53 executing program 3:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r3, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, 'hash:ip,mark\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44801}, 0x8000)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000206010000000000000000000000000011000300686173683a69702c6d61726b0000000005000400000000010900020073797a30000000000c0007800800b4c5822a92633eba40082a88a9158ab2124000000000050005000200000005000100070000003c2220a2d7967a85a2e267db79d95108e190ee98e06e08c6dfd2a20a32fe038ea15f151fb65db1e663c76447a175ee14864ff5b5ff95f3b62d3b309fc5162e969d83be789c2050a1b852f098c18161c11775c68781c7de5370a1e41bd1447b5097dd0daf62aa4ff9e11a684bc29d5a211dd21c9a1c0cbde3a44d5d9cf6fccc1bedaed1ac8db2a924ca74946094238b674ab303c96c6bdf0650751a213b216215eb1753930adb37100ece1afee9a4f2d432eff9da38dd1c551bc6"], 0x58}}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x1480, 0x8, 0x8, 0x4}]}, 0x10)
syz_extract_tcp_res(&(0x7f0000000000), 0x9, 0x6c)

05:07:53 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4e00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1527.226237][T10025] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1527.266913][   T28] audit: type=1804 audit(1591160873.714:1250): pid=9993 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3567/cgroup.controllers" dev="sda1" ino=16376 res=1
[ 1527.316035][T10025] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
05:07:53 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x34000}}], 0x40000000000020c, 0x0, 0x0)

05:07:53 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r5}, 0x0)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r5, 0x8}, 0x8)

05:07:53 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {0x3}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
ioctl$FICLONE(r1, 0x40049409, r2)

05:07:53 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
r2 = socket$netlink(0x10, 0x3, 0x4)
r3 = socket(0x10, 0x80002, 0x0)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x4f}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_LINK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x800)
sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@nested={0x34}]}, 0x48}}, 0x0)
r6 = socket(0x9, 0x6, 0x7)
r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_LIST(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r7, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x191)
sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c005fe3f6121863780ae30000", @ANYRES16=r7, @ANYBLOB="010026bd7000ffdbdf25040000000800020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x800)
sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000427020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x10)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r8, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:53 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4e01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:54 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r5}, 0x0)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e24, 0x3c, @remote, 0xd57}}}, 0x84)

[ 1527.576001][   T28] audit: type=1804 audit(1591160874.024:1251): pid=10044 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3568/cgroup.controllers" dev="sda1" ino=16376 res=1
05:07:54 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x4800)

05:07:54 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00')
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000040)=""/227, &(0x7f0000000140)=0xe3)

05:07:54 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4e02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:54 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:54 executing program 5:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
r2 = socket(0x9, 0xa, 0x0)
setsockopt$packet_buf(r2, 0x107, 0x1, &(0x7f0000005800)="f3d3a9b7a3a24be44f642d6daf1af437272b3b9f012c68808c57259293c61f1aa7de5e0482ab1444f1d82b39201e9898455bc8d4cf3795ffcc78bcece495ee3789f178b3881e1a79167e0a2fc79076f3220de363c1bc900d98c573df69b5eceb4deb7d937a6ef6a197a646f997ea775885f09cd7d5b8d463f776b6a453042c088f8eab0d4c5e7160c43b8a1437fdf290b604192ac4233aaea10fedc15d5c9bcf0a57feb6598f587ddbfbd112688410278514486ba39e3b67af7fb23b7301982aa6", 0xc1)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})

05:07:54 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x40000}}], 0x40000000000020c, 0x0, 0x0)

05:07:54 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4e03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:54 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:54 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = socket(0x10, 0x80002, 0x0)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000440)={@private2={0xfc, 0x2, [], 0x3f}, @ipv4={[], [], @empty}, @mcast2, 0x8001, 0x6, 0x9, 0x100, 0x48c1, 0x84000110, r5})
ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000000)={0x4, 'syz0\x00'})
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:54 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket$isdn(0x22, 0x3, 0x22)
sendto$isdn(r1, &(0x7f0000000040)={0x100, 0x1, "71fb41d437a39b980895c573ca429839b701dbc232cc7afdbc109f53df151ca139876bc11abea90e90072ff8d5fcc7adaffeedfb589a291ae16fdfe07deef3317e4eaba0ba0a"}, 0x4e, 0x4048854, &(0x7f00000000c0)={0x22, 0x9, 0x0, 0x5, 0x8}, 0x6)
ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000000)=@null)

[ 1528.183730][   T28] audit: type=1804 audit(1591160874.634:1252): pid=10080 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3569/cgroup.controllers" dev="sda1" ino=15955 res=1
05:07:54 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00')
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001540)={0x38, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff0}]}]}, 0x38}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
socketpair(0xa, 0x800, 0x8, &(0x7f0000000280)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f00000002c0)={0x1, {{0xa, 0x4e24, 0xa9, @mcast1, 0x40}}, 0x1, 0x3, [{{0xa, 0x4e23, 0x4, @remote, 0xf3}}, {{0xa, 0x4e22, 0x40, @mcast2, 0x2}}, {{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, [], 0x1e}}}]}, 0x210)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="ff000000000000001c0012000c000100626f6e648d8b47271fcf61a79e754e020582f14aeab3b1418ca8e75d99a04314979d4f7158d992af45ba152e51f4f1d345733000745c1599641e5ef0ca2a701a96e893e9644c0e3bf71df8de8abbb8379b98c7e607a8f6f94e7503ac203f47328d5525a68dfdeb6e7881dce2c19f6586459b399e7b9ad1ad3ad4b8f02a18a514"], 0x3c}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r4, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1000}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x57}]}, 0x58}, 0x1, 0x0, 0x0, 0xf491cbee5b908491}, 0x4000841)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
pipe(&(0x7f0000000000))

05:07:54 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000000206010000000000000000000000000011000300686173683a69702c6d61726b000000000500040000000000100007800c00018008000140ffffffff04000780050005000200000005ff7f0000000000"], 0x54}}, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000000)={0x6, 'veth0_to_bridge\x00', {0x7}, 0x6})
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

[ 1528.443936][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1528.455724][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
05:07:55 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x4c00)

05:07:55 executing program 0:
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, 0x1, 0x7, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFACCT_QUOTA={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x100000001}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x4}, @NFACCT_QUOTA={0xc}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x81}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x539}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4df}]}]}, 0x9c}}, 0x840)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
setsockopt$rose(r1, 0x104, 0x2, &(0x7f0000000180)=0x78e2, 0x4)

05:07:55 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4f00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:55 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x6}, 0xa)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r1, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:55 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x400300}}], 0x40000000000020c, 0x0, 0x0)

05:07:55 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
r1 = accept(r0, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80)
connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r2, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:55 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:55 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4f01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:55 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r2, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:55 executing program 3:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0)
epoll_create(0x4)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff})
ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000200)={0x67, "c767444476aaf86156df9e4f7728b4394bebe77fbcd720a21da0b876134d2548aab5cafbfa530f9c3598c0fd00151321bfcf4977fe475304b2165f7471ec71de89238806077a37b4ab244105a1035442dc837fb4f970f5a9a5ecbe6b0909e8466711d6670fa9939cf3ebc2a26ff71e5e09de94e3df61495d498aaade1b7aeb65"})
r3 = socket(0x10, 0x80002, 0x0)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
bind$pptp(r3, &(0x7f0000000180)={0x18, 0x2, {0x0, @loopback}}, 0x1e)
socket$rds(0x15, 0x5, 0x0)
sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x400, 0x70bd25, 0x25dfdc02, {0x1, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40044}, 0x4000000)

[ 1529.110162][   T28] audit: type=1804 audit(1591160875.564:1253): pid=10125 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3570/cgroup.controllers" dev="sda1" ino=16082 res=1
05:07:55 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:55 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4f02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:56 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x6000)

05:07:56 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x0, 0x400, 0x800, 0x1})

05:07:56 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000080)={0x3a, @loopback, 0x4e23, 0x1, 'dh\x00', 0x20, 0x0, 0x59}, 0x2c)
pwrite64(r1, &(0x7f0000000400)="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", 0x200, 0x0)
r3 = socket$pptp(0x18, 0x1, 0x2)
ioctl$FICLONE(r1, 0x40049409, r3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='}nodev\x00', r1}, 0x10)

05:07:56 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
pwrite64(r1, &(0x7f0000000400)="4ebefa1e923f1e018b6e53bf4815b78e1f2ef9212b93090c1ff6b35c208d50aef3fd759f995b53dd37c58cf8332b8a6b66575478e02ef0145bf122ba2e2c53a7ec45e375683475a6495f8d7b7a088f5e32dc266569074319bf8c8d3d8007cc92e2ba0d9082c41b63e330f353a3f675a98d2e74a08e38400f7f5eb113a0e25fd90115d57a7acdcab1128cf4f9c719f3f29d460c507f8a2a6594d259217d32eae9be93c6ed17a67ae2e7e689a31fa8449da12fd62bf423cff702b09e6ee1ff0e698b8bb517819eb712ba2b34b54b28b79d9399d920d5a5507e8a85f37060dfe3051f06f8d7cc9b068495ee5d5fcce85410bcd9f91d1f198353ce94b2e03370e43875c1a035bb88fd26fbb5b1252e2056d6b67e2b2f424051a40ad9170e76a81a6ca4f149ff643db76f8f2c1aa8024a6279952027489bbad6479e47ea5ba9e47d8136df398665f6cdfd15e93cfbf2ce1151afe9321ed63fe7100e704b232646fc1e0e936b90cceaaa70225ce71640e10316d2cc637355eddb3c4e16ff1635fa4e65a66eb5ab2cbf9d6f063e05f0e46fcc14bf31eedfb9f33c215fc14946cc6f7493924442e939f71ac4bd3e35e78857f9624c663f3669a47a7146e3249ee3eaaf681f371d515af5b934f9252c7ac2a164bf318fc2b194ee087b2b28ed5e4618c0906fc3f32c43a3b9e08a2e0d509f65a7de909e8c3c535f1d8cb9c236716e5ad709", 0x200, 0x0)
r2 = socket$pptp(0x18, 0x1, 0x2)
ioctl$FICLONE(r1, 0x40049409, r2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
pwrite64(r3, &(0x7f0000000400)="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", 0x200, 0x0)
r4 = socket$pptp(0x18, 0x1, 0x2)
ioctl$FICLONE(r3, 0x40049409, r4)
ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1)
r5 = openat$cgroup_ro(r1, &(0x7f0000000ac0)='cpuset.effective_mems\x00', 0x0, 0x0)
ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f0000000b00)={0x9, @multicast})
socketpair(0xa, 0x2, 0x7, &(0x7f0000003200)={<r6=>0xffffffffffffffff})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00')
sendmsg$FOU_CMD_DEL(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$FOU_CMD_DEL(r6, &(0x7f0000003300)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000032c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000126bd7000ffdbdf250200000006000a004e210000050003003a000000e1049e6480178d0e02b880e6903cf9da6acd9a6218"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)

05:07:56 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4f03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:56 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0xa00100}}], 0x40000000000020c, 0x0, 0x0)

[ 1529.933768][T10160] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003
05:07:56 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5000}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:56 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e24, 0xcd54, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4000}, {0xa, 0x4e22, 0x7, @mcast2, 0x7}, 0x9, [0x0, 0x8, 0x8000, 0x3f, 0x40, 0x3, 0x20, 0x58]}, 0x5c)

[ 1530.017135][   T28] audit: type=1804 audit(1591160876.464:1254): pid=10167 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3571/cgroup.controllers" dev="sda1" ino=16383 res=1
[ 1530.048200][T10170] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003
05:07:56 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000000))

05:07:56 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:56 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x1000000}}], 0x40000000000020c, 0x0, 0x0)

05:07:56 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @null}, 0x1c)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = socket(0x10, 0x80002, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x90000020})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)=ANY=[@ANYBLOB="580000000206010000000000000000002c6d61726b0000000005000400000100000900020073797a30000000000c00078008001240000000000500050002000000050001000700"/88], 0x58}}, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000380)={0xffffffffffffffff, r4, 0x9, 0x1000, &(0x7f0000000600)="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", 0x3f, 0x7, 0x0, 0xa00, 0x401, 0x2, 0x11, 'syz1\x00'})
r5 = accept(r1, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000000040)=0x80)
recvfrom$llc(r5, &(0x7f00000002c0)=""/53, 0x35, 0x43, &(0x7f0000000300)={0x1a, 0x2, 0x4, 0x0, 0xd1, 0xfe}, 0x10)
r6 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r3, &(0x7f0000000000)={0x90000020})
accept$ax25(r1, &(0x7f0000000200)={{0x3, @netrom}, [@bcast, @default, @bcast, @null, @bcast, @bcast, @remote, @bcast]}, &(0x7f0000000280)=0x48)
r7 = socket(0x10, 0x80002, 0x0)
r8 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000000)={0x90000020})
r9 = accept4$ax25(r7, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @null, @null, @null, @bcast, @bcast, @remote, @null]}, &(0x7f0000000340)=0x48, 0x80000)
ioctl$SIOCAX25GETINFOOLD(r9, 0x89e9, &(0x7f00000000c0))

[ 1530.514763][   T28] audit: type=1804 audit(1591160876.964:1255): pid=10187 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3572/cgroup.controllers" dev="sda1" ino=16177 res=1
05:07:57 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x601a)

05:07:57 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5002}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:57 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)

05:07:57 executing program 0:
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x1, 0x4, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x17}, @NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendto$rose(r0, &(0x7f0000000000)="039e891525cbf1b7e5d5c27381c512c664622acd7842d827eacb6b567a3396aa7c10387c63300ec3f950a55b522da9af3ba7bac287c36798fa59fee2e2b8e4bbdcc89964fae6beeafad80e77cfcd6c31a51d6ae9cb3fabd526c0d9b318149b9c7fee0b4f0abdd98ca6aaa1cf940c", 0x6e, 0x4000044, 0x0, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40)

05:07:57 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
ioctl$FITRIM(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x8001, 0x200})
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="ee08aa49", @ANYRES16=r4, @ANYBLOB="040026bd7000fcdbdf250800000008000400ac1414aa2400070073797374656d5f753a6f626a6563745f723a7373685f657865635f743a733000"], 0x40}, 0x1, 0x0, 0x0, 0x8048094}, 0x8805)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
r5 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r5})
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:57 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x3000000}}], 0x40000000000020c, 0x0, 0x0)

05:07:57 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5003}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:57 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="3e7b746ccf10c7a3d1e2cf949f8e1a25e99bdd88b48acd8de78d14d87b59cb5b8c12d363967f7d2163122e50c020d2cf022b1c1cce73440c46172ab51c9bfb38ada29492352155705ffd43f81969740f626998ae63278e2fc1a38e825073076ff5a0df6ddd3c5ca75e95696467fadfa4d05a05ee", @ANYRES32=<r5=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r5}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000000)={r5, 0xb5, "ac5379d39a5dfb82c0cf2fa0d90d8898ffeac10330796bea2909b96a80638311d09c7acfe4b06f52211f13caef0aa60e5d7a14e090919b37d40f8aa96e28c3429325d4d63be9deb457e0e2ef463d9270378ac0ab56da8a41c0cdfedd7a2e5d085afd4cf2ca0239dd3cf975e56fe75c9971b93889d4493b5c67339b927d23579dedc8c12de90f66f2e576d427bf03e90467169d2b950979e5db9e33c6e8ca1b3aa1b74eb15ccfb5e200a5aa5c6a6e799d2c0400d326"}, &(0x7f00000000c0)=0xbd)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x4c)

05:07:57 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000500))
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:57 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$bt_hidp(0x1f, 0x3, 0x6)

[ 1531.005444][   T28] audit: type=1804 audit(1591160877.454:1256): pid=10207 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3573/cgroup.controllers" dev="sda1" ino=15746 res=1
05:07:57 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5100}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:57 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40)

05:07:58 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x6800)

05:07:58 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
listen(r1, 0x9)

05:07:58 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5101}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:58 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x4000000}}], 0x40000000000020c, 0x0, 0x0)

05:07:58 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r2], 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6209605559ffc1d3}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4044000)
r3 = socket(0x10, 0x80002, 0x0)
socket$bt_bnep(0x1f, 0x3, 0x4)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x10023b8, 0x4)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:58 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
recvfrom$rose(r1, &(0x7f0000000600)=""/4096, 0x1000, 0x100, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @default}, 0x1c)

05:07:58 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5102}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:58 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x15, 0x6, 0x4)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket(0x10, 0x80002, 0x0)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e600000000008bf88d5a4ba50aa116a288ed000000000000000000"], 0x68)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="010000006190bbd1a3fafb506504000000f35b9cd9ae3f39ad63000265f95e59d15f04161715eb7d8cfd130c46f0ebacf4eeb348a5e381362000", @ANYRES32=<r6=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000000c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000240)={@loopback, 0x41, r9})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r6}, 0x0)
setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={0x0, 0xa7, 0x9, 0x2800}, 0x10)

05:07:58 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
write(r0, &(0x7f0000000000)="0b0e15c67cf7b32ee93df4fca811e5bb1786f13c78776d724f9968672e45ab99971575684d97075a3c0a969c9411db9474f63142c2502a8f6eb044901f0927bfc992f6141b288c4cb68ae5256f88e2fe76726eb7bd18c96ab266441e21a58f6014f2c68689865a7d2ed20e2b6ef6035441db12c4541dbcea879533d53d6d6c296a4619f94cd8c247273eb9579c85e1cf95a32eb00e4bc3605dbc7e9543015f7f83f326ac", 0xa4)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xe)

05:07:58 executing program 3:
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f00000002c0)=""/58, &(0x7f0000000300)=0x3a)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r6}, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000340)={r6, 0x9, 0xe308}, 0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r7}, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={<r8=>r7, @in={{0x2, 0x4e24, @loopback}}}, &(0x7f00000000c0)=0x84)
r9 = accept4$netrom(r1, &(0x7f00000001c0)={{0x3, @default}, [@rose, @netrom, @rose, @default, @default, @bcast, @bcast, @bcast]}, &(0x7f0000000240)=0x48, 0x80000)
sendfile(r4, r9, &(0x7f0000000280)=0x647aa7eb, 0x3)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r8, 0x2}, 0x8)

[ 1531.902719][   T28] audit: type=1804 audit(1591160878.354:1257): pid=10242 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3574/cgroup.controllers" dev="sda1" ino=16367 res=1
05:07:58 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5103}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1532.002956][T10257] __nla_validate_parse: 4 callbacks suppressed
[ 1532.002968][T10257] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
05:07:58 executing program 5:
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1407, 0x200, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x1c}}, 0x48000)
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000100)={@empty, @multicast2}, &(0x7f0000000140)=0x8)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r2, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

[ 1532.137140][T10257] 8021q: adding VLAN 0 to HW filter on device bond42
[ 1532.153373][T10261] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
05:07:59 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x6c00)

05:07:59 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000080)=0x80)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x3, 0x2, 0xfffffff8, 0xfffeffff, 0x2]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xc3bf}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000000)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:59 executing program 0:
syz_init_net_socket$rose(0xb, 0x5, 0x0)

05:07:59 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5200}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:59 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40)

05:07:59 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0xa000000}}], 0x40000000000020c, 0x0, 0x0)

05:07:59 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5201}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:59 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r5}, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x1000, 0x201, 0x4, 0x4, r5}, &(0x7f0000000040)=0x10)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:59 executing program 3:
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x1)

[ 1532.837935][   T28] audit: type=1804 audit(1591160879.284:1258): pid=10323 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3575/cgroup.controllers" dev="sda1" ino=16366 res=1
05:07:59 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0}, &(0x7f00000002c0)=0x14)
bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x0, r2}, 0x10)
r3 = gettid()
r4 = getuid()
r5 = getgid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="000000000000000000000000000000000000000099e01274d6059c2bc411f6f3bc44041eb079f26273bd089f79092285a01cae0f6cf26aee4038d02239d92c6add6ecb8188a1e405b29dda73aa938e", @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0x4e24, 0x0, 0x4e23, 0x7, 0x2, 0x80, 0x0, 0x3a, r2, r4}, {0x6db, 0xfff, 0x0, 0x401, 0xffffffff98a8f3c8, 0x1, 0x9, 0x8}, {0x0, 0x1, 0xd82a, 0x4}, 0x1f, 0x6e6bb6, 0x0, 0x0, 0x2, 0x2}, {{@in6=@local, 0x4d3}, 0xa, @in6=@mcast2, 0x3501, 0x0, 0x2, 0x7f, 0x7, 0x2, 0x100}}, 0xe8)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0}, &(0x7f00000002c0)=0x14)
bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x0, r6}, 0x10)
r7 = gettid()
r8 = getuid()
r9 = getgid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="000000000000000000000000000000000000000099e01274d6059c2b4411f6f3bc44041eb079f26273bd089f79092285a01cae0f6cf26aee4038d02239d92c6add6ecb8188a1e405b29dda73aa938e3d85af540f89917623e44ad1b56736e1285b16ec113485be94db680e627f5887c41e2ce958ad8074", @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0x4e24, 0x0, 0x4e23, 0x2, 0x2, 0x80, 0x0, 0x3a, r6, r8}, {0x6db, 0x5, 0x0, 0x401, 0xffffffff98a8f3c8, 0x1, 0x9, 0x8}, {0x0, 0x1, 0xd82e, 0x4}, 0x1f, 0x6e6bb6, 0x0, 0x0, 0x2, 0x2}, {{@in6=@local, 0x4d3}, 0xa, @in6=@mcast2, 0x34ff, 0x0, 0x2, 0x7f, 0x7, 0x4d117b3, 0x100}}, 0xe8)
sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="80000000200010002bbd7000fedbdf250a00800081000080110001001400020000000000000000000000000000000000140001000000000000000000000000000000000114000200fe88000000000000000000000000000114000100fc01000000000000000000000000000108000e00060000000c001400", @ANYRES32=r4, @ANYRES32=r8, @ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x80)
r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r10, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:07:59 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5202}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:07:59 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)={0x1060, 0x0, 0x5, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [{{0x254, 0x1, {{0x1, 0xffffffcc}, 0x2, 0x7, 0x0, 0x400, 0x17, 'syz1\x00', "aff9451ec8e6e35f3a6740f33acd21504898d5b6d604f44da9323406bc30086d", "adfbb71a767e428446c2f82e462c939e0f6cbcb99998c9c6b282e5f806392ec1", [{0x4, 0x4, {0x0, 0x4}}, {0x1e17, 0x1000, {0x0, 0x800}}, {0x800, 0x3, {0x2}}, {0x8, 0x101, {0x1, 0xfffffff9}}, {0x48, 0x5, {0x3, 0xd4}}, {0x400, 0x2, {0x3, 0x433}}, {0x101, 0x20, {0x2, 0x9}}, {0x3, 0x0, {0x2, 0x40}}, {0x5, 0x5bd4, {0x1, 0x1}}, {0x1, 0x8, {0x2, 0x8000}}, {0x7fff, 0x3ff, {0x2, 0x101}}, {0x5, 0x1, {0x3, 0xffffffff}}, {0x6, 0x1, {0x2, 0x3}}, {0x2, 0x7, {0x0, 0x3}}, {0x1f, 0x2, {0x2, 0x7ff}}, {0x1ff, 0x31, {0x2, 0x1ff}}, {0x1200, 0x4, {0x0, 0x10001}}, {0x9, 0x84, {0x2, 0x5}}, {0xfff, 0x1ff, {0x0, 0x6}}, {0x2, 0x2, {0x2, 0x80}}, {0x2400, 0x7, {0x1, 0x3}}, {0x8, 0x80, {0x3, 0x6}}, {0x1, 0x101, {0x2, 0x5}}, {0xff, 0x3f, {0x2, 0xc5}}, {0x0, 0x6b34, {0x2, 0x7f}}, {0x8000, 0x200}, {0x8000, 0x40, {0x2, 0x5}}, {0x1f, 0x0, {0x2}}, {0x8, 0x7f, {0x3, 0x81}}, {0x0, 0x9, {0x3, 0x8}}, {0xe572, 0x1f, {0x2, 0x7}}, {0x3, 0x3, {0x3, 0x47f}}, {0x1, 0x5, {0x0, 0x1}}, {0x9, 0x9, {0x2, 0x3}}, {0x81, 0x1, {0x3, 0x7}}, {0x150, 0xff00, {0x3, 0x1}}, {0xf898, 0x5, {0x1, 0xb}}, {0x2, 0xde6, {0x3, 0x9}}, {0x1, 0x1ff, {0x2, 0x9d}}, {0x419, 0x6, {0x1, 0xffffffc0}}]}}}, {{0x254, 0x1, {{0x3, 0x9}, 0x3, 0x7, 0x9, 0x2, 0x8, 'syz1\x00', "061fcd2d8843db39e9ea621ff0a17a46bbf7720d41f6b39e08e10b25c1d7113f", "da51dd0a2f1f6ec35e66819cb1174475bc87e4da74ad4c91f9d24c633eb72008", [{0x4a, 0x6, {0x0, 0x7ff}}, {0x9, 0x200, {0x1, 0x800}}, {0x6, 0x4, {0x0, 0x8000}}, {0x5ffc, 0x7, {0x1, 0xff}}, {0x7d, 0x80, {0x3, 0x3}}, {0x5, 0x1f, {0x1, 0x7fffffff}}, {0x7, 0x2, {0x1, 0x10001}}, {0x9, 0x2, {0x1, 0x9}}, {0x3, 0x40, {0x0, 0x80000000}}, {0x800, 0x0, {0x0, 0x4000000}}, {0x4, 0x1, {0x0, 0x4}}, {0x3ff, 0x3ff, {0x2, 0x4}}, {0x8, 0xff97, {0x0, 0x401}}, {0x3, 0x9, {0x2, 0x8}}, {0x7f, 0x6, {0x1, 0x500}}, {0x1, 0xe91e, {0x1, 0x20}}, {0x9, 0x5, {0x1, 0x3}}, {0xfff8, 0x3, {0x3, 0x8000}}, {0x3ff, 0x7, {0x2, 0x713}}, {0x23a, 0x2, {0x3, 0x88}}, {0x1, 0xb56c, {0x3, 0xd0}}, {0x0, 0x2, {0x0, 0x7ff}}, {0x0, 0x3f, {0x1, 0x10000}}, {0x8000, 0xf3da, {0x1, 0x5}}, {0x56, 0x1ff, {0x0, 0x80000000}}, {0x4205, 0x5, {0x3, 0x7f}}, {0xf5, 0x93ef, {0x1, 0xffffffff}}, {0xa13, 0x1, {0x1, 0x1000}}, {0xd21f, 0x2, {0x1, 0x1ff}}, {0x9, 0x9, {0x2, 0x7}}, {0x6, 0xe708, {0x0, 0x4}}, {0x2, 0x2, {0x3, 0x3}}, {0x3, 0x4, {0x0, 0x9}}, {0x76, 0x8, {0x0, 0x1}}, {0x80, 0x25fe, {0x3, 0x3}}, {0x46b1, 0x1f, {0x0, 0x400}}, {0x1ff, 0x2, {0x0, 0x20}}, {0xfff8, 0x7ff, {0x2, 0x7fffffff}}, {0xff, 0x4, {0x1, 0x2}}, {0x5, 0x9, {0x1, 0xa399}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0x2, 0x6, 0x1, 0x9, 0xa, 'syz0\x00', "f28cd52b6c4336e9954be1dab554bb18577b516c3fd1dd85b10a0cb039a5755d", "9940801f5ffb3867fc30af4c6d750beb4c8f78a7199890a79be3b17ac06856d4", [{0xd800, 0x401, {0x1, 0x80000001}}, {0x9, 0x0, {0x1, 0x6}}, {0xfc55, 0x400, {0x3, 0x5}}, {0x4, 0x1000, {0x2, 0x1}}, {0x4, 0x8, {0x0, 0x7f}}, {0x3, 0x1ff, {0x0, 0x3ff}}, {0xfe01, 0x7, {0x2, 0x28000}}, {0x4667, 0xd4c, {0x0, 0x2}}, {0x1000, 0x4, {0x1, 0x2}}, {0x5, 0x8, {0x2, 0x6eb4a839}}, {0x6e4, 0xecb7, {0x2, 0x7}}, {0x1, 0x4, {0x3, 0x101}}, {0x90a, 0x6, {0x1, 0x8}}, {0x8000, 0x6, {0x0, 0x7}}, {0x1, 0x2, {0x2, 0x3}}, {0x3ff, 0x2, {0x0, 0xa9}}, {0x1, 0x2, {0x3, 0x3}}, {0x1, 0x0, {0x0, 0x2}}, {0x1, 0x0, {0x3}}, {0x7ff, 0x3, {0x0, 0x4}}, {0x2, 0x4, {0x2, 0x1}}, {0x1ff, 0xff, {0x3, 0x6}}, {0x0, 0x8, {0x1, 0x1}}, {0xae1, 0x9, {0x2, 0x4e1f}}, {0x5, 0x7, {0x2, 0xd842}}, {0xffff, 0x8, {0x0, 0x7ff}}, {0x5f28, 0x7fc, {0x2, 0x2}}, {0x1, 0x40, {0x1, 0x10001}}, {0xa65, 0x7, {0x2, 0x1}}, {0x2, 0x101, {0x0, 0x3}}, {0x2, 0xe7b, {0x3, 0x10000}}, {0x1, 0x8, {0x0, 0xffffffff}}, {0x3, 0x6, {0x0, 0x6}}, {0x1f, 0x2, {0x0, 0xffffff00}}, {0x9a, 0x36, {0x3, 0x49}}, {0x3, 0x953a, {0x2, 0xa59}}, {0x7ff, 0x20, {0x1, 0x7}}, {0xc114, 0x8, {0x2, 0xfff}}, {0x9, 0x8}, {0x6, 0x6, {0x2, 0x1e729ff0}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x0, 0x9, 0x91a, 0x6ea, 0x1d, 'syz0\x00', "6526fbc5e65418a7cc64621eab965ac32aff588a9ffcdf6e0d4c91069f459a4a", "4b6f11b4f8f59c4ab302009c3b6f92b6fedb31fcfd1b9f7f07bae929d53ce755", [{0x6, 0x4, {0x2, 0x40722bd3}}, {0x3, 0x1, {0x2, 0x20}}, {0x6, 0x101, {0x3, 0x9}}, {0x1, 0x1000, {0x3, 0x18}}, {0x7ff, 0xfff, {0x2, 0x7}}, {0x0, 0xf751, {0x2, 0x24c}}, {0x5, 0x9, {0x3}}, {0x11, 0x5, {0x1, 0x7ff}}, {0x7b31, 0x1f, {0x2, 0xfc28}}, {0x19, 0x6, {0x3, 0x100}}, {0x20, 0x8000, {0x1, 0x2}}, {0x401, 0xcba, {0x0, 0x3}}, {0x8, 0x800, {0x1, 0x3}}, {0x7, 0x73, {0x0, 0x1ff}}, {0x101, 0x9, {0x1, 0x1800}}, {0x0, 0x1, {0x2, 0x7}}, {0x3, 0x3, {0x3, 0x400}}, {0x3f, 0x1c, {0x1, 0x2}}, {0xfff7, 0x4, {0x1, 0x2}}, {0x1000, 0x0, {0x3, 0x7ff}}, {0x100, 0xd7, {0x2, 0x1ff}}, {0x0, 0x20, {0x0, 0x9}}, {0x6, 0x200, {0x1, 0x3f}}, {0x5, 0x401, {0x1, 0x1ff}}, {0x9, 0x100, {0x2, 0x9}}, {0x101, 0x7, {0x2, 0xd2e2}}, {0x5d, 0x1, {0x2, 0x1}}, {0x7, 0x80, {0x1, 0x6}}, {0x6, 0x8001, {0x1, 0x7f}}, {0x6, 0x1, {0x3, 0xfff}}, {0x0, 0x16, {0x2, 0x6}}, {0x1f, 0x200, {0x3, 0x7fffffff}}, {0x9, 0xc6f, {0x0, 0x40}}, {0xfff, 0xfffa, {0x1, 0x3}}, {0x6, 0x3, {0x3, 0x4}}, {0x7ff, 0x66, {0x3, 0x507a77c5}}, {0x6, 0x7, {0x3, 0xffffffff}}, {0x4, 0xe46, {0x2, 0x9}}, {0x3, 0x40, {0x3}}, {0x1f, 0x3f, {0x3, 0x8}}]}}}, {{0x254, 0x1, {{0x0, 0x800}, 0x4, 0x9, 0x101, 0x7, 0x10, 'syz0\x00', "c4fb4d86385a8601f8bd06d632d036472d7ff0cf2d90f6ef8ed7d33362ab017f", "ef49ce670a62e587cf3c4f27d8c1b14636b892fba95b1efff660f9952efddac0", [{0x4, 0x400, {0x2, 0x5}}, {0xfff0, 0x8001, {0x0, 0x75f71599}}, {0x1000, 0x6, {0x0, 0x7ff}}, {0x1f, 0xf000}, {0x6a2, 0x7c0, {0x0, 0x200}}, {0x709, 0x2, {0x3, 0x16a0d459}}, {0xfffd, 0x7, {0x2, 0x2}}, {0x0, 0x9, {0x3}}, {0x400, 0x1f, {0x0, 0x4}}, {0x80, 0xfffd, {0x3, 0x6ff}}, {0x7fff, 0x1ff, {0x0, 0x3}}, {0x6, 0x2, {0x1, 0xc0e6}}, {0x1, 0x9, {0x2}}, {0x0, 0x9, {0x2, 0x6}}, {0x458d, 0xd5b6, {0x2, 0x20}}, {0x7f, 0x200, {0x3}}, {0x401, 0x0, {0x1, 0x1}}, {0x491, 0x7, {0x0, 0x7}}, {0x8, 0x4, {0x2}}, {0x100, 0x9, {0x3, 0x2}}, {0x19, 0x1, {0x2, 0x2}}, {0x0, 0x0, {0x2, 0x8}}, {0xfffd, 0xffff, {0x3, 0x1ff}}, {0x5, 0x3f, {0x0, 0x5}}, {0x3ff, 0x9, {0x1, 0x5}}, {0x0, 0x8, {0x3, 0x3}}, {0x2, 0x6, {0x2, 0x5}}, {0x7, 0x2, {0x3, 0x8000}}, {0x1, 0x7, {0x2, 0x1}}, {0x8, 0x93, {0x1, 0x8001}}, {0xffff, 0x6, {0x2, 0x7ff}}, {0x7f, 0x9, {0x3, 0xd7049db5}}, {0x0, 0x800, {0x1, 0x1}}, {0x9, 0x8001, {0x3, 0x10003}}, {0xfffc, 0xfff8, {0x2, 0x2}}, {0x7f, 0x0, {0x0, 0x6}}, {0x8000, 0xbbe9, {0x0, 0x6}}, {0x4f12, 0x101, {0x3, 0x8}}, {0x400, 0x7, {0x2, 0x1}}, {0x0, 0xff, {0x2, 0xffffffff}}]}}}, {{0x254, 0x1, {{0x3, 0xfff}, 0x9, 0x2, 0x7, 0x9, 0x1d, 'syz1\x00', "5b581be8e60839c7c614f9038ca77a7d7a424b9ba7db8429f1b783992a601aa4", "dbdd375dc869c80716c00854173c6828615bb1da614e7614a349db36b3c65936", [{0x0, 0x4, {0x3, 0x1}}, {0x3, 0x6b8, {0x3, 0x5}}, {0x9, 0x9, {0x1, 0xef25}}, {0x3, 0x1, {0x3, 0x5}}, {0x800, 0x40, {0x2, 0x1000}}, {0x0, 0x28, {0x3, 0x1ff}}, {0x5, 0x4, {0x1, 0x2da8}}, {0x9, 0x7, {0x3, 0x9e0}}, {0x2, 0x7, {0x2, 0x80000000}}, {0x3, 0x7, {0x3, 0x4}}, {0x2, 0x1, {0x3, 0x8001}}, {0x8000, 0x9, {0x1, 0x8}}, {0x100, 0x77, {0x2, 0x80000000}}, {0x5, 0x6, {0x2, 0x52}}, {0x7, 0x3, {0x3, 0x1}}, {0x800, 0x1, {0x3, 0x1}}, {0x8001, 0x80, {0x2, 0x2d9000}}, {0x7, 0x200, {0x1, 0x20}}, {0x9, 0x400, {0x2}}, {0x1, 0x3, {0x2, 0x5}}, {0x4, 0x2, {0x1, 0x8a7b}}, {0x1f, 0x4e, {0x3, 0x7}}, {0x1f, 0x8, {0x2, 0x3}}, {0x2, 0x3, {0x0, 0x3}}, {0x6578, 0x100, {0x1, 0x24}}, {0x7f, 0x6, {0x2, 0x8fc9}}, {0x400, 0x81, {0x4, 0x7}}, {0x9, 0x400, {0x2, 0x8}}, {0x1000, 0x0, {0x1, 0x3ff}}, {0xffff, 0x9, {0x0, 0x978}}, {0x7fff, 0x0, {0x2, 0x2}}, {0x2, 0x4, {0x3, 0x80000000}}, {0x2, 0x40, {0x3, 0x9e7d}}, {0x5, 0x3f, {0x3, 0x7}}, {0xe1b, 0x2, {0x3, 0xef33}}, {0x4e22, 0x0, {0x2, 0x3ff}}, {0x80, 0x7d9, {0x0, 0x87d}}, {0x5, 0x222, {0x0, 0x400}}, {0x5c, 0x4, {0x3, 0x200}}, {0xc8, 0x8, {0x1, 0x4204}}]}}}, {{0x254, 0x1, {{0x3, 0x10000}, 0x3f, 0x0, 0x3, 0x6, 0x8, 'syz0\x00', "fd12254eec497edc800863c503cf3399fef38f701fc6a73736abe43523f68f9b", "cbafff3e0dd77ba2b9e52a37e8381c777c31e29601c58194c68d83a45624bebc", [{0x8, 0x5, {0x2, 0x9}}, {0x4b36, 0x175, {0x1, 0x2}}, {0x9, 0x7ff, {0x0, 0x11a000}}, {0x400, 0x66, {0x0, 0x1}}, {0x0, 0xf7e5, {0x0, 0x1}}, {0x5, 0x7, {0x3, 0xfff00}}, {0x1, 0x400, {0x3, 0x8}}, {0x53, 0x8, {0x1, 0x2}}, {0x7, 0xf360, {0x2, 0x4}}, {0x3, 0x3, {0x2, 0x5}}, {0x2, 0x1ff, {0x2, 0x7}}, {0x6, 0x1, {0x3, 0x8}}, {0x100, 0x1, {0x3, 0x5}}, {0x401, 0x2, {0x1, 0x9}}, {0x127, 0x47df, {0x1, 0x9}}, {0x5, 0x100, {0x2, 0x9}}, {0xfffa, 0x2e25, {0x0, 0x9}}, {0x6, 0x3, {0x0, 0x8001}}, {0x0, 0x4, {0x2, 0x8001}}, {0x400, 0x1ff, {0x2, 0x892}}, {0x1ff, 0x80, {0x2, 0x101}}, {0x3, 0x401, {0x0, 0x7}}, {0x0, 0xfffc, {0x1, 0x10}}, {0x8, 0x4, {0x3, 0x6}}, {0x3f, 0x2, {0x1, 0x8}}, {0x81, 0x1, {0x2, 0x7}}, {0x1, 0x6, {0x3, 0x80000000}}, {0x7, 0x9, {0x2, 0x8000}}, {0x7, 0x0, {0x2, 0xd1}}, {0x40, 0x6, {0x1, 0x2}}, {0x6, 0x1, {0x3, 0x7}}, {0x9, 0x6, {0x3, 0x7}}, {0xffe1, 0x7f, {0x3, 0xffff}}, {0x8542, 0x400, {0x0, 0x10001}}, {0x324, 0x4, {0x2}}, {0x9, 0x2, {0x2, 0x7fff}}, {0x8001, 0x3, {0x2, 0x43}}, {0x8, 0x5, {0x1, 0x1}}, {0xfff, 0x39, {0x2, 0x1}}, {0x1000, 0x8, {0x1, 0xffff}}]}}}]}, 0x1060}}, 0x4)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r1, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40)
r2 = socket(0x10, 0x80002, 0x0)
r3 = socket(0x9, 0x1, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0xffffffff00000001)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r2, &(0x7f0000000000)={0x90000020})
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000001c0)={0x2, [0x9, 0x0]}, &(0x7f0000000200)=0x8)

05:08:00 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x7400)

05:08:00 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
r1 = accept4(r0, &(0x7f0000003c00)=@tipc, &(0x7f0000003c80)=0x80, 0x80000)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000003cc0)=""/57, &(0x7f0000003d00)=0x39)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={0x0, @in={0x2, 0xe2, @multicast2}, @llc={0x1a, 0x200, 0x4, 0x7f, 0x3f, 0x1, @multicast}, @hci={0x1f, 0x4, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x4, 0xb61, 0xf22})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2d, 'memory'}]}, 0x8)

05:08:00 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x1, @default}, 0x1c)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockname$netrom(r1, &(0x7f0000000000)={{0x3, @bcast}, [@netrom, @netrom, @remote, @null, @null, @remote, @remote, @default]}, &(0x7f0000000080)=0x48)

05:08:00 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5203}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:00 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0xe000000}}], 0x40000000000020c, 0x0, 0x0)

05:08:00 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = accept(r0, &(0x7f00000019c0)=@in={0x2, 0x0, @remote}, &(0x7f0000001a40)=0x80)
r4 = socket(0x10, 0x80002, 0x0)
r5 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000000)={0x90000020})
r6 = socket(0x10, 0x80002, 0x0)
r7 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000000)={0x90000020})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001a80)={<r8=>0xffffffffffffffff})
r9 = socket(0x10, 0x80002, 0x0)
r10 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f0000000000)={0x90000020})
r11 = socket(0x10, 0x80002, 0x0)
r12 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r12, 0x3, r11, &(0x7f0000000000)={0x90000020})
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c010000", @ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf25050000004400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c00040004000000000000000c00050020000000000000003c00078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYRES64, @ANYRES32, @ANYBLOB="0c00020007000000000000003400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB, @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="2400078008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08001dc7ff1d9edbdd26770a45d744bc350dc494bff12875307909dd91d91155c37085d0903dcd3fc913e6f437649caa2c6969e9012f25a24d4b98dc6768cb9a5bf4b8c35510cb4f08", @ANYRES32=r11, @ANYBLOB="0c0003000400000000000000"], 0x11c}, 0x1, 0x0, 0x0, 0x48000}, 0x4048010)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:00 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
getsockopt$rose(r0, 0x104, 0x5, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
r2 = socket$netlink(0x10, 0x3, 0x15)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00')
r4 = accept(r1, &(0x7f0000000800)=@isdn, &(0x7f0000000880)=0x80)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000008c0)=0x80, 0x4)
sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r3, 0xdf}, 0x14}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="6090de0c", @ANYRES16=r3, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x4805}, 0x24000884)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:00 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5300}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:00 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x8, 0x800, 0xffffb9a1)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000001d00)=""/254, &(0x7f0000001e00)=0xfe)
r2 = accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e)

05:08:00 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, r2, 0x14b89a7474f1595f, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2000000}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf0, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffa0}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x26}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1d, 0x30}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x7}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xa}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4004010}, 0x8080)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:00 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40)

[ 1533.803128][   T28] audit: type=1804 audit(1591160880.254:1259): pid=10357 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3576/cgroup.controllers" dev="sda1" ino=16367 res=1
05:08:00 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x8)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r1, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40)

05:08:00 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x7a00)

05:08:00 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
splice(r0, &(0x7f0000000000)=0x7e793e43, r1, &(0x7f0000000040)=0x9, 0x9, 0x5)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
r3 = getpid()
syz_open_procfs$namespace(r3, 0xfffffffffffffffd)
write$cgroup_pid(r2, &(0x7f00000000c0)=r3, 0x12)

05:08:00 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5301}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:00 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)=ANY=[@ANYBLOB="580000000206010000001900000000000000000011000301686173683a69702c6d61726b0000000005000400000000000900020073797a30000000000c000780080012400000000005000500020000000500010007000000"], 0x58}}, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000)=0x29231e5b, 0x4)
socket$inet6(0xa, 0x3, 0x119)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:00 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00')
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4, 0x2}]}]}]}, 0x38}}, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:00 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x14000000}}], 0x40000000000020c, 0x0, 0x0)

05:08:01 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5302}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:01 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x8, [@const={0x4}, @union={0x5, 0x4, 0x0, 0x5, 0x0, 0x678ce27b, [{0x9, 0x1, 0x40}, {0xf, 0x3, 0x4}, {0xf, 0x5, 0xc}, {0x1, 0x4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x1}}, @var={0x8, 0x0, 0x0, 0xe, 0x5}]}, {0x0, [0x5f, 0x61, 0x5f, 0x0, 0x7f, 0x2e]}}, &(0x7f0000000200)=""/134, 0x90, 0x86}, 0x20)
vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000300)="d1f157624f50b414e41aa33e607858", 0xf}, {&(0x7f0000000340)="4395128866b99312289c74c8fa62b8b67538852a261c1f8569f5e13bee6fb18d4de678a4e2f4d4b9d09610a68b594507d257b1f3dfb08b", 0x37}], 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000000)=""/212, &(0x7f0000000100)=0xd4)

05:08:01 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
r2 = accept4(r1, &(0x7f0000000140)=@ll, &(0x7f00000001c0)=0x80, 0x80000)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000200)=0x26a, 0x4)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x100000, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r3, 0x104, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4)

[ 1534.683429][   T28] audit: type=1804 audit(1591160881.134:1260): pid=10399 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3577/cgroup.controllers" dev="sda1" ino=16364 res=1
05:08:01 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
connect$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x2}, 0x20)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
pwrite64(r3, &(0x7f0000000400)="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", 0x200, 0x0)
r4 = socket$pptp(0x18, 0x1, 0x2)
ioctl$FICLONE(r3, 0x40049409, r4)
r5 = getpid()
syz_open_procfs$namespace(r5, 0xfffffffffffffffd)
write$cgroup_pid(r3, &(0x7f00000000c0)=r5, 0x12)
bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x1, 0x9, 0x5a, "31adb7112691ffe2a84750d53dff01f8d53eae652e276104e813f7afe1227e664505febb7e448ab5c5b5bbb69ff3b4d2bf51144f3c63cee7f2532fe703caeb", 0x2d}, 0x60)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:01 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x3f000000}}], 0x40000000000020c, 0x0, 0x0)

[ 1534.770952][   T28] audit: type=1800 audit(1591160881.164:1261): pid=10399 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=16364 res=0
05:08:01 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5303}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1534.877768][   T28] audit: type=1804 audit(1591160881.174:1262): pid=10397 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3577/cgroup.controllers" dev="sda1" ino=16364 res=1
[ 1534.991353][   T28] audit: type=1804 audit(1591160881.445:1263): pid=10413 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3578/cgroup.controllers" dev="sda1" ino=16380 res=1
05:08:01 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0xa00f)

05:08:01 executing program 3:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$can_j1939(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f00000010c0)="e386a830cd02f97e98f9f8b3d7a07f1d27911aef36705364f47c363aa3d0738eea361565e906b144787fa6cad5822a0cba4f80776f864f6fad854974f86d2b7500b3ac7b069b87451aa7cae304b6dd1a2625a469cc8bb34519bbb5dec98ede80d3edf146a4da54d93af742fd8a128c56b80d8aca1ba94b4ab04248c5a51580942045f0ce57445db34add1dac7cc0016eb4c54fae448d1ab029c4f0933c489eb29013fd662247d124cab729c3fa91bf343870f28d13831209cbeea0ea7039882a2dd65e", 0xc3}, 0x1, 0x0, 0x0, 0x44804}, 0x40000)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r1, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:01 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
r3 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x90000020})
getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000080), 0x4)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000000000)={0x90000020})
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00')
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000425bd7000fddbdf250000000014001f00fe800000000238318bd19d4617a9968cbb47fa000000000000000000bb06001c00090000000c000f0093d6880700000000050022000100000006000200010000000500050000000000050021000000000006001b004e23000008000a00040000000c0010000400000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
r6 = socket(0x10, 0x80002, 0x0)
r7 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000000)={0x90000020})
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)

05:08:01 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5400}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:01 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

05:08:01 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x60000000}}], 0x40000000000020c, 0x0, 0x0)

05:08:02 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x74, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8815}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400000}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffff93}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x20}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4665a3d8dd42d61a}, 0x4001)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r1, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast]}, 0x40)
socketpair(0x4, 0x5, 0xffffffff, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00')
r4 = socket(0x10, 0x80002, 0x0)
r5 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000000)={0x90000020})
r6 = socket(0x10, 0x80002, 0x0)
r7 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000000)={0x90000020})
r8 = socket(0x10, 0x80002, 0x0)
r9 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000000)={0x90000020})
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r6}, {0x8, 0x1, r8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20000011)
setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000000)=0x300, 0x4)

05:08:02 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5401}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:02 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
getsockopt$inet_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000000)=""/189, &(0x7f00000000c0)=0xbd)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)

05:08:02 executing program 0:
bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040))

[ 1535.659257][   T28] audit: type=1804 audit(1591160882.115:1264): pid=10436 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3579/cgroup.controllers" dev="sda1" ino=16382 res=1
05:08:02 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x1020400}, 0xc)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:02 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
recvmsg$can_raw(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/242, 0xf2}, 0x2000)
getsockname(r1, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000002c0)=0x80)
ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f0000000200)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0})
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:02 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0xf000)

05:08:02 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5402}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:02 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x8c000000}}], 0x40000000000020c, 0x0, 0x0)

05:08:02 executing program 3:
socketpair(0x3, 0xa, 0xd97, &(0x7f0000000d00)={<r0=>0xffffffffffffffff})
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000d40), 0x4)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x2b0, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5e7f}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x16}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3a2d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1c544e81}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x410d}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa50}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x68}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2c40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfb90000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa124ca06}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x40}, 0x2404c890)
bind$rose(r1, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:02 executing program 0:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000880)=0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0)=0x6, 0x4)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r1, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)

05:08:02 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5403}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:03 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5500}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:03 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)=0x2, 0x4)
r3 = socket(0x10, 0x80002, 0x0)
r4 = epoll_create(0x9)
write$binfmt_script(r3, &(0x7f0000000180)={'#! ', './file0', [{0x20, '/{\x00'}], 0xa, "7e83c02562cd1ddf77ad32f8e55fee43146193d8a55d38b864d5c37afdd9203581bc015f821e8b1ca704fa4b5253efa9d713aa1d70ebd7795d0f48b2530a8fe65de63d565137b138d466dcf77c5b21e42247e8a94cfa416852cd76b84ab93f1fffb263fa45909afdedfae453576e36293b59ce44841326dd41536d155d67"}, 0x8d)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, &(0x7f0000000080)={0x40, "39e4ab73b26be1246c8c1ef618939e766436e973ebac1066849d2723a2917772753a4e4182059e114155453eb443e465251490aadc54b07a9f7f0e37429589bc527e7b22d2120722a6f92e39d6a2c804f938fd700daa8b248e7e62b40957b10feaefc11f9e4e1d45d55b1e0b7814d6365cfe1026210fd816942ba7681986b4af"})
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

[ 1536.528574][   T28] audit: type=1804 audit(1591160882.985:1265): pid=10477 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3580/cgroup.controllers" dev="sda1" ino=16376 res=1
05:08:03 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5501}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:03 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
getsockname$packet(r1, &(0x7f0000000000), &(0x7f0000000040)=0x14)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:03 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5502}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:03 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, 0xa, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa3}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3e}, @NFTA_SET_USERDATA={0x6a, 0xd, 0x1, 0x0, "a1b2fe816701d90a817b8b9625b202cf42551a140cea164323a8354bc65ff563d5c62b593ad7e723bca2bb9ed26ed3ecb54e65b534d81bb5e6b13eaab0702f171f700464bf4a2a2721f688f70300ca3e5c2d6645a3438834256c4fc71164fe096ac1975c4fb9"}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xf8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x140)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'veth1_vlan\x00', 0x7f})

05:08:03 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x34000)

05:08:03 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5503}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:03 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:03 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0xc00e0000}}], 0x40000000000020c, 0x0, 0x0)

05:08:03 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5600}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1537.494115][   T28] audit: type=1804 audit(1591160883.945:1266): pid=10510 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3581/cgroup.controllers" dev="sda1" ino=16376 res=1
05:08:04 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x7, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1ff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0x80)

05:08:04 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5601}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:04 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0xffffff7f}}], 0x40000000000020c, 0x0, 0x0)

05:08:04 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5602}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:04 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x18, 0x0, 0x0)
close(r1)
r2 = socket(0x10, 0x80002, 0x0)
r3 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x90000020})
recvfrom$netrom(r2, &(0x7f0000000080)=""/210, 0xd2, 0x10060, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r5}, &(0x7f0000000040)=0x8)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xfffffffd, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:04 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x1d, 0x80000, 0x7fffffff)
r2 = socket(0x10, 0x80002, 0x0)
r3 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x90000020})
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x64, 0x3, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_NAT_DST={0x50, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x844}, 0x20000080)
setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000000)=0xfffefffd, 0x4)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast]}, 0x40)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, r5, 0x14b89a7474f1595f, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2000000}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r5, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7611}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4000010)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', r7})
setsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000240)=@int=0x55c, 0x4)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={0x1fc, r8, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffc0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x818a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffc2f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x507}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffbff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x49, @mcast2, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7ff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}}}}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2230edc7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff82}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x840}, 0x48000)

05:08:04 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5603}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1537.964394][T10533] sctp: [Deprecated]: syz-executor.5 (pid 10533) Use of int in max_burst socket option deprecated.
[ 1537.964394][T10533] Use struct sctp_assoc_value instead
[ 1538.029241][   T28] audit: type=1804 audit(1591160884.475:1267): pid=10532 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3582/cgroup.controllers" dev="sda1" ino=16378 res=1
[ 1538.074024][T10533] sctp: [Deprecated]: syz-executor.5 (pid 10533) Use of int in max_burst socket option deprecated.
[ 1538.074024][T10533] Use struct sctp_assoc_value instead
05:08:04 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x300000)

05:08:04 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5700}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:04 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x3, 0x400})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0)
bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, 0x10)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000100))
bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)

05:08:04 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x4000000000000}}], 0x40000000000020c, 0x0, 0x0)

05:08:04 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5701}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:04 executing program 5:
r0 = socket(0x10, 0x2, 0x0)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
sendmsg$nl_route(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001640)=@can_newroute={0x44, 0x18, 0x903, 0x0, 0x0, {}, [@CGW_MOD_SET={0x18, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "ef536879f43d46e6"}, 0x4}}, @CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r2}]}, 0x44}}, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0)
bind(r3, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x80)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r5 = syz_init_net_socket$nfc_raw(0x27, 0x4, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
r7 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000000)={0x90000020})
setsockopt$rose(r6, 0x104, 0x7, &(0x7f0000000540)=0x10001, 0x4)
ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000440))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00')
sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r8, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40020}, 0x40)
r9 = openat$cgroup_ro(r4, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8983, &(0x7f0000000180)={0x6, 'team_slave_0\x00', {0x2}, 0x3})

05:08:04 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b)
r3 = socket(0x840000000002, 0x3, 0x1)
bind$inet6(r3, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b3e32e32", @ANYRES16=r4, @ANYRES32, @ANYBLOB="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"/270], 0x4}}, 0x54)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r2}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x44801}, 0x20040040)
r5 = socket(0x10, 0x80002, 0x0)
r6 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000000)={0x90000020})
r7 = socket(0x10, 0x80002, 0x0)
r8 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000000)={0x90000020})
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r4, 0x202, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6a}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r5}, {0x8, 0x1, r0}, {0x8, 0x1, r7}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x48085)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000006f2fc011140904253162f7bacef9c077ffffff0000000075f194a0c16cedb9e76bd0460335008737000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x20040011)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r9, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:05 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5702}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1538.512495][   T28] audit: type=1804 audit(1591160884.965:1268): pid=10551 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3583/cgroup.controllers" dev="sda1" ino=15732 res=1
05:08:05 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5703}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:05 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r3 = socket(0x10, 0x80002, 0x0)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r7}, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r7, 0x1}, 0x8)

05:08:05 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0xb, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044}, 0x4004004)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x40)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000040)=0x3, 0x4)

05:08:05 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5800}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:05 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x400300)

05:08:05 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5801}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:05 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040))
bind$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast]}, 0x40)

05:08:05 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x40030000000000}}], 0x40000000000020c, 0x0, 0x0)

05:08:05 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0xa, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040005}, 0x8001)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r4, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:05 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5802}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1539.554692][   T28] audit: type=1804 audit(1591160886.005:1269): pid=10598 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3584/cgroup.controllers" dev="sda1" ino=16097 res=1
05:08:06 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
socket$bt_bnep(0x1f, 0x3, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000100)={0x70000027})
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000f1400082dbd7000fedbde250800010002000000"], 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:06 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5803}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:06 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg(r3, &(0x7f00000004c0)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x1, 0x800001, 0x1, {0xa, 0x4e22, 0x0, @local, 0x79}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)="b461bb3d4c382dd3503dc0c6a8ac1de421872750c10fb4c35542f8811b301a45fd6506e5aa5b605b0dcce3b3c470bf77e8a4456187e462d777b95c293df80922aa2b1e19d9993d89d88e52874ad3605a04987332b43faad443ab60e86ef49a157d2c6c77056f7067d618893208e3eb2fb61dc809642c869964fb916c", 0x7c}, {&(0x7f0000000380)="f4a23c9a294f9a2e956885a6a73e08a6555e2c6cd38ac2cc9b73fae52d1704ac0d341bd7827965012c4df5062a537edd5835f8e0eb1b4dc14822db67f1487c5b4ed6031908895cd80e9895a664dc75a580dd3d9e314e858816336acfd9d740803c85f41ee0b9a5d1dd6d135e22c378ab7b1c0e69e363f330a25f232b62dfd6e2e5bc219132bcff9ba16bcdcd05908078a56050f57ff1aef7c6c2a951e48e80d43fa2715261ed554e6ae4c7ab361a6c1ed6deebff55ecb7dc4f95cb8b097a0adba5db0b", 0xc3}], 0x2, &(0x7f0000000600)=[{0x58, 0x1, 0x7ff, "607ded836a582c7ec33ed726307134e4c9fe9ba08dd192517f6843405c27c02df20e2ec4383dcfdcf8a545238ce6437e61a072958f62d125a917fb75e1d8c1eafcfd3664"}, {0x30, 0x111, 0x27, "640a826e35cb0aa4a6340fea67ab05d4d37d939f349af589651be4c2"}, {0x38, 0xe5, 0x4, "6b68eeecc92bc077a5a7e21e51f814990aa22545f3206255ccecd6d515c2e0b3a7b0fedd9d88"}, {0xb0, 0x102, 0xfffffe01, "27b58341d559085ca7977d0be37394402568bf15914f36bd7ba60acf1c2913c7aca974d7e0d2edfb4ab1edda7bc69a2909cc8a70c61255fdf7f7633ba09014ac174ad47125d67ec9f89db3b76346e4b4bf25a8bc854513e3fd0c50b958053f514b78e8822c60bcff9eca26b03ea8693f89e784441492bb0c19c0ab545126d5490183735aa2242633d7b98925944b9cbfab6ab6e303cfe8c4c327"}, {0x90, 0x114, 0x5, "0483ed0816d7cfa28655110a3cb024f17b70b58f96bec2190a0fb6058fa303857c2931414b82030f9c710d129823c8ae28efc11b737ee32fa78a67f95aa511efb419e2420b6dec26a9019048cd83fcc7b7b3f859aa60d88e7b27a1952bf4a135053c526e6daeaa857474d054c47a3361990a51e947c2e53f54064efb326e"}, {0xc8, 0x116, 0x10000, "bfb92c891e1958bd0f8c2c993675f1ae306902e00c0bad4c0773ddb09c35190ea473cfdbc37fec41e4e8ad5c90e359c36910169ffc8ba14266a416b90bec5ac4d20d57dcf960278cb0b17e8f791d770052bb2318675983b6040d6e0716fabf35ee81801cef923081102688c47066742a1627c926749188dedb74a876140b363ff3cdef7804a0d948e36af6994228ce051850e263e09625603ab32b374c93ac5b8f1e48cfff2b46aa1b406f10bb41df786ab358bb"}, {0xe0, 0x111, 0x101, "347ef5cf87eab09f15e078706a68a961b7f69a5ea567e4d31803db1895a39920cdd6a5165b4d3ada10d0010ce2457bfddaeb3887736c04ec746c9ff0d10baabdf43bc55d2e5bc10b4a70a2be199ced80da04ad4ceb73e64594e5a2ee79e91ca1ad0d068bd8144243383cb861f8c41067a8cc28521c99d8f59d8c7f2a687456ee038f78d6b48ddad800e24b208928156d8c7eb6cbb4d9321587fb626b6af4e411295b87ae882e6cd8b4fb05d243b78ad4e206cc548d1568af4a08c33c7bd4ac59ded64d72e2f9d69bc2d881f92f"}], 0x3a8}}], 0x1, 0x4001)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0)='nl80211\x00')
sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x1a}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(%', @ANYRES16=r4, @ANYBLOB="20002cbd7000ffdbdf25080000001400040076657468305f746f5f62617461647600"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40080c4)
r5 = socket(0x10, 0x80002, 0x0)
r6 = epoll_create(0x9)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000540))
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000000)={0x90000020})
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000200), &(0x7f0000000240)=0x4)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000500)={@null, @null})
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)=ANY=[@ANYBLOB="580000000206010000000000000000000000000011000300686173683a69702c6d6172ff0100000005000400000000000900020073797a30000000000c000780080012400000000005000500020000000500010007000000"], 0x58}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={<r8=>r7})
bind$nfc_llcp(r8, &(0x7f0000000140)={0x27, 0x1, 0x0, 0x2, 0x20, 0x7f, "76c5ec706d32dcea2d523cc2e2e69203e1aeee718dfc3646c4933b04378739628bef046bf81978d5e3e6a0fe5b3974c7d0115b5a286d1a442a4c967536c4f4", 0x24}, 0x60)

05:08:06 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x80002, 0x0)
r5 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000000)={0x90000020})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r8=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r8}, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={<r9=>r8, 0x1}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={r9, 0x4, 0x80}, 0x8)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:06 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5900}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:06 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:06 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0xf0ffff)

05:08:06 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000))
ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000000)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2})
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:06 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5901}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:06 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000001c0)=0x5f, 0x4)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
recvmsg(r3, &(0x7f0000000540)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/255, 0xff}, {&(0x7f00000001c0)}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000000300)=""/162, 0xa2}], 0x5, &(0x7f00000004c0)=""/104, 0x68}, 0x2)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
ioctl$FITRIM(r5, 0x40305839, &(0x7f0000000000)={0x0, 0x8001, 0x200})
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="ee08aa49", @ANYRES16=r6, @ANYBLOB="040026bd7000fcdbdf250800000008000400ac1414aa2400070073797374656d5f753a6f626a6563745f723a7373685f657865635f743a733000"], 0x40}, 0x1, 0x0, 0x0, 0x8048094}, 0x8805)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ssh_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_buf(r7, 0x29, 0xd2, &(0x7f0000000440)="246132374c8b4ecc6cf6703db41eab228d7478b52466ec4cdca87f22fa37ef594b6dc6dd0216cc8a2d89f11702129b1d887dfa53bb3428f39d5b4c829521ea280fa502bf8f7c56bdd88659b047ff72e6de99f36cebfb8b75cdc49daeb6ce0525d57e3e6773eef4b1203feeea14018c0c8ffa439a18db98", 0x77)

05:08:06 executing program 5:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="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"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="246d00002c00270d000000000000000400000000", @ANYRES32=r3, @ANYBLOB="00000000000000000e00000008000b00060000000b000100666c6f77657200004800020008005f000600000005004c001f00000008001a00fffeffff06004f008100000005003e00200000000500500006000000140061"], 0x6d24}}, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r4, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:06 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e)

[ 1540.237824][   T28] audit: type=1804 audit(1591160886.685:1270): pid=10602 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3584/cgroup.controllers" dev="sda1" ino=16097 res=1
05:08:06 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5902}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:06 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0xa0010000000000}}], 0x40000000000020c, 0x0, 0x0)

05:08:06 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5903}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1540.398152][T10640] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
05:08:06 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5a00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:07 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

[ 1540.495960][T10648] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1540.505719][   T28] audit: type=1804 audit(1591160886.945:1271): pid=10642 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3585/cgroup.controllers" dev="sda1" ino=16367 res=1
[ 1540.571788][T10648] netlink: 27812 bytes leftover after parsing attributes in process `syz-executor.5'.
05:08:07 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5a01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1540.624587][T10640] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1540.705687][T10648] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1540.725779][T10648] netlink: 27812 bytes leftover after parsing attributes in process `syz-executor.5'.
05:08:07 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x1000000)

05:08:07 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x800, 0x411)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = socket(0x10, 0x80002, 0x0)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
r5 = accept$inet(r3, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'ip6_vti0\x00', 0x2}, 0x18)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4)

05:08:07 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
r3 = socket(0x10, 0x80002, 0x0)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000001c0)={0x10002008})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r8 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x90000020})
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r9=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f00000000c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r9}, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000000)={r9, @in6={{0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0x9}}}, &(0x7f00000000c0)=0x84)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:07 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5a02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:07 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
setsockopt$inet6_dccp_buf(r1, 0x21, 0xc, &(0x7f0000000040)="b26b4bf23da9aa1d110b848b9290ae8bd035cc267ae1beca350c6d4a93cab64af3d96fe20f29ce59d65d9d7a4c5b372012712d18c0e17e3d34860eff7141a9e5012d232c236abd3b6eedb67968e87d478bf5ee72b67a3b2b0a862ad6cac48911", 0x60)
bind$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:07 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x100000000000000}}], 0x40000000000020c, 0x0, 0x0)

05:08:07 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socketpair(0x11, 0x3, 0x7fffffff, &(0x7f00000012c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001340)='batadv\x00')
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x4c, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x30a3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8004)

05:08:07 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5a03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:07 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000000))
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}, 0x40)

05:08:07 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5b00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:07 executing program 0:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000)=0x7, 0x4)

[ 1541.353743][   T28] audit: type=1804 audit(1591160887.805:1272): pid=10690 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3586/cgroup.controllers" dev="sda1" ino=16380 res=1
05:08:07 executing program 3:
r0 = socket$inet(0x2, 0xa, 0x7)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x341}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
shutdown(r4, 0x0)
bind$rose(r3, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:08 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x2000000)

05:08:08 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5b01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:08 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = socket(0x8, 0x80000, 0x0)
r3 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x90000020})
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4)
bind$rose(r1, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:08 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$netlink(0x10, 0x3, 0x14)

05:08:08 executing program 3:
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/41, &(0x7f0000000040)=0x29)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$caif_stream(0x25, 0x1, 0x1)

05:08:08 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x300000000000000}}], 0x40000000000020c, 0x0, 0x0)

05:08:08 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5b02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:08 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7, @ipv4={[], [], @remote}, 0x80000000, 0x4}, 0x20)
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:08 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = accept$unix(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x6e)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'batadv0\x00', {0xfffffffe}, 0xfffd})

05:08:08 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)=ANY=[@ANYBLOB="580000000206010000000000100000000100000011000300686173683a69702c6d61726b0000000005000400000000000900020073797a300000000c000780080012400000000005000500020000000500010000000000"], 0x58}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r5}, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={<r6=>r5, 0xe2dd0000, 0x30}, &(0x7f0000000140)=0xc)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e24, 0x8, @local, 0x502}}, 0x53d, 0x4}, &(0x7f0000000240)=0x90)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000854600"/20, @ANYRES32=r8, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', r8})
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000040)={0x2, 0x3, 0x5e59, 0x0, 0x4})
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000))

[ 1542.020389][   T28] audit: type=1804 audit(1591160888.475:1273): pid=10724 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3587/cgroup.controllers" dev="sda1" ino=16382 res=1
05:08:08 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5b03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1542.175205][T10742] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1542.247823][T10742] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
05:08:08 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
socketpair(0x1f, 0x3, 0x20, &(0x7f0000000b40)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0)='batadv\x00')
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, r2, 0x800, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0xb}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x42)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TRIM(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3f6, 0x200, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008841}, 0x84)
r4 = socket(0x10, 0x80002, 0x0)
r5 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000000)={0x90000020})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x60004000)
sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, r7, 0x14b89a7474f1595f, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2000000}]}, 0x1c}}, 0x0)
setsockopt$rose(r4, 0x104, 0x0, &(0x7f0000000100)=0x5, 0x4)
sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="20002bbd7000fcdbdf250600000000000180060004004e24000040000280080003000100000006000f000900000006000e004e220000060002a179f4004e2200001400010020010000000000000000000000000002727200"/110], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x40810)
r9 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x90000020})
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000001c0)=0x9, 0x4)

05:08:09 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x3000000)

05:08:09 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
pwrite64(r1, &(0x7f0000000400)="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", 0x200, 0x0)
r2 = socket$pptp(0x18, 0x1, 0x2)
ioctl$FICLONE(r1, 0x40049409, r2)
ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000000)=0x3ff)

05:08:09 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r4, &(0x7f00000003c0)=ANY=[], 0xa4)
splice(r4, 0x0, r2, 0x0, 0xd86dac9, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000042c0)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000004280)={0x10, 0x0, 0x0, 0x4002}, 0xc, &(0x7f00000043c0)={&(0x7f0000004300)={0x60, r5, 0x300, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'batadv\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, '-wlan1GPLGPL^:\xa1)+-\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="380802001ff10485a1437531a5b95f4ac34cad0ef4db7698df40809f8b643186099313f64b589fb1aca676447e03f89e68b2893549b88c3dac7885abbe5fdc9f54899c8ea99eccb5ec24e541000000000000", @ANYRES16=r5, @ANYBLOB="008100000000fcdbdf2505000000050001000000000008000400ffffffff14000600"/50], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20008040)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="60201400772dddc1818231373ccfc539eb0f2ed0ab99989c9b64c711c8f1cdb1c0f4f3712f941e1080a351420816ce31df20ec00"/65, @ANYRES16=r5, @ANYBLOB="00022dbd7000ffdbdf250300000008000400ffffffff14000500fe88000000000000000000000000010108000700e000000206000b000900000006000b002b00000008000c00020000000f000100776c616e31776c616e300000"], 0x60}, 0x1, 0x0, 0x0, 0x4000891}, 0x4040050)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x78, r5, 0x320, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'ppp0\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x4}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004800}, 0x24040804)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x90, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, ':bdevlo--^nodev\\\\$\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}]}, 0x90}}, 0x2ec7c5d94b07e478)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x3d}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '$vboxnet0^lo\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x24040000)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r6, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:09 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:09 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5c00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:09 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x400000000000000}}], 0x40000000000020c, 0x0, 0x0)

05:08:09 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5c01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:09 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:09 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x54}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000840)

[ 1542.963851][   T28] audit: type=1804 audit(1591160889.415:1274): pid=10771 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3588/cgroup.controllers" dev="sda1" ino=16368 res=1
05:08:09 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5c02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:09 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="00dd0000", @ANYRES32=<r5=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r5}, 0x0)
setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={r5, 0x4, 0xce, 0x9}, 0x10)

05:08:09 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10)
r5 = accept$alg(r4, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r5, &(0x7f00000003c0)=ANY=[], 0xa4)
splice(r5, 0x0, r3, 0x0, 0xd86dac9, 0x0)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000042c0)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000004280)={0x10, 0x0, 0x0, 0x4002}, 0xc, &(0x7f00000043c0)={&(0x7f0000004300)={0x60, r6, 0x300, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'batadv\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, '-wlan1GPLGPL^:\xa1)+-\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="380802001ff10485a1437531a5b95f4ac34cad0ef4db7698df40809f8b643186099313f64b589fb1aca676447e03f89e68b2893549b88c3dac7885abbe5fdc9f54899c8ea99eccb5ec24e541000000000000", @ANYRES16=r6, @ANYBLOB="008100000000fcdbdf2505000000050001000000000008000400ffffffff14000600"/50], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20008040)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="60201400772dddc1818231373ccfc539eb0f2ed0ab99989c9b64c711c8f1cdb1c0f4f3712f941e1080a351420816ce31df20ec00"/65, @ANYRES16=r6, @ANYBLOB="00022dbd7000ffdbdf250300000008000400ffffffff14000500fe88000000000000000000000000010108000700e000000206000b000900000006000b002b00000008000c00020000000f000100776c616e31776c616e300000"], 0x60}, 0x1, 0x0, 0x0, 0x4000891}, 0x4040050)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x78, r6, 0x320, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'ppp0\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x4}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004800}, 0x24040804)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x70, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, [], 0x4}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x70}}, 0x2ec7c5d94b07e478)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000)

05:08:10 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x4000000)

05:08:10 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5c03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:10 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0xa00000000000000}}], 0x40000000000020c, 0x0, 0x0)

05:08:10 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x5, 0x2, 0x64bd)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200925bd7000fedbdf25150000000a001a00b169aa2c06330000080003005d900171cb6dc987bcca45db7c588b6f736ec3a40cb14874db3a4362f7c15f476ece0305cb9a9382a16c2f3d22c7992d0b8e5fd7adc83ef7199f844da75b258a7c730a45", @ANYRES32=r6, @ANYBLOB="0800010000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000044}, 0x4004000)

05:08:10 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40)

05:08:10 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)

05:08:10 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5d00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:10 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
recvmsg$can_j1939(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000000)=""/166, 0xa6}, {&(0x7f00000000c0)=""/225, 0xe1}, {&(0x7f00000001c0)=""/187, 0xbb}, {&(0x7f0000000280)=""/249, 0xf9}, {&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f0000000440)=""/176, 0xb0}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000500)=""/162, 0xa2}, {&(0x7f0000001600)=""/2, 0x2}], 0x9, &(0x7f00000017c0)=""/129, 0x81}, 0x40002000)

[ 1543.832922][T10804] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
05:08:10 executing program 5:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x14f, 0x4)
sendmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0)

[ 1543.860852][   T28] audit: type=1804 audit(1591160890.315:1275): pid=10810 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3589/cgroup.controllers" dev="sda1" ino=16374 res=1
05:08:10 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5d01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1543.928704][T10804] 8021q: adding VLAN 0 to HW filter on device bond34
[ 1543.966497][T10804] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
05:08:10 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5d02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:10 executing program 3:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
bind$rose(r0, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)

05:08:11 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x5000000)

05:08:11 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5d03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:11 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r5 = socket$rxrpc(0x21, 0x2, 0x2)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r8}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={r8, 0x84, &(0x7f0000000280)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0x7, @private0, 0x9}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0x62f, @mcast2}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x33}}, @in6={0xa, 0x4e23, 0x80000000, @loopback, 0x8}]}, &(0x7f0000000340)=0x10)
getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0), 0x10)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@ipv4_getnetconf={0x5c, 0x52, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x5}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x7ff}, @NETCONFA_IFINDEX={0x8, 0x1, r9}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x80}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x6}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}]}, 0x5c}}, 0x0)
ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000000)=r9)

05:08:11 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0xe00000000000000}}], 0x40000000000020c, 0x0, 0x0)

05:08:11 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000000))

[ 1544.709316][T10872] 8021q: adding VLAN 0 to HW filter on device bond21
05:08:11 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
r2 = socket(0x10, 0x80002, 0x0)
r3 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x90000020})
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x1, 0x2}, 0x10)
sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc814}, 0x800)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r4, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:11 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:11 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5e00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:11 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000500)={0x0, 0x4, 0x6, 0xc126, 0x5, 0x3c}, 0x14)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000200)=0xfff, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010100}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000005}, 0x8080)
sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {0x1a}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="020025bd70ec558c6116d0a53c242652bc00"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x840)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d0001de15b7d8490f72299d28ab7b7e5caae5fc57ed7921e3619c18196ae49949c8a6561fda8be59f41e88230bdf03d560356839b37703aa08d108d8cc520c085eea68053b56b57c3acc2cc6c1a6fa36828ad4767fc62fa84e035cb35f930000000000000000000000309da519dec89bdbae501494331a9245a46b3ddc2f94c16b3591658366fa6a365c9e00c626e16bf941e94d085c853246436df59ab3a785bce34842d4b675d335f91258a48b45c5234f7092c3045da242d5a05640111be1fbc0a772a8499d11ff8843bcde39388e60c57521aa2d0777d33fa4fca1f0855bf63d78b389", @ANYRES16=r8, @ANYBLOB="0800000000000000000001000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r8, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'geneve0\x00'}}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40)

[ 1544.899096][   T28] audit: type=1804 audit(1591160891.355:1276): pid=10919 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3590/cgroup.controllers" dev="sda1" ino=16378 res=1
05:08:11 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5e01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:11 executing program 5:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
bind$rose(r0, &(0x7f00000005c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/133, 0x85}], 0x1, &(0x7f0000000180)=""/201, 0xc9}, 0x1)
r3 = socket(0x10, 0x80002, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x1b, 0x5, 0x3f8, 0x2b8, 0xa8, 0xffffffff, 0x0, 0x2b8, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000380), {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xc, @empty, @private=0xa010102, @port=0x4e21, @icmp_id=0x64}}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x3, 0x1}}, @common=@unspec=@devgroup={{0x38, 'devgroup\x00'}, {0xc, 0x80000000, 0x859, 0x1ff, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @broadcast, @rand_addr=0x64010101, @gre_key=0x800, @port=0x4e21}}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@set={{0x40, 'set\x00'}, {{0x0, [0x1, 0x4, 0x6, 0x2, 0x6, 0x2], 0x5, 0x2}}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @empty, @broadcast, @port=0x4e23, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xa, @remote, @local, @gre_key=0x6, @icmp_id=0x68}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x458)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
getpeername$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
r6 = socket(0x10, 0x80002, 0x0)
r7 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000000)={0x90000020})
accept4$unix(r6, &(0x7f0000000400), &(0x7f0000000480)=0x6e, 0x80800)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f00000004c0)=""/210, &(0x7f0000000a80)=0xd2)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000340)={r5, 0x1, 0x6, @remote}, 0x10)

05:08:11 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="ff0000932f01"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="ff0000001a0000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0)
r7 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x90000020})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@local, @multicast1, <r8=>0x0}, &(0x7f0000000180)=0xc)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x240004a8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={0x518, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x0, 0x7f, 0x1, 0xff}, {0x9, 0x3e, 0x8, 0x80}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0xf2, 0xf0, 0x5, 0x40}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x669a}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7f}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}]}, 0x518}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r9, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

[ 1545.376244][T10938] 8021q: adding VLAN 0 to HW filter on device bond44
[ 1545.429369][T10938] __nla_validate_parse: 5 callbacks suppressed
[ 1545.429381][T10938] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1545.467565][   T28] audit: type=1804 audit(1591160891.915:1277): pid=10911 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3590/cgroup.controllers" dev="sda1" ino=16378 res=1
05:08:12 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x6000000)

05:08:12 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000))
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = accept4$unix(r1, 0x0, &(0x7f0000000040), 0x80400)
getsockname$unix(r3, &(0x7f0000000080), &(0x7f0000000100)=0x6e)

05:08:12 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5e02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:12 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
getsockopt$rose(r0, 0x104, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000100)={{}, [@netrom, @null, @rose, @rose, @remote, @netrom, @bcast, @bcast]}, &(0x7f0000000180)=0x48)
ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000001c0)={'nr0\x00', {0x2, 0x4e21, @remote}})
r2 = accept4$rose(r0, &(0x7f0000000540)=@short={0xb, @remote, @remote, 0x1, @netrom}, &(0x7f0000000580)=0x1c, 0x80000)
ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000001700)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xfffa, @null, @bpq0='bpq0\x00', 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]})
r3 = socket(0x10, 0x80002, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000100e6ffffff1b0012000c00016e81000000179171ebe1319543527da3196f0d147cbe6676629813e1b4704f3bca8ee7df433b6148c79563e69c0cf17372"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xa, 0x4}, {0x5, 0xa}, {0x9, 0xc}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r8 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r3, &(0x7f0000000000)={0x90000020})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000240)=0x10)

05:08:12 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x40)
r1 = socket(0x0, 0x80000, 0x84)
r2 = socket(0x10, 0x80002, 0x0)
r3 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x90000020})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000000c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r6}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
ioctl$sock_proto_private(r7, 0x89e4, &(0x7f00000001c0)="4e59937158d404b8c0a4923024dfe1d1e1b1d39ef960cdf49463cceafcd40e519004b986b3e5b0b897065629b974fef16910e9bd4677b6cccce5ba28f6737d2945af0a370149806e3b1e6f17cde4fbde038b5c2dbbd30ef04061b5a8f0db23a9e27dda5f2c7ee3c00947344f77e9475c2422fddf09e9fadfc030b4f1c60cd0c1cb3f16704b66733915b29fb685b753738935887cb6d534e9be8c380763e177a29a44123071c64f8471585d1b45fa8940852361b937e2aa1b541d87e1c3")
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={<r8=>r6, 0xffffffff}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r8, 0x80}, 0x8)

05:08:12 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x1400000000000000}}], 0x40000000000020c, 0x0, 0x0)

05:08:12 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5e03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:12 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'hsr0\x00', {'veth0_to_bond\x00'}, 0x80})
socketpair(0x9, 0x1, 0x800, &(0x7f0000000d80)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$rose(r1, &(0x7f00000005c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40)
r2 = socket(0x10, 0x80002, 0x0)
r3 = epoll_create(0x9)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r5, &(0x7f0000000000)={0xb0002020})
setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "c58a985ec8e288c0", "ef1a9f1ced600e4515675768a75dc9f3", "71f79a60", "5eb96634ce9d4970"}, 0x28)

[ 1545.773402][T11024] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1545.822518][   T28] audit: type=1804 audit(1591160892.275:1278): pid=11028 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3591/cgroup.controllers" dev="sda1" ino=16371 res=1
05:08:12 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$kcm(0x29, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x840000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x1, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7f}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xe}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000002)

[ 1545.884065][T11031] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.5'.
05:08:12 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5f00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:12 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)=ANY=[@ANYBLOB="4c0000000200000000000073797a30008000000c000780080009400000000305000500020000000500010007000000"], 0x4c}}, 0x0)
r1 = accept(r0, &(0x7f0000000000)=@sco={0x1f, @fixed}, &(0x7f0000000080)=0x80)
ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={0x1, @bcast, @rose={'rose', 0x0}, 0x8, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x4, 0x8, [@default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r2, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:12 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000000)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2})
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:13 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x7000000)

05:08:13 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000000)=0x4, 0x4)
syz_init_net_socket$rose(0xb, 0x5, 0x0)

05:08:13 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5f01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:13 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x3f00000000000000}}], 0x40000000000020c, 0x0, 0x0)

05:08:13 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'wlan1md5sumeth1cpuset%cpuset'}, {0x20, '^eth1bdev)&vboxnet1@nodevvboxnet0cpuset@'}, {0x20, 'keyringeth1em0vboxnet1{wlan1wlan0eth0!eth1.'}, {0x20, 'trusted'}, {0x20, 'GPLem0vmnet0ppp1GPLcpuset'}, {0x20, '\xfa'}, {}], 0xa, "83abae800f0dc06c52027d0b8736ecd791603d3aa5b2bec7dc2873067ef26efe80e73c997264bcaf1bfe15999a00c6fef86b94d9c328260dcfef7ad435364df9893d89428f8741aed1e47de460e374a17abff2934ccf349e709709eea98f4cc04ccd3759bf493abf4eb6c5b0cf086e0b2afd927b74a1eade1b3ea59bbaa2ad242198d14a84dc3d14d8ff144a68ac695c68bf9b79d9f95dc700acdd7cd4e60810e1f7ffab2ab4"}, 0x148)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x1, 0x4, 0x600)
setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000440)=0x1, 0x4)

05:08:13 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r5}, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r5, 0x3, 0x5}, &(0x7f00000000c0)=0xc)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x81, &(0x7f0000000040)=0x2)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000001c0)=0x2, &(0x7f0000000200)=0x2)

05:08:13 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
getpid()

05:08:13 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
socketpair(0x4, 0x4, 0x4, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000040)={{0x6, @rand_addr=0x64010102, 0x4e22, 0x1, 'none\x00', 0x1, 0x3345, 0x7a}, {@rand_addr=0x64010101, 0x4e22, 0x10000, 0x479a, 0x100, 0x1000}}, 0x44)
socketpair(0xf, 0xa, 0x8000, &(0x7f00000001c0))
r2 = socket(0x10, 0x80002, 0x0)
r3 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x90000020})
sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f5, 0x8, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x810)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:13 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
r3 = socket(0x10, 0x80002, 0x0)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0xa, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x87}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4005)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x70000008})
setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000000)=0x101, 0x4)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0xd, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x20044000)
setsockopt$inet_dccp_int(r1, 0x21, 0x1, &(0x7f0000000040)=0x839, 0x4)

[ 1546.717061][   T28] audit: type=1804 audit(1591160893.165:1279): pid=11073 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3592/cgroup.controllers" dev="sda1" ino=16372 res=1
05:08:13 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5f02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:13 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x6000000000000000}}], 0x40000000000020c, 0x0, 0x0)

[ 1546.823452][   T28] audit: type=1804 audit(1591160893.215:1280): pid=11068 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3592/cgroup.controllers" dev="sda1" ino=16372 res=1
05:08:13 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40)

[ 1546.944181][   T28] audit: type=1804 audit(1591160893.245:1281): pid=11073 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3592/cgroup.controllers" dev="sda1" ino=16372 res=1
[ 1547.075786][   T28] audit: type=1804 audit(1591160893.525:1282): pid=11093 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3593/cgroup.controllers" dev="sda1" ino=16365 res=1
05:08:14 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x9000000)

05:08:14 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5f03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:14 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
getsockopt$rose(r1, 0x104, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

05:08:14 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000040))
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:14 executing program 5:
socket$rds(0x15, 0x5, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
getpeername$ax25(r0, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @default, @netrom, @bcast, @bcast, @bcast, @rose, @netrom]}, &(0x7f0000000080)=0x48)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r2, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast]}, 0x40)

05:08:14 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x8c00000000000000}}], 0x40000000000020c, 0x0, 0x0)

05:08:14 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6000}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:14 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
bind$isdn_base(r1, &(0x7f0000000380)={0x22, 0x7f, 0x0, 0x0, 0x80}, 0x6)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40)
r3 = socket(0x10, 0x80002, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
r5 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000000)={0x90000020})
sendmsg$xdp(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="5cfd7f44a32575abb481a30a77ecc926542a6728e925cdb02524519727400a7a4212a6739296e0d50a38bf396b2a2b86694f5604666469180b147120b666ee340eca9e0a9d96d6df0daa48854290af62e58eec67f26c62aabbe30c0db3eabf41d54638b874cc06e208358f40faf79f777ac554e08aefd7", 0x77}, {&(0x7f0000000100)="874c85519140ef433e9d976af0362c9dca5313adbbcbb777cb58a5aaab9a93a1bc3235f7d0bf2bdbeb17e14b848237a3e9085619dd6fe19e89a23ab2d6f2aaadaf8a5767ccd65e9bf5084ed1a3bd993072b058fd611442aed54b8214ab891b72cf4af1a9105bcca18c3b32440a2a4f9766", 0x71}, {&(0x7f0000000180)="52112b447d5ac0bddc7cf9b402d21a638a9a3208f3eba9eb6a2e81b72744caf94c5df5b746250fcc02b6806081f3e7fb8aa096afd8650a76355dfd171e2645950d3dde68276ac1651463172dd5dbd34c78fc513f69b602a97ffe257b1d54c95c", 0x60}, {&(0x7f0000000200)="53a0c44bac79b8d6df8cfad04add9e403b19e4bc72c44142677f18e926627ca7fd354cb1c7b9297d56fc51ff03593dc22e8484c0ea58633f2cbeb2ec53e7a3425081ec5931d4cbff469c7af4c930e3859ad1cd3cfaafe9e061a2a50e45ccc8082e84ab2f4686d84e629f0b1a7acdac5bd91e192cb584752b7fef5410e3705310b6d26eb8b23c3132d00640202ff84a1951d93a10e084ae3f0914c2875be3d6958a65b8c3e011201fa3017062b0fa34bbbdd9", 0xb2}, {&(0x7f0000000600)="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", 0x1000}], 0x5, 0x0, 0x0, 0x4000}, 0x20040080)
r6 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r3, &(0x7f0000000000)={0x90000020})
connect$rose(r0, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000000)=0x80, 0x4)

05:08:14 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
socketpair(0x25, 0x2, 0x0, &(0x7f0000000100))
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1404, 0x0, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

[ 1547.708172][   T28] audit: type=1804 audit(1591160894.165:1283): pid=11114 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3594/cgroup.controllers" dev="sda1" ino=16363 res=1
05:08:14 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40)

05:08:14 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:14 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000140)={'netpci0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00')
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x48800)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:14 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0xa000000)

05:08:14 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@rand_addr, @initdev}, &(0x7f0000000040)=0x8)

05:08:14 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = socket(0x10, 0x80002, 0x0)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f0000000340)={0x6, 0x3, 0x9, @multicast, 'vxcan1\x00'})
recvmsg$kcm(r1, &(0x7f0000000300)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/119, 0x77}, {&(0x7f0000000100)=""/198, 0xc6}], 0x2, &(0x7f0000000240)=""/163, 0xa3}, 0x40010101)

05:08:14 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6002}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:14 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
getsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000000), &(0x7f0000000040)=0x4)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:14 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0xc00e000000000000}}], 0x40000000000020c, 0x0, 0x0)

05:08:15 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6003}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:15 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/115, 0x73}], 0x1, 0x8)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
setsockopt$rose(r1, 0x104, 0x6, &(0x7f0000000100)=0x1, 0x4)
setsockopt$rose(r1, 0x104, 0x0, &(0x7f0000000000)=0x6, 0x4)

05:08:15 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
socketpair(0x1f, 0x3, 0xe00000, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0xa, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x8, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0xe, 0x6, 0x801, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x815}, 0x20000040)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r4, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:15 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="19cc04bc60795a50d6cdae5dc8121cf980e8236d59557f56ac9a24a3b8a60b9810c160bef002f06b987a364614df4026fbec60a61b939b01f1369cfad976eea5fd79b521204cf1c2a56f237054e306a4259a26d365492e53466dd241b92263e72a366f1ba7003e645a8914fca6ab54215e5d6a0b", 0x74}, {&(0x7f0000000080)="59066b07183a66f204933947f6801ab0ae89a79aac9603fbf9e1e07772dcc727f4f3de2d1412d730c7867f34bd6bd77ab1d7c577e34e1f9c2ba9897ee7b931d6dd5bdcc9909dc778357cefaf0e8da5883490cba1a51aa2f95591b825be8bcdc9f5f6e3a5b03fd5b3400699808ea60bf09e70250a39f1253ffc7192748dcebd658f9be80ae4d94e7be7afaa8b569737cb123dcd08ec25e03ba4b5167f0bf42d5367a4a9ec5aa3ded83ab04ba372bfe3b6a6630dcae2172dcf51378882d84822109f910c3fe0", 0xc5}, {&(0x7f0000000180)="8c9bf63f5e24e452638da7f494c4f7fa659bf6c7b0285613cf8eb11c4163cc33f890484c47fc4b74f2de25d6bc13020d384fd60269d98453ade8af4881040b1bbf481e34122d42bb19506bf58de9727a3ce86f840c7c9485", 0x58}, {&(0x7f0000000200)="9350a72003d28315b8e71ba15f2927edf51d8678504b8d2e2d76b6f21a73abc872ffc1c8dbe95390c5691229e21c28f0f56b2bd1aa8926b458cb67917990", 0x3e}, {&(0x7f0000000240)="b58dfd08cea219444843d1f1b2d0f29cdb690bedc52c196c6886c6578ed01138fd3f1a7841ab432c60d1419aae9be85c4b4e16f13282", 0x36}], 0x5}, 0x4000004)

[ 1548.671934][   T28] audit: type=1804 audit(1591160895.115:1284): pid=11151 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3595/cgroup.controllers" dev="sda1" ino=16382 res=1
05:08:15 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6100}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:15 executing program 0:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r0, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100736974001400028008000100b06507e11854f508b81a1e3182babc4e6f8be374967268617b38b6c0d99c6cc24a903f0dd0d598dc278cf4fd7128beba3018e5b019405a6e147c520658c53dc8b22aeb721dbd3ee2859d095feb52359fab751df25a586a195f9beb2e86dec6bc6f187fe2420f3b318f25d2f1eaddd142d2e2c0bcf5d47e46ed16f9357627ef8cba227a5a2c6055f3c6700c5d62d05c84b5013aebb61c3cce1da570b0daa3", @ANYRES32=r0, @ANYBLOB="08000300ac1414aa"], 0x40}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', <r1=>r0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)={0x25c, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x8001}, 0x2000000)

[ 1548.901216][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1548.985402][T11171] 8021q: adding VLAN 0 to HW filter on device bond45
[ 1549.054165][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1549.157666][T11171] 8021q: adding VLAN 0 to HW filter on device bond46
[ 1549.201424][T11179] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1549.248571][T11208] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
05:08:15 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0xe000000)

05:08:15 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:15 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = socket(0x10, 0x80002, 0x0)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
bind$x25(r3, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12)
ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}})
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
read(r0, &(0x7f0000000000)=""/179, 0xb3)

05:08:15 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0xffffff7f00000000}}], 0x40000000000020c, 0x0, 0x0)

05:08:15 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6101}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:15 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00')
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac09}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x40810)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100), 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="02000000", @ANYRES32=<r6=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000000c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r6}, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000e80)={<r7=>r6, 0x2}, &(0x7f0000000ec0)=0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000fc0)=[{&(0x7f0000000280)=@in={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f00000002c0)="8f26460cff72eb3748b6e06a64a8429a1e6b9a7782823639caac02ee3066189385b8e5180202684bed9e44d98af877cc02cf090756d2aa5960ddd9ea60c8d20d2144aaae4f10328a624a8f0338957c0ea7edcbe1a58c6d8ee02c1367cce8eceff6ff43f91fbe5be0820911e666ded27dc663e3a92761e970b6629fe63425c0e46dbd5fd167440fce9dd5479759acc3d75f7fbfccc1971a663933f951c791601742", 0xa1}], 0x1, &(0x7f00000010c0)=ANY=[@ANYBLOB="18000000000000008400000000000000085f25ff0004010018000000000000008400000007000000ffffffff00000000300000000000000084000000010066ff5aff49900d4a2b580000ffff7f00010000000400000000000000070000000400000021d0ffff", @ANYRES32=0x0], 0x60}, {&(0x7f0000000440)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000480)="4b3100723ebf054b3e5856e7f82e525b9117e8afb7e8592c4d72d00f0c81ece85a55e06af7b23f98d2d5f54e25acbcc5471299f428ddb10bd7004bafc73e6c0177175710af2a7858555511967c402ba6dcd2f863cc2a94f81572181f6b42f1c3268fa81a30397203da1d23422af12b0efa90d4c3ef32f190", 0x78}, {&(0x7f0000000500)="291ae534d654a536aa571732e77c6770a40e9a4316aa02af0b50708d1d67b24a5c8e4ab8191046ba9fa2f3f44b4f056c107f2147efcd9f102a72a2e02efbb443bd547edcefa9baafdc23f88f", 0x4c}, {&(0x7f0000000600)="ed6d2c2800fc8a9effef521339008768fefa4df55acb7a10d8f9e84f4cc9ed3c9d69a0a35f3b67a0dcbe551e2231c538d9772d1617c44226467f0c16c3a1c0c4f53be063e8659f0a40d003bb9331409707a21fcf6e2af06f2a2059a7e232fe5398daecc8c6417505c0caf8bc2c5b9fc6e0fe7e18720d8f529a6d8aff786a9d44402fb13f2c7c9b89d2555cd37c7e9bfe236f84cabe5c153c7630d5a71dab1278a93032022f2eb38cd6698ce702e086be86096bdac37468bc69267f480dc503fb97c69e95a788e64613ce028bd8c12f93b467", 0xd2}, {&(0x7f0000000580)="27ac75cad0204c86899e1f07e7f01808956446a985de6aea51b7d118660f2d49255596e9a60b2c0a027cb845811513b9cfb6", 0x32}, {&(0x7f0000000700)="459e4158eead2da21c17e082b2531f29138eedceb333abd97a266f4d19", 0x1d}], 0x5, &(0x7f00000007c0), 0x0, 0x2004c004}, {&(0x7f0000000800)=@in={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000840)="b5405762259a6352f97cb440e42e7e55", 0x10}, {&(0x7f0000000880)="05c7414bf229c7a4b27281c2572d1b0bc9c3ed42e9da53ababc2b202c37cba6a9f8739b877ad9cfc1115611ebbd6f1e61b9ed7264f73feec2e192ed46b1de388b6b21fea8a8393f7ce1ccb7fd4b67c0cabb627a00b8702b092043054e5c6", 0x5e}, {&(0x7f0000000900)="050a961fa03e57c2f97ae42e16412931a8f7600efaa4d996fbb4459bfcb73e7229e2db2e240d61d9bf506dc46fdb1342573b3b44b52959d8d9fdbd80adc9e15f674ae90e74ec5282347885bec05e513b3d5f2e8b85615f7099a0ab5481fd", 0x5e}, {&(0x7f0000000980)="32408093d4c43606202ce14f01723a642f41abe4d924ce79e4f30020648b5fcf0571d8", 0x23}, {&(0x7f00000009c0)="5a2b2a05baef787578224dc3da950d13b3aae9e68478b33ba5587f65dd63d2769c9030f86b91cfe1ffa8277db3920686fad095b38790079339dfdab2840f21d2b8c18554c28871f54a036f9f5781ee6cffcca8935e52de9305eb0c0117bf9d1e46d5fb61d2beb5bd757e78605f8f445eef8b49261f9b967a8bc32835305e21703b917c9bf129067d5c9d318631a87293b49575f97f2c3ab1aefc6654754b70d5ae3d195f5814a6e8717559108fbbfb76edc1c231f482f5e57e1d1bb0a4001f4fd920e6", 0xc3}, {&(0x7f0000000ac0)="459080f40ed2cf5587bb540e0d3ab55274c61df46f87da004f327fbc202a4a7489e581522bc7a4c73d5aa3a0f072e4b367678168ad549741ce7f30fa84e76fb865e6a17289d52880a06609f86d82f3671c1b919002cf762eb537264198b899b8248db5ccc7cd7f02f6e5a27e22798ecd4d11c951876d45adeedd8bbe", 0x7c}, {&(0x7f0000000b40)="559b57bcbc0e964c6c47536db930a2dfcad46b41115367ad7ae1851ce5c9b9489faa41b89f4e5ffb9473de03745350924b1dbb85b6c96b8a2734f6d1714da0543ba75f3d790612108309cc32ed934017ac94a6059555a934cea584a816b431cf7012564f8523b6c873379feedd12847c3b9c5c9b905fe39422b2ca93b94097e8708fa19ba6bd2637a6b1b1530974cb880f27a3958a8b2e730dac4ab4cef23b50f77ca56e15547d817fd9e62e3402bc2701b3fc0e632e5aecb1281719f30eb5e1c0c6aabebda3f10ac09ba6592db80594389ac54e", 0xd4}], 0x7, &(0x7f0000000cc0)=[@init={0x18, 0x84, 0x0, {0x0, 0x0, 0x2, 0x800}}, @init={0x18, 0x84, 0x0, {0xffff, 0x8, 0x8, 0xffff}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @authinfo={0x18, 0x84, 0x6, {0x2}}], 0x60}, {&(0x7f0000000d40)=@in6={0xa, 0x4e24, 0x6, @loopback, 0x4}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000d80)="8fd52dfcbb8d953006cc4e32fcda509938042bc2cd0a106e336dbfe2612d1d63ad347cfe91ae2fc76624d5305ccee03e182b8a223156c28eb84255c988a1dfaa7434ad2b223aa55051a91383ad0318415b863a7666927d74ea3ee44332f811da13f1bf73d980a255dce060327eeb1b65c4dbee845816ec42d0a466f58f8c8341c711bdd7e5a160e02ac771688b", 0x8d}], 0x1, &(0x7f0000000f00)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @init={0x18, 0x84, 0x0, {0x101, 0x2, 0x1000, 0x3ff}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x0, 0x653, 0x1}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0xd2, 0x4, 0x5, 0x5, 0x44, 0x8000, 0x9, r7}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x25}}], 0xb8, 0xc000}], 0x4, 0x1)
pread64(r0, &(0x7f0000000080)=""/138, 0x8a, 0x4)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40)
r8 = socket(0x10, 0x80002, 0x0)
r9 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000000)={0x90000020})
setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f0000000000)="20b3dc0b6c9c0e23c86a541bbbd5ea65610d67a20033a8efed96c9aacb3843727e16548015c06c5a4b3667363eb930ff27372cac768c8e51f7aa86f702747242ae151c1a504b33a88182f73e1033d53eee712602e397d043863571b9ec4453aa", 0x60)

05:08:16 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6102}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:16 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00')
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}}, 0x4814)

05:08:16 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
ppoll(&(0x7f0000000000)=[{r0, 0x2}, {r1, 0x1c00}], 0x2, &(0x7f0000000040), &(0x7f0000000080)={[0x5]}, 0x8)
r2 = getpid()
syz_open_procfs$namespace(r2, 0xfffffffffffffffd)
syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/pid_for_children\x00')

05:08:16 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)=ANY=[@ANYBLOB="580000000206010000000000000000000000000011000300686173683a69702c6d6103000000000005000400000000000900020073797a30000000000c000780080012400000000005000500020000000500010007000000"], 0x58}}, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'dummy0\x00', {}, 0x1})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000000c0)={0x87, 0x1, [], [@jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x8}]}, 0x18)
mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r2, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40)

[ 1549.602382][   T28] audit: type=1804 audit(1591160896.045:1285): pid=11261 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3596/cgroup.controllers" dev="sda1" ino=16362 res=1
05:08:16 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6103}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1549.694007][T11270] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
05:08:16 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6200}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1549.880817][T11270] 8021q: adding VLAN 0 to HW filter on device bond22
[ 1549.935765][T11270] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
05:08:16 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6201}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:16 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40)
getpid()
getsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

05:08:16 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0xf000000)

05:08:16 executing program 5:
bind$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/40, &(0x7f0000000040)=0x28)

05:08:16 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0xffffffff00000000}}], 0x40000000000020c, 0x0, 0x0)

05:08:16 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
socket$packet(0x11, 0x2, 0x300)

05:08:16 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
getsockname$tipc(r1, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x10)
r3 = socket(0x10, 0x80002, 0x0)
r4 = epoll_create(0x9)
socketpair(0x27, 0xa, 0xce2a, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000140)=0x1, 0x4)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
recvfrom$phonet(r3, &(0x7f0000000000)=""/107, 0x6b, 0x80, 0x0, 0x0)

05:08:16 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6202}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:16 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

[ 1550.459841][   T28] audit: type=1804 audit(1591160896.905:1286): pid=11332 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3597/cgroup.controllers" dev="sda1" ino=16379 res=1
05:08:17 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6203}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:17 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
pwrite64(r2, &(0x7f0000000400)="4ebefa1e923f1e018b6e53bf4815b78e1f2ef9212b93090c1ff6b35c208d50aef3fd759f995b53dd37c58cf8332b8a6b66575478e02ef0145bf122ba2e2c53a7ec45e375683475a6495f8d7b7a088f5e32dc266569074319bf8c8d3d8007cc92e2ba0d9082c41b63e330f353a3f675a98d2e74a08e38400f7f5eb113a0e25fd90115d57a7acdcab1128cf4f9c719f3f29d460c507f8a2a6594d259217d32eae9be93c6ed17a67ae2e7e689a31fa8449da12fd62bf423cff702b09e6ee1ff0e698b8bb517819eb712ba2b34b54b28b79d9399d920d5a5507e8a85f37060dfe3051f06f8d7cc9b068495ee5d5fcce85410bcd9f91d1f198353ce94b2e03370e43875c1a035bb88fd26fbb5b1252e2056d6b67e2b2f424051a40ad9170e76a81a6ca4f149ff643db76f8f2c1aa8024a6279952027489bbad6479e47ea5ba9e47d8136df398665f6cdfd15e93cfbf2ce1151afe9321ed63fe7100e704b232646fc1e0e936b90cceaaa70225ce71640e10316d2cc637355eddb3c4e16ff1635fa4e65a66eb5ab2cbf9d6f063e05f0e46fcc14bf31eedfb9f33c215fc14946cc6f7493924442e939f71ac4bd3e35e78857f9624c663f3669a47a7146e3249ee3eaaf681f371d515af5b934f9252c7ac2a164bf318fc2b194ee087b2b28ed5e4618c0906fc3f32c43a3b9e08a2e0d509f65a7de909e8c3c535f1d8cb9c236716e5ad709", 0x200, 0x0)
r3 = socket$pptp(0x18, 0x1, 0x2)
ioctl$FICLONE(r2, 0x40049409, r3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
pwrite64(r4, &(0x7f0000000400)="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", 0x200, 0x0)
r5 = socket$pptp(0x18, 0x1, 0x2)
ioctl$FICLONE(r4, 0x40049409, r5)
r6 = socket(0x10, 0x80002, 0x0)
r7 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000000)={0x90000020})
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x0, 0x0, "c948b2c881f3796be791dceae89e495a0df7afca6d53bf55085bc49d9c7e338ba335a1cc01a542bbb2586c0089825e656ab33ce48e4c12eb5271d2cf237a77659dc8b6aadcb2a1c6b96cb567aee9cd1b"}, 0xd8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={r1, r2, 0xf, 0x1, r4}, 0x14)

05:08:17 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000600)={0x0, 0x201, [], [@jumbo={0xc2, 0x4, 0x3f}, @generic={0x20, 0x1000, "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"}]}, 0x1010)

05:08:17 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6300}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:17 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6301}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:17 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x10000000)

05:08:17 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}], 0x40000000000020c, 0x0, 0x0)

05:08:17 executing program 0:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x400, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x48c0)
r3 = socket(0x10, 0x80002, 0x0)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r8=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000180)=0xb0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r8}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000180)={r8, @in6={{0xa, 0x4e20, 0x800, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x127e}}, 0x200, 0x1000, 0x101, 0x9, 0x4, 0x6, 0x1}, &(0x7f0000000240)=0x9c)
accept4$netrom(r3, 0x0, &(0x7f0000000140), 0x80000)
ioctl$sock_inet_SIOCGIFPFLAGS(r7, 0x8935, &(0x7f0000000280)={'veth0_macvtap\x00'})

05:08:17 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6302}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:17 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = socket$netlink(0x10, 0x3, 0x15)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0xf8, r4, 0xdf, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6}}]}, 0xf8}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000006b00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000006ac0)={&(0x7f0000006640)={0x464, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xa5}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xa4c}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x74c22111}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xffff}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x464}, 0x1, 0x0, 0x0, 0x4004}, 0x8000)
sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xe8, r4, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000010}, 0x804)

05:08:17 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x7ff, {{0x2, 0x4e22, @rand_addr=0x64010100}}}, 0x88)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r2 = socket(0x10, 0x80002, 0x0)
r3 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x90000020})
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000100)={{0x2, 0x4e21, @local}, {0x0, @random="4e46aaff3668"}, 0x40, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip6erspan0\x00'})

05:08:17 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)=0x7, 0x4)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0xaf4, 0x4)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:17 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6303}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:17 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6400}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1551.384297][   T28] audit: type=1804 audit(1591160897.826:1287): pid=11371 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3598/cgroup.controllers" dev="sda1" ino=16379 res=1
[ 1551.435198][T11382] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:08:17 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6401}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1551.496098][T11382] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
05:08:18 executing program 0:
r0 = socket$inet(0x2, 0x4, 0x8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000000c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x8}}, &(0x7f00000001c0)=0xb0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r3}, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e20, 0x401, @local, 0x7}}, [0x5, 0x1, 0x3, 0x100000000, 0x7, 0x6, 0xfffffffffffffe00, 0x1ff, 0x3, 0x1, 0x5, 0x6, 0x5, 0xbf4, 0x9]}, &(0x7f0000000100)=0x100)
syz_init_net_socket$rose(0xb, 0x5, 0x0)

[ 1551.589315][T11382] 8021q: adding VLAN 0 to HW filter on device bond35
[ 1551.612230][T11427] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:08:18 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
pwrite64(r0, &(0x7f0000000400)="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", 0x200, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
ioctl$FICLONE(r0, 0x40049409, r1)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100))
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r2, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r3 = socket(0x10, 0x80002, 0x0)
r4 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x90000020})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00')
sendmsg$FOU_CMD_DEL(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$FOU_CMD_DEL(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0xe73ef36073b8b9e2)

[ 1551.635820][T11430] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
05:08:18 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe0000000900020073797a3000000000080009"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x47fe1, 0x20000000)

05:08:18 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6402}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:18 executing program 3:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
r1 = epoll_create(0x9)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x90000020})
bind$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)

05:08:18 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = accept4$x25(r1, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x80000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
pwrite64(r4, &(0x7f0000000400)="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", 0x200, 0x0)
r5 = socket$pptp(0x18, 0x1, 0x2)
ioctl$FICLONE(r4, 0x40049409, r5)
openat$cgroup_ro(r4, &(0x7f00000000c0)='rdma.current\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
pwrite64(r6, &(0x7f0000000400)="4ebefa1e923f1e018b6e53bf4815b78e1f2ef9212b93090c1ff6b35c208d50aef3fd759f995b53dd37c58cf8332b8a6b66575478e02ef0145bf122ba2e2c53a7ec45e375683475a6495f8d7b7a088f5e32dc266569074319bf8c8d3d8007cc92e2ba0d9082c41b63e330f353a3f675a98d2e74a08e38400f7f5eb113a0e25fd90115d57a7acdcab1128cf4f9c719f3f29d460c507f8a2a6594d259217d32eae9be93c6ed17a67ae2e7e689a31fa8449da12fd62bf423cff702b09e6ee1ff0e698b8bb517819eb712ba2b34b54b28b79d9399d920d5a5507e8a85f37060dfe3051f06f8d7cc9b068495ee5d5fcce85410bcd9f91d1f198353ce94b2e03370e43875c1a035bb88fd26fbb5b1252e2056d6b67e2b2f424051a40ad9170e76a81a6ca4f149ff643db76f8f2c1aa8024a6279952027489bbad6479e47ea5ba9e47d8136df398665f6cdfd15e93cfbf2ce1151afe9321ed63fe7100e704b232646fc1e0e936b90cceaaa70225ce71640e10316d2cc637355eddb3c4e16ff1635fa4e65a66eb5ab2cbf9d6f063e05f0e46fcc14bf31eedfb9f33c215fc14946cc6f7493924442e939f71ac4bd3e35e78857f9624c663f3669a47a7146e3249ee3eaaf681f371d515af5b934f9252c7ac2a164bf318fc2b194ee087b2b28ed5e4618c0906fc3f32c43a3b9e08a2e0d509f65a7de909e8c3c535f1d8cb9c236716e5ad709", 0x200, 0x0)
r7 = socket$pptp(0x18, 0x1, 0x2)
ioctl$FICLONE(r6, 0x40049409, r7)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0)
ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f0000000100)=r6)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x2)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:18 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
epoll_create(0x9)
r2 = socket(0x10, 0x80002, 0x0)
r3 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x90000020})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000100)={0x80002039})
bind$rose(r1, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'gre0\x00', {0x2, 0x4e21, @remote}})
r5 = socket(0x10, 0x80002, 0x0)
r6 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000000)={0x90000020})
getsockopt$llc_int(r5, 0x10c, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

05:08:18 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df0000003ce9000500010007"], 0x1}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000001)
recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x40000000000020c, 0x0, 0x0)

05:08:18 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00')
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}]}, 0x48}}, 0x80)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000180)={0x9, 0x10000, 0x5, 0x2, 0xa, [{0x2, 0x7f, 0x1000, [], 0x200}, {0x9, 0x5, 0x6, [], 0x2}, {0x7fde, 0x1ea2, 0xffff, [], 0x401}, {0x4, 0x8, 0xfffffffffffffff9, [], 0x4}, {0x2, 0x6, 0xfffffffffffffffc, [], 0x2c8b}, {0x2, 0x9, 0x100000001, [], 0x608}, {0x80000001, 0x7, 0x2}, {0x82f, 0x5, 0x5, [], 0xa82}, {0x1000, 0x48, 0x47c1573b, [], 0x3400}, {0xffffffffffff8001, 0x1, 0x2, [], 0xb01}]})
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)

05:08:18 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6403}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1552.280375][   T28] audit: type=1804 audit(1591160898.726:1288): pid=11454 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir854449400/syzkaller.gzoiTA/3599/cgroup.controllers" dev="sda1" ino=16384 res=1
05:08:18 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELSET={0xa0, 0xb, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0x84, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x58, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb19}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_DELOBJ={0x3c, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x104}, 0x1, 0x0, 0x0, 0x4000001}, 0x200080c2)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
r3 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x90000020})
ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000280))
ioctl$sock_proto_private(r1, 0x89ee, &(0x7f0000000000)="6d77ce3cb5fef362f95f2dc26aa3e30d7535aa94d650ae79f8d1e4bf73da050ee3368e49f2fee62644cc4edb632ea7c382638cf52bbf85fc3020e07d")

05:08:18 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
connect$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)
r1 = socket(0x10, 0x80002, 0x0)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x90000020})
connect$netrom(r1, &(0x7f0000000040)={{0x3, @bcast, 0x4}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48)

05:08:18 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6500}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

05:08:19 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6501}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

[ 1552.677021][    C0] general protection fault, probably for non-canonical address 0xdffffc000000006a: 0000 [#1] PREEMPT SMP KASAN
[ 1552.688777][    C0] KASAN: null-ptr-deref in range [0x0000000000000350-0x0000000000000357]
[ 1552.697201][    C0] CPU: 0 PID: 11477 Comm: systemd-udevd Not tainted 5.7.0-rc7-syzkaller #0
[ 1552.705788][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1552.715965][    C0] RIP: 0010:rose_send_frame+0x1dd/0x2f0
[ 1552.721524][    C0] Code: 48 c1 ea 03 80 3c 02 00 0f 85 06 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 6b 20 48 8d bd 50 03 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 ea 00 00 00 4c 8b bd 50 03 00 00 e9 77 fe ff ff
[ 1552.741133][    C0] RSP: 0000:ffffc90000007b00 EFLAGS: 00010206
[ 1552.747205][    C0] RAX: dffffc0000000000 RBX: ffff888099ec4400 RCX: ffffffff86fecf03
[ 1552.755182][    C0] RDX: 000000000000006a RSI: ffffffff86fed072 RDI: 0000000000000350
[ 1552.763207][    C0] RBP: 0000000000000000 R08: ffff88809d6ca040 R09: ffffed100d2f559d
[ 1552.771195][    C0] R10: ffff8880697aace3 R11: ffffed100d2f559c R12: ffff888099ec4400
[ 1552.779174][    C0] R13: 0000000000000078 R14: ffff88809b184500 R15: 0000000000000010
[ 1552.787157][    C0] FS:  00007f05c71338c0(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000
[ 1552.796089][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1552.802679][    C0] CR2: 00007ffdbfcd9cb8 CR3: 00000000537a6000 CR4: 00000000001406f0
[ 1552.810794][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1552.818773][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1552.826744][    C0] Call Trace:
[ 1552.830032][    C0]  <IRQ>
[ 1552.832903][    C0]  rose_transmit_clear_request+0x1de/0x290
[ 1552.838721][    C0]  ? lockdep_hardirqs_on+0x196/0x620
[ 1552.844026][    C0]  rose_rx_call_request+0x488/0x1960
[ 1552.849330][    C0]  ? rose_release+0x4f0/0x4f0
[ 1552.854028][    C0]  rose_loopback_timer+0x15d/0x470
[ 1552.859225][    C0]  call_timer_fn+0x1ac/0x780
[ 1552.863831][    C0]  ? rose_link_rx_restart.cold+0xa3/0xa3
[ 1552.869471][    C0]  ? timer_fixup_init+0x60/0x60
[ 1552.874419][    C0]  ? lock_downgrade+0x840/0x840
[ 1552.879281][    C0]  ? rcu_read_lock_sched_held+0x9c/0xd0
[ 1552.884837][    C0]  ? rcu_read_lock_any_held.part.0+0x50/0x50
[ 1552.890833][    C0]  ? _raw_spin_unlock_irq+0x1f/0x80
[ 1552.896043][    C0]  ? rose_link_rx_restart.cold+0xa3/0xa3
[ 1552.901687][    C0]  run_timer_softirq+0x623/0x1600
[ 1552.906728][    C0]  ? add_timer+0x830/0x830
[ 1552.911155][    C0]  ? rcu_read_lock_sched_held+0x9c/0xd0
[ 1552.916841][    C0]  ? rcu_read_lock_any_held.part.0+0x50/0x50
[ 1552.922836][    C0]  __do_softirq+0x26c/0x9f7
[ 1552.927350][    C0]  irq_exit+0x192/0x1d0
[ 1552.931522][    C0]  smp_apic_timer_interrupt+0x19e/0x600
[ 1552.937080][    C0]  apic_timer_interrupt+0xf/0x20
[ 1552.942021][    C0]  </IRQ>
[ 1552.944968][    C0] RIP: 0033:0x7f05c5fa6295
[ 1552.949382][    C0] Code: 00 00 00 e8 5d 01 00 00 48 83 c4 18 c3 0f 1f 84 00 00 00 00 00 83 ff 01 48 89 f0 77 30 48 89 c7 48 89 d6 b8 04 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 03 f3 c3 90 48 8b 15 d1 db 2b 00 f7 d8 64 89
[ 1552.968990][    C0] RSP: 002b:00007ffc7b695258 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[ 1552.977412][    C0] RAX: 0000000000000000 RBX: 0000000000000124 RCX: 00007f05c5fa6295
[ 1552.985393][    C0] RDX: 00007ffc7b695260 RSI: 00007ffc7b695260 RDI: 00007ffc7b695310
[ 1552.993373][    C0] RBP: 00007ffc7b695390 R08: 000000000000c0c0 R09: 0000000000000000
[ 1553.001351][    C0] R10: 00007ffc7b6953c0 R11: 0000000000000246 R12: 00007ffc7b6953c0
[ 1553.009326][    C0] R13: 00007ffc7b6953c0 R14: 000055dfc9034a90 R15: 000000000000000e
[ 1553.017303][    C0] Modules linked in:
[ 1553.021289][    C0] ---[ end trace a26339fb79ec2012 ]---
[ 1553.026892][    C0] RIP: 0010:rose_send_frame+0x1dd/0x2f0
[ 1553.032440][    C0] Code: 48 c1 ea 03 80 3c 02 00 0f 85 06 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 6b 20 48 8d bd 50 03 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 ea 00 00 00 4c 8b bd 50 03 00 00 e9 77 fe ff ff
[ 1553.052096][    C0] RSP: 0000:ffffc90000007b00 EFLAGS: 00010206
[ 1553.058218][    C0] RAX: dffffc0000000000 RBX: ffff888099ec4400 RCX: ffffffff86fecf03
[ 1553.066198][    C0] RDX: 000000000000006a RSI: ffffffff86fed072 RDI: 0000000000000350
[ 1553.074218][    C0] RBP: 0000000000000000 R08: ffff88809d6ca040 R09: ffffed100d2f559d
[ 1553.082239][    C0] R10: ffff8880697aace3 R11: ffffed100d2f559c R12: ffff888099ec4400
[ 1553.090260][    C0] R13: 0000000000000078 R14: ffff88809b184500 R15: 0000000000000010
[ 1553.098275][    C0] FS:  00007f05c71338c0(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000
[ 1553.107243][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1553.113834][    C0] CR2: 00007ffdbfcd9cb8 CR3: 00000000537a6000 CR4: 00000000001406f0
[ 1553.121871][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1553.129902][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1553.137919][    C0] Kernel panic - not syncing: Fatal exception in interrupt
[ 1553.146466][    C0] Kernel Offset: disabled
[ 1553.150793][    C0] Rebooting in 86400 seconds..