: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) getsockname(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x80) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000)="930104eb1082ac790000", 0xfffffffffffffdbe, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)=""/90, 0x200002da}], 0x1}, 0x0) 04:45:18 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0xf00}, 0x0) 04:45:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e2a1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x0, 0x40030000000000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r4, r3, 0x0, 0x7fffffff) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r5, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r5, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x800}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x32000}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x6}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x1}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x1}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0xd14981f645ec9b5b}, 0x40) 04:45:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0xe, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:18 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x1028}, 0x0) 04:45:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) getsockname(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x80) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000)="930104eb1082ac790000", 0xfffffffffffffdbe, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)=""/90, 0x200002da}], 0x1}, 0x0) 04:45:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0xf, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:18 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x2810}, 0x0) 04:45:18 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x10, 0x5, 0x400004) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/169, &(0x7f0000000000)=0xa9) accept$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x3}) [ 1634.520857][T30663] IPVS: ftp: loaded support on port[0] = 21 04:45:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x60, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:19 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x10d000000) 04:45:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x6000}, 0x0) 04:45:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) getsockname(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x80) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000)="930104eb1082ac790000", 0xfffffffffffffdbe, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)=""/90, 0x200002da}], 0x1}, 0x0) [ 1634.648893][T30663] virt_wifi0 speed is unknown, defaulting to 1000 04:45:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0xf0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1634.804618][T30677] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:45:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e2a1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x0, 0x40030000000000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r4, r3, 0x0, 0x7fffffff) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r5, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r5, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x800}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x32000}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x6}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x1}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x1}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0xd14981f645ec9b5b}, 0x40) 04:45:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0xf000}, 0x0) 04:45:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x300, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="a9d151a001660c25ff2b672f32cb932e3fd93f1393ffce84fc0dc59c30514874f655c179cac83d26e1d53510fae37dd7d9cb411bbd9ecfa84e6862c627b91e9ca311fc48250e415d81fcc84d687c5743e203a82806c18fa4732fd41809ab221be8fb96d9111a58bcf64effdc41209396c7906250e7955802b0bc5d4f336abff6812871964d4e7d1195f4994b9165987bf237a3f72ccee7e9ad127bef53aeb79275d088bbc9e5dbfc3a3d191ace389aaa8c", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={r3, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, [], 0x1}, 0x4}]}, &(0x7f0000000400)=0x10) sendfile(r1, r0, 0x0, 0x800000000000c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0', [{0x20, '^-'}, {0x20, 'memory.events\x00'}, {0x20, 'memory.events\x00'}, {0x20, 'keyringwlan1{'}, {0x20, 'memory.events\x00'}], 0xa, "cda44301e35f6ea70565eb521dd18e8331cc9cdc9553d8ee5d85c22372ad4b9cd509bf542d6943a89ac7f0a5cd01ffc671f4afd52f9209dfb706a9a6ef38a967c34a000e6aa52f4a78b569fa02527b598a39c56ad5eeeacb5d65f04751f1caca27b2b1f3608c09e7c2d66a18c484aee2d1b950a92e2214ac483a01233932e93608ed16149749e38d21e1ec3f5fe7386c1ae8dd8bf7a53c09db4ca9722d602042d31b503111a45053d271dfbf35e1b22d112c4601c79e1e72bbabf385d2c47cfb0af70fe9fc7425a0"}, 0x111) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="000000000000000029f2d576b9da176a6277a4272e367ec02ee6c0655b3570f4fb2257bdc89196307010a640ee10580721e2977250d9c50f66c966d2a80a4ff5ed5a12b376ea96b69ee4dc81f072ba2bbdcef6e41d0b0d0d6f88578941eccfebe23a6800"/109, @ANYRESOCT, @ANYRES64], 0x20}, 0x1, 0x0, 0x0, 0x8003}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100)=0x1, 0x4) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r5, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 04:45:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0xf0ffff}, 0x0) 04:45:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x500, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1635.258690][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1635.258707][ T29] audit: type=1804 audit(1595565919.706:1257): pid=30679 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir719995947/syzkaller.dr8BjT/1233/cgroup.controllers" dev="sda1" ino=15856 res=1 [ 1635.312042][T30696] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1635.527158][T30669] IPVS: ftp: loaded support on port[0] = 21 [ 1635.620314][T30669] virt_wifi0 speed is unknown, defaulting to 1000 04:45:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x1000000}, 0x0) 04:45:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e2a1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x0, 0x40030000000000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r4, r3, 0x0, 0x7fffffff) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r5, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r5, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x800}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x32000}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x6}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x1}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x1}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0xd14981f645ec9b5b}, 0x40) 04:45:20 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x10e000000) 04:45:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x900, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:20 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000100)=0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0x7, 0x5, 0x0, 0x5b}, 0x10) write(r4, &(0x7f0000000040)="200000001a00010200190d958d00a01e80000000010400000000070000002000", 0x20) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r5, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) sendfile(r3, r0, 0x0, 0x80000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket$phonet_pipe(0x23, 0x5, 0x2) accept$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) 04:45:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x2000000}, 0x0) 04:45:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000002c0)=0x902, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e22, 0x0, 0x4e23, 0xfd3, 0xa, 0x80, 0x50}, {0x5, 0x1, 0xf, 0x2, 0x9, 0x1, 0x3, 0x3}, {0x101, 0x8000, 0x8, 0x1}, 0x8, 0x6e6bb2, 0x1, 0x1, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x3c}, 0x2, @in6=@loopback, 0x3505, 0x2, 0x1, 0x1, 0x5a, 0x80000000, 0x10000}}, 0xe8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000fddbdf250c00000009000700000000000000000004006e80050008000000000013000b0014000a00ec93d420c6ab249223ebc8880013ce0300000a00ee7f0000050008000000000004000b000500080000000000"], 0x48}, 0x1, 0x0, 0x0, 0x48018}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) openat$cgroup_devices(r3, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000440)=""/149) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x37cb1133) ioctl$sock_bt_cmtp_CMTPCONNADD(r5, 0x400443c8, &(0x7f0000000140)) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000040)=0x1, 0x4) write$binfmt_elf32(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=""/4096, 0x1000}, 0x80000000}], 0x1, 0x0, 0x0) [ 1636.383460][ T29] audit: type=1804 audit(1595565920.836:1258): pid=30756 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir719995947/syzkaller.dr8BjT/1234/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 1636.433121][T30756] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:45:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0xe00, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x3000000}, 0x0) [ 1636.547249][ T29] audit: type=1804 audit(1595565920.906:1259): pid=30765 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir054433689/syzkaller.vjG2ax/1210/cgroup.controllers" dev="sda1" ino=16382 res=1 04:45:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0xf00, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x4000000}, 0x0) 04:45:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x1440, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000005) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000000)) 04:45:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x5000000}, 0x0) [ 1637.070679][ T29] audit: type=1804 audit(1595565921.516:1260): pid=30758 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir719995947/syzkaller.dr8BjT/1234/cgroup.controllers" dev="sda1" ino=16381 res=1 04:45:21 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x10f000000) 04:45:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x3f00, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) socketpair(0x15, 0x2, 0x5, &(0x7f0000003280)={0xffffffffffffffff}) connect$phonet_pipe(r1, &(0x7f00000032c0)={0x23, 0x80, 0x9, 0x2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xe9) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x38, 0x1412, 0x10, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040054}, 0x4004) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 04:45:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x8000000}, 0x0) 04:45:21 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="002d0000ffffffff00000000090001006361000800fbfffe0f0000"], 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x20) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={r6, 0x1}, &(0x7f00000000c0)=0x8) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x20) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000400)={r7, 0x80000000, 0xffff, 0x5f, 0xc230, 0x4, 0xffff, 0x3, {r10, @in={{0x2, 0x4e24, @multicast1}}, 0x1, 0x9, 0x6d, 0xffff6f69, 0x5}}, &(0x7f0000000380)=0xb0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x158, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_ID={0x2b, 0x3, "9cc2479b6633c5f2f67bad2fee16fefc3fc558c803330075b4b80c0848f9c2d68db790186a7def"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xfc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x31}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x158}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfdc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x545}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x83}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x17dd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x30008000}, 0x40000) 04:45:22 executing program 5: r0 = socket(0x2, 0x5, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000240)={r5}) setsockopt$MISDN_TIME_STAMP(r6, 0x0, 0x1, &(0x7f0000000080)=0x3, 0x4) 04:45:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x4014, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1637.555779][ T29] audit: type=1804 audit(1595565922.006:1261): pid=30792 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir719995947/syzkaller.dr8BjT/1235/cgroup.controllers" dev="sda1" ino=15819 res=1 [ 1637.583020][T30798] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1637.615481][T30801] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1637.625314][T30801] gretap0: Device is already in use. [ 1637.631159][T30792] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:45:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x9000000}, 0x0) [ 1637.656731][T30798] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:45:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x6000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:22 executing program 5: r0 = socket(0xf, 0x80000, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x110, 0x228, 0x300, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ip={@multicast1, @private=0xa010101, 0xff000000, 0xffffffff, 'ip6_vti0\x00', '\x00', {}, {}, 0x73, 0x1}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x2], 0x1}}, @common=@icmp={{0x28, 'icmp\x00'}, {0xd, "b9d6"}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz1\x00', {0x4a}}}}, {{@uncond, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x3, '=T', 0x1}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x24}, [0x0, 0xffffff00, 0xffffffff, 0xff000000], 0x4e22, 0x4e21, 0x4e21, 0x4e20, 0x9, 0xf81, 0x1, 0x5, 0x9}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xffffffff, 0x0, 'syz_tun\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x30}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x30}}, 0x0) [ 1637.740540][T30805] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1637.786686][T30805] gretap0: Device is already in use. 04:45:22 executing program 2: unshare(0x40000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x100800, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000140)={0x4, {{0x2, 0x4e20, @remote}}}, 0x88) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000040)=0x7fff, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x14, 0x4, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x46) pipe(&(0x7f0000003740)={0xffffffffffffffff}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x20) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000003780)={r7, 0xe3}, &(0x7f00000037c0)=0x8) 04:45:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x66130}, [@IFLA_GSO_MAX_SEGS={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 1637.959898][T30818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1638.000335][T30819] IPVS: ftp: loaded support on port[0] = 21 [ 1638.025898][T30825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1638.047234][T30819] virt_wifi0 speed is unknown, defaulting to 1000 [ 1638.265849][ T29] audit: type=1804 audit(1595565922.716:1262): pid=30793 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir719995947/syzkaller.dr8BjT/1235/cgroup.controllers" dev="sda1" ino=15819 res=1 04:45:22 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x110000000) 04:45:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0xe000000}, 0x0) 04:45:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0xf000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'wg2\x00'}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) 04:45:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="00f0000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = accept4(r0, &(0x7f00000002c0)=@x25={0x9, @remote}, &(0x7f0000000340)=0x80, 0xc00) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, 0xb, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, [], 0x19}}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x64, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6, 0x2}, [@IFLA_IFNAME={0x14, 0x3, 'vxcan1\x00'}, @IFLA_AF_SPEC={0x30, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x11, 0x0, 0x0, 0x7}, {0x8, 0x1b, 0x0, 0x0, 0x3}, {0x8, 0x0, 0x0, 0x0, 0x3}]}}]}]}, 0x64}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_NUM_RX_QUEUES={0x8}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0xa, 0x802, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) sendmsg$NBD_CMD_STATUS(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 04:45:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0xf000000}, 0x0) [ 1638.452664][T30854] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 04:45:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x20000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1638.543192][T30862] team0: Port device veth67 added 04:45:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x0, 0xc0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r6, 0x3, 0x0, 0x40, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d040000000a0000000000000000", @ANYRES32=r4], 0x20}}, 0x0) [ 1638.582358][ T29] audit: type=1804 audit(1595565923.036:1263): pid=30863 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir719995947/syzkaller.dr8BjT/1236/cgroup.controllers" dev="sda1" ino=15737 res=1 [ 1638.612148][T30863] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:45:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x34000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x28100000}, 0x0) [ 1638.817293][ T29] audit: type=1804 audit(1595565923.266:1264): pid=30879 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir719995947/syzkaller.dr8BjT/1236/cgroup.controllers" dev="sda1" ino=15737 res=1 [ 1638.944010][T30854] team0: Port device veth67 removed [ 1638.964896][T30874] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1639.266877][T30876] batman_adv: batadv0: Adding interface: veth43 [ 1639.273703][T30876] batman_adv: batadv0: The MTU of interface veth43 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1639.302172][T30876] batman_adv: batadv0: Not using interface veth43 (retrying later): interface not active [ 1639.317643][T30881] batman_adv: batadv0: Removing interface: veth43 [ 1639.339033][T30862] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1639.375666][T30898] team0: Port device veth67 added [ 1639.388411][T30819] IPVS: ftp: loaded support on port[0] = 21 [ 1639.444204][T14314] tipc: TX() has been purged, node left! [ 1639.453284][T14314] tipc: TX() has been purged, node left! [ 1639.496293][T30854] team0: Port device veth67 removed [ 1639.514293][T30874] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1639.534506][T30876] batman_adv: batadv0: Adding interface: veth43 [ 1639.541175][T30876] batman_adv: batadv0: The MTU of interface veth43 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1639.567756][T30876] batman_adv: batadv0: Not using interface veth43 (retrying later): interface not active 04:45:25 executing program 2: r0 = socket(0x22, 0x802, 0x1) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000002c0)=@generic={0x1, 0x0, 0x8}) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{&(0x7f0000000300)=@ax25={{0x3, @default}, [@rose, @bcast, @null, @remote, @default, @netrom, @rose]}, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=""/47, 0x2f}, 0x5}, {{&(0x7f0000000400)=@qipcrtr, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/83, 0x53}, {&(0x7f0000000500)=""/159, 0x9f}, {&(0x7f00000005c0)=""/236, 0xec}], 0x3, &(0x7f0000000700)=""/154, 0x9a}, 0x4}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000007c0)=""/45, 0x2d}], 0x1000000000000214}, 0x8000}, {{&(0x7f0000000840)=@can, 0x80, &(0x7f0000000900)=[{&(0x7f00000008c0)=""/6, 0x6}], 0x1, &(0x7f0000000940)}, 0xfffffffc}, {{&(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/250, 0xfa}, {&(0x7f0000000b00)=""/229, 0xe5}], 0x2, &(0x7f0000000c40)=""/68, 0x44}, 0x8}, {{&(0x7f0000000cc0)=@ipx, 0x80, &(0x7f0000000000)=[{&(0x7f0000000d40)=""/48, 0x30}, {&(0x7f0000000d80)=""/28, 0x1c}, {&(0x7f0000000dc0)=""/239, 0xef}], 0x10000000000001d3, &(0x7f0000000f00)=""/249, 0xf9}, 0x5}, {{&(0x7f0000001000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/50, 0x32}, {&(0x7f00000010c0)=""/108, 0x6c}], 0x2, &(0x7f0000001180)=""/150, 0x96}, 0x200}, {{&(0x7f00000000c0)=@nl=@proc, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/173}, {&(0x7f0000002480)=""/204}, {&(0x7f0000002580)=""/222}], 0x0, &(0x7f0000002680)=""/204}, 0x9f}], 0x7, 0x42, &(0x7f0000001400)={0x0, 0x3938700}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000001440)=""/4096, &(0x7f0000002440)=0x1000) 04:45:25 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x113000000) 04:45:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x400300, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)="f38394e6047673c89a48e35948a8a79ac0144c2ca8670819576a68f6a8dbd04b2523db28173c056769ef54cc65df8b4f7566927a305b5ae407f3f8a0060cb1e9c5f59474a2d590", 0x47}, {&(0x7f0000000380)="5951cb8d42c24507631dad0985d6886e42e47d1cd011a80b94eee2945e4ce432cdb456cf8068fce5f88992630374237180a5a3191bd0648ab4", 0x200003b9}], 0x2}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket(0x0, 0x800000000080002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003d00)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40880}, {0x0, 0x0, &(0x7f0000003c40)=[{0x0}, {&(0x7f0000002b00)}, {0x0}], 0x3, &(0x7f0000003cc0)}], 0x4, 0x20000050) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x6}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@nested={0x34}]}, 0x48}}, 0x0) r4 = socket(0x9, 0x6, 0x7) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r5, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x191) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="80200000", @ANYRES16=r5, @ANYBLOB="010026bd7000ffdbdf25040000000800020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x800) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f4070009041e11000000ff020000000200000800040003000000", 0x79) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x18, 0x0, 0x400100]}, 0x2c) 04:45:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x60000000}, 0x0) 04:45:25 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000000, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200), 0x0) write$binfmt_elf64(r3, &(0x7f00000015c0)=ANY=[@ANYBLOB="8100635b36dd2f5e31032c05"], 0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002300)={0x0, 'bond0\x00', {}, 0x7}) pipe(0x0) r4 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4004000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000009180)={0x0}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:45:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x9effffff}, 0x0) 04:45:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1641.415731][ T29] audit: type=1804 audit(1595565925.866:1265): pid=30932 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir439724528/syzkaller.F63zFi/1585/memory.events" dev="sda1" ino=16257 res=1 04:45:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000b0000000000010000001400020077673200000300000000000000000000240003"], 0x4c}, 0x1, 0x1faa}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x10000000f) [ 1641.520248][T30933] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1641.617548][ T29] audit: type=1800 audit(1595565925.866:1266): pid=30932 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16257 res=0 04:45:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0xf0ffffff}, 0x0) 04:45:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x1000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1641.795283][ T29] audit: type=1804 audit(1595565925.876:1267): pid=30932 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir439724528/syzkaller.F63zFi/1585/memory.events" dev="sda1" ino=16257 res=1 04:45:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0xf5ffffff}, 0x0) [ 1641.993237][ T29] audit: type=1804 audit(1595565925.956:1268): pid=30933 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir719995947/syzkaller.dr8BjT/1237/cgroup.controllers" dev="sda1" ino=16242 res=1 04:45:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x2000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:26 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x120000000) [ 1642.238295][ T29] audit: type=1804 audit(1595565926.056:1269): pid=30942 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir439724528/syzkaller.F63zFi/1585/memory.events" dev="sda1" ino=16257 res=1 04:45:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0xfcffffff}, 0x0) [ 1642.425983][ T29] audit: type=1804 audit(1595565926.306:1270): pid=30953 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir054433689/syzkaller.vjG2ax/1215/cgroup.controllers" dev="sda1" ino=16260 res=1 [ 1642.491034][T30971] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1642.565257][ T29] audit: type=1804 audit(1595565926.406:1271): pid=30937 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir719995947/syzkaller.dr8BjT/1237/cgroup.controllers" dev="sda1" ino=16242 res=1 [ 1642.668153][ T29] audit: type=1804 audit(1595565926.416:1272): pid=30933 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir719995947/syzkaller.dr8BjT/1237/cgroup.controllers" dev="sda1" ino=16242 res=1 [ 1642.737743][ T29] audit: type=1804 audit(1595565926.636:1273): pid=30939 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir439724528/syzkaller.F63zFi/1585/memory.events" dev="sda1" ino=16257 res=1 04:45:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000005) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth1_to_team\x00', 0x200}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r3, &(0x7f0000000000), 0x12) write$cgroup_int(r0, &(0x7f0000000080), 0x12) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x37cb1133) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x19404, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@cgroup, r1, 0x11, 0x4, r4}, 0x14) 04:45:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x3000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:27 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000000, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200), 0x0) write$binfmt_elf64(r3, &(0x7f00000015c0)=ANY=[@ANYBLOB="8100635b36dd2f5e31032c05"], 0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002300)={0x0, 'bond0\x00', {}, 0x7}) pipe(0x0) r4 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4004000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000009180)={0x0}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:45:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0xfffff000}, 0x0) 04:45:27 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/576]}, 0x2b8) socket$inet(0x2, 0x80001, 0x84) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x37cb1133) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={r2, 0x24082a85}, &(0x7f0000000040)=0x8) [ 1642.775964][ T29] audit: type=1804 audit(1595565926.646:1274): pid=30942 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir439724528/syzkaller.F63zFi/1585/memory.events" dev="sda1" ino=16257 res=1 04:45:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x4000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:27 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x123000000) 04:45:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0xffffff7f}, 0x0) 04:45:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x5000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0xffffff9e}, 0x0) [ 1643.241031][T30999] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:45:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x8000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0xfffffff0}, 0x0) [ 1643.640544][T14314] tipc: TX() has been purged, node left! 04:45:28 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="74ce5b8184f7b7"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) 04:45:28 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x130000000) 04:45:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x9000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000600)={r3}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000002a80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20250}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)=ANY=[@ANYBLOB="3c000000030805000000000000000000030000040900010073797a30000000000900010073797a31000000050003001100"/60], 0x3c}, 0x1, 0x0, 0x0, 0x48801}, 0x20000040) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000080)="390000001300094700bb65e1c3e4ffff43000000010000005600000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 04:45:28 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0xfffffff5}, 0x0) 04:45:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x42100, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1008421}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2a6742c4e609", @ANYRES16=0x0, @ANYBLOB="10002abd7000fddbdf25150000000a000600bbbbbbbbbbbb00000c009900b2000000040000000c00990008000000020000000a000600bbbbbbbbbbd0000008000100fffffff10a0006001033e0f1a5ed0000"], 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008083) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f00000001c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast]}) accept4$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000380)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) close(r0) 04:45:28 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0xfffffffc}, 0x0) 04:45:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0xe000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1644.439123][T31029] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1644.451660][T31035] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 04:45:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 04:45:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0xf000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:29 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x131000000) 04:45:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x100000000000000}, 0x0) 04:45:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x3f000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x200000000000000}, 0x0) 04:45:29 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) close(r0) r1 = socket$kcm(0x11, 0x8000000002, 0x300) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)={0x3, 'gretap0\x00', {0x9}, 0x9}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x19404, 0x0) r4 = accept$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0), 0x4) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48) 04:45:29 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x19404, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x20) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000000)={r6, 0x41, "e217536831ca2b1ac4326cee8c6e550ea6aeca27b65c0719823d4a0b9d9c75c5c5245f3e83088c025a357e0bbc5d74acd2a1ccdbddc61c9de9a6689a1fbaae7210"}, &(0x7f0000000080)=0x49) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={r7, @in6={{0xa, 0x4e20, 0x2, @empty, 0x8000}}, 0x20, 0x4e}, &(0x7f0000000180)=0x90) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000003c0)={0x6, @loopback, 0x0, 0x0, 'none\x00'}, 0x2c) 04:45:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x40140000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1645.378980][T31068] IPVS: ftp: loaded support on port[0] = 21 04:45:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x60000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:30 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x11, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000240)={{0xa, 0x4e23, 0x2, @mcast2, 0x7f}, {0xa, 0x4e24, 0x0, @local, 0x1000}, 0x3, [0x6a0, 0x8, 0x5, 0x33, 0x8, 0xd6, 0x7290, 0x12]}, 0x5c) bind(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8010, r0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x301, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_OIF={0x8}]}, 0x30}}, 0x0) 04:45:31 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x14e24, 0x80000000, @private2}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000000606050000000000000000000a0000070900030073797a3165f2ffff050001000700000009000300737907300000000009000300ff797a32000000000900030073797a3200000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x0, 0x24008080) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES64], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) 04:45:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x9effffff, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1646.667254][T31090] IPVS: ftp: loaded support on port[0] = 21 [ 1646.775214][T31090] virt_wifi0 speed is unknown, defaulting to 1000 04:45:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0xf0ffffff, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1646.926978][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 1646.926995][ T29] audit: type=1804 audit(1595565931.376:1291): pid=31101 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir439724528/syzkaller.F63zFi/1588/cgroup.controllers" dev="sda1" ino=15897 res=1 [ 1648.946727][T14314] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.058607][T14314] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.134174][T14314] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.215195][T14314] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.426446][T14314] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.576012][T14314] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.783953][T14314] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.862010][T14314] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.118230][T14314] device  left promiscuous mode [ 1650.512915][T31201] IPVS: ftp: loaded support on port[0] = 21 [ 1650.529522][T31201] virt_wifi0 speed is unknown, defaulting to 1000 [ 1650.609739][T31204] IPVS: ftp: loaded support on port[0] = 21 [ 1650.695908][T31204] virt_wifi0 speed is unknown, defaulting to 1000 [ 1650.835728][T31201] chnl_net:caif_netlink_parms(): no params data found [ 1650.907237][T31201] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.915153][T31201] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.924049][T31201] device bridge_slave_0 entered promiscuous mode [ 1650.934631][T31201] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.941946][T31201] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.950093][T31201] device bridge_slave_1 entered promiscuous mode [ 1651.000143][T31201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1651.016370][T31201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1651.046608][T31201] team0: Port device team_slave_0 added [ 1651.058670][T31201] team0: Port device team_slave_1 added [ 1651.089515][T31201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1651.097932][T31201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1651.124654][T31201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1651.139734][T31201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1651.147793][T31201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1651.174730][T31201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1651.247937][T31201] device hsr_slave_0 entered promiscuous mode [ 1651.284883][T31201] device hsr_slave_1 entered promiscuous mode [ 1651.340705][T31201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1651.348430][T31201] Cannot create hsr debugfs directory [ 1651.476077][T31204] chnl_net:caif_netlink_parms(): no params data found [ 1651.594516][T31204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1651.602859][T31204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.611646][T31204] device bridge_slave_0 entered promiscuous mode [ 1651.626720][T31204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1651.634205][T31204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.643393][T31204] device bridge_slave_1 entered promiscuous mode [ 1651.673508][T31204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1651.687762][T31204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1651.707932][T31201] bridge0: port 2(bridge_slave_1) entered blocking state [ 1651.715116][T31201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1651.722649][T31201] bridge0: port 1(bridge_slave_0) entered blocking state [ 1651.729736][T31201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1651.766215][T31204] team0: Port device team_slave_0 added [ 1651.776351][T31204] team0: Port device team_slave_1 added [ 1651.808370][T31204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1651.815599][T31204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1651.843936][T31204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1651.859297][T31204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1651.866963][T31204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1651.894987][T31204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1651.911362][T15845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.924833][T15845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1652.005410][T31204] device hsr_slave_0 entered promiscuous mode [ 1652.061278][T31204] device hsr_slave_1 entered promiscuous mode [ 1652.110896][T31204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1652.118552][T31204] Cannot create hsr debugfs directory [ 1652.239052][T31201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1652.274431][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1652.283250][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1652.297767][T31201] 8021q: adding VLAN 0 to HW filter on device team0 [ 1652.316965][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1652.326643][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1652.336607][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1652.343794][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1652.365447][T11082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1652.374865][T11082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1652.384183][T11082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1652.391367][T11082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1652.419119][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1652.428836][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1652.438354][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1652.447936][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1652.458419][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1652.468101][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1652.478796][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1652.508139][T15845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1652.517185][T15845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1652.534278][T31201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1652.547382][T31201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1652.566510][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1652.575521][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1652.602554][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1652.611788][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1652.634055][T31201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1652.671863][T31204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1652.694707][T11082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1652.704724][T11082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1652.724857][T31204] 8021q: adding VLAN 0 to HW filter on device team0 [ 1652.749473][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1652.759461][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1652.769134][ T2733] bridge0: port 1(bridge_slave_0) entered blocking state [ 1652.776350][ T2733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1652.786229][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1652.815655][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1652.825523][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1652.834891][ T2733] bridge0: port 2(bridge_slave_1) entered blocking state [ 1652.842168][ T2733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1652.850153][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1652.859823][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1652.868971][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1652.890497][T11082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1652.899748][T11082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1652.914865][T11082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1652.937401][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1652.946776][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1652.956711][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1652.975332][T15845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1652.988638][T15845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1652.998876][T15845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1653.013186][T15845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1653.023826][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1653.032674][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1653.048184][T31204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1653.060765][T31204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1653.072696][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1653.084147][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1653.094589][T31201] device veth0_vlan entered promiscuous mode [ 1653.121958][T31201] device veth1_vlan entered promiscuous mode [ 1653.146299][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1653.155737][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1653.169468][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1653.178135][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1653.204829][T31204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1653.223511][T11082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1653.234027][T11082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1653.248681][T31201] device veth0_macvtap entered promiscuous mode [ 1653.274147][T31201] device veth1_macvtap entered promiscuous mode [ 1653.300296][T31201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1653.311050][T31201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.321578][T31201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1653.332544][T31201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.343567][T31201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1653.354101][T31201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.364111][T31201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1653.374872][T31201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.385155][T31201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1653.395744][T31201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.407375][T31201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1653.417816][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1653.427238][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1653.435908][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1653.445417][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1653.459377][T31201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1653.470941][T31201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.482348][T31201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1653.494251][T31201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.504246][T31201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1653.514858][T31201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.524852][T31201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1653.535534][T31201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.545559][T31201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1653.556155][T31201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.566501][T31201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1653.578617][T31201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.591128][T31201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1653.604985][T21107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1653.615204][T21107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1653.646925][T15845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1653.662911][T15845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1653.858276][T21107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1653.875123][T21107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1653.894957][T31204] device veth0_vlan entered promiscuous mode [ 1653.905385][T11082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1653.915290][T11082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1653.935068][T31204] device veth1_vlan entered promiscuous mode [ 1653.962883][T21107] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1654.015909][ T29] audit: type=1804 audit(1595565938.466:1292): pid=31608 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/0/cgroup.controllers" dev="sda1" ino=15901 res=1 [ 1654.061811][T21107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1654.074287][T21107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1654.080807][T31608] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1654.088006][T31204] device veth0_macvtap entered promiscuous mode [ 1654.107537][T31204] device veth1_macvtap entered promiscuous mode [ 1654.138133][T31204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1654.149323][T31204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.160272][T31204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1654.178514][T31204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.189488][T31204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1654.200585][T31204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.211872][T31204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1654.223683][T31204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.234822][T31204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1654.246376][T31204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.257604][T31204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1654.268223][T31204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.285149][T31204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1654.310683][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1654.319110][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1654.329943][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1654.344218][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1654.362858][T31204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1654.373865][T31204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.384632][T31204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1654.395549][T31204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.405827][T31204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1654.416756][T31204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.428506][ T29] audit: type=1804 audit(1595565938.876:1293): pid=31612 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/0/cgroup.controllers" dev="sda1" ino=15901 res=1 04:45:38 executing program 5: socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0xf, 0x9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000024008000000000000000000000001f006d8db5b633cfde8b6f14c4f3c7b058662cac6af3de5b8e3a0bb33f1e73bb52a5ad61beae1fbc361c6be5ee9f41e4e1ec0b8189e9668dc821da103a593f0fd21365b2cc4dba8a2dbf6a7ed4480cb8c393fa41a45a9032440337321b0a09158584e46b329964c69d392812111ee8c3aa4281e889d678ff237b51d62bc89fc79186e4573cfed744264125daa262a1708f62da867507c5e2e6b57d5b58c41889b04103b12dd07005dba7b7075523293721afe741b5dab2a0832b8780d70b09b0161f4487b7fa6ce0194846751fabd7088b43da0a9e97dc1884d9f6a1b703e9e040de748c7df997d2b640ce59e077084faadeeec026f3457f94ead30644441a6d4c2c504b3440481df4f2fa05894eac45b076f0da38bb2d5c2c929102e01d3dccb3606969fbbcce6dd78aaa98836eb6be771724d5407a4b84", @ANYRESHEX=r2, @ANYBLOB="000036c2e47dffff"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001800)=@delqdisc={0x43c, 0x25, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x10}, {0x10, 0xfff3}, {0x2, 0xf}}, [@TCA_STAB={0x128, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x4e, 0x5, 0x1, 0x1, 0x0, 0x8001, 0x1}}, {0x6, 0x2, [0x20]}}, {{0x1c, 0x1, {0x19, 0x5, 0x0, 0x2e, 0x2, 0xe0000000, 0x9, 0x9}}, {0x16, 0x2, [0x80, 0x2, 0x5, 0xfff, 0x45cb, 0x8001, 0x4, 0x800, 0x80]}}, {{0x1c, 0x1, {0x81, 0x3, 0x6, 0x9, 0x2, 0x4, 0x2, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x4e, 0x5, 0x20, 0x9, 0x1, 0x7, 0xfffffc01, 0x8}}, {0x14, 0x2, [0x9, 0xffff, 0x8000, 0x2, 0x1000, 0x9, 0x20, 0x9]}}, {{0x1c, 0x1, {0x20, 0x5, 0x9, 0x47c4, 0x0, 0x8, 0x1, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x9, 0x87c, 0x1f]}}, {{0x1c, 0x1, {0x9, 0x6, 0x8, 0x706, 0x1, 0x1, 0x3, 0x4}}, {0xc, 0x2, [0x6, 0x1, 0x1, 0xfffa]}}, {{0x1c, 0x1, {0x4, 0x9a, 0x6, 0x2191, 0x0, 0xffffffff, 0x6, 0x1}}, {0x6, 0x2, [0x7]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6aa}, @TCA_STAB={0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3f, 0x8, 0x0, 0x50, 0x1, 0xff, 0xfff, 0x8}}, {0x14, 0x2, [0x1f, 0x3, 0x7fff, 0x4, 0x6, 0x4e, 0x9, 0x9]}}, {{0x1c, 0x1, {0x1, 0xcd, 0x200, 0x0, 0x0, 0x3, 0x0, 0x6}}, {0x10, 0x2, [0x200, 0x28, 0x0, 0x4, 0x0, 0x9]}}, {{0x1c, 0x1, {0x9, 0x0, 0xe79, 0x6b9, 0x0, 0xfff, 0x9, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x76, 0x3, 0x3, 0x3, 0x2, 0xfffffffa, 0x1, 0x7}}, {0x12, 0x2, [0x40, 0x7, 0xff, 0x5, 0x20, 0x4, 0x2]}}, {{0x1c, 0x1, {0x0, 0x5, 0x1ff, 0x400, 0x2, 0x2, 0x5e7, 0x5}}, {0xe, 0x2, [0x8001, 0x81, 0x7ff, 0xf7, 0x5]}}]}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x1, 0x4428, 0x6, 0x0, 0x3, 0x0, 0x4}}, {0xc, 0x2, [0x1000, 0x0, 0x1ff, 0x0]}}, {{0x1c, 0x1, {0x1, 0x7, 0x1, 0x2, 0x1, 0x8, 0x6, 0x9}}, {0x16, 0x2, [0xd6, 0xff, 0x4, 0x27b, 0x9, 0xfff, 0x3, 0x1000, 0xfffa]}}, {{0x1c, 0x1, {0x1f, 0x8, 0x4, 0x1, 0x1, 0x7, 0x2, 0x1}}, {0x6, 0x2, [0xaef]}}]}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}, @TCA_STAB={0x170, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x1f, 0x100, 0x434, 0x2, 0x9, 0xfff, 0x4}}, {0xc, 0x2, [0x8001, 0x0, 0x1000, 0xffff]}}, {{0x1c, 0x1, {0x95, 0x10, 0xe13, 0x1ff, 0x0, 0x9, 0x1, 0x5}}, {0xe, 0x2, [0x3, 0x1, 0x4, 0x4, 0x20]}}, {{0x1c, 0x1, {0x80, 0x8, 0x5, 0x8000, 0x1, 0x0, 0xfff, 0x7}}, {0x12, 0x2, [0xff, 0x0, 0x8, 0xa581, 0x1000, 0x1, 0x4]}}, {{0x1c, 0x1, {0x3, 0x0, 0x0, 0xffff, 0x0, 0x1, 0xffffbb69}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x8, 0x0, 0x981a, 0x2, 0x80000000, 0x7, 0x8}}, {0x14, 0x2, [0x4e4f, 0x72, 0x3, 0xff, 0x3, 0x9208, 0x7f, 0x400]}}, {{0x54, 0x1, {0x9, 0x5, 0x9, 0x80000000, 0x0, 0x8, 0x3, 0x4}}, {0xc, 0x2, [0x3, 0x5, 0xa00, 0xdd2]}}, {{0x1c, 0x1, {0xff, 0x80, 0x200, 0xbd8, 0x2, 0x1, 0x8000, 0x4}}, {0xc, 0x2, [0xff81, 0x9, 0xcdab, 0x0]}}, {{0x1c, 0x1, {0x3f, 0x6, 0x6, 0x0, 0x2, 0x8, 0x1000, 0x3}}, {0xa, 0x2, [0xf0e0, 0x200, 0xe00]}}, {{0x1c, 0x1, {0x3, 0x5, 0x400, 0x20, 0x2, 0x3ff, 0x5}}, {0x4}}]}]}, 0x43c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{}, {0x20000010304, @local}, 0x7, {0x2, 0x0, @loopback}, 'ip_vti0\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = accept4$x25(r5, 0x0, &(0x7f0000000140), 0x800) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x63, 0x1000, &(0x7f00000002c0)="1effb9da182f7f2cb9499b0bce5c9a46909e4cb48fd2a6001a4aafd1b25b7a8158f7842a228fb98e611e1a9af7126aa0262007863711993ba83303926470f22e31d752f19b4151692cb2bfea26c5007418e18fb20b06102fa43d33bc5b136b646e26d6", &(0x7f0000000800)=""/4096, 0x8, 0x0, 0x24, 0x12, &(0x7f0000000340)="3e380a9d8005e4072886c4975588585429bcb5bf9c38b31882723c2c03c27b25267f340d", &(0x7f0000000380)="05e309c7e3650e5a91294f9c47f07099e66c"}, 0x40) connect$x25(r6, &(0x7f0000000200)={0x9, @remote={[], 0x3}}, 0x12) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000640)={'nat\x00', 0x0, 0x0, 0x0, [], 0x5, &(0x7f00000005c0)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{}, {0x20000010304, @local}, 0x0, {0x2, 0x0, @remote}}) 04:45:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0xfffff000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x285) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x42, {0x2, 0x4e21, @multicast2}, 'batadv_slave_1\x00'}) r1 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x1}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x2, @mcast1, 0x8}, 0x1c) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x70dd6000) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x285) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000100)={0x10}) close(r1) [ 1654.429733][T31204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1654.466192][T31204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.476785][T31204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1654.488153][T31204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.533917][T31204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1654.551476][T31204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.563101][T31204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1654.574466][T31204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.587531][T31204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1654.601882][T31618] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1654.671523][T21107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1654.686914][T21107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1654.744385][T31619] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 04:45:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x300000000000000}, 0x0) 04:45:39 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={r4, 0xa4, &(0x7f0000000340)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e20, 0x9, @mcast1, 0x3f}, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x2d}, 0x9}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0xb82b, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}]}, &(0x7f0000000200)=0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="02030609100000000000004c9e00000002001300000000000000000003f2bc0105000600200000000a000000000000000005dde400e6060000001fe531020000000300000000000002000100f5000000000000020000000005000500000000000a689e455edf2db1983a6f1a5b38bc58e7942fd368ebd4e480d6574b522c92afc1fa7481fa0d8196cab700b88d49fd8ed4922b9ccb2d765b87134efad740bf493e1512945ec61eba51b9910ccbc23481f9"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000282, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 04:45:39 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x132000000) 04:45:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0xffffff7f, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:39 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvfrom(r1, &(0x7f0000003240)=""/4096, 0x100000205, 0x0, 0x0, 0x415) 04:45:39 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000007000000350000000015000085000000070000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="27f830a6ce106181c72fc272c285", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:45:39 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000069008100e00f80ecdb4cb9040a0265ef0b007c05e87c55a9bc000900ee8ec2b8000699030000000500150003008178a8001677ae662218303564c9b4a5fbf6d28000150001400200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 04:45:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0xffffff9e, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x400000000000000}, 0x0) 04:45:39 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200), 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="e8d0592eeee0bbceb149ed6c0a807b96431f7d5720ca4dbf0129b565a1d9db0ce8c4fc0e53ce64b2c829ea931756967b5e9d4a5b64b22edb2ff62073b3c3b9d55a928b2e4e6c63b6d15d5908dea3381c8b7b9e8ea6fc051e62df6aa398095afbb41a1bb4d821d8e2458fc35df48a2531494ecfd93ea17179a67fba829241414d88b4fa9911313995e399f925e9a95d"], 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x2c, r5, 0x0, 0x0, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080), 0xc, 0x0}, 0x20008801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000580)="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", 0xffe}], 0x1) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:45:39 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendfile(r0, r2, &(0x7f00000000c0)=0x4, 0x2) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)="930104eb1082ac790000", 0xfffffffffffffdbe, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)=""/90, 0x200002da}], 0x1}, 0x0) [ 1655.206982][ T29] audit: type=1804 audit(1595565939.656:1294): pid=31649 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/1/cgroup.controllers" dev="sda1" ino=15944 res=1 [ 1655.244941][T31649] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1655.267765][T31656] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1655.333518][T31656] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1655.358908][ T29] audit: type=1804 audit(1595565939.766:1295): pid=31659 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir439724528/syzkaller.F63zFi/1591/memory.events" dev="sda1" ino=15914 res=1 04:45:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x500000000000000}, 0x0) 04:45:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0xfffffff0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$inet(r3, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f00000002c0)="b6f3acc009c796ebe07c6e5d03a3e7ee4aefec0a25c51fb684aef4ed95569be4fe02395de7fe7bc81d3292fcc654628ea3d3f0fdef42cba42e664e20f8df48675985bcfd3cf8f60a7fdf19a58eb67b60468906e4f45d8335761f2a04b1b6a116396a13a54228ab687def695fe2e1b81499654cb871eb16507f0c824e9015b7f9da53fd6dc0baa0623ee02caab406b56e14417725ed7cd54cedebfd136e2e91", 0x9f}, {&(0x7f0000000380)="c575df2d1e6c09134cff79f702ad2da285b6a5a9891684eace85fd6ada78b2c6acc697b5a4f7973b9fa2d9e9e43d8d5107ad8e2bfc24c086fae06b4f94b8b466b170d063e825d661d4ea11d0cc4ccba493b7d9b7329b6ecfe38453243bf7b52f0cb03f1cd1a24a55d5a25533bec61b0bbfeff3ca590279ce31c3353d90270c3291905a6f0d220eb6adf9dfd802d7ba98f871271c7d8ac8cadd1a7b5b8ac4ea32928dec74cc", 0xa5}, {&(0x7f0000000580)="f542e7721ca16411d0068abcf75b011962ea92413eca3ca0502da82af15777fe73931f635d49d990e5ff8d7db59ae9189d17edf99c5f70d2575d160eb674a62c30b9e8d24682", 0x46}, {&(0x7f0000000600)="f12257ae12afc49d7a8da0323f360a7201c07f55f1195e9c12123b73751fb49cb0858f36b81cd79f584004e8233816d10d431fa7675d227820983038f8ab89e2809032c1a902086712c44f054b3c4b9adfe6b7f5c36e11c443f620febaf931dbb9b7da0e010e9331410eafdbef33fc3dc5574263166e6919fa4064481266c382ba0dffd218e238", 0x87}], 0x4}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)="8d01b7ef3932fb63825ee380283d6a0ab04fc2abe696d8a66a4dfedc77f3e287b1582a90053df62c07", 0x29}, {&(0x7f0000000700)="04dfa9d072fd1b4fb47f57647ac4cfe95212d39511d2dacd21a8d7d77077658d792f88b928ab75f2c7e175056ceb09e9bb475c4b12eeccfd0946d3cc7c15636c5088403361d0469fe2b3e4dbf54d299931399f07fb42c4ea19612ef2c9692b30090179c93dee675f43b4cb1144634dc9b351ace03259ded930f8b3a78637", 0x7e}, {&(0x7f0000000780)}], 0x3, &(0x7f0000000800)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x55}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x840}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x60}}, {{&(0x7f0000000880)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)="72875d3560bfa6bbe6d64617145b93ab39105d0891b9b3e26fe058e8013dee16651addfad8138a1a6fb2f76a5381db3fc13ce1", 0x33}, {&(0x7f0000000900)="3b90e3ec5ef3815e62ca3215e1f1d0bb211f26930c6c3a7b545fcfa8c4bf871b6832e1c3a1acc50f8c9930bafc95d8dd23", 0x31}, {&(0x7f0000000940)="57c9ac3a1d1903a8192ddf5400c5a4262322a50833aca31da13cbb4bb905e500e9", 0x21}, {&(0x7f0000000980)="65cbe1ec9201f5448315e97a930f9eaa9691bef6147272c5efbdbb6b21bb2bd038349bb6d39eb1d801cd81e174634755b4fc6c6fd43d19196a9692509b2cc985d782b026fd2a3dc531e75c8ecae2cc449e247bd7598a53e0e2e552aece1653a5995adb7bd26857d39a19faea4344c527a940bd4bb9f423ffb53108b1ad1d424b7f366ee6fd7de9fc702b4b1d8e63efb4b3d4b02133951e63c6f6021648b60a795e87479d138884bb941a4c315cf972bb949f8e", 0xb3}, {&(0x7f0000000a40)="33af112147d9b0cd0545a259ea30cfdb23ac74d8fa34951a006bbd620e", 0x1d}], 0x5, &(0x7f0000000b00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}}], 0x3, 0x1) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x48}}, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) sendmsg$inet(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="ec5011944348ccdab415606277d5dbd66dd3d4fc4351253dbebc2b2b2a37067c25bbb32657cae47efb74d7c47a25474301989fd4b2daf6351306a5d8dfd7c658ce16f9d83f77761e941fcf587d1527f2588353f15638b159e67a9f25471e9c09f4af988952f47a", 0x67}, {&(0x7f0000001c80)="d56d2ac650ba6a578fb69b04303aa6dc3502a941331d805d9d6495db5aa3b92f02c68a434e933799d95aa2468264248d3f2a39399f05ed48e7ab9c8ae71e6fc3e09f05db45a33abc7a9f1446cd6b08f10143b18e41933b9e792540b46efc75c16852152d0a2128524c97cbba1785c1608f88058ba15af0247e81467641ea497df04d58033f72ee345c80da7fedbc2dc6f0d47504bd040b42ca43947e5b6736b8a988e32f8bac636ae29c3485b8b807839c0d0c259b1a0cb81bbd6d7c946b8cc29e9d04e8c416051fe464925741fca891", 0xd0}], 0x3}, 0xc0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) [ 1655.545755][ T29] audit: type=1800 audit(1595565939.766:1296): pid=31659 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=15914 res=0 [ 1655.669842][ T29] audit: type=1804 audit(1595565939.766:1297): pid=31659 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir439724528/syzkaller.F63zFi/1591/memory.events" dev="sda1" ino=15914 res=1 [ 1655.728436][ T29] audit: type=1804 audit(1595565939.936:1298): pid=31669 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir439724528/syzkaller.F63zFi/1591/memory.events" dev="sda1" ino=15914 res=1 04:45:40 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x133000000) 04:45:40 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) listen(r0, 0xff2c) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 04:45:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x800000000000000}, 0x0) 04:45:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0xffffffff, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:40 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x1, 0x6, 0x100, 0x9, 0x9, 0xda, 0x2}, 0xc) socket(0x0, 0x0, 0x0) socket(0x0, 0x2, 0x0) r3 = socket(0x0, 0x80002, 0xc) sendmmsg$alg(r3, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) 04:45:40 executing program 5: r0 = socket(0x10, 0x80002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a", 0x4d}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000074774270620fd5721540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c01000000000000000085b085849e71d38c38f885a18a02076ace1ad49db51c4ab3bb66946b2cef64b531b0084d14c1e949d80458324d8b148efd9a197472205c3763b2b6335cd03c4effd27a129bfae2dca63bcb5247831d1899ef02e2fde4cec16762bf072e218b92b76cde82651cd0e"], 0x50}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) [ 1655.837898][ T29] audit: type=1804 audit(1595565939.996:1299): pid=31659 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir439724528/syzkaller.F63zFi/1591/memory.events" dev="sda1" ino=15914 res=1 04:45:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x900000000000000}, 0x0) [ 1655.908731][T31694] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1655.930805][T31694] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1655.959239][ T29] audit: type=1800 audit(1595565939.996:1300): pid=31659 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=15914 res=0 [ 1655.972112][T31694] device team_slave_0 entered promiscuous mode [ 1655.985570][T31694] device team_slave_1 entered promiscuous mode [ 1656.005710][T31696] IPVS: ftp: loaded support on port[0] = 21 [ 1656.072560][ T29] audit: type=1804 audit(1595565940.526:1301): pid=31695 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/2/cgroup.controllers" dev="sda1" ino=15879 res=1 [ 1656.079461][T31694] device macsec1 entered promiscuous mode 04:45:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x2, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1656.120797][T31695] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:45:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0xe00000000000000}, 0x0) [ 1656.181236][T31694] device team0 entered promiscuous mode [ 1656.221738][T31696] virt_wifi0 speed is unknown, defaulting to 1000 04:45:40 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r0}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x2d, 0x803, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000140)={0x7, 0xb71f, 0x6, 0xc135, 0x8}) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x400c010) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x34}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0x170, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_EEE_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x84, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7d, 0x5, "e2ccebf1c6b14ae5309fe274f0de549d947b8b93bdefb99f6559cb088da951b4513a229d22e3c31720f5ee1f5628c6023961d2ee5e70e559436f53dd12033c2123ecf4684d5054165e8d05ca5d0ad80bec086739b955f861ddc06be8d4c45e92e753b66daf87463758e5425551da97da4c76636f15bf09036c"}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x401}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20008852}, 0x44000) 04:45:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x3, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1656.452607][T31721] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1656.514149][T31721] device ipvlan8 entered promiscuous mode [ 1656.545552][T31722] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1656.584797][T31721] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1656.615157][T31720] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 04:45:41 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x134000000) [ 1656.685299][T31699] IPVS: ftp: loaded support on port[0] = 21 04:45:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @dev}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @loopback}}}}) 04:45:41 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0xf00000000000000}, 0x0) 04:45:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x4, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1656.898823][T31743] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1656.926109][T31699] virt_wifi0 speed is unknown, defaulting to 1000 04:45:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x2810000000000000}, 0x0) 04:45:43 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xd2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000080)="b9ff7aaa72e7291ec76cf5ee7563e766df17bde7378b8fcb5f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ioctl(r1, 0x7f, &(0x7f0000000040)) 04:45:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x5, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:43 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x101}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r2 = gettid() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000100)=r2) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/pid\x00') 04:45:43 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x135000000) 04:45:43 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="5fc54c44065b05007311"], 0xa) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) close(r2) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e22, 0x0, 0x4e23, 0xfd3, 0xa, 0x80, 0x50, 0x0, 0x0, r7}, {0x5, 0x1, 0xf, 0x2, 0x9, 0x1, 0x3, 0x3}, {0x101, 0x8000, 0x8, 0x1}, 0x8, 0x6e6bb2, 0x1, 0x1, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x3c}, 0x2, @in6=@loopback, 0x3505, 0x2, 0x1, 0x1, 0x5a, 0x80000000, 0x10000}}, 0xe8) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x4c, r8, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "944c8000"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xffffffffffffff77}, @NL80211_ATTR_KEY_SEQ={0x0, 0xa, "ee7f"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40018}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"/331], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8041) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000003c0)=0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4f0a, 0x0) 04:45:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x8, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x6000000000000000}, 0x0) 04:45:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x100, 0x0, 0x2, 0x8, 0x100, 0x86}, &(0x7f00000000c0)=0x20) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000380)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/174, 0xae}, {&(0x7f0000000240)}], 0x2, &(0x7f00000002c0)=""/51, 0x23}, 0x60) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)="b1ced71b76f5d951c3dfe1cc3bef964074fd41a568dd80c015457fa2f6b6329dc482257af96778ab8a4ff7f88a9ba6a5e181f5c63fcc87d5af8c802d1d4cb8800cca019cbb9ecc7795897ab01f44f62b1df180d559b16acef1299b8b5f78b2d33e83b2f3fef4ac", 0x67}, {&(0x7f0000000400)="19b4bca3ed60f56468fe78354c9a9381c01353294a378c88032c1c14a8498654528fa5ad38772d92f29e019e3cb023bd1285e749a01e3de6097ef4e30e43a10691932cf7a1feec443c8d3b3de50a055722d91b386cc5fcae2ed41c50421567adca30c7b8f4444f1ddbf06f5472c05fe8162d6302c852339bd12cec9b7c7b79523b710b684166afc6c1bd5b0a512abad4e181ee22c56fb6bcde71a2f225a5f71c995b48169c69dfbdc24682d6a440012405efab4bf05ae7eda82efaba903d11a7e95bd70b9943d6b90b910ecbfda8b712b66866bc9cb79831a6016f770dd34153229f5e1f4ae1ac99740f1a68b861f016c94469", 0xf3}, {&(0x7f0000000500)="a0c45957497179a9be616bd32461cdfbbffd3f8644392bc2e5908a9dddc3bce23940bf68861b193a5d35ddd1b33a1deac1b194d7d5ea43b25743c4e19afbb2fd623a2c5c98f59c36c362cd1814482e31a8a69ecf3062084022b91e8732786826011d815db55ff600b3557ff1bf0ed718ee2aaa1bf0d133b3a56fb2ace64a37295b16afd31e1d2d16c0676516611cfdc665f0d90dab944784fb52e3ce4aa63606a92809d08b02119774a5624ff16c6794c2807099c3a394bf6e5bb3ab33acabdd2f8e8c909321b8d9fdaed5866bfdbecd0aadf45d4ebc1932526adcb7a7", 0xdd}, {&(0x7f0000000240)="6e32c811c0fa3fcb1df6fe849328a701eaa5dadf5294", 0x16}, {&(0x7f00000009c0)="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", 0x1000}], 0x5, &(0x7f00000019c0)=[{0x110, 0x113, 0x32a, "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"}, {0xb0, 0x103, 0x9ee, "d0e6a453c0e41eea6373046d0765ad29358f921cf22b7288b870a257722f8c2503330627072a5d2c48bfc254ff4f42379a6b102d3f45389ef50cfd1d0ae1377096bacbfb4f6399608deab55ad49c2d533ac308e664b2734b4b1c95fd5657e743c9ee054e957e5f2aae5cdb07cb39be1afb0c17a507fb89b9744f271bfb379cc3d56ee8f90bac9b2a306b1f5f97fc008567364a13b143daee82087aaaad89"}], 0x1c0}}], 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000001b80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=@ipv6_newaddrlabel={0x74, 0x48, 0x100, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x1f, 0x0, r3, 0x1ff}, [@IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) r5 = accept(r4, &(0x7f00000007c0)=@caif=@dbg, &(0x7f0000000840)=0x80) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f00000008c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r6, 0xd10, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x4080) setsockopt(r0, 0x0, 0x1, &(0x7f0000000040)='+', 0x1) [ 1658.893315][T31817] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:45:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 04:45:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x9, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:43 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1350b0000) [ 1659.127652][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1659.127669][ T29] audit: type=1804 audit(1595565943.576:1306): pid=31825 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/4/cgroup.controllers" dev="sda1" ino=16379 res=1 04:45:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 04:45:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0xe, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0xf5ffffff00000000}, 0x0) [ 1659.365294][ T29] audit: type=1804 audit(1595565943.816:1307): pid=31842 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/5/cgroup.controllers" dev="sda1" ino=15911 res=1 [ 1659.399684][T31842] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:45:44 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x101}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r2 = gettid() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000100)=r2) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/pid\x00') 04:45:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0xf, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1659.647781][ T29] audit: type=1804 audit(1595565944.096:1308): pid=31856 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/5/cgroup.controllers" dev="sda1" ino=15911 res=1 04:45:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0xfcffffff00000000}, 0x0) 04:45:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x60, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:44 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x136000000) 04:45:44 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200000000000000084000000020000000000000200000000db150000", @ANYRES32=0x0], 0x20}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={r1, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000040)={r4}, 0x8) 04:45:44 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00', 0xffffffffffffffff}, 0x30) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) pipe(&(0x7f0000000340)={0xffffffffffffffff}) close(0xffffffffffffffff) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x6, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000b40)=[{{&(0x7f0000000480)=@qipcrtr, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/159, 0x9f}, {&(0x7f00000005c0)=""/249, 0xf9}, {&(0x7f00000006c0)=""/218, 0xda}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f0000000840)=""/109, 0x6d}, {&(0x7f0000000240)=""/18, 0x12}, {&(0x7f00000008c0)=""/212, 0xd4}], 0x7, &(0x7f0000000a40)=""/232, 0xe8}, 0x2}], 0x1, 0x40, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x100, 0x3000300}], 0x1, 0x0, 0x0, 0x3b) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000003c0)={0x7fff, {{0xa, 0x4e21, 0x9, @local, 0x3}}}, 0x88) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000200)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) 04:45:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0xf0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) [ 1659.963131][ T29] audit: type=1804 audit(1595565944.416:1309): pid=31870 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/6/cgroup.controllers" dev="sda1" ino=16378 res=1 [ 1659.989519][T31870] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:45:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 04:45:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x300, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1660.172424][ T29] audit: type=1804 audit(1595565944.626:1310): pid=31871 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir439724528/syzkaller.F63zFi/1594/cgroup.controllers" dev="sda1" ino=16383 res=1 04:45:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x0) [ 1660.393186][ T29] audit: type=1804 audit(1595565944.846:1311): pid=31881 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir439724528/syzkaller.F63zFi/1594/cgroup.controllers" dev="sda1" ino=16383 res=1 04:45:44 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) socket(0x0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x191) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0200cb76ea7211439a321f589f32be513a25de0b608088ed10ecd8f255705addfd40df1c69c799b0f81ab8b65617dc8fcd27806270570411ab4971f9166617a497a18603807eeab93d20ca8f83d9cced9e34e7d843976e821bd4c9e34997ea21018145"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @private=0xa010100}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 04:45:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x500, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:45 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x137000000) 04:45:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000400)={0x1, 0x0, 0x1000, 0x3, &(0x7f00000001c0)="0fe9d4", 0x80, 0x0, &(0x7f0000000380)="3672dae9b3d77eb1ecc27949c4db2fbcc8448db1ae684192b7a2773da4ed52b68370478b0d0f7f9da53c19da908e90a8c3da909cc0120ba0069e0af85b71b4ff1b500a0d0e34610742a5a5ead528353ffff6067ffb7d072a039263234780ec37231829652800f897f69a49cbcb5e7eec01f1485f8d6e0d321a9efdb62ca27502"}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={r5, @in6={{0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, [], 0x1}, 0x5}}}, &(0x7f0000000140)=0x84) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0x8f, &(0x7f0000000240)=""/124, &(0x7f0000000040)=0x7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x29811, r0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000002) 04:45:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2}, 0x0) [ 1660.739988][ T29] audit: type=1804 audit(1595565945.186:1312): pid=31894 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/7/cgroup.controllers" dev="sda1" ino=15689 res=1 [ 1660.775041][T31894] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1660.789786][T31899] IPVS: ftp: loaded support on port[0] = 21 [ 1660.843486][ T29] audit: type=1804 audit(1595565945.296:1313): pid=31897 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir439724528/syzkaller.F63zFi/1595/cgroup.controllers" dev="sda1" ino=16384 res=1 [ 1660.873118][T31897] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 04:45:45 executing program 5: pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000e) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ppoll(&(0x7f0000000100)=[{r3, 0xa093}, {r0, 0x48}, {r4, 0x60ea}, {r5, 0x402}, {r6, 0x1201}], 0x5, 0x0, 0x0, 0x0) epoll_wait(r2, &(0x7f0000000380)=[{}], 0x17cc, 0x2d55) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:45:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x900, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x3}, 0x0) [ 1660.889952][T31899] virt_wifi0 speed is unknown, defaulting to 1000 04:45:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) 04:45:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0xe00, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) [ 1661.230048][ T29] audit: type=1804 audit(1595565945.676:1314): pid=31900 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/7/cgroup.controllers" dev="sda1" ino=15689 res=1 04:45:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0xf00, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1661.468873][T31903] IPVS: ftp: loaded support on port[0] = 21 [ 1661.588845][T31903] virt_wifi0 speed is unknown, defaulting to 1000 04:45:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03affff) sendfile(r1, r0, 0x0, 0x800000000000c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="65ec5d06ae9ce069fb282d84ee5f34d8015a6f68f7ee3a601e19c880d4d1366c334697f8333534286b31044c127aadfeae81e523b281c6675f1e104913538b2335d155e8768799cbeee5702aeabf0fea34e2679821b7c6be181e26fd367855311b198a1e34c3d08caa92dd3b018dd671bb806993080b"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0xcb7, 0xfffffffd, 0x0, 0x40f4, 0xb}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f0000000100)=0x9, 0x4) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x81, @remote}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 04:45:47 executing program 5: pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000e) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ppoll(&(0x7f0000000100)=[{r3, 0xa093}, {r0, 0x48}, {r4, 0x60ea}, {r5, 0x402}, {r6, 0x1201}], 0x5, 0x0, 0x0, 0x0) epoll_wait(r2, &(0x7f0000000380)=[{}], 0x17cc, 0x2d55) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:45:47 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x138000000) 04:45:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8}, 0x0) 04:45:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x1440, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:47 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x42, 0x0, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r6}, 0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000a40)=@sack_info={r6, 0x200000, 0x3}, &(0x7f0000000ac0)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000b00)={r7, 0x8ba5}, &(0x7f0000000b40)=0x8) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19404, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={r9, @in6={{0xa, 0x4e22, 0xb9, @loopback, 0x1ff}}, [0x8, 0x836, 0x4, 0x1, 0x7, 0x8, 0x2, 0x8, 0x7cbf, 0x6, 0x3, 0x1, 0x9, 0x101, 0x1]}, &(0x7f0000000000)=0x100) 04:45:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x3f00, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x9}, 0x0) [ 1663.324610][ T29] audit: type=1804 audit(1595565947.776:1315): pid=31993 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/8/cgroup.controllers" dev="sda1" ino=16370 res=1 [ 1663.337761][T31993] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:45:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xe}, 0x0) 04:45:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x4014, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:48 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x139000000) 04:45:48 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$tipc(0x1e, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$qrtr(r1, &(0x7f0000000240), &(0x7f0000000280)=0xc) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000001060fcff2273cc56dc00000000000000", @ANYRES32=0x0, @ANYRESHEX, @ANYRES16, @ANYRES64=r3, @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x37cb1133) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@deltclass={0x3c, 0x29, 0x800, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff1, 0x3}, {0xa, 0x5}, {0x8, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xff}}, @TCA_RATE={0x6, 0x5, {0xa7, 0x9}}, @TCA_RATE={0x6, 0x5, {0x61, 0x1f}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008844}, 0x20000000) 04:45:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xf}, 0x0) [ 1663.764287][T32028] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1663.839141][T32027] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:45:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x0) pipe(&(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) r7 = socket(0x1000000010, 0x80003, 0x0) sendmmsg$alg(r7, &(0x7f0000000100), 0x492492492492711, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x6558, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r10}}, 0x20}}, 0x0) 04:45:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x6000, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x60}, 0x0) 04:45:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xe}, 0x0) 04:45:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0xf000, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xf0}, 0x0) [ 1664.221426][T32077] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1664.249569][ T29] kauditd_printk_skb: 1 callbacks suppressed 04:45:48 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xb, 0x800, 0x8, 0x41, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r0, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000001a00)=0x7, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001080)={r0, &(0x7f0000000040), &(0x7f0000000080)=""/4096}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x2, 0x1, 0x3}, 0x14}}, 0x0) splice(r0, &(0x7f0000000040)=0x42, r1, &(0x7f00000010c0)=0x1, 0x7f, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x5) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a40)={&(0x7f0000001b00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0200bde0f1517b755b8faa6a0428bd7000fcdbdf2501000000000000014100000074001700000017000008006574683a76657468305fb1915da4b199a1583a9a285c056dfedd2c6e623f381cf603c8dbf22b7fd420b1031767bab5aa7179f46f1eb2173fd597f9a57f3decae"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000002040)=ANY=[@ANYBLOB="88000000031410002dbd7000ffdbdf250900020073797a3200000000080041007278650014003300766c616e3000000000000000000000000900020073797a31000000000800410072786500140033006d6163766c616e3000000000000000000900020073797a310000000008004100736977001400330076657468315f746f5f626f6e64000000f1f0a332dfc4959236cbfc34704ceab705327b81f62f010893cece3a650a2a7c506a037293e04f10229cb30e2c5d56c6c353c06aa84769b967bbe166bc3e6208dd438b9bf4bd24e6d128d78c0a1734f7a7152a01c217d5c882ff93f7be0918a7908ee569b7f43877536f65267d7e6a64e62b9f57668dbf86fc80b99442af486279eda31dcd9d43a80705d8d3c03aa7e1209ecb04087b"], 0x88}, 0x1, 0x0, 0x0, 0x40044}, 0xc840) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001d80)=ANY=[@ANYBLOB="5c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0040020000000000280012800b0001006d616373656300001800028005000600000000000c00010000000000000000000a000500140000000000000008000a00", @ANYRES32=r6, @ANYBLOB="95572c040e436fea1f96da9ddeb1b5abd5b8c9fe5c3140c8f7e56b1f5f4e8c69e332da474b0d8e525db3fab0ed02163c33493ddb06411c1174caef2e0e0000000000048023b5f76bd512183696b304bc25807d9c703d3ef14ced0b66068364e182004f46988a0642a10b18349f012561b5dae525ed26cd0b57e26b3e3419a192f016db562b53136de8e496347370bd9acb6f8954b3d04b2dab34cff0627490eb5a6492172585c81f65557ea77cb898b9f7e6d6dfd970ff86523fd13382a8ab8fad61b7200102d75c299749559c59287d53c3e50687352228294f76b64d90945e2af5beeeaad5ebf96bdd9a53e1c5"], 0x5c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000001980)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001940)={&(0x7f00000011c0)=ANY=[@ANYBLOB='lG\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x76c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c1) socket(0x18, 0x800, 0x3) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001d00)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_PORT={0x6, 0x5, 0xe}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 1664.249585][ T29] audit: type=1804 audit(1595565948.696:1317): pid=32030 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/9/cgroup.controllers" dev="sda1" ino=15948 res=1 [ 1664.312634][T32077] bond7 (uninitialized): Released all slaves 04:45:48 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x13a000000) 04:45:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x20000, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x300}, 0x0) 04:45:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x34000, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1664.582169][ T29] audit: type=1804 audit(1595565949.036:1318): pid=32100 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/10/cgroup.controllers" dev="sda1" ino=16370 res=1 [ 1664.586334][T32099] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1664.618478][T32100] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:45:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x500}, 0x0) [ 1664.780023][T32077] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1665.043436][T32106] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 14 - 0 [ 1665.068274][T32106] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 14 - 0 [ 1665.091113][T32106] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 14 - 0 [ 1665.110568][T32106] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 14 - 0 [ 1665.118728][T32106] device geneve2 entered promiscuous mode [ 1665.175484][T32103] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 04:45:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8}]}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') 04:45:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x400300, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x900}, 0x0) 04:45:49 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x13b000000) 04:45:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xe00}, 0x0) [ 1665.471248][ T29] audit: type=1804 audit(1595565949.926:1319): pid=32148 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/11/cgroup.controllers" dev="sda1" ino=15904 res=1 [ 1665.516667][T32148] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:45:50 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) socket$inet6(0xa, 0x3, 0x0) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2162, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) shutdown(r1, 0x5799f5f6d4832733) 04:45:50 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/1147], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x37cb1133) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r3, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x30}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) 04:45:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x1000000, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 04:45:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x2000000, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1028}, 0x0) [ 1665.819436][ T29] audit: type=1804 audit(1595565950.266:1320): pid=32152 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/11/cgroup.controllers" dev="sda1" ino=15904 res=1 04:45:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x3000000, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:50 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x13c000000) 04:45:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2810}, 0x0) 04:45:50 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000600)=@newsa={0x15c, 0x10, 0x801, 0x0, 0x0, {{@in6=@mcast1, @in6=@mcast1}, {@in, 0x0, 0x6c}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24}]}, 0x15c}}, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000300)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020014000100000000002cf82e19f9fc99c9d0181fb4592f01bc2c7a7ce677c25cf5ae5d091dcf4af9f92615de1b13d040ea91a67554027e9a75d3ae568d5f3126b9450f782dade0db60a8b1d1056748edb6f395f82ddae3b1fc5a6197aba010e9202c03d90be2", @ANYRES32=0x0, @ANYBLOB="00004de801000000aa2b46152b7130d560e3ca339045857a545438673cff773ec8e055200bc9a9ce7fbf47379afdad075f515ec8db1315"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000b00000000010000000000000800000000000000cea04b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x5c, 0x11, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PHYS_PORT_ID={0x21, 0x22, "90bf6ca5518be259c4c6407e2fb79108b83d718e08e06c3232617d5475"}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x40}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_LINKMODE={0x5, 0x11, 0x7}]}, 0x5c}}, 0x0) 04:45:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x4000000, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x6000}, 0x0) [ 1666.163194][ T29] audit: type=1804 audit(1595565950.616:1321): pid=32184 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/12/cgroup.controllers" dev="sda1" ino=16379 res=1 [ 1666.217124][T32184] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:45:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x5000000, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093ad55f674402d020000000000005ab527ee3697f57fe12ea7f7070000f1ed4436f7054f26b1b3f4279e7b34603cdd37536bedf6ba7a2eb40ff82812ac6ca16b34f98125f30e6326996a3cfee33025a30b45bdcf1d273683626e00dc254d570dca6b78ad833488cfe4229ed2049edd0d69613d3cd61f00158e6eee8532151d72ab8abaa9652300dcbf00000000cc587424363dc6ad7f52bf424c6e6cafbe9309aaa218a52001a3cd753441f0db74596fa53881b6d72c002a60c1bc7dc8c38b7d2e13c50424b9dd114590da1b5f706870d33d707e9ea0cc000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x41, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}, 0x10}, 0x78) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffde7}], 0x1}, 0x0) write(r2, 0x0, 0x0) 04:45:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 04:45:51 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000220044944eeba71a4976e252922cb18f032e2aba000000012e0b3836005404b0e0301a4ce875f2e3b15f163ee340b7c59500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000000000004974000000000000097fc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e00190346421df819f29079bf786728", @ANYRES32=r4], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x84ffde, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x37cb1133) ioctl$SIOCAX25DELFWD(r5, 0x89eb, &(0x7f0000000040)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) 04:45:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x8000000, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1666.609729][ T29] audit: type=1804 audit(1595565951.056:1322): pid=32187 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/12/cgroup.controllers" dev="sda1" ino=16379 res=1 04:45:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 04:45:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x9000000, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:51 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x13d000000) 04:45:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 04:45:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0xe000000, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x2000, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000040)=0x400000) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="69b327b1e15fe37f07fab1a8dc2e6bc8", 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ad56b6c50400aeb995298992ea5400c2", 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$FIONCLEX(r3, 0x5450) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x19404, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x114, 0x14, 0x200, 0x70bd28, 0x25dfdbfb, {0x6, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "ee9150954f945176284bf359978f5e02508570161aea81388e2a64651ae69c79742db1bb1050e19038ab25c4a65a5eca775dfcc24839f3ee69f86cf697784e443847a6b2cf5badc3686bcf768e56a96ab2417c462d2a6554bb6c762823c4f09df82c78cf0d65967647278e22020f54ea7cfe94aac9c855145c4c6f947518b1c6fd86a5d5cca471485d37a237186e28eaf75e771227be4d98c4f7fba0e02ef65492e37447408e7fad9e64d73cf85499aa4b63429c2a6ae319f3d08b9cf88b7941ac9e6844745240c7477b440ea59ff227918dc7e9671be4dc3f01cac22c7df34da6b3bd4a5822091bfab3c34723d2b045000c1f255f5c9b9339"}]}, 0x114}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, 0x0, 0x0) 04:45:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 04:45:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0xf000000, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1667.012872][ T29] audit: type=1804 audit(1595565951.466:1323): pid=32228 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/13/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 1667.048013][T32228] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:45:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 04:45:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x3f000000, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1667.351942][ T29] audit: type=1804 audit(1595565951.806:1324): pid=32231 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/13/cgroup.controllers" dev="sda1" ino=16382 res=1 04:45:52 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 04:45:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x40140000, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000001400), 0x0) sendmsg$nl_route(r5, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="36000000210008fe2cbd7000020078e396a8c3b0de6c736cc4c0fc952f6480040600000702000100080001006401010008000100ac141430"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000814) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f0000000180)=0x3) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) sendfile(r6, r2, 0x0, 0xf03b0000) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x8001, 0x800f4d2}) 04:45:52 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x13e000000) 04:45:52 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000680)=ANY=[@ANYBLOB="46040800", @ANYRES16=r0, @ANYRESOCT, @ANYRES32], 0x4}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/159, 0x9f}, {&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000140)=""/245, 0xf5}, {&(0x7f0000000240)=""/27, 0x1b}, {&(0x7f0000000280)=""/167, 0xa7}, {&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/71, 0x47}], 0x7, 0xa74f) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) r5 = accept(0xffffffffffffffff, &(0x7f00000005c0)=@isdn, &(0x7f0000000640)=0x80) ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) 04:45:52 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) [ 1667.738327][T32255] IPVS: ftp: loaded support on port[0] = 21 04:45:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x60000000, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1667.831025][ T29] audit: type=1804 audit(1595565952.286:1325): pid=32257 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/14/cgroup.controllers" dev="sda1" ino=16377 res=1 04:45:52 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x37cb1133) recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/98, 0x62, 0x40000103, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2c}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) [ 1667.877206][T32257] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1667.885844][T32255] virt_wifi0 speed is unknown, defaulting to 1000 04:45:52 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 04:45:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x9effffff, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1668.106977][ T29] audit: type=1804 audit(1595565952.556:1326): pid=32263 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/14/cgroup.controllers" dev="sda1" ino=16377 res=1 04:45:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0xf0ffffff, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:52 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 04:45:52 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x13f000000) 04:45:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0xfffff000, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:52 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) [ 1668.487677][T32283] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:45:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0xffffff7f, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1668.661067][T32260] IPVS: ftp: loaded support on port[0] = 21 [ 1668.757170][T32260] virt_wifi0 speed is unknown, defaulting to 1000 04:45:53 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0x1, 0x5) shutdown(r0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") connect$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0)={0x27, 0x1, 0x1, 0x1, 0x20, 0x6, "2d94d0072279722a4835cd4d1834adeeebea29cfaf04e5dae7f6efa7bd6583aa8592009e6da5c3eb92acfc446aa9bd99422567cd3ef756323a7f8e046f2a4c", 0x23}, 0x60) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 04:45:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 04:45:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0xffffff9e, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:53 executing program 5: unshare(0x60000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x19404, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000300)=0x41, 0x4) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r6, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101008000000000000002000000", @ANYRES32=r6, @ANYBLOB="08000200ac"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) 04:45:53 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x140000000) 04:45:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x28100000}, 0x0) 04:45:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0xfffffff0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1669.533559][T32344] IPVS: ftp: loaded support on port[0] = 21 [ 1669.596456][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1669.596472][ T29] audit: type=1804 audit(1595565954.046:1329): pid=32348 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/16/cgroup.controllers" dev="sda1" ino=16380 res=1 [ 1669.638258][T32348] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1669.663538][T32344] virt_wifi0 speed is unknown, defaulting to 1000 04:45:54 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x5}, {{&(0x7f0000000100)=@nfc_llcp, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)=""/7, 0x7}, {&(0x7f0000000180)=""/214, 0xd6}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000340)=""/91, 0x5b}, {&(0x7f00000003c0)=""/95, 0x5f}, {&(0x7f0000000440)=""/105, 0xffffffffffffff20}, {&(0x7f00000004c0)=""/163, 0xa3}], 0x8}, 0x2}, {{&(0x7f0000000600)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/58, 0x3a}, {&(0x7f00000006c0)=""/69, 0x45}], 0x2, &(0x7f0000000780)=""/74, 0x4a}, 0xc017}], 0x3, 0x0, 0x0) 04:45:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0xffffffff, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 04:45:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) [ 1670.056841][ T29] audit: type=1804 audit(1595565954.506:1330): pid=32351 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/16/cgroup.controllers" dev="sda1" ino=16380 res=1 04:45:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:54 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x148000000) 04:45:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) [ 1670.321245][T32349] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1670.378892][ T29] audit: type=1804 audit(1595565954.826:1331): pid=32376 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/17/cgroup.controllers" dev="sda1" ino=15983 res=1 [ 1670.425051][T32376] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1670.615466][T32349] IPVS: ftp: loaded support on port[0] = 21 [ 1670.639397][ T29] audit: type=1804 audit(1595565955.086:1332): pid=32380 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/17/cgroup.controllers" dev="sda1" ino=15983 res=1 [ 1670.757816][ T29] audit: type=1804 audit(1595565955.096:1333): pid=32376 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/17/cgroup.controllers" dev="sda1" ino=15983 res=1 [ 1671.126152][T32391] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1671.147878][T32349] virt_wifi0 speed is unknown, defaulting to 1000 04:45:56 executing program 5: unshare(0x60000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x19404, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000300)=0x41, 0x4) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r6, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101008000000000000002000000", @ANYRES32=r6, @ANYBLOB="08000200ac"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) 04:45:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) 04:45:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x3}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:56 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xd) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r5, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="00002bbd7000fddbdf250a000000080004000c040000040003801800028014000100ff0200000000000000000000000000010c00018008000900760000000800050000feffff08000600080000001d16ca4da27e2a68da7fd052bc5b31dcbee6041adda69809c58dbbd66297ebd3ee61ef39f3d70ec9c92893ea8ec175450a3af125ec890cdbec656caaf2282d5d03c3"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:45:56 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x14a000000) 04:45:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xfcffffff}, 0x0) [ 1671.744076][ T29] audit: type=1804 audit(1595565956.196:1334): pid=32444 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir439724528/syzkaller.F63zFi/1605/memory.events" dev="sda1" ino=16373 res=1 04:45:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x4}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1671.807275][T32443] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1671.821808][T32447] IPVS: ftp: loaded support on port[0] = 21 [ 1671.853692][ T29] audit: type=1800 audit(1595565956.226:1335): pid=32444 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16373 res=0 04:45:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) [ 1671.950784][T32447] virt_wifi0 speed is unknown, defaulting to 1000 [ 1671.973279][ T29] audit: type=1804 audit(1595565956.226:1336): pid=32444 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir439724528/syzkaller.F63zFi/1605/memory.events" dev="sda1" ino=16373 res=1 04:45:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x9, 0xdb, 0x8, 0x3, 0x9, 0x2, 0x21, 0x8, r3}, 0x20) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xd7ae579a731dfa0d, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x37cb1133) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="f000000050716e190a3684cc80931f18563148cfd1d5ce4527e445dd8eee4a2f82ffffb34ed44aa76dd788d0dc2edad49724c814fe8ea79f9b42934cbadf71fc13a7514b4571134798b18a1a7ccd269c2b3a237b8342000000fd12fd6908f2ae70d0f7bf2e1730fc09aed5263532aea31f33a58eb8cd084ffa59564b3ef5b0f245027596a37a59ee16ab9d9070f7aeeb5eb977c7958de05de1d0f6fc00ea09c49d51a1dc3c47aa8c5ba5cb75bc45dad127556761c39ced64e5371ea5dff048d9c09c358aadd7135a4905b1126eebf8d2e7abc41b6f1efab468aa8d509a991cd116289191864d2e533200"/249], &(0x7f0000000040)=0xf8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000080)={r5, 0x6, 0x30, 0x411, 0x6}, &(0x7f0000000280)=0x18) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0)=0x1801, 0x4) sendmsg$sock(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000016c0)="ee", 0x1}], 0x1}, 0x0) sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f8323058da774c0f518d781a7a8672c", 0x82}, {&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2d6ca8af4ec79cae5c78430ea32a266856c8260e4de581475abdd2153aa8fea34789320ee7714903088dfd546a136d40646857b851b65a7a918c58881d275d5d71239c7698d7bdb3f879f49436bbbd87586553407860397d48842400126f8703ddc55ba4e", 0xec}, {&(0x7f0000000000)="40c11437fb00d6eab04b0c06251f8168813a461ace70236fa0348db1d319fe147c2390db325b8f9969aec8c50d", 0x2d}, {&(0x7f0000001600)="46a43e3f510e3eac779206060abfc1e723fc59d595e9948e6d03be0d6c89d8702d5f2332fe4e991d8ce010dd173f3035a16bc1ae729800e6c53d5b3b7deacf114c931c707559610cd1366220890b11cd862202abfbcd24a76a2f0f7044964480ebd12d0bca901ac0e4e3188cb74f", 0x6e}], 0x4}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f093e579a0ad13bbfa6dfcf5f92e9137fcecd3422187adb2613d1cb2a10ac11024822cad9f16a8b47c13f163ae0a1beeec0926acde449fbfe0e5541045b2c313750354dae2754d46379a01c17bd3c8c6f824123ab7b626a841f31bee8284b373074ba53a7f519de6ff25f6c4177fcf5384847410058370bd3a07df32aa695", 0x7f}, {&(0x7f00000003c0)="9c5948ce9528017c27de9f52", 0xc}, {&(0x7f0000001b40)="328da01e65d586a9c60700f1b6767f0cf53ac14b8dcb6f7c26d8e51a46d331b6682ad97b159f90fa1d92d89d922946a445adbd39959507a484dd5cede588a21613505836b03630d122e3b61ebdfc9d2acd401a64736bbb468639e73d6666bd312e0c61aac1f9c099b0eb719604419bbbba526f543e8723f11b89390e914251ea4ac7ac8a5146944db8010f79b8ab2524ae9401a06af114dcf6816b1cca3cd6210ee989d77ec8f33e2bb4e9a37b6aff3137", 0xb1}], 0x3}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000021c0)="d38874b7ef7ea6f303c4b44feba7174b2e17c595325b7a57e4197434591c16015eb2ca1bf84b081a4eb78565", 0x2c}], 0x1}}], 0x3, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 04:45:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) [ 1672.129821][ T29] audit: type=1804 audit(1595565956.246:1337): pid=32443 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/18/cgroup.controllers" dev="sda1" ino=16375 res=1 04:45:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x8}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1672.286636][ T29] audit: type=1804 audit(1595565956.326:1338): pid=32450 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir439724528/syzkaller.F63zFi/1605/memory.events" dev="sda1" ino=16373 res=1 [ 1672.692150][T32449] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 04:45:57 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a010000000010af000000000000000900010073797a3000000000700000120a0100000000000000000000000000040004800900020073797a30000000000900010073797a30000000000800034000"], 0xb8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000001) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) connect$pppoe(r4, &(0x7f00000000c0)={0x18, 0x0, {0x1, @dev={[], 0x1a}, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) sendfile(r1, r3, 0x0, 0x100000002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000100)=0x743) pipe(&(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) 04:45:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 04:45:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x9}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:57 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x14b000000) 04:45:57 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x2}, 0x626f5}, 0x6d) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x140e, 0x15, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x140e, 0x2, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c084}, 0x98) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000440)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@remote}}, &(0x7f0000000540)=0xe8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r8}, @CGW_SRC_IF={0x8, 0x9, r8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000640)={&(0x7f0000000400), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bond_slave_0\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'netdevsim0\x00'}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80, 0x1}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 04:45:57 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000001900)=[{&(0x7f0000000400)="b19462c33f5d8115ec7c43e324cb91c04ab79a9d9abe98033e3295eebff7f4b93ac52a7368d1be44dc0e346c21e220fa44fde347ffb59892f2c7713ce44d0acec8d57d0ac439e24d4c7e6160356492dc21a4f94e67be791ec34221e762cd0f50ebc08b5a9a3d7b2c10a61673255ee1dd14e0bf57bf9afebd301941e2b3259c1506b98db698f5c9b319958d545d4e4d1db301dee1263e963665de6964774a1a8c82bda902ab3a57a6cb5fec6f469af8ca336c8e52ba6aae6eda763e8e5cca04f77089bb16d1cd0f75f6fe2a4f2f8f875d8be12571eec5a56f", 0xd8}, {&(0x7f00000005c0)="357664a6eb136a8c093aeda6ca78c84b1cc4ac9bb07939d040b691d81fe0f6c040df718502a23459a7c34ddf57b5325b6d8391372a758d24b206927b31fab6942f2c896931cc3c319c3633ad5cfe171a2f68d83077637bb27a168f7117", 0x5d}, {&(0x7f0000000700)="c384a235c07e956b29b26788", 0xc}], 0x3) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f00000001c0)={{0x0, 0x0, @reserved="048f0fd5b39aa28c18be41776810682eb17154bfed665268d6dc0aec54819a60"}, 0xa7, 0x0, [], "92c1b290a6f7902265f954b4b26eb4affde61e652c5610a7406eb46947a9b062bb5dc0cd5eab57b7bbd0b84a984b08491acaad19a51dd8dcd31854b67c59f59a9133102f13edba508cfaedb74d43eee3039aa2a64a275d0b6dd0d712a6d23485ec2d563101b7b897c8c4d16fe813596bd3931ef88027593adb788f0fe75504ca11a90cb0a07c6f06c82fd897600bb0e090fa693bf42f8be35fa44c9fcaa6e6887cfd688a2051d8"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f00000002c0)={{0x3, 0x0, @descriptor="81c359753789311c"}, 0xb5, r4, [], "8c6060d45012daa3a7c264972cf6f3ead0b1f11d9a4df16341ef42b879cfe4d91469690c74b2ad4bc80a7aaa97ea181af9e71c8c01f38c003d549d4bb1011a13f37452a0c2df4de16626e8e28a3c5319d46bb5eca08bb150cc501f6ebe3af7ea42ee95cb0296704c61c43628d2e23affe8d1cef65532f9d83f4f2b2ab6da3ed046bf2c43b7c3f020beca85c0d5cd32b9963b37450bd863689ac70b2bba82cd317b605b069bdabe2643e980e046d466b42819b112d2"}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x10012, r1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x28, 0x6, &(0x7f0000581000)={{{@in, @in6=@mcast2}}}, &(0x7f0000000140)=0xffffffffffffff74) 04:45:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 04:45:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0xe}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:57 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) getsockopt$inet_int(r2, 0x10d, 0xe, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x80, 0x1, 0x3}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0), 0x6522, r3}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x0, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000300)={&(0x7f0000000540)=""/150, 0x0, 0x800, 0x4, 0x1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f00000000c0), &(0x7f0000000200)=""/86}, 0x20) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x100, 0x2) r5 = socket$inet6(0xa, 0x800, 0x9) socketpair(0x4, 0x80000, 0x7ff, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) sendmsg$can_j1939(r6, &(0x7f0000000500)={&(0x7f00000003c0)={0x1d, r7, 0x1, {0x1}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000400)="b27c43bd57a7359552355b13149d7a63c8b745bfcef2cb25e73ec097b7e5bd9632c6bef85d38516a3eb81068fb14200ffbb7a8a990aa0b4e407ae8cc85e491f136221ef11a5692266bb4906ea689fa1804f0f48d3e35cb9eb429daaf53300b7c1b7ee52fd18fb1e465a1ba7e717671c63592b9ec77e1784f484c8bef798b8c5980ff33575b9345fbe0cc83", 0x8b}, 0x1, 0x0, 0x0, 0x5}, 0x8000) getsockopt$inet6_dccp_int(r5, 0x21, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @private}, &(0x7f0000000040)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', r8}) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29, 0x3b}], 0x18}], 0x146, 0x0) [ 1673.421703][T32510] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:45:57 executing program 5: r0 = socket(0x10, 0x80002, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000040)) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000100)=""/163, 0xa3}, {&(0x7f00000001c0)=""/152, 0x98}, {&(0x7f0000000280)=""/171, 0xab}, {&(0x7f00000007c0)=""/244, 0xf4}, {&(0x7f0000000440)=""/125, 0x7d}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/182, 0xb6}], 0x7, 0x5450) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x37cb1133) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000088}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x98, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x60}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000080)=@newtaction={0x30, 0x31, 0x53b, 0x0, 0x0, {}, [{0x1c, 0x1, [@m_sample={0x18, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x4}, {0x4}}}]}]}, 0x30}}, 0x0) 04:45:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xfffffff5}, 0x0) 04:45:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0xf}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xfffffffc}, 0x0) 04:45:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x60}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:58 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x14c000000) 04:45:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 04:45:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x2) [ 1674.086512][T32547] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:45:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="ec52c72f000000", @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf25020000002f00070073797374656d5f753a6f626a6563745f723a73657472616e735f696e697472635f657865635f743a733000001400060076657468315f746f5f6261746164760005000100000000002900070073797374656d5f753a6f626a6563745f723a68616c645f61636c5f657865635f743a733000000000140006007465616d5f736c6176655f310000000008000500ac141416140006000000000000000000000000000000000008000500ac14144214000200fe8000000000000000000000000000aa14000300ff010000000000000000000000000001"], 0xec}, 0x1, 0x0, 0x0, 0x50000091}, 0x24000890) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f00000009c0)={0x264, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x70ec073e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9705}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe01}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x85}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff5}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb3b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x340}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9461bab}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb5c0}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x8004}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012abd7000060053c400d3d73102dbdf25070000001400060076657468305f746f5f626174616476002800070073797374656f5f753a6f626a6563745f723a736f756e645f6465766963655f743a73300014000300fe8000000000000000000000000000bb149058000300fe8000000000000068bfee59cdf581cfd11e674450fd993a5d983d291479c171058c5004b82d6aef088da623d584faaff3d43f5fd8b0b1a49a74a8f0cab9474a00896f8c1cc735e843a273c2af21df2b14b32621328566434745922871613ba6a55dee78e0adc93d1c0f6bda27013898bda0e96e04dc080d5ae26de7cfa7bdf3cf490a15d5127f5d364f018b9477400103d43cf8ecd430b3971ecf"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x84, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bond\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:zero_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8}, 0x48081) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000040), 0x4) r6 = socket(0x2c, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000240)={0x0, 0xffffffffffffffb4, &(0x7f00000001c0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100001040000009d45dd529d803d1c00", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000400000008000a00"], 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) 04:45:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1674.264637][T32557] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 04:45:58 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) getsockopt$inet_int(r2, 0x10d, 0xe, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x80, 0x1, 0x3}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0), 0x6522, r3}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x0, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000300)={&(0x7f0000000540)=""/150, 0x0, 0x800, 0x4, 0x1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f00000000c0), &(0x7f0000000200)=""/86}, 0x20) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x100, 0x2) r5 = socket$inet6(0xa, 0x800, 0x9) socketpair(0x4, 0x80000, 0x7ff, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) sendmsg$can_j1939(r6, &(0x7f0000000500)={&(0x7f00000003c0)={0x1d, r7, 0x1, {0x1}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000400)="b27c43bd57a7359552355b13149d7a63c8b745bfcef2cb25e73ec097b7e5bd9632c6bef85d38516a3eb81068fb14200ffbb7a8a990aa0b4e407ae8cc85e491f136221ef11a5692266bb4906ea689fa1804f0f48d3e35cb9eb429daaf53300b7c1b7ee52fd18fb1e465a1ba7e717671c63592b9ec77e1784f484c8bef798b8c5980ff33575b9345fbe0cc83", 0x8b}, 0x1, 0x0, 0x0, 0x5}, 0x8000) getsockopt$inet6_dccp_int(r5, 0x21, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @private}, &(0x7f0000000040)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', r8}) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29, 0x3b}], 0x18}], 0x146, 0x0) [ 1674.401094][T32562] device syz_tun left promiscuous mode [ 1674.406807][T32562] bridge2: port 1(syz_tun) entered disabled state 04:45:58 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x200000000019404, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000100)={r3, 0x4}, 0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000000c0)={r3}, 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x37cb1133) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e23, 0xfffffc01, @rand_addr=' \x01\x00', 0x80000001}}}, &(0x7f0000000000)=0x84) 04:45:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x3) 04:45:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:58 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1550e0000) 04:45:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYRESHEX=r2], &(0x7f00000000c0)='GPL\x00', 0x4, 0xff4, &(0x7f000062b000)=""/4084, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) bind$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r8, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r7, 0x0, r8, 0x0, 0x19404, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, 0x1, 0x7, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xda6}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffff7da}]}, 0x34}}, 0x40004) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=r6, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r3], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5000000, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x20, 0x11, 0x803, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 04:45:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x4) 04:45:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1674.642592][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1674.642607][ T29] audit: type=1804 audit(1595565959.096:1347): pid=32576 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/21/cgroup.controllers" dev="sda1" ino=16384 res=1 [ 1674.695808][T32576] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1674.725318][T32587] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 04:45:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x5) 04:45:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000180), 0x4) sendto$inet6(r0, &(0x7f0000000080)='W', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) getsockname$inet6(r0, 0x0, &(0x7f0000000040)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet(0x2, 0x6, 0xb) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r3, 0x8, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000280)={r4, 0xc7, "557f4248f8ba00e286558c3249320a60e11b1035ddfc7d9b22e435455c8f6550ab74aade44c27bee0008a5803766bc1889af53be45cc8a5670aa277d87641227ad5eaacd48452e1c5090dc25fe34a224049024f48534f6399dfbf1edeb50ca40c98bf5f2659753b99c87809f0f0a28b55f9eedb97d9a35bbfe1b91f36c1e1e72b83e129584c56c157f8d0234210b261f0737fc65965549bd6cb5427181365b39685936e4a74dcc4f73a50d25c828e96a5a9c7d407280ca3d8deb8d06416de5e5bce6098738eb2e"}, &(0x7f0000000100)=0xcf) 04:45:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x8) [ 1675.070201][ T29] audit: type=1804 audit(1595565959.516:1348): pid=32580 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/21/cgroup.controllers" dev="sda1" ino=16384 res=1 04:45:59 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @empty, 'ipvlan0\x00'}}, 0xfffffffffffffd47) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="d800000018008105e00f80ecdb4cb904021d6503fe027c05e8fe55a125000500ac14142603000e12080007000000812f0300040008000300e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0) [ 1675.363988][T32620] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 04:45:59 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x160000000) 04:45:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:45:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x9) 04:45:59 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="050000000000fdffffff0100000004000400050005000000000005000600000000000800030001000000"], 0x30}, 0x1, 0x6c, 0x0, 0x10}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="611e00d084ed54d59649f870d7c9f0ee00", @ANYRES16=r2, @ANYBLOB="00042abd7000fcdbdf250100000014000100ff010000000000000000000000000001080002007f000000050006001f0000000800020001000000080002000800000005000600400000000500060007000000d8300e9a79184acba5dbd4b57e0313380da1fba2f3d6b6b16487946c47b20b5a145fb4ea0fd6d8"], 0x58}, 0x1, 0x0, 0x0, 0xc0004}, 0x4048014) sendto$inet6(r0, &(0x7f0000000080)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x240000c4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES64, @ANYRESOCT], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=@newtfilter={0x24, 0x2c, 0x10, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x7}}}, 0x24}}, 0x0) connect(r0, &(0x7f0000000180)=@ll={0x11, 0xd, r5, 0x1, 0x7}, 0x80) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 04:45:59 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r2, &(0x7f0000000100)="1f0000000104ff00fd4354c007110000f305030008000100010423dcffdf00", 0x1f) r3 = socket(0x10, 0x2, 0xc) write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r4 = socket(0x10, 0x800000000000002, 0xc) write(r4, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x44e5, 0x8}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$FITRIM(r6, 0x40305839, &(0x7f0000000100)={0x0, 0x2000, 0x2be20000}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) r7 = accept4$netrom(r0, &(0x7f0000000600)={{0x3, @netrom}, [@null, @remote, @rose, @bcast]}, &(0x7f0000000680)=0x48, 0x80000) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000740)={0xffffffffffffffff, r7, 0x8, 0x55, &(0x7f00000006c0)="0f5f5bb9284bc8b3db5245b27ccc9a0a52bfa1dcc6cad78574cc533336264aa6cf6fba543f15129d4de46adcfb212b1b7f1275e2304e0c8dfbfab85d88587a11f947a442643a2afb3381a2b91fab10f04476987c6e", 0x3b, 0x98, 0x6, 0x0, 0x7fff, 0x2, 0x9, 'syz1\x00'}) [ 1675.511118][T32627] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 04:46:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xe) [ 1675.563791][T32632] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1675.605787][ T29] audit: type=1804 audit(1595565960.056:1349): pid=32630 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/22/cgroup.controllers" dev="sda1" ino=15999 res=1 [ 1675.621208][T32633] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1675.640823][T32641] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1675.651411][T32630] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1675.667751][T32632] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 04:46:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0xe}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xf) [ 1675.901863][ T29] audit: type=1804 audit(1595565960.356:1350): pid=32636 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/22/cgroup.controllers" dev="sda1" ino=15999 res=1 04:46:00 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000400)={'filter\x00'}, &(0x7f00000002c0)=0x44) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') 04:46:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x28, r3, 0x23f, 0x0, 0x0, {{}, {0x0, 0x410c, 0xf0}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x13, @l2={'ib', 0x3a, '\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x1e, &(0x7f00000021c0)=""/4117, &(0x7f0000001140)=0xf8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 04:46:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0xf}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:00 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x168000000) 04:46:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x60) 04:46:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x60}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xf0) [ 1676.143412][T32669] IPVS: ftp: loaded support on port[0] = 21 [ 1676.238104][T32669] virt_wifi0 speed is unknown, defaulting to 1000 [ 1676.252819][ T29] audit: type=1804 audit(1595565960.706:1351): pid=32675 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/23/cgroup.controllers" dev="sda1" ino=15905 res=1 [ 1676.285911][T32671] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1676.349760][T32641] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 04:46:00 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7f}, 0x1c) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000cc0), 0x800) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x40, 0x1, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c006}, 0x4040) r2 = accept(0xffffffffffffffff, &(0x7f0000001080)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000001100)=0x80) r3 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001740)={0x0, 0x0, 0x0}, &(0x7f0000001780)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000017c0)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001800)={0x0, 0x0, 0x0}, &(0x7f0000001840)=0xc) r7 = socket$phonet(0x23, 0x2, 0x1) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001880)={0x2, 0x5, 0xffffffc1, 0x4, 0x12, 0x1, 0x3, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x40) r10 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000001e00)='devices.deny\x00', 0x2, 0x0) r11 = accept4$rose(0xffffffffffffffff, &(0x7f0000001e40)=@short={0xb, @dev, @remote, 0x1, @bcast}, &(0x7f0000001e80)=0x1c, 0x100800) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001ec0), 0x4) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001f00)=0xffffffffffffffff, 0x4) r14 = socket$rxrpc(0x21, 0x2, 0x2) r15 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001f40)={r1}) sendmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000001140)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000011c0)="af35691f922b9f0e28ac2be5dca09f698b5892e92caca330eec57877cc21f927e13f5106a2e28ae9d76fea6652b1cdccc95fc80d85c94f05825b5b158fb179be08021362650ff6cca3fabd554d2d567260c0d9ccb0b103b988c9de084decc08f15e478f71b96e42dd57911605747c2ff27f9a70094a93f7f28af93d40bc12f485d0459d645bdefbef08a8b0ea93216c2d0562f06b0d8412d6cf4560ad56e4ebbf24bbfc5613413b8824865a20b02173e0b7184b26d65a2e32c4e22e26f11346c7bc379a061cbc21018c1bd344274a3b931653d8525a76a01", 0xd8}, {&(0x7f00000012c0)="ba864aff2b73af00a68c", 0xa}, {&(0x7f0000001300)="14aabd544d7058928388e6148984d3a049aa08de47697a75f7791e092b86d9677e2b953e21d6cfc0404d83c8fe0feec775b3f81dcbe4c0e189a0f9a93d0caaebc407b26152d5a67c9953f546d18d196382cf4c89fc6bc2e8bedd4dab7fe32a2ca58e433f331018e31c161024c2e8b0d6b158e1c432f36a67fdee22d6e19d663653dd22b3efa2de35a6d9ac5be13d2506d3a318ae42582d5a7b53ddb6824259e97347e35711efa2a8f522ba491de05404e33ca7f7d0f502ddaf4f28c09b6e13e8fc0766d9", 0xc4}, {&(0x7f0000001400)="e5f194a878888384c7e20e97bbdc1e4016a3a1bb36194aa410df16e7a8bb010e09e1e094330090ccaf33e47d11bdc67412585d1313ac66e7ec31ac1687989ac0340d10bd9bd9792ae39d827a3bb2c1610544ece5817c0b7d7a1b34e993cbe2cbbd26beca330ba738b92187e036060dcbb908fb7bc5933391751cab4c7e524138cdb846c4da4125fb540c1474de62200106c02ae4605164ab1f77fc869670c4a04c0419837ae66a1ef875cd4c56436de8c7198535a34f61f6d883dc3ebe65d15cf5c08fd84f8285ce55fbcc54efd5e9c9bf74f8df4f3d6b27fc76be0a6b600f25f6b944606380d147db45cf5d73098aaeaaaa0984", 0xf4}, {&(0x7f0000001500)="acf7fea191f5242667639d891cd9729e279bb2da", 0x14}, {&(0x7f0000001540)="99770ac9698cc30f6db15a41f36eee029f1e68104ba150e058cacdbf72eaf369ea496b0e3bb6d9f1ef4fbc39bff32643d38944688863c3ebee9454e187b6ecf6e756b37fccd51fcfec31ad2c0224853eca006c77c89e53e71eefa9c83d1658a5ff4f47819f5f2cfeceb8517adebb22aaa9c7fc1e4680a16dfe35719e2766d2c9516cab7cb9ed5142fee910fec968c24ebab3858ea73f6de42504f4c97fdaceffeb3997c62323af01bfd29d240a0c6e2c132d29159c4e33b33e296c8c7bf90aa226b2e696b939", 0xc6}, {&(0x7f0000001640)="70925cae2ea7c47c6663126a3eb1dc56cfa9cbc24706d722f8e3d306efe046aafeed69880f9083216ecac0bb2e", 0x2d}, {&(0x7f0000001680)="ea5d50e066c3e88f8e", 0x9}], 0x8, &(0x7f0000001f80)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3, r4}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5, r6}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r7, r8, r9, r10, r11, r12, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, r0]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r13, r14]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, r15, r0, 0xffffffffffffffff, r16]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}], 0x108, 0x40800}, 0x4001) 04:46:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x300) 04:46:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x500) 04:46:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1676.757104][ T29] audit: type=1804 audit(1595565961.206:1352): pid=32675 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/23/cgroup.controllers" dev="sda1" ino=15905 res=1 [ 1676.895363][T32672] IPVS: ftp: loaded support on port[0] = 21 [ 1677.010990][T32672] virt_wifi0 speed is unknown, defaulting to 1000 04:46:01 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffdc1, 0x0}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$FITRIM(r5, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) sendfile(r4, r3, 0x0, 0xffffffff800) 04:46:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x900) 04:46:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:01 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x16c000000) 04:46:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) socket$kcm(0x29, 0x0, 0x0) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) r5 = accept$alg(r3, 0x0, 0x0) sendmmsg$sock(r5, &(0x7f0000000000), 0x0, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={@remote={[], 0x2}, 0x3, 'veth1_to_bridge\x00'}) sendfile(r6, r7, 0x0, 0xf03b0000) sendfile(r6, r2, 0x0, 0x8000000000004) sendfile(r1, r0, 0x0, 0x800000000000e) 04:46:01 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020006c9edae000300000a0005c0100000000000000008000a0009d35b4f000000b0b9cad4a1"], 0x50}}, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x4800) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3fb, 0x20, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48880}, 0xd1d8fe6ca1780872) 04:46:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1677.504016][T32750] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 04:46:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xe00) [ 1677.565565][ T29] audit: type=1804 audit(1595565962.016:1353): pid=32747 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/24/cgroup.controllers" dev="sda1" ino=15999 res=1 [ 1677.586109][T32750] device macsec2 entered promiscuous mode [ 1677.707036][ T29] audit: type=1804 audit(1595565962.146:1354): pid=32755 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir439724528/syzkaller.F63zFi/1612/memory.events" dev="sda1" ino=16082 res=1 04:46:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1677.739693][ T29] audit: type=1800 audit(1595565962.146:1355): pid=32755 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16082 res=0 [ 1677.766175][ T29] audit: type=1804 audit(1595565962.156:1356): pid=32755 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir439724528/syzkaller.F63zFi/1612/memory.events" dev="sda1" ino=16082 res=1 04:46:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xf00) 04:46:02 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x174000000) 04:46:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:03 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) listen(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x5, 0xfffffffb, 0x64, @local, @remote, 0x8000, 0x721, 0xffffffff, 0x5b}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r7}, @CGW_SRC_IF={0x8, 0x9, r7}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x94, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x94}}, 0x0) sendto$inet(r0, &(0x7f0000000000)="d2", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socket(0x10, 0x3, 0x0) 04:46:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x1028) 04:46:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:03 executing program 2: r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4000000}, 0x10}, 0x78) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000630277fbac141417ee", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) 04:46:03 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x17a000000) 04:46:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x2810) 04:46:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0xe}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1678.760949][ T325] IPVS: ftp: loaded support on port[0] = 21 [ 1678.837380][ T325] virt_wifi0 speed is unknown, defaulting to 1000 04:46:03 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 04:46:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x6000) 04:46:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0xf}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:03 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='$\x00\x00\x00Z\x00C', 0x7) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r4, r3, 0x0, 0x8000000000004) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00', @ANYRES16=r5, @ANYBLOB="00012bbd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x1d54a038cec019f1}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="0141", @ANYRES16=r5, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd4, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x3}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x90, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55bf898d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x103d3914}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fad905c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64fa43e4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}]}]}]}, 0xd4}}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r6, 0x0, 0x53f74f62, 0x0) 04:46:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x60}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1679.676985][ T325] IPVS: ftp: loaded support on port[0] = 21 [ 1679.765307][ T325] virt_wifi0 speed is unknown, defaulting to 1000 04:46:04 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x19effffff) 04:46:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xf000) 04:46:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:04 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r1, 0x2}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000000)="0200000000000000", 0x8}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x2, 0x2, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xf8f44179170fd58c}, 0x7f27e4f2b4926fa1) 04:46:04 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 04:46:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 04:46:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xf0ffff) 04:46:04 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfd00, &(0x7f0000000080)=[{&(0x7f0000000380)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020200bf050005001201", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0xc001) socket(0x1000000010, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) vmsplice(r2, &(0x7f0000002480)=[{&(0x7f0000000100)="3b2be79b0cc8d0e1d5bc4fa50bbc5966f2601dc3cc66fb48e87b8d514d5d729e05db8c86d68930cdff54cfd80bdbcd8a2527108637b292c6754cd5e5de5a017b0df997422fbd1bb2e2f55c4b9d8d204c2033aef51a9980facaa658a86e0a61ea2bcc1f9aa667ea229ec21c110574098d572d907c8765bf814d622a06ebedd217cdf34d9257782897754031dfa0ab0511d5664d1561207f46c8d5d3a59b57527c82035ec07410f60b8c038c279ae1f0e92a70", 0xb2}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f0000000280)="caf6780efec87d6468ee543f1949ecd8815acb5c14c18c344dd264e776cca32ea846d817498b9100863bb71b32f30bf8bbcc5446b33dbf9c595e22e0a99fcf829a2a1026f3bf6c642f2c587a6aa49254bb8dc71b94c9ca8097de2486935cc4d2b929925228b4bb3c67bd4d56b741c24eb05d0678e36581eded82c4f9d39e5b75338517fd443eab3d5a42f20dec220b05fbacb312fd52cf1607c2554a7c4a9d83c9e667d0d93f66d2255e2fe666074da1860e8f82a20865a67f088ab760a64d861535f29a6601a73b923a230497cd83232a6fe6d75969eeba99a218912f63c6ad4d7ec87d0a5da8939161065f57239678ec63bc77b27ecb027212383632", 0xfd}, {&(0x7f00000023c0)="e56724cacbe2b878eb415d7d6737861f5024b29ba133d991afd5f94b91e137643796eb1c740d7dadf7d182cfe166254dbc770a69eaa6c93fe8a8f17ddca46b2663c6c9b7616ab2f3c46a4c79b65a44b33d48b9f5b371b3474984ab407dbe8aa9d192bfbcf64dcc2abb5c1b01eb0dd973560c9761eecdd885386cefb7e9d8ba4fdcb4064246d9ebdb39f0e90e1aadfb71540a1ff2999e964bdbce75531b8b7a11a7180c3bab5c76ab66eddd72062a7acd5d5f085592ca7642ab", 0xb9}], 0x5, 0xa) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={r3, 0x9, 0x7f, 0x5}) bind$alg(r4, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000040)={0x4, 0x80000001, 0x6, 0x1}) [ 1680.415815][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:46:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x300}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1680.459050][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1680.459065][ T29] audit: type=1804 audit(1595565964.906:1366): pid=412 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/27/cgroup.controllers" dev="sda1" ino=16162 res=1 [ 1680.500368][ T412] __nla_validate_parse: 6 callbacks suppressed [ 1680.523617][ T412] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1680.538192][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 04:46:05 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x1000000) [ 1680.581623][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 04:46:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x500}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:05 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x2000000) [ 1680.878515][ T431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1680.928199][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:46:05 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1c7000000) [ 1680.979696][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1681.025714][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1681.121966][ T29] audit: type=1804 audit(1595565965.576:1367): pid=445 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/28/cgroup.controllers" dev="sda1" ino=15995 res=1 [ 1681.154427][ T445] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:05 executing program 1: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="161f61ee1e6f8dd84810f58a8b78f675000000daa38fdc3f2362f1eeaeee1567edbca3", @ANYRES16=r1, @ANYBLOB="010300000000000000000f00000018000180140002007665746830"], 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r4, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@nested={0x34}]}, 0x48}}, 0x0) r5 = socket(0x9, 0x6, 0x7) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r6, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x191) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x800) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r6, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x40c40d5) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r6, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6000001}, 0x10) 04:46:05 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x3000000) 04:46:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x900}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000001c0)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@icmp={{0x25, 0x4, 0x1, 0x3, 0xd5, 0x64, 0x0, 0xbc, 0x1, 0x0, @broadcast, @rand_addr=0x64010101, {[@noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x1f, 0x20, [@multicast1, @rand_addr=0x64010100, @multicast1, @local, @remote, @multicast1, @rand_addr=0x64010100]}, @cipso={0x86, 0x5c, 0x3, [{0x1, 0xa, "66ac66f617647166"}, {0x5, 0x11, "514c92bdd2d140c8d562792b42272b"}, {0x6, 0xf, "be2de82a536236973aac84531b"}, {0x0, 0x12, "11f312b64273ff9d38acd1d1dcd7f011"}, {0x0, 0x8, "e51d983a5b85"}, {0x5, 0x12, "bf5246be6d852f6ac54c7f9264e15587"}]}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x2, 0x0, {0xd, 0x4, 0x0, 0x9, 0x2, 0x65, 0x1, 0x81, 0x88, 0xff, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0xf4, 0x3, 0x0, [{@remote, 0x1}, {@remote, 0x100}, {@multicast2, 0x80000001}]}, @ra={0x94, 0x4, 0x1}]}}, "2882c34a8d"}}}}, 0xdf) r2 = socket$pppoe(0x18, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e23, 0x3, @loopback, 0x8}}, 0x0, 0x0, 0x7, 0x0, "84801a90616c549a64099536f238f5b01fd894735a940f24858f9bfa0a9430bf268bf1959a5ae8a74603abd718008b7e737d42d2dc8f8bd5ef3f245e9efb0f3b7794de41d49edf831d8bce74895b1c68"}, 0xd8) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000180)) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x37cb1133) r5 = gettid() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000100)=r5) r6 = syz_open_procfs$namespace(r5, &(0x7f0000000100)='ns/net\x00') epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r6, &(0x7f0000000140)={0x6}) 04:46:05 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x4000000) 04:46:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0xe00}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1681.374834][ T459] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 04:46:05 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfd00, &(0x7f0000000080)=[{&(0x7f0000000380)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020200bf050005001201", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0xc001) socket(0x1000000010, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) vmsplice(r2, &(0x7f0000002480)=[{&(0x7f0000000100)="3b2be79b0cc8d0e1d5bc4fa50bbc5966f2601dc3cc66fb48e87b8d514d5d729e05db8c86d68930cdff54cfd80bdbcd8a2527108637b292c6754cd5e5de5a017b0df997422fbd1bb2e2f55c4b9d8d204c2033aef51a9980facaa658a86e0a61ea2bcc1f9aa667ea229ec21c110574098d572d907c8765bf814d622a06ebedd217cdf34d9257782897754031dfa0ab0511d5664d1561207f46c8d5d3a59b57527c82035ec07410f60b8c038c279ae1f0e92a70", 0xb2}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f0000000280)="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", 0xfd}, {&(0x7f00000023c0)="e56724cacbe2b878eb415d7d6737861f5024b29ba133d991afd5f94b91e137643796eb1c740d7dadf7d182cfe166254dbc770a69eaa6c93fe8a8f17ddca46b2663c6c9b7616ab2f3c46a4c79b65a44b33d48b9f5b371b3474984ab407dbe8aa9d192bfbcf64dcc2abb5c1b01eb0dd973560c9761eecdd885386cefb7e9d8ba4fdcb4064246d9ebdb39f0e90e1aadfb71540a1ff2999e964bdbce75531b8b7a11a7180c3bab5c76ab66eddd72062a7acd5d5f085592ca7642ab", 0xb9}], 0x5, 0xa) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={r3, 0x9, 0x7f, 0x5}) bind$alg(r4, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000040)={0x4, 0x80000001, 0x6, 0x1}) 04:46:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0xf00}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1681.461124][ T459] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 04:46:06 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x5000000) 04:46:06 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x20000007) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000000)) 04:46:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1440}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1681.868433][ T29] audit: type=1804 audit(1595565966.316:1368): pid=446 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/28/cgroup.controllers" dev="sda1" ino=15995 res=1 04:46:06 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1c8000000) 04:46:06 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x8000000) 04:46:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3f00}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:06 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x9000000) [ 1682.170836][ T29] audit: type=1804 audit(1595565966.626:1369): pid=499 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/29/cgroup.controllers" dev="sda1" ino=15690 res=1 [ 1682.204028][ T499] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1682.356895][ T481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1682.511064][ T29] audit: type=1804 audit(1595565966.966:1370): pid=502 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/29/cgroup.controllers" dev="sda1" ino=15690 res=1 04:46:07 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000340)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0xd0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f0000000300), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x3, 0x0, 0x0, 0x0, 0x7], 0x2, 0x1}, {0x3, [0x5, 0xe, 0x4, 0x8, 0x0, 0x4], 0x3, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x3, 0x10, [0xb, 0x29, 0x3, 0x1c, 0x1, 0x32, 0x35, 0x6, 0x7, 0x1a, 0x6, 0x10, 0x18, 0x4, 0xc, 0x3e], 0x1, 0x1, 0x6}}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x2, 0x8}}, @common=@osf={{0x50, 'osf\x00'}, {'syz0\x00', 0x0, 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x3, 0x2, 0x3], 0x1, 0x4}, {0x4, [0x4, 0x4, 0x4, 0x0, 0x0, 0x5], 0x3, 0x7}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x4a5, 0x10004, 0x1d}) close(r2) r4 = socket$packet(0x11, 0x3, 0x300) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)=0xfff7) r5 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='0'], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa]}, 0x40) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0)=0x7, 0x4) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 04:46:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4014}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xe000000) 04:46:07 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x0, 0x2]}, &(0x7f00000000c0)=0x54) r2 = socket$netlink(0x10, 0x3, 0xa) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x37cb1133) accept4$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x80800) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e22, 0x0, 0x4e23, 0xfd3, 0xa, 0x80, 0x50, 0x0, 0x0, r6}, {0x5, 0x1, 0xf, 0x2, 0x9, 0x1, 0x3, 0x3}, {0x101, 0x8000, 0x8, 0x1}, 0x8, 0x6e6bb2, 0x1, 0x1, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x3c}, 0x2, @in6=@loopback, 0x3505, 0x2, 0x1, 0x1, 0x5a, 0x80000000, 0x10000}}, 0xe8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x4c, r7, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "944c8000"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xffffffffffffff77}, @NL80211_ATTR_KEY_SEQ={0x0, 0xa, "ee7f"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40018}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fcdbdf251c0000000c00996bbb000000040000000c00990001f8ffff017d4752e00099008100000000000000fdffffff04000000"], 0x40}, 0x1, 0x0, 0x0, 0x48040}, 0x20000000) 04:46:07 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b204ec80930a06000000a843089100abe83900090008000c00010000001900150006000200000000dc1338d54400009b84136ef75afb83de448daa7227c43ab822ffff00000000000013", 0x55}], 0x1}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f0000000240)=""/18, 0x12}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000010000104000000000000000000000000e7c96f12ee4763a1800b7311ab47671a033efc92020b7720b0de133724a3e8b55231a222ea415290dfdd0492b0c4b4decaff79f62ed96728a7e6f8b1f0865668ba1223bc22ce8a1c9e94a5780e0ca73523d0100543f63bd6c0f1682dbf4860df4e52c8c7f5cd93d65587425a492f5522fee03d23e5f5f900a2bfc536a99cccd7742c48e63fcd5df95e86a9", @ANYRES32=r5, @ANYRES32=r7], 0x28}}, 0x0) 04:46:07 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1e4ffffff) [ 1682.869023][ T514] IPVS: ftp: loaded support on port[0] = 21 [ 1682.890854][ T515] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1682.948557][ T523] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 04:46:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xf000000) 04:46:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1682.978537][ T29] audit: type=1804 audit(1595565967.426:1371): pid=521 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/30/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 1682.989069][ T514] virt_wifi0 speed is unknown, defaulting to 1000 [ 1683.012565][ T521] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:07 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.events\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xffffffff800) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f00000015c0)=ANY=[], 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14200001", @ANYRES16=r4, @ANYBLOB="0400000000000000000013000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00', @ANYRES16, @ANYBLOB="651c8b4db54bc7fbc8da5e8a49a12d332c4e796026118be454fb3cffff2db4846a52e4"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:46:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x28100000) 04:46:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0xf000}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1683.271833][ T29] audit: type=1804 audit(1595565967.726:1372): pid=524 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/30/cgroup.controllers" dev="sda1" ino=16377 res=1 04:46:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'sit0\x00', r2, 0x6, 0x8, 0x8, 0x80000000, 0x40, @mcast1, @empty, 0x8, 0x7820, 0x9, 0x4}}) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000aaaaaaaaaaaa8864000086dd6091181ee59a0000fe8000000000000000200000000000bbff020000000000000000000000000001"], 0x0) 04:46:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x40) socket$kcm(0x29, 0x2, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) close(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r4}]}, 0x24}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) bind$inet(r6, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r6, 0x0, 0x19404, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xf, 0xf1d, 0x3dc, 0x81, 0x42, r1, 0x4, [], r4, r5, 0x0, 0x1, 0x3}, 0x40) 04:46:08 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1f0ffffff) 04:46:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x60000000) 04:46:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x38}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x74, r3, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="df000000000000001c001200b39c77e31ab33f33"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}}, 0x0) 04:46:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x9effffff) 04:46:08 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x37cb1133) getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000040)=""/70, &(0x7f0000000100)=0x46) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b7000000000000009500000000000000eee0f7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff472f4ffffffffffffaa2264ab67e55aa8ff822ca9430400000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d7223654e1d1d4a93f24215dee354e93cfc3f50ff2bf8463cdefdcf021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8ddd52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44ed88b88873f0b1de84530e4417dfb6d15936ec0a27cb554def9e27386ce6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c96070000000000000023727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd0b46f68c2431b97906f579594d2349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a748c427aab8e21e1a33d3fe093547532fce6e6e08ccb8797e705a7b3ea178007c1c32e871ac81f287c4aabbd033390b16d1d41ee433e3a54ea9ee82cf14f3a4c"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e4600104dd00000000f627190800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 1683.980602][ T29] audit: type=1804 audit(1595565968.426:1373): pid=571 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/31/cgroup.controllers" dev="sda1" ino=16378 res=1 [ 1684.009162][ T571] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:08 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) syz_genetlink_get_family_id$tipc(0x0) sendfile(r2, r1, 0x0, 0xffffffff800) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) sendfile(r2, r1, &(0x7f0000000040), 0x10000ab00) socket$nl_rdma(0x10, 0x3, 0x14) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 04:46:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x2, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1684.109118][ T581] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 04:46:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xf0ffffff) 04:46:08 executing program 1: unshare(0x6c060000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000140)=0xfffffff8, 0x4) pipe(&(0x7f0000000240)={0xffffffffffffffff}) close(0xffffffffffffffff) splice(r0, 0x0, r0, 0x0, 0x80000003, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/219, 0xdb, 0x80) socketpair(0x1a, 0x80000, 0x3, &(0x7f0000000200)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000280)=0x8, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x3ff}, &(0x7f00000000c0)=0x8) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0x6) connect$inet(r2, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000695, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x4010, r2, 0x0) [ 1684.193871][ T29] audit: type=1804 audit(1595565968.646:1374): pid=586 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir688733793/syzkaller.0ylQVU/1274/memory.events" dev="sda1" ino=15822 res=1 [ 1684.294577][ T29] audit: type=1800 audit(1595565968.676:1375): pid=586 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=15822 res=0 04:46:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x3, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xf5ffffff) [ 1684.373540][ T595] IPVS: ftp: loaded support on port[0] = 21 04:46:09 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1f4ffffff) [ 1684.487965][ T595] virt_wifi0 speed is unknown, defaulting to 1000 04:46:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x6, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xfcffffff) 04:46:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xa, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xfffff000) 04:46:09 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x37cb1133) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r7, 0x536ae464467e3e0b, 0x0, 0x0, {0x25, 0x0, 0x6800}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0xe7c}}]}, 0x3c}, 0x1, 0x6000000000000000}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8610}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e00100006e3a4541d6e1b75dd0b8010000003e1932353adb4b481bfd24c7bfb67175bb1632e3ee32505e33b28080e0aee93c0f4a69b2b8af", @ANYRES16=r7, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x1}, 0x40080) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x54, r7, 0x8, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x100}, {0x8, 0x13, 0x7}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x44) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r8, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe, 0x6}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:46:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="48000000100005070000000000a1000000000002f0430ff67815830c971ffdf87d444203fab1b310ca98db4987f4278db50244e0329e5f", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r8}, @CGW_SRC_IF={0x8, 0x9, r8}]}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@RTM_GETMDB={0x18, 0x56, 0x100, 0x70bd27, 0x25dfdbff, {0x7, r4}, ["", "", "", "", "", "", ""]}, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x80}, 0x8) 04:46:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xffffff7f) 04:46:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x18, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1685.141706][ T626] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.168052][ T597] IPVS: ftp: loaded support on port[0] = 21 [ 1685.299423][ T597] virt_wifi0 speed is unknown, defaulting to 1000 [ 1685.323231][ T626] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.438234][ T626] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.495786][ T626] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.684813][ T626] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.728347][ T626] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.755153][ T626] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.791472][ T626] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 04:46:11 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002000000000000000000000000000008"], 0x1) splice(r0, 0x0, r2, 0x0, 0x1c5337d9, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32, @ANYBLOB="0000000001000037280012800a00010076786c616e00000018000280140007"], 0x3}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 04:46:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x48, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:11 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1f5ffffff) 04:46:11 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xffffff9e) 04:46:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0xf, 0x0, 0x0, 0x6e1, 0xcdc, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) unshare(0x6c060000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x0, @hyper}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f00000004c0)={@multicast1, @rand_addr, @multicast2}, &(0x7f0000000500)=0xc) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0) r3 = socket$netlink(0x10, 0x3, 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e002e00030000815e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000248efc40a8a1cb1daae3e2ca71f02b8372b4f7152785f4712a0cce056ef3eab3adedfacc38fc25ac765e7de92b751a8e5802c773f7cd", @ANYRES16=r5, @ANYBLOB="010000000000000000fa09000000f28d8e618622ddb2c8649a33fd8226643e2df5476ed125323ee5000022b4048a84d26913428588dfca76443252b99f8ad9b368e178860e1bb2e1fdecc5e0b3dd432c36d82180ad3d8834dc9e9fc7de5f5ca2c6ebe5cb515f1605b605ba5f243cd4d8895a9b51d8f9dfb118f000e980bdc6a2c7d5df182d677c2103ba6554f4584e772a7ca293bf7b88c011d490"], 0x14}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@remote, @empty, @val={@void, {0x8100, 0x1}}, {@canfd={0xd, {{0x0, 0x1, 0x0, 0x1}, 0x1d, 0x2, 0x0, 0x0, "c7e5a764c93a32159de1cc9dc7ddaf3516a02410ab7526d2b5ad5b9e3d4747fd083502882cd9f18040f55da1e8dfa39ad7b416f9f5a7df0854c254ae6fc4a7cd"}}}}, &(0x7f0000000280)={0x0, 0x1, [0x1e6, 0xe05, 0xb10, 0x93b]}) r7 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRESHEX=r7], 0x174}, 0x1, 0x0, 0x0, 0x8002}, 0x8494) 04:46:11 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000100)={'syz1', "4e949f8a991e5847a466824c3a7e45bd0721b363bbad2309df8449216ac420bc4a43af70687316e5282156b9e4c3b38ff4b14f105a0636b73bf8f496fc2a5048e04b7e58578bf77150cfe9752fb7d16ae4e37b56ad6b4d5aa1002a9812b879b5b51891f8ae2d201c4c50b629c524b7d54f634f63d6ed55f2fe3e734579e9f7ebf9292eba4c3c1e9f804c8236c4ad6aea69ec65c00b2942cbd4e86eb94e07941f933f5ed7d4166c38303c8e487edff69f9a293657dd89c3098f3b5a4c4c8fc990b7f1"}, 0xc6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x40, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x40}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e0000001800028014000f"], 0x3}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 04:46:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x2, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1687.325561][ T720] IPVS: ftp: loaded support on port[0] = 21 04:46:11 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xfffffff0) [ 1687.366896][ T720] virt_wifi0 speed is unknown, defaulting to 1000 [ 1687.456700][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1687.456723][ T29] audit: type=1804 audit(1595565971.906:1380): pid=723 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/33/cgroup.controllers" dev="sda1" ino=16374 res=1 [ 1687.495874][ T723] __nla_validate_parse: 8 callbacks suppressed [ 1687.495886][ T723] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1687.516409][ T729] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1687.526655][ T734] netlink: 'syz-executor.5': attribute type 46 has an invalid length. 04:46:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0xb, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1687.561440][ T734] netlink: 'syz-executor.5': attribute type 46 has an invalid length. 04:46:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xfffffff5) 04:46:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xfffffffc) 04:46:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0xa000, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1688.122169][ T730] IPVS: ftp: loaded support on port[0] = 21 [ 1688.179418][ T730] virt_wifi0 speed is unknown, defaulting to 1000 04:46:12 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00', 0xffffffffffffffff}, 0x30) r1 = socket$inet6(0xa, 0x2, 0x800) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x6, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x4a43}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000200)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) 04:46:12 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000240)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000008000000000000000000008e00000034000480080001400000000008000140000000000800014000000000080001400000000008000140000000000800014000000000060002400000000006"], 0x58}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f3, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 04:46:12 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1fbffffff) 04:46:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0xc800, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1688.221488][ T734] netlink: 'syz-executor.5': attribute type 46 has an invalid length. [ 1688.259011][ T734] netlink: 'syz-executor.5': attribute type 46 has an invalid length. [ 1688.372769][ T782] IPVS: ftp: loaded support on port[0] = 21 [ 1688.452601][ T29] audit: type=1804 audit(1595565972.906:1381): pid=784 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/34/cgroup.controllers" dev="sda1" ino=16374 res=1 [ 1688.488389][ T784] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1688.556111][ T29] audit: type=1804 audit(1595565973.006:1382): pid=790 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir439724528/syzkaller.F63zFi/1623/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 1688.803023][ T29] audit: type=1804 audit(1595565973.256:1383): pid=787 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/34/cgroup.controllers" dev="sda1" ino=16374 res=1 [ 1688.836501][ T782] virt_wifi0 speed is unknown, defaulting to 1000 04:46:13 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="11") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xab3, 0x0) recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/176, 0xb0}, {&(0x7f00000001c0)=""/21, 0x15}], 0x2, &(0x7f0000000240)=""/5, 0x5}, 0x2f1ab784ef988f30) mmap(&(0x7f0000578000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000a42000/0x2000)=nil, 0x2000, 0x0, 0x100010031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000def000/0xe000)=nil, 0xe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000baa000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000002c0)=0x5, 0x4) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x37cb1133) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='\x80|\xc8\xf4m\xb8Zs\xad\xbfJe\xad\x97\x89:)\x14l\x91\xd8|h\x9b/q,ip\xb6\x18\xfd\xde\x9c\x94d\x83\xa7\xc1\xbdXG\x02\xc6\x06\xd2\xc8h\"\xa0r\xfd \x9a\x84\xbfr\xa3g\x03\xb5}fs\xb2\x9d[\x1f\xc3\xae\xa5\xaa\xc6~\xa2\xf1#\xb9Xh=\xb9\xa3\xb7t\x96\xee\xa9r_S\xbb\xac\xa4\xc0s\xbc\x00\x81Y\xd9J\x00\x91\x9c\xea6X$a\f\x8ap\x93\x0f\vd\xe4\x1e\x98[\xfdB\xe1T\xb6\'\xe2xq2\xf4y\\e\xd0\xac$$\xb6v\x00\x00\x00\x00\x00\x11!\xb9\xd59\x0e\x1a\x93\xe6\xa2\x19\xc9\\\xa7`\x1e\x9db2\xd8TA?W\xdb\x8f\xb8@\x88\xb0\xc4\xf8\xbap\xc6\xec\x12fR\x18=t\xfcl\x8a\x90@\xcb\xa5%H[\xca\v\x85n!\x93\xbb\xcf\xb4\xa4Zf`(8LTtb\xefZ\v\xc4w\xe0\xbaV\x88\xc1\xd0\xdb\x9d\x13\x02x\x1b\x01\xf1\xe15\xe7\x8eO8\x9f\xc7}67\x9c\xf0\x83\xa2\x18%b\x98\x00\x00\x00\x00\xd9>\xb0\xdd\x00\x00\x00\x03\xd2\x9a\xa3\xc2\xff{[B\x9cy\x8f=RH\xd8K\x86?\fR\v\xf0Ez\xbb\xfc\xa5\xc1\xfa\x93K\x81\x8b~Z\xbe\xd9\xc6\xc0\n\x96\x9d\xf1\xfepR\xc7, \xfd\xb7\xe7Ao\xcc\xa5\xe2/\t\r\xff\xba\b\x06z(\xfc\xb2\x0e\x8c\xc7\xa2D6O\xb9\v1\xa5\x03\x8c\va6d?\x1b\xf8B\x12\xf9\xd8\xd9\x1f\xcax\xb2:\x91\xda\x04\xcd~\x1cYq\xd9T\xe8:\xad\b\x8aWO\xdd\f\xab\x8b\x10\x05z=\x83o7\xaf%~C\xe3\xb5J\b\xe2g\xae;E\x90}\xd6/w\x14Y\xeae\xe7\x01D\xab\x86D\xe2\xa5\x04\x1aKS\xba\xad\x002\xe1e\xe3\xad?\x98\x99:\xbcx\x9a`f\xd0\x95\x8ch\xba\xbb\xe4\b\x0e\x1eg\xe0\t\xe0*\xff\x9aKK\xc4\x16\x8db;v\v\xd3\r\x8c\xd1n\x9c\xc8n\xb0.&Lb\xb7\xd9\xb7\xaa\xc0\x91\xb9\x8a=\xeb\x8c\xc5\xc7:\x00\x00\x00\x00\x00', r3}, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x40010, 0xffffffffffffffff, 0x0) 04:46:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xf0ffffffffffff) 04:46:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:13 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1fe010000) 04:46:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x100000000000000) [ 1689.056666][ T821] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. 04:46:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0xb}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1689.146895][ T785] IPVS: ftp: loaded support on port[0] = 21 [ 1689.181177][ T29] audit: type=1804 audit(1595565973.636:1384): pid=825 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/35/cgroup.controllers" dev="sda1" ino=16378 res=1 [ 1689.204500][ T818] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:13 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x60, 0x2, [@TCA_FLOW_EMATCHES={0x32, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18}, @TCF_EM_IPT={0x34, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}]}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="34001d9d84ec51336670c89f7050b30ca0b00000", @ANYRES16=r6, @ANYBLOB="0b3e0000000000000000250000680e0001006e657464657673696d0000000f0002006e657464657673696d3000007c0e8b00", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x6000000000000000}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8610}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e00100006e3a4541d6e1b75dd0b8010000003e1932353adb4b481bfd24c7bfb67175bb1632e3ee32505e33b28080e0aee93c0f4a69b2b8af", @ANYRES16=r6, @ANYBLOB="000827bd7000fedbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c746963617374000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c746963617374000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c746963617374000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x1e0}, 0x1, 0x0, 0x0, 0x1}, 0x40080) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x120801}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0xcc, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4008040}, 0x26048080) 04:46:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x200000000000000) [ 1689.325178][ T833] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1689.360588][ T833] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1689.470122][ T836] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 04:46:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x1a}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1689.508904][ T29] audit: type=1804 audit(1595565973.956:1385): pid=825 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/35/cgroup.controllers" dev="sda1" ino=16378 res=1 [ 1689.608497][ T785] virt_wifi0 speed is unknown, defaulting to 1000 [ 1689.651424][ T848] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 04:46:14 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1feffffff) 04:46:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x300000000000000) 04:46:14 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x2) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) 04:46:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x1c}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:14 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) r3 = socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x37cb1133) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000001c0)={r3, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r7}, @CGW_SRC_IF={0x8, 0x9, r7}]}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000200)={'tunl0\x00', r7, 0x40, 0x20, 0x7f, 0x8, {{0x17, 0x4, 0x3, 0x11, 0x5c, 0x65, 0x0, 0x1f, 0x4, 0x0, @local, @private=0xa010100, {[@generic={0x86, 0x2}, @lsrr={0x83, 0x1f, 0x45, [@dev={0xac, 0x14, 0x14, 0xd}, @local, @multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, @empty]}, @rr={0x7, 0xb, 0xbe, [@multicast2, @loopback]}, @timestamp_prespec={0x44, 0x14, 0x8, 0x3, 0x6, [{@broadcast, 0x8}, {@private=0xa010101, 0x400}]}, @ra={0x94, 0x4}, @noop, @noop]}}}}}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8927, &(0x7f0000000180)={'team0\x00', @ifru_settings={0x3304, 0x7f, @sync=&(0x7f0000000140)={0x40, 0x8, 0x20}}}) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="dd5a0daffc06971ecb0d21c9b0c15fd8cccac27a33516d36f4066779fdd99e7c4978e282d3beabfaecea6009cfc3bf4b5f670bc92b62152d2047fa2f39335fdf97eaaeb41e2b39c3729afd4b041ce118d574369f3d80b54a15598b6fa24427688bbf5755a67971d112d5e69ba99a5a179d1236e667ee3d57644e48a858a297fad8c890a949a45f8dfafede07662ee6790494b34c32abc4d4b98e050000001d3d4701b9", 0xa3}], 0x1}, 0x0) 04:46:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e22, 0x0, 0x4e23, 0xfd3, 0xa, 0x80, 0x50, 0x0, 0x0, r5}, {0x5, 0x1, 0xf, 0x2, 0x9, 0x1, 0x3, 0x3}, {0x101, 0x8000, 0x8, 0x1}, 0x8, 0x6e6bb2, 0x1, 0x1, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x3c}, 0x2, @in6=@loopback, 0x3505, 0x2, 0x1, 0x1, 0x5a, 0x80000000, 0x10000}}, 0xe8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000003140)={0x263c, 0x28, 0x200, 0x70bd29, 0x25dfdbfd, {0x3}, [@nested={0x12b4, 0x92, 0x0, 0x1, [@typed={0x8, 0xe, 0x0, 0x0, @fd}, @generic="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", @generic="fdac23e36213c36713fdc8581728094ffaee3728067a9dabc3b7ee6f752e144a99f505e19bb524003a7b76f1b03eeac41ad726cf0ec19f8d9ca9dbedcd845cfe691c1fa86f21118ee5da050c02aea55582a90909f61b49c9b1df1ff61e96d06c3a0623ae621965d107796ca3efa53d1423ddf0c00cbcaa52a57f7ba45ba23d0342cc68892d4fc3c78b9fadf47e422c68aeea79b321ac7a6daa31e140e8cf0038e5d6acb0c586828218", @generic="c5973d2423500806278ec555882fda6c910e89c0f95be6732ba287621d24f7c3c3de6cf6f268c1440eadb765eb4dfb008c9f4ab758830aad68128fdcfdc2c7f6a0786a147497d4d9fd69a1", @generic="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", @typed={0xf, 0x72, 0x0, 0x0, @str='++#@&%@-&,\x00'}, @typed={0xa7, 0x6f, 0x0, 0x0, @binary="404b8c0c5b6ffea77700492fc8d47f1c274ca30b74d975afb9108f8cd142970aed2c35a59cb929fda992510705360e648938d4a6ca4ddf5b8610eb7d7168e5820ee3bb5629966e7eb9114d8d2ec8d6ac18e3f629964b203cf21f9688cbe5657a3374d6fa66221ad94dc0b27e21367cae6f263b9f651ba0cec1a6838b0de29b027a0150811e9ba2a5e0547347d3eaf9e0ae1a03aa5b0e9a6819d5817dab0705d6da4498"}]}, @nested={0xf4, 0x2, 0x0, 0x1, [@typed={0x4, 0x6e}, @generic="addeea145660a7ffc486abe7fb7896d31c8a4e12d79bd074cfb55fbcb824280ff81f8dfff3717f9c56fdb51b90b5a6407376406f3a08c0593055c133dbf7f5ea67c93f1e40534ae304695b99ce97bac4818d8374c31025684de9309be378e471431709360c420705cc5714dee16e9842fe6e0854a8fea0f669845ce576cdb1e1e6b08e7d00b9f80085e8e2b6cb3467c50f86447acf072d223259de12d94ca0557a7eb11121fc887102619c8e65b0b7cd1f1c32538a09ed4a16b7d5f20d266bfd3b9dbd77bfd34786a284ce9802e075ffa9f03b7f13c6f06cb843e1d3cfb31673ff7f832bafb6a43c755fd5ae"]}, @generic="bc7af53c6991d7f59c56cd2c93bde1a14f86c87ab467dce9ab46a7c229c803507311f022c3b842a3833295a8f9981be9925f1aeefc683af07016477335319314728399ff07c06f24b2619210468979b0725b85742e98bf1487eaeca6f85967d0efbf865747d056078e267fdc2dc3917b24daf972499da3e6514cbdcae23da9badba049178a7bf9ef8be311f640871f50841a523d5088c2aaf892965386c3ba19a3e6c7571e17a4c5346fc327a4666d86878eaa98dbac3e5aa5821d4d261604348e409ef33e1f7bf08dd133026ae0cac9af835b9040fbae9ff0aa98d7734a59c2aea9f5313c2c08b1688aef2c76e47e63", @nested={0x118d, 0x4c, 0x0, 0x1, [@typed={0x8, 0x50, 0x0, 0x0, @uid=r5}, @generic="784680bf90c33c7faffd474450a27b44258f9120a114edc32e9a89eb16d71f25c5f49ebc89", @generic="6c76d0de88db6972b18eb1957990fec093067c9e5e2bcd17a782e9288ee2cd85eb4ba525130aa6e7530eff2dd76e8037f90924d11aebea5b98ac789fbe758efc6ece0636c37be75cc1aa71d17e958ec76f76591420ef92", @generic="1ae6b9d20e04b638ce870f77db5595298242be7a0174e903d6c290dafa51fc0ad23359bbc6682083a6bf8e0c6f63325c0b2b91c004d137f987c940c2b8fa6571b848edb246c3d9703da23d8651a10a3c9dc5834eafd929df8c13b0f7490c5e8e571db087c83167e83de1", @generic="aca77c352ba1238efeeae0c76cd7b12d89e7b0e56ee6b0e46f1eef78cf59788db1e18c4950d9087cf195e63b84eac3d050c1db1e94", @generic="12b9a9bd1e71c6f87ecc91ac495c46e3e681b2eb3b5c9d23b7f8212986b400e4513a42c6a24a50020177193e019b24ba624bf0414999074ab21301c9c47ea1d9eb4bcc7c96545479a34c9ab237a22db507e5f417f46ac3691ca172dae796db7fe098cd1d4682", @generic="b0fb70e9cb8c7e1e0f6c8574b3a771a4bb6cc54f0318f2f67523c1f668bd0196604e88333d04e441d20549df4c93b8386a85c53609ab52c5388912c8572652b1f368da91424cdebe05db444e02343ee3b18553ed65b847080665169cdafb2d178d6855347e22410110c05e9ce4a224482cc2a9b28bbe1ce4bc329abadc8f53f838d4c00a3f1dd244d0c7669729ad557845883b8536e97ee97ed2b8a71d2b060b7db1f550d12025d2a9b4f8ca89976903b4eec56ca0f75cc26ee8aee6011c08bfef85f24addb6aaea345387705385757b47f8d9cec4d8a46a60933591eb154c6f42a5226bd86b640785d5b8926e73793f98eb563c02c285227db5d2a0d0d3351aab53075378959b12e6156c7c714fb316749924fecb98116a6ab592987e598fc4b3bb999dbe8450ec0099f4dbe153189a43d8ed47a8cb015210d93b0d5a34f07ae3dc5743cc9773c13c919e32b8ea67911c0d4f9364515094f7d36254c5de8ad40c33c81267672d310bdc28a676d44d2a225f9baeef458b6185b780eca9530556a537ee3a738f8f53de44fcda7c948ab96af11caebc86e0acb40e6aa31e7b4e5fb5e34ebfd4e6c2a8c90be5699f66386599d4cea6d899518dbae7960acebf431080ea19668f2ef546a2355585972fa5ef70d5f3d9fac126c9daac22e0e8e03657089148b2d641ca39519c171f55bc660d4b6039d6aa3f7e1eb043f3295866f246d04435b282e5a806d468f12e3df38b2e3cd4d9bb535de7d555acb7b6cc74512b2fb39bbf2286fb5c5aabfe2ba0c90ca2c67c7f183e97709cb97c30492f5bf76534f50f90755ed2e64628cea6d0c35091ecbdc4ee1f4b770c8f5ad720cf27dd188c8cf61a1fe26f60017c4816fc37834640d283cb2b5a5ea254ccd39164776bad79aa93d8b3d4875e67cf96cc80618c70dc6a6ef8e6c554c8ddf00c5401cf467d2144825efa9b44e587f95c6cd75c5e00e508d0b4781beec80de0a7c065cc7dc6cdef094cc8199b624d18847aadf20770d3299da424ac13b2793cef3115eb27dec330df33f6cd06f79040444c8e3e587ce043167f9c552a480b0a44344b5cc7e3bf41b10af7d01128d2a80e7cc1c26aa63495b0d5a9dfa716ef834ef34b45b37ab32e1eb772fe471c29dc1d0a3c42ef982308815f98c7f15cf0903dea41ec384e48e8e75883a29ff671720f9ebda99a8f508a321152fa80509c19c89e7a06defbe5f4103c83ba5e5e21fbd64970833d52b1b08ac2b3314cd9169315c7708bfc3601da6f424f7b465e3c49a7b5e47c11af8567f13ba4b5269737a3ddf10070db6f4d33ae3b8f598790597b22c43f6860638a70d8e6b04b2f3bb8ea4e224b62306b33ad1b381ba54cfaa536871e94b2f79f25699ef892547b2119cd052dceb349aca7c2641034b4fff1f676166cc6a0a492cfdfde9cb9d779ba06fae362c7dc9d0d5f2e03ea655ffdf354f173e39b84c161b88de789a4495dcb0f69b3dd3b05d2ea914efc40049f25494c4409e522f1352450a708197999c721c94bbd05eb7399f82a6cbb57a0620143f808af93a6a7fa84af81bf929701c04f39649c6705afef6bd4863db4f7fb0154b88d48059205351ad0beb0649a6b90b40bd9b2a2bec1af6c054c70ad49af8ea78514bfb5907c2ec2b280f2aedac01700db6d92d710dce146a595f7669a779b6dbf0549aeb55102c72c1121ce86076617ea319cf2eb1c81edef818af7c91fac31b800004a5acea8713eb77847937948a1c778c7eb95005f714ab84252cc19b2e3f1b09a858e5a23251716ba4ad6887ddce102ca173b0c1ec5d6513ed937fdbc00b36367bbbf26dc831630e37b0653270bd4fcb1d8b0194a8f50c1dab0a340abaae493e461d04375a6142ef321ec18519f853c761fd14acff8542fdafee67f9058620e984b4343ef793c40eb58accbab0d4d3d3dfbef6e8bb9c5608cb662a82993f848e15d2a6f562400855ce6949e12f0d80780934b4580e849ef762263e187b99028e4eee4ae5ad27586ac09753b0b7e37c2ff00a2c8ca76aa9ad9755079b68872eb0c5080ab6c32d0d7a74a611ac7378687a4c3b4934de7bc3d4ea588e5668812c17b0d76296e339d7a443e2815f9c2c5cdc870d65604a94baef9c8c2dad885eb6e2dac67a7b0e4d83cf4e707f3b0ea86cea19bf56ac97159c6514aa45e19d65804c70a809c6fa935ae38ee25663975ea0285b31ef09110303269fe20534ecd415b1a468aa8b970f8eeba6c041f62c578e9c0b21419ef1d69793f27d6eb0947159ca83cbf75dc9ed833cb93d56039965346715f28e1514fa83f2b50b7aabfffffc020d87fb0cf4447acea30ffbf7438fcac251d62fd5ae872fdc56186b9e85e35e1eca284816ad0905109efbb2b0351054e2ecf617ea6843f31de4d6b767e0486e755a6a89d4c79f8692c707711c9f0ed0e5311ff701640b80d8c9e45626f80c5ce8d36c8e9ad1da56ca2e81019997162c56339ce259574800e288eedb6bd7ed7848358ec0518b72a3d5cd388dadab4f27e463e8849ee557ad0a38e5ea2606fefcf7c56ecf732f5827a94d8520a750408f4f7b32601895f2bc0a6020dd198f276eb4ddf81c661cfc7a879fc7869f415460946b047ea1903293a408786b6025375136f4f0c383f073424c316b053c8ea4ae0b3e448dd3ab2f0170d03919260edf9bb013086046468808bba31a4dfb693fbb199d0f1ca3f2005215c8d71ab6a58cce10df560d7a36f17651eb279d7586d9bab00beed537abe006a4ff06f4c83655f9d99721351f7e2c52a898b181783cb41c3e34514335612da84208f19a0a4c138ce6b7d80569417c615f4203c575347874662d97c49d2f70d1b8f05c998d32a9a46b348e729f80bfa2c179dcaf935f541d6852520b77cc25103b3ac4c3f624c9ffecec7eaf47bbe2c211a04a926dae7f7949331ea3adeee33d0201dbdb89288c683016ddc953427d970ffcf1807945dc03e5c2335856fad7dc0713cd651eedf8473b5ae58f8cff1401d21487a36a0882217ae64b9d6a998cd866e6774ca2a20ef12ea3480b88670612905326acb074bf07f6e20211715959ae98adb84f2acf8ee16f82478ab3a380fc08e61add371e3428d93220f50f50de8568df49e821f6e0943e7c033c9f152f2ccfe2550a9e2d6abd0fdc15465a1a022f17b4036d816828c629c62f5e4789ebfc4b5204e8dd9a16e5decce7adb3e07148b767bda24b6882874e9e65ae6196348160b4a30cde9d878c91615c68dae373cd97a831348febbdd967c2ec36d30752c7e742abe152f505bf210ce37003534ccb9bf606618a69fb685ca5c1b9858845ad5b93036562af44d29bcd0927209b43501feec86d5856be1439648294e3d99ebd994fa16b106e05dcab23df7464d49c2e3ac80eadba690589f6d9a5cebcc2b13625ec072eacf3215e6c510350a17b131072b130402bd7e363d5fefe683e7dc3d14e603447908f20135c63f0e92af63734f471417af27e6f6b1dda05a4e572931ab6d3d48666d6a4ebd28309d6e7ce269ffcf90b7b096dc92ad0183c6b9cd212bdd23201fec6b123326338d2c35057dc01b5227ccb9e6a6827c534ca61e4a556d333eef53329252342932d63ad4a41acd98067a97b4324876113c2a66be707462c664939a9614407fc0db91621a800bf94d0e8dca62d7671ec7709124cc18fb49c1d9fcb8ba5f2de5185e46a5ee8f65a0e9db83c90a80c43b0172a3fa8a7e04e14d9fc9e6bbcbc6426769b700a5118f9d9e86e13979fda6df2c919c3272057a6adce755a6c4c29e24ebd058d53bd9fffc337f1c79057295b51754a2a66a31f12130d7431a985f7ebc926095755530659daf50bc5433598c66b6e31e38de84ef819597c24bb83849fda416967603e725afa013e20772875d7c38f1a8e924dfdd0b6f31395bbffc865c00cd229bdb4e680bb6b8a812cce45a282b4aac39676e143e4e7dfffb3d9c2833169e629c9b2c32acfa28dc7272a19c951ce9659f2b2797e6ccbd56237a8bdd1974d3908f085e9265dd069a6bb119a1a21b23d176dab83fcfaf6d5d1ba40446c50b95ea6c63d32c87c03cb3216f4288a1cefeb92dbe51d77bab340c50b3e3f98e52163931a8c2bbdd5bd0b212e577a85dbf952c25311a3d0e11c844f769c95999effac89d67a7d234293d4e6e4d647823ef47ecf02dc034d5b564b673a3f9c0bf71e7e615af1f67f3201d5d19a00441c153db8ae3b2ef1b3e31a9666d5b13b75619f3da64852746d22e15829df14890e86b3f7282432ffa870e6185ccd7a49c43424927b300d610e53782353b193d33c4bbf0b3a582b88c7cf1b9fd211bbfe58fef6b593ee8cae164856394af222393da10b6f8b1f4c45dde1a387043dfddef5abe4c87d41b0e9196b65c7407ba561d8b1af89a495c2a8a6f89fd2686d7c44dc7d6a94f077b58785b21d73916014a87c219573c09b7b94060c5af90e6b4c177b2d4a5388dd2d91f6f8226cbc082fc590bca7d7df8a11d248141ee6a492625f6683950f846a53c148b1c9f93a7cfd1e82009801e94b562f1930d26f509ce7b4a908135ecda7f92601eb0382ec0f46835c13115e27193b301b492e90418e46646a82b0bdb30f4428db9c513e3e06b01f3e3e8b5264d6a009123ba84bc475f8f6d7cb9c314ae5c432b2e062adb8b3f6c5ab397e5ef92e4f1f841bc7a9dce9b97fac524516509d6e8553bcdae0e307ba7259b730da337c2d74c76fc47ae4de76c2138f0a72dfb981974fef2fc3fe3ca3d5a284b6735abb3f91900c7efb8340341b31d583c937597c53540283110f26b31ec781282e2b7759096c7d821d277b32a7d9d617bf4d735ea663a88a12203885057939b394464b569bfeb2cd84a454b6015cede5a0c855633820287db5a1c63c8c8118b0ac7d2ffe40bc4f879ba38ac1596f3b6f4ed8268e2e9b1d0c147644c571c198f3a62ab2c560e0c52bd89e1a3edf688d86b468a334e905c8544fbe9908cc3053e57300d4b32509f820a0a4ca9c49ae2ddb1538df43c34bb6009f209abd8b35cc3a5b3416e9018e192bd9d7e84002bcb9b7efa9fb14be4195f19933dd2dc594da1af3518f9f12787e5341c694432fe3f8f4d72295f09aa7a8c7ee5a09578558d776329712a93a0826078c9178866819c72731a3682c4de5082fd2bd27136056f0d0ce2162d234127f926532bb151c1dce46bc1ca8256f41c2a6dd0f59b47048e54592de99c93c88072f8e502e077ab15e0230d607246ff7648a1e0049c68eb2fc678a469afe1a30b00ad6231e0b08f9ebbdb12432a77402d9b3290bb8233d8af4bf2fda43ba842af6160a8fb25c309f1bec8c834844bc590321e7d0bddfdf8c1055563e7a758cfd24bef8e220f86f5fd56379ed64960be6c3e16b1d91d92e5a463fc4609f0e5cf42e15512c084f5693492b08032d4ceaec91ac07e92e7bac15de07df08e52b3007702643278a3188584587ddf2a5a86abec9ac814876a3716e6f5b69adc29f02c64ff48c6453003f40f508c1185b456c1a7ad3b030983e21a19816105fe287a069bcb1fccc6696cfc2ac07315b8fe835f0ed50756ced3d7ed34ea87a383a2cecdf063d9bab761bc7ff5358255c5021192ba7db2dbaf3f3a9ff77c15cec1598c46c76500d6e3464f86446c5aee3b2fe521cb3d10a0ce63cd28a1219d9287d3c03e184e6da943e500d1392b3fca338ea2e3ca518363304c7d56a52b032c7e9e4436f2697d63c86cf2cbd61b12dbba1b2a5a57ada60cf1ead79880081d099dbb5424b6e5f84e5deeb4859c98507faeebda96"]}]}, 0x263c}, 0x1, 0x0, 0x0, 0x4044884}, 0x40800) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x4, 0x0, &(0x7f0000001100)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r1, 0x0, 0x100000001) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={&(0x7f0000001140)="ba61511847cd9bde9e03ddd0ee0e070ca4f2f0b8d42634637c15024473ba4bb88581177f3ccf5479314d105f0d624b469552ed1c7b660e6b56120e1804f64f46d72d3034690f8c215018b27a51598ba446a9caa1b05752544c04a7a89a6dd6029a3a42c3b2bc17430cd9c49e202c095381c2ec915606cc2ed1860dc20d0a36490b1bd0e61485873249801a1670b15b6677e0d0ce9ea2a21a8b54b3f52a19d7ee2c1438eab1def0c96d68826c399df7ab2af1f67b86739189007bcee2523f4c5334566222811a6d22a80195a1685a997fbc30817ec0779a84730b3193ea68ec2d2513eb6880db42ab8cbdda645352bfac841df85aaec2b452561154c7625919bbadc344cb71421dca205a2912d04db77a1ea5242af9ecff23d5435455352f266a63e01ff8ad4965ada470102a255a89966e9a0de9d4dfbc48df1551f5484bdaf809e4e78ca7158567b3fb7991643e749404df4fe39724bcb02a309dfb9cbc1eac6091ec791118ca683a7425fd617e308a918fec92d40dc34dfa47d1b9341c57599c610e6beaad91c3a02155f7373cc208b3effe4c3dc2f0d48deb8044af836ad51b2df861c74dd0c237d7a5691ff03e8ec37c78884e87cc45bb6ca6f6b2b287ee97241a2535d2afb02981c8511916ecb73e9d42c7e28d43b0ed7ce9045ab7612d9f506fdf55958d07bda447bfdb6947e2cdc03d21c05e6506b41cf834b0a0e2883c3c0f2551e08d0f44293d2a63252e3dac4c32c88554e8a6f202bac0dc1aeb6d470cee7c4ce18c0fdb22a4d65440284d0dfa4df03f32a5ad5e3eeb807ffd81aea26dc38ccf2dcb34b1e25cafc90538ba2db21ee120f1669cf9b817467712fe2ff556f897b032035bb308008b0aa3c8c39e514ac0a0467c477e3db999b7ad37b60ca90e28622986f59b0ba6de1b8063ecac897d89d1f819e8d6ae3a5aed87839936e323675bc9e341ed4066d29e3b27b07ee6cfa8b819a21dc7de7f3fd7f6f2d8c906402a4466cad91f7f0ac623bb0608b083b6702b010181363744d55c5060f8d20f84574c6ac08c3007935ab5b51dd90e6f1f0e81f8b0185b709a72d9b35774f705abee00b127d36e368832d2a84b0c7933b79599e36a8e8b120c8f69b07962930f6eb4e2f27690a887a3221b759aa89ec98aaff4e666001a0db58f3f416e4e60f963cecc82dd326a39a23ed23eaa05cb9bc8724f8480224605a9bf08e2c0e57e727d90233dbb87f622cae7932e8c1dd41980f183b056d99f085d36ba300e2ca3be49f70a05f421b88e67def44143a5501992e2071e71650aed00ef29f6796cd09315259f575fcde3503f9f99621b877985c7bb8c187a0e718a3b028ebce788426b60e0c18281dc91eddbe1be07818368b598143707b4c520f0393fe37a14a269bfefa01ebdc5a1a38b2e7b121e5813e8d05bc1193d3e4e78b14c42dd1f8b380607d0e65c52bbe7f000daba6217421bf16f8df976cdf7e33f152d3ae45a96e2319359ec6849939310536426a65667b700d6d6504226a2630d918bfdd97ca33af90ea8e04481ed23a462cc91f987243b0e9e1a232d3288914e636e53deb5c7e741dbc11952dd94c44b83300de4361f6d31b03a03e40ce4ad89b1e3a7027f9cd429c296ccd210bf32fb43dfb276e37d1b26f1ae8829afb3525fa30ee6dc75efe51314a56210d3532347679cc9f462b1a71eef75361606f35986fa96b6b1979111dd711d78ed90742e16721546a6578086d98c2c00273dcaff194a86938ef5bd8d2c76ddfa3ebdfd4fd0c7ce55c04666c12be749c09938a59c50dde61b0295b88ef70c38b78bfd7e2c8ede83ea7d05d0091fd5af8900fe6f82c57040b1b054f00b22319ad26040a616634adb50f6ea624766e70485ee6acbcaca5428c076064e39c6842d23bb02b3d36ba0ec40b3f755b1a9181c2ad8f49a49943ed4a54451fb1b40b98c1bd55505f7c8d79540fb2ac1411bf9705bfdbc6b1fd757129abd5d99b37ca0651df55a9c8c342dd3fe1c9c273a9db4728ab33910da3fb1d31ef3e431de1489c07b0a06e21d8c01e2e125877aba80db86f4e690f59929f026a5acb5482f199c7f9973d28dea7b50e229e53eb4652a5d62a029446a133674a8d076b4832444228336051b5e838e81297bd4d19b0ea6bf59e419b023083dd1b7f84b39b33754410ce818f90688ec8f7d7f7e1e1d3113bfc7c5cf050bf0b6cae012a7648d12757fb6710c82da006fa051feb931d858c0ba46d1da1406c6079c89beca0b8dcc0755882342b40b6e55f9d03adece1a370a21454761f9502b84b7e2c9603f305cb87aff797c94dc8b496ef837bd866ded8bceb302e8cd38440cf5127a9a920cf2d574e6d9a490507b733b7eb9f02415998a53f0a74498bea91ec02bad7abfd620484695b60ca05db43c0c42cca5171f3f7c2fadedad93983081fa54c196ec6ebc9542f5d9d27b55401c59fd0bdbcb237ae0549f64a5587f179b5ef8e4a88112de28c12a35b0e876665715261eb3f4cfaa15f3abace6b86ebe279d6806f0c3b6ae234b2169b76cd36b6fda9aab5bfce0d126ca7723ee0b528c8382462f160f2ffba33138b55644332262cc10866927eb669fa180ddafd681f44bf634dff376be05ce9eb5848fd764d78ed6f1490530ccb9b35016215ce7515b4b3b15d3d0975d114343d9d045df25de0907a15fce31484f326803ff77eb16a1fc8a20a98cad918f1e26a013438ee49c8fe7450865fdda72dadafad4436f5a1bcf9bfbf4bf3f5ddb1eb776aba9f76b29490a01dfa5d071803965706eaba7e9f1f311b2871da13360f8094a8342b38a6008163a50eb582d89b5069df2963d9b2c982ff3bb68757fa01a457295be41e4b4446f5d1481d0bcb0939a4bdd6fc1c2b5172a341a02e5d2e434d66fb6b3c8d6fabf097e8d8d6b7e378aa94008faad05fc5c957f4661a32cf96ea663ebf57bf5cedd65ac2b6dcb755a5906d161f9c05769970a9d863bed4b2f8822d786f90e5a1076757108b18f8564c42783ce34b3dfa1a845ce3d83b86821fac0382e1b62703eebc9bb93f1edc870d10a08a9d651d0dca8ea1949c45b44becfe9d90f8152ec85424e88d9db6406524965f77a274a55eb3919a60f14f2c9e1c862fd3c894fddb0149fd6dac3d97668fd64ffd7a5fa22efe12cd4611ed52d29fb38deed028832335fec486f0d8a8ebf2fab0c32517bf896561a91d5e2f74b02fe9cdf4183e7b90e6716e8e4df7e0f09f30becb62d7deb0374701dd7d457f004f62951587ecc75ffc25af6d93222244e14e2c31c494bf957f414cb157afb281479808312844fed22555aa15b12851d0c4e0e0a08437593912cd54a55ad80aa9d1b833c82497026af7fbd29507b0a98612334cfbe3f67cc81aede7b62cc673ea8b0e6913b3a071e4e7c43f1293a63898eeb72e4263a6deef3c131f8d1a220e86ca209bf5fed097332a8b9718370afc1e35f4fc789e60347387c762d7c509969d5f0fee987528b21e3c12b63ab40e0ab7d31df845924dbab29ec2972a77120ebb9abd63544b7cbd92cf7838ba29367246092fe3756d918292fbd8095d41d9f1aade5cfbe50c03518877e9b23f6d3bc6a25ddf87123b1de0289aa630aa8233d592ec16ab796ad99a7350d754fc2a845d8296a6697fdff68bd691074e1147b66831d585e6506cfd4ac016e2f64b66da885de1a167319501f7c865249150ad092253851c0a3c94a2829d80089e9cc2569303d386661ab430c263ed9b3d82c354defcc3792ea838715618c8b2c6c09ce4a9fc852f1ef8ce840047ae4fb8a53cd665df8344f5dd9a2303bcb596d5d659d187b4172736ab91f45730a3c4540ac70bcde4a0637d5c0974113bdadee7edf0cd5fe2efd73cc1e3b312dca299068e663a802a63e6a0d9fbc941996f2a7bc64943a91bcc4b47f0b9587a8821711cc4ffed725f4496c0eb9a8c69e6b7d4659703924f26312dd4ae69a162051a024ab37e89d9d3387da35fa728f8e1628803ecd819aa55792c1425c91d0898861e1d76d97d66fd36249549985329b1d5559e3ef9f0925b2c86491b682c76b021c000547adb8ab847afa58f600092de49c3a2ef488e09c19433e76d146362b9e481d61be24166e266689bedf78b90ce898d08d0a4e5a9c04aefbae34ce806d56a05642e604f75e1949d50473dbd5625ad486569cd8eb72ac063f57a14e36c168a1a4c30ae647b596c5aff6b42946f4f2c86596bbb7081d027ed6f5152763c2c29b29514a464a7eaf158eae07265980a90d1abaa24aed37ed182291480daa88dbc8eb795f857da733c584136d1409ba503b88953dfec0ba854310f5f5bcf0fe1be2abc3aa0aa2f9e262fb659d72bcf9e27c03d0ec18941bcf120c345ad61db97b409b27b0ed6c54512ec805fa286bfc800cec846ad4bb3602d2999f2db2ae61599eea2e018fb9b60b8287b452ec9a4ee99d40f6d80318de887ceb1e0ad40392d747a7e25232e10e5e83fad5246aed6b381498df0a03fc40d88dfe86be4735221d5c7ae50871d277f46214017e087a82dc85050caf8e8ad67930bcef5493585bb4a3e990272ffd23c46ca908a2c9780ec2f28a70e9731685edfd265a3ac14f84cea6a191cc08a7d5549469597d2b89ef4eef07321f95e613d0a0041a96472ad465a5976d8709a7e56c3d76fc34784976e2482550167700bf19a62f3d33b28814f6967b3505f9dd0ac1bc19d18c36d0adac09608acf8008d1f6562f1aa0cea0862272e5e933951a3a593920abf0efefb4ac22fd00bceb7e281906aed49a82d0ed1392d83c8242fab07f6ee05248f3511ade9ff75a6725811dc8e9cd6e4f680cecef0e4978de75a14b6663b2e6909a631abb58867564ecd739a11fc65767f4f476cc1aec0577e073cfa221e1970bf0e35378763f6a851296854059f4cb8446747d9fdc8a4cba683a0e507489b2f05ec03cf8efd2de1807cb166703e37b4ed8f41657df534894ffe23deb77bc06d2f4cd371c9e34ace026a5ab8450439e27fd98df90a431ee3717f4ff5ca6a578f66ca984a8ebfc3446737c53ebab95174a6a3ab117870c30365e2d9685c89de46679a67adc5c2d37ec0e16e08997b22ef8f0f99249d65aabd119feb8e685053640fa4f4a933d2c883320cc08527ccb68b89b77ca7c979c5c853a92b2ee9d191be9a43c21299c27153b42fd7ff38f64d60f38f26cfc8a62a2650a1e647fc44e6ae00b62ef69f2de36917390705d72970cbcae53de5a57803663d14129676924c080d2f07482b99e57da331675a13cc10e4aba523cf162a440f93ec9a207c80e46b71e955d1adfd2634fd347c28b3c929387f3f197849fd22410fa16299a62d907e53c432d2befbf5e4c9140bacbe9fd7a4d0817ea9397843d1db39e9a0e9851c2a7a280756595b1e17dc2ed6d2f1896f90b4fc85e28927c2363439640c094b337e0c379fca4a2f7f5a34de31b94ac23d8a5b6fd74217eeef94094e36b74f3f02f5a82e0478151097a41b72ccf58eaa09c7d6bceb5ef2babb491db063946c878ffe001125a13a1e8b3d485faac581edb4dce71b833b8a5d12d0e194dbe3c0d61f10ddfe69e755d1431226ddb15bbaedfef39819185614edc11cbabadeaaa7d1d88fbac62000157573d21e2f95a2f153dbf4251bf04075bf62099d5e395e4828f0a029bd430dce9bd0b657b5c928bd5365dafc40b846b6458b1d8f11ead253e23232eea0dacf00a153610e833b74960ba40fbdab3104717f5373ec060e3dcac81096b305c8f61d301094fb438def40264d6081b1f1f52f0e16c4ab7d03ee1", &(0x7f0000000180)=""/134, &(0x7f0000002140)="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", &(0x7f0000000240)="82404a1cabd2d37f0c91049ecba0bc1148e6946cc66bfd1e972a60361a8c90332af7390ec1b31f42bdc34bf44b06cf61fda39942ce4f6da4dd4001bfd16c9af3ab1c7e7be4311c2da5565319a43408d7c860b538950b46b536e7886b3cd73235714e7ee56683c4e7296ebda2e149eb55ab3b0111b07b471392ecc401243093ee8ccfd9dd9b3b0c108ad91890b6474715e2ce7b1f1d1381ac94d9eeccc34430601562dbc577315be2192fa1162afa3f68e2", 0x1, r0}, 0x38) r7 = accept4$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8982, &(0x7f0000000140)={0x7, '\x00', {0x3}, 0x81}) 04:46:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x400000000000000) 04:46:14 executing program 1: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) unshare(0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) connect$caif(r0, &(0x7f0000003ac0)=@dgm={0x25, 0x44c, 0xc3}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03080000000000000012806376010067fb7fd0a6e70b535c0e523d8748656e657665000010f70180060005", @ANYRES32=0x0, @ANYBLOB="0800ff00", @ANYRES32], 0x50}}, 0x0) [ 1690.271921][ T899] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 04:46:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x24}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1690.375349][ T29] audit: type=1804 audit(1595565974.826:1386): pid=901 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/36/cgroup.controllers" dev="sda1" ino=16384 res=1 [ 1690.404072][ T901] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1690.446695][ T909] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1690.460881][ T915] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 04:46:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x38}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x500000000000000) [ 1690.482401][ T29] audit: type=1804 audit(1595565974.876:1387): pid=903 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir054433689/syzkaller.vjG2ax/1245/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 1690.609098][ T29] audit: type=1804 audit(1595565975.056:1388): pid=904 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/36/cgroup.controllers" dev="sda1" ino=16384 res=1 04:46:15 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1ff010000) [ 1690.687825][ T922] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 04:46:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x800000000000000) 04:46:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x264800, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xe) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x38, "c53cc368a9cb3bf6e1a9658cf2f967a78b4f3105c499191168bc2d8047686c77f9a8573e9bbc6de69d3084aaaac383751fb2edd122aa727e"}, &(0x7f00000000c0)=0x40) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r3, 0x5}, 0x8) r4 = accept(0xffffffffffffffff, &(0x7f0000000140)=@phonet, &(0x7f00000001c0)=0x80) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000003900)={'ip6tnl0\x00', &(0x7f0000003880)={'sit0\x00', 0x0, 0x0, 0xff, 0x8, 0x3, 0x10, @private1={0xfc, 0x1, [], 0x1}, @mcast1, 0x700, 0x80, 0xa0, 0xfff}}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000039c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xc0000000}, 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x2c, r5, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4c800) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000003a00)=0xfffffffc, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000003a40)={r3, 0x3c, "4fa588e99822d61e09142187d98bcd992ece5e954c98786aaeb64f3f85f233c2bdafd541e46cbcd8b7e0b9f78e2f69f31ac4c94a67e580eb033bc560"}, &(0x7f0000003ac0)=0x44) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000003b00)=@assoc_value={r7, 0xffffffff}, 0x8) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000004000)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003bc0)={0x3e0, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffc01}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfd5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x71}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x93c00c53}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x957}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}]}, @TIPC_NLA_NODE={0x1fc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "c0b46b54b8d8cd77c52fd343854c13cd7b99199baeb1646c3560d84d60148d4e69"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "63bd828eb25494e1851e6c2930a4ea4b311dd525c0291f483ad64534420dd15aa0953bd9"}}, @TIPC_NLA_NODE_ID={0x56, 0x3, "bcc2c55f9fe6991a58b1d3d9539a2a016d761df6147fa0e15c9f1daaf6c107ab0fcb41814c46a4f0128868555d319fdbd8b6361c0e77985831de526f093d1ef7f8ccb2fbcb5cd2c6b3b8380eaa49874d1d5e"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "8ac1966eb26bb181a8dbbf7975cc86c164d3a7d953b7eb0b9af76b8d3621ef"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x8f, 0x3, "255e8d8d597788e1238b74ccb1ac5fb1fd2e9f6dcddac39c152b6d6cbd51eab2c2e367b05a5dd8d215fd77f94c8d508ebc0dcc4d7d338de723a7ceee478f00111721d2b0bd4ca987b0980b2f70ad98a6e9081dcca0a5b00c50e8fa3643c6cc16f3abf83d1b9f974840092d0339dd81c53393fdbd726619c1528cc991c00302df3e727313380e08b1de0c57"}, @TIPC_NLA_NODE_ID={0x28, 0x3, "1b725692c73230f555ee4a637bc88ab40d528f3297a8857c63c4ae99cab19433fd7862f4"}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x4004084}, 0x80) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000004100)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000040c0)={&(0x7f0000004080)={0x40, 0x1401, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004c80c}, 0x4) sendmsg$SOCK_DESTROY(r1, &(0x7f0000004780)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004740)={&(0x7f0000004180)={0x594, 0x15, 0x200, 0x70bd27, 0x25dfdbfd, {0x29, 0x1f}, [@INET_DIAG_REQ_BYTECODE={0x3e, 0x1, "a1727b87e3e1302e0b4accef86b14e2c47369c05e3c7792ea4e88cf5528315e2b20922388b1324e2563a68c4d7e986d439818eb24e07712f5d4c"}, @INET_DIAG_REQ_BYTECODE={0xf3, 0x1, "dfb36fb9490f44e4635434912aa5f272866afe1a098aaab6b6e7d27c03ef78a84fbf2598832c10600db84fc4efa91d728ed0a68fa81d0a167c23eadc4368777737681308ce8aebc53f015f6ac39473114b41ad46431b1bf9b749e9ec4321166cafe4252ad2e391be997b5e360c016acffde59c3692f70f1a0a8dfe56fb710a77086536eb116512bf713e9ce0cbf902b10fa19157c9db1678ce9638de057c2cfbf79605d383043d5e8949dbbe36a9b0fe4b276001419c9b4a75fb958c315e49e0538533b40cd08e3b3ad6a82bb7770b0142bf3e1b2c93ed8116068110b552c842d74074b7a47b0fb937d2ecc6d2d349"}, @INET_DIAG_REQ_BYTECODE={0xa3, 0x1, "a4d5776e20cc29c8d9c9c446ac95c7c057b94f3bb4c63fedbe86590a520901817b403a39519f980cf230a780d9fa30b2b11026197a966c47b584aba5c7221a742bac0594908268f0234d6327bfbce6e937279a9ac2a80829982ed2351ed8cfb288ecd283b335f1dd9639816f47a0412ef326f300f2cc8b1e4780c409df12f30993147157274df9dce63709983b1eaf03897d3b3835d59c72a0e2bfd1d82516"}, @INET_DIAG_REQ_BYTECODE={0xcb, 0x1, "48f360211fd679ca2417041027aee011fe9a7cfc608a5fbd94408befe6ceb1255e719bcf86a79a79423ea01391dab4847c3a0b8308208ae41f0fe5a8b5570b69f5427c6b580c26ccad57958f35154d38b9138aef67f6965166a023ed06e19ba97a44e81411a45bfabed549c773011eb4c22a62910b7d473e6cbbce4bf984c8f6bea5a405f828cb85d9ece3b2a94b840641254a5b1e77de1cdedef72bdfb50ea670e8f05c9836b4c800ad2e990e0240fd545a5176f886e5b6710aee5b6784e6e1cc8cc55e870e85"}, @INET_DIAG_REQ_BYTECODE={0x70, 0x1, "5027b8445f96d008c0ec6d62a9cbd8aadcdbd26fd07b97efd0842e7796201af4222aa7ec3da3f959c5da3fcac7cd0ea0fa5e23111905e9171a28e5e1f4a1781596f721320b88d3326a18261167321f09dff8cafd42bc9368106f85e867231cae7f49105b6a73069f848d37af"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "b3db77ac16fb1085c1cf3174f8672796a849c03b7f1c67aeb7237633ac0804ac8517be8fb6eb5f8d9b25eaa4614b8f2b7667b1ee98135dccbcfcff72e511e9fdb340f489ab725e037af3798c5c86345a7122761caf073be70aa10680d033c0520517f778139df6"}, @INET_DIAG_REQ_BYTECODE={0xb, 0x1, "e51787fb6c42bc"}, @INET_DIAG_REQ_BYTECODE={0x61, 0x1, "a05203107d230c271d341b3b3f327a7e3262a7aaa339ad20ba4b4bb791608fa6599d1f30a6a1c6505151c6778999e69e145adcffc357713eb685ff439598a649ecc2cc1f89b2ad0fdc60f05c81859625b4fff5a93bbc062b3bb133bb4c"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "4a98492c120fa1c255a1b2b8673f5b581309d1c4561c893d5772ef8279f1fb388e05a6970a3751ab0f37bface7b35eb4ea66d13d4f4d188ed6cde9abd75d80cbee29efde9ba9e15b559532d2ce28865b5ae915aa2093baef404b1d22dcb0d98b2ffdb489e803817440aed60efb9c1303bfc66d79ee4b7892cbfc43238ad92141b4929d4fb39fe175bc2d079562"}, @INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "0b18a1e7df0a34471ff2f87060e980c0023f5457cede010aa551a767c5052e31e63789ae3f98837e9f364c7e5b2c739af853c5c0447483173a7c8a0b476bb5ade3eb9bad6f3e55a678c4963f3a910e6ac75a2e131e36f85d98547785d0cf5f860707615359764237f6a1140f667a8f1d8993f199394241f11122948ae9de72508e8ba9dfaa82410f146133180535eedc4095d1b3790ddca16718990bef5bb8ad92d4ad31aa71e9768973b4c2ffae4989e25655372fa8feb2cb9f78d59562e64a21ea237d14c66dbb433a0148903a52b313eddc2623ffafd0058900cd880a790d10f45c0920f8cde586e3324c419f277a49f19a6273a351bd"}]}, 0x594}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000047c0)={0x6, "3e97d0"}, 0x6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000004800)={0x0, 0x6dc9}, &(0x7f0000004840)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000004880)={r9}, &(0x7f00000048c0)=0x8) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000093c0)={@null=' \x00', 0x9, 'veth1_to_hsr\x00'}) 04:46:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0xb}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1690.966807][ T29] audit: type=1804 audit(1595565975.416:1389): pid=932 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/37/cgroup.controllers" dev="sda1" ino=16044 res=1 [ 1691.002995][ T932] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0xb}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:15 executing program 2: unshare(0x40000000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$netlink(r0, &(0x7f0000000080), 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) sendto$rose(r1, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendto$netrom(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007278650014003300766901005f7769666930000000000000"], 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) 04:46:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x900000000000000) 04:46:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x80002, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$unix(r3, &(0x7f00000006c0)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f00000002c0)="6a154e60b19d3618c645a61e2abb2b676bbf565740d05211fbe9a62c91fb7622dede2270bd05b3750e628461641007bdeda2340d78a42f1127bca90ac7e5fa4313fb2644f8d837466dfd05889bc515eb05cc553c3fae57f0bd8301dfa78867aadb488433758122b99112bc45e3e46822ed9b82689ff1f384cd1e471911e9cd57916c8c6f28ed54", 0x87}, {&(0x7f0000000000)="8f3ace4b6a766e453e3229049c0523ac0e78b7929e45ab8257f6ca5b45b32424eb72dd51863f81d78dd6b8", 0x2b}, {&(0x7f0000000100)="70241c49d85a353827fd16cc21a3", 0xe}, {&(0x7f0000000380)="fbcb5e531a557f078bf0c43df860c0f84d540a64e7ee0e88032a94962d21edad85b75b1d4eba862719482a39aaaaa03e3bfcd6ab940fe6553f68111fcdb698c13ca4e739f0f1b2a8", 0x48}, {&(0x7f0000000400)="ade64c41c9d4a273f733a7b8bb25b686a770759f3a6843e838780ae9ced8108050e6d540c09e163ff9114869bfa58759bfa1bde20d259d70f1d7f312a60982ea9e437607f13318caec7f521f869b9e80c23e1fa5f3ea3b77e3eba3474be02933d6d5875bcce6997cd59bb95541de0cc34a8fecb84758b01eb60bce1de62b6c24816cbf4f5a0ffbeb0dfe23c7307014267b340ca28f26cd3ae5722e2e131ee5cb", 0xa0}, {&(0x7f00000007c0)="540ae89df3d21707fcb768aacd691327dc70a950ed47fe36320f6a1d5da4b0d4ca3e43bb2e401f0a84cbc70bad8e3459a30517b58979ca1d351a7b13c6d0b8663139c32db1debc49dc5a9955a4ee51e184ddc61b5d02ce92ab70adcf59e525d022445cf309a7e8abafad3c78043e1e1fa84f045e972dd5985b4fe531f587f1f0efd6b340bfffc8d365c243b87fae169b736c7d87a5121a492b61e546ba37c3a337d37c15121748f203a75fe82ea3ac90030423b1d5e2dd4c2276071e703e63243c8d4dafadda94ec4468f6a0263354ba490a3908", 0xd4}, {&(0x7f00000000c0)="a0b9c607a990b5d6194f441a04fbbe9e", 0x10}, {&(0x7f0000000540)="ef8bf68c64c9527bd4d2ecf2d629d9035d811dbcab0a0db723f7b60adef5045e5e28f5693488d55b3d4d9751438518e7bededcf3df50144f1a8f9916cd72590e81256d51e7388a4a95bd5147fe8cdd59a7f876eb85677aa01474f1627704b04fe2190d6f65fcb8b22c4c609896b123e9289486ad54d5d3", 0x77}, {&(0x7f00000005c0)="900575c34d1d097798525b4c063d0466c62e80d83b39f49839d04abe5d97f4fab8c361d6", 0x24}], 0x9, 0x0, 0x0, 0x881}, 0x4000820) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000780)=0x4) r4 = accept$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000700)=0x14) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000740)={0x9a, 0x80}) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) unshare(0x4060000) sendfile(r2, r1, 0x0, 0x100000001) 04:46:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x1a}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:15 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/60, 0x3c}, {&(0x7f0000000380)=""/101, 0x65}, {&(0x7f0000000400)=""/178, 0xb2}, {&(0x7f0000001900)=""/262, 0x106}, {&(0x7f00000005c0)=""/255, 0xff}, {&(0x7f00000006c0)=""/71, 0x47}, {&(0x7f0000000740)=""/132, 0x84}, {&(0x7f0000000180)=""/45, 0x2d}], 0x8, &(0x7f00000008c0)=""/44, 0xd5}, 0x7fffffff}, {{&(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000004c0)=""/92, 0x5c}, {&(0x7f0000000a00)=""/168, 0xa8}, {&(0x7f0000000ac0)=""/69, 0x45}, {&(0x7f0000000b40)=""/91, 0x5b}, {&(0x7f0000000bc0)=""/209, 0xd1}], 0x5}, 0x9}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d40)=""/82, 0x52}, {&(0x7f0000000dc0)=""/56, 0x38}], 0x2, &(0x7f0000000e40)=""/213, 0xd5}, 0x101}, {{&(0x7f0000000f40)=@pppol2tpv3, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000fc0)=""/238, 0xee}], 0x1, &(0x7f0000001100)}, 0x8}, {{&(0x7f0000001140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001540)=[{&(0x7f00000011c0)=""/173, 0xad}, {&(0x7f0000001280)=""/140, 0x8c}, {&(0x7f0000001340)=""/68, 0x44}, {&(0x7f00000013c0)=""/174, 0xae}, {&(0x7f0000001480)=""/156, 0x9c}], 0x100000000000013e, &(0x7f00000015c0)=""/61, 0x3d}, 0x100}], 0x5, 0x40000020, &(0x7f0000001740)={0x0, 0x3938700}) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000001780)=[{{0x4, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}], 0x8) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x200, 0x24) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000280)=0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7f}]}, 0x10) accept4$packet(r5, &(0x7f0000001100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001880)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000018c0)={'batadv_slave_1\x00', r6}) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000017c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000d00c8b854db959e440cd518a7d748dabd139abf02ff3084a3f123ff52d512c5648b14f83df51eee71fba515613d7c0b0943525499a0ce8f35b320d1dd78553ac4784620fa251c3e9cc038d3ce21c97d866df6b61f07396c544620c29e3526330333bfd879c9d0af23", @ANYRES32, @ANYBLOB="a302237f00000026"], 0x30}}, 0x0) 04:46:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xe00000000000000) [ 1691.336323][ T953] IPVS: ftp: loaded support on port[0] = 21 [ 1691.399983][ T953] virt_wifi0 speed is unknown, defaulting to 1000 04:46:15 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1ff0f0000) 04:46:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1691.505025][ T969] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 04:46:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xf00000000000000) 04:46:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x2810000000000000) 04:46:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1692.090782][ T956] IPVS: ftp: loaded support on port[0] = 21 [ 1692.195049][ T956] virt_wifi0 speed is unknown, defaulting to 1000 04:46:17 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000600)={'filter\x00', 0x0, [0x0, 0x2]}, &(0x7f00000000c0)=0x54) 04:46:17 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000002e0000004700000000000000270000000000000095000000000000007e34383b207a7c5154240436c49c76252eb2d7f8e64d07aba56370780cafd89335aeda4f28a907bdd6ce91f21ec6e6"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 04:46:17 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x6000000000000000) 04:46:17 executing program 1: r0 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x4, 0x0, 0xfd, 0xc1, 0xff, 0x0, 0x5, 0x1f, 0x8, 0x40, 0x80, 0x8a, 0x76, 0xce}, 0xe) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e22, 0x0, 0x4e23, 0xfd3, 0xa, 0x80, 0x50, 0x0, 0x0, r6}, {0x5, 0x1, 0xf, 0x2, 0x9, 0x1, 0x3, 0x3}, {0x101, 0x8000, 0x8, 0x1}, 0x8, 0x6e6bb2, 0x1, 0x1, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x3c}, 0x2, @in6=@loopback, 0x3505, 0x2, 0x1, 0x1, 0x5a, 0x80000000, 0x10000}}, 0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e23, 0x0, 0x4e23, 0x3ff, 0xa, 0x80, 0x100, 0x3e2b986d80c85fa3, r3, r6}, {0x100000001, 0x1, 0xd13, 0x3, 0x4, 0x4, 0xffffffffffffffe1, 0x80000000}, {0x1, 0x9d2e, 0x400, 0x7}, 0x1e5, 0x6e6bbd, 0x0, 0x0, 0x0, 0x3}, {{@in=@empty, 0x4d4, 0xff}, 0x2, @in=@empty, 0x3502, 0x1, 0x3, 0x5, 0x0, 0x6, 0x2}}, 0xe8) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000006c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000c00)=""/130, 0x82}, {&(0x7f0000000100)=""/57, 0x39}, {&(0x7f0000000e00)=""/215, 0xd7}], 0x3}, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000b40)={{&(0x7f0000000ac0)=""/105, 0x69}, 0x0}, 0x20) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000000)=""/22, 0x16}], 0x8, &(0x7f0000000880)=""/200, 0xc8}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 04:46:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:17 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1ffefffff) 04:46:17 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x9effffff00000000) 04:46:17 executing program 1: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b0000) socket(0x10, 0x0, 0x0) socket$inet(0x10, 0x2, 0x0) socket$inet(0x2, 0x80d, 0x93f) socketpair(0x29, 0x6, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) connect$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0xfff, @remote, 0x6, 0x1}, 0x20) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8, @none, 0xffff}, 0xe) socket(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0x0) pipe(&(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="03020000080000002800128009000100766c616e000000001800028006000100000000000c0002000e0000000a0000000800050035d3fa07926fc897011d33d5741d6557d1ef46de2447effd9437248050dc8729b1b7750abc409a7aec45c1417acf3dca653d46b0b9a7b4a0362ed764728ec280", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r4], 0x58}}, 0x0) 04:46:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1692.726269][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1692.726286][ T29] audit: type=1804 audit(1595565977.176:1395): pid=1042 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/39/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 1692.740824][ T1042] __nla_validate_parse: 1 callbacks suppressed [ 1692.740835][ T1042] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:17 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x6, 0x7, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000e7ffffff851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095003e1ff566c515d467c218363700000000006e6f00043f00000000000b6200005300094d5e36907ec93ac30000000000006704cc8cda606cc86a07f964db1b8a9a3f39d275f462edb30de23486f2390268a848e606eb619b39124d9b027654883d35dfefbee96fc2a674f09682e07f13f3f41ecf6cac98404f00b28028adfc6947e877aa0e182016501ce1cfe4e2a4d0da98e6fd3ebff787d52e445267b17040b654dfb4422b2246019e122cf4371aab4f31d61a2c1e57454ac638629a8ef881fd56118065821b"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000080)=[{&(0x7f0000000040)="2300000025000511d25a80648c63940d0424fc60040018000a0011000200000037153e", 0x23}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000000), 0x4) writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000000)="f652dac95e852b390d776800795be5b1162ead0fd6c50f811c576492f8b659534118b31ad11534d2689e31", 0x2b}, {&(0x7f0000000180)="8bc6128ccbd3aa0eed9355c22addc26131cf18cb15990868207bcd39f61994cfe9d15f72046d328b7106af772df296c11ee034c666784027ac7c4ef5add3b467c07cdfdd948e565c094649be8cfd509c0bc7a80374ee5dcecc28dd2d512ac8400bb625107accc524093fe4d060290f3108688f0cbd536cff1f9fedda57f2daaa2f2f264356d428aa3c39ebce340b223fdb0dd5066b197d75fb04347a4c", 0x9d}, {&(0x7f0000000240)="fa5dca818763465fea0b1050d84d2dfe691f465457aac08050cccab9773d58564e9b88e15019264ad1afa52385ef2a94a1fa87d4cd7465d2835bea47929e0cae27d1dc05cfcfc984fd8ffcbb4935322787a4f2a0403c2341118be1efe64215d7b9ce7a666d5fddfdff569e3b11b03ce23ccc455f03977a75b6082e9c3b8d029aecae4d50672c32d07d5bad2e7aa8cd2913fe069ed1d3f8d225a29400c995ed34449b5c9c50caf89adef0beb86d603aef25f5271f4145ec75a921bd0edab4d0f30a83cf05e4550e51db85cc0ca5d0b0c7c0513c8cec8fad84ee4dff05b059c4987bf6be4a7a6ede38a31962b44ed2485a06c0", 0xf2}, {&(0x7f0000000340)="217e6273f2e553be6c730a0f5a93f92c6bff733d53201994779d794d3ea6e944781565d8bbe8d701ba1693d08f53d845fb75aed5c1be0d069af23a9af72cf0bf439059dd3f9a8bd91161d180578136ae6df28434545dc6c86998e33a24ea7f2cab2958f68568f79d65a19122dc53fcddc674a52630b9cd7c572353a432b7395d0fd34b1d702a3c93", 0x88}, {&(0x7f0000000400)="1e85695dc593fe820d0d2fa323e6bbf8ecc677acd692654048e65b27895f59e458c00edc64e054142a89348db723e92e4df7b52db1849d613910a7545a73fdc6b53881f2f2eb54da08ffe4e7eb9d1602c2234ee49fedbe2fcca9bec2253a9f999820c441f91e1b1f8a9dc52cf7471ae278b0bd25c2ba958ab4f20e1087023908d7e6", 0x82}, {&(0x7f00000000c0)="de7e88a9bcb172510f087fd1b75d07e88a39cc9c1b8172445db7a82f724e20b50a9d1fa4bd8c480110ec1ffb5f9c102cb1fb954ec29b1500e044216ac03a82c4e7edcc92c90dce96fb513cde555ded4f", 0x50}], 0x6) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$SIOCAX25NOUID(r3, 0x89e3, &(0x7f0000000540)) bind$alg(r5, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r5, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r6, 0x0, r4, 0x0, 0xd86dac9, 0x0) ioctl$SIOCX25GSUBSCRIP(r4, 0x89e0, &(0x7f0000000140)={'veth0_to_batadv\x00', 0xb9, 0xffffffff}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000002040)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x1c, r7, 0x2, 0x70bd28, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000600)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x10, 0x70bd2d, 0x0, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 1692.810198][ T1048] IPVS: ftp: loaded support on port[0] = 21 04:46:17 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xf0ffffff00000000) [ 1692.901048][ T1048] virt_wifi0 speed is unknown, defaulting to 1000 [ 1692.936824][ T1060] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 04:46:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1693.516374][ T1049] IPVS: ftp: loaded support on port[0] = 21 04:46:19 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = accept$inet(r0, &(0x7f0000000200)={0x2, 0x0, @empty}, &(0x7f0000000240)=0x10) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x2, 0x344, [0x0, 0x200002c0, 0x2000049e, 0x200005a4], 0x0, &(0x7f0000000280), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0x3, 0x1, [{0x9, 0x3, 0xd, 'wg1\x00', 'rose0\x00', 'vlan0\x00', 'ip6tnl0\x00', @multicast, [0xff, 0xff, 0x0, 0x101, 0xff, 0xff], @dev={[], 0x13}, [0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x15e, 0x1ae, [], [@common=@nflog={'nflog\x00', 0x50, {{0x5, 0x81, 0x66, 0x0, 0x0, "dcd012f0a04a2adf717190893382e14004c511840ee1b78f05f51aa9a9aafdf380d1c4d6bd826f9c5be22c9f6db082d5fa4ca2d744f9eb0bcaa39498dd038eaf"}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x1, 0xfb, 0xc11, 0x0, 0x0, "0e0ed683a9b87203f44a60e08cb9a26d3a4c781f9d8b37b552272e363ce03a412b050695b84291ef88abe1f0fe7bb03f03be2a7431057e694651443b2b5775e5"}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x200, 'syz1\x00', {0x7}}}}}]}, {0x0, '\x00', 0x1, 0x0, 0x1, [{0x3, 0x10, 0x88e5, 'ip6gretap0\x00', 'veth0\x00', 'ip6gre0\x00', 'batadv_slave_1\x00', @multicast, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], @local, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0xd6, [], [@common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xfffffffffffffffd}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x20}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x3bc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000180c20000000180c20000000806002108000604"], 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 04:46:19 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x34, 0x8, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) setsockopt(r7, 0x3, 0xd9, &(0x7f0000000900)="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", 0x1000) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc, 0x1, 'skbprio\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@getqdisc={0x34, 0x26, 0x300, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xc, 0x5}, {0xe, 0xffff}, {0x2, 0x6ec743a3a4b0b59a}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}}, 0x0) 04:46:19 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1ffff0000) 04:46:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xf5ffffff00000000) 04:46:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x0) accept4$netrom(r1, &(0x7f0000000080)={{}, [@netrom, @bcast, @bcast, @default, @remote, @bcast, @null, @rose]}, &(0x7f0000000100)=0x48, 0x80000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8}]}}}]}, 0x3c}}, 0x0) 04:46:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0xe}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xfcffffff00000000) [ 1695.092332][ T1132] IPVS: ftp: loaded support on port[0] = 21 [ 1695.124829][ T29] audit: type=1804 audit(1595565979.576:1396): pid=1128 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/40/cgroup.controllers" dev="sda1" ino=16378 res=1 [ 1695.158307][ T1128] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1695.192626][ T1127] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 04:46:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0xf}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xffffff7f00000000) [ 1695.286145][ T1132] virt_wifi0 speed is unknown, defaulting to 1000 04:46:19 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0xb871, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000140)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}, {0x6}, 0x54, {0x2, 0x4e24, @rand_addr=0x64010102}, 'nr0\x00'}) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={r5, 0x7, 0x0, 0x40, 0x8000, 0xbbc}, &(0x7f0000000080)=0x14) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @private=0x3}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8918, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 1695.468755][ T29] audit: type=1804 audit(1595565979.916:1397): pid=1134 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/40/cgroup.controllers" dev="sda1" ino=16378 res=1 04:46:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0xfffffffffffff000) [ 1695.588532][ T1169] IPVS: ftp: loaded support on port[0] = 21 [ 1695.973700][ T1169] virt_wifi0 speed is unknown, defaulting to 1000 04:46:21 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000061171c000010000000000000000800000000"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251, 0x0, 0x0, [], 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 04:46:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x60}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:21 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1ffffefff) 04:46:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000000060104000000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c00078008000640000000a006000440000000000600054000000000"], 0x64}}, 0x0) 04:46:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x1100000001, 0x12) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000003c0)="1a47172935122da3fd7518f37d2bc6703f5fec10e633b6e3ee5c6ee5d4e31f4b1510b81e2b45f1aba6174e150279cc483bb814301c3deec980d5cc73622e5324e9f53273355ed926bbd2483c1a3dd6df565f067d051d57e0c82fc53d932468b232c98c3a0e956892259ec024fba84fe5076e44a0b96d34d4da4169f78cb42b22ca1e20927fd6bbe5ed8f05723b", 0x8d}], 0x1) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001300)={0x2880008, r0, 0x0, 0x80000001}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x20}) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="cd44db62d527b9e39208ee5ddbc0390680ab3117e9b1652a3edbb169bcbaef8f75ef3a3ef95ed43c091c384d59cf3106419ca1864853d863da5b76a1bdf9cf92d5c9be22a398f4342f8206a9abe6165ebd1d603053a4636ac9fe82b98fb8c859c41d4d36a4ee5b39f65fb479167bfa5e313fe7a34966aaa6fd46715999ecb9f8c1f609f00c047d3ac316996c1463b033d4f570fb9d2c4b8a183966d3879dbe1faaac04dc4b9ed002f32bf4f462477810497f1284cb9073962e3c046c93d538b8ef6525fc499e70574967625299adb1391b7c62d95a03c4", @ANYRES32=r1, @ANYRES64, @ANYRES32=r0], 0x1}}, 0x4000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000080)) 04:46:21 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) socket$inet_dccp(0x2, 0x6, 0x0) write$binfmt_misc(r0, &(0x7f0000001b00)=ANY=[@ANYRES16=0x0, @ANYBLOB="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", @ANYRESOCT=r1], 0x37cb1133) r2 = accept$inet6(r0, 0xffffffffffffffff, &(0x7f0000000240)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e21, 0x1, @loopback, 0x8}}, 0x1, 0x8000, 0x6, 0x3}, &(0x7f0000000340)=0x98) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000380)=@sack_info={r6, 0x4, 0x48000}, 0xc) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r7, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x84, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1d}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00\v\b', 0x9, '\a\x00@'}, "ccbfc12abc282c27820fd9118600820e000600110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a) 04:46:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x3, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) openat$cgroup_ro(r2, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) 04:46:21 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0xb871, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000140)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}, {0x6}, 0x54, {0x2, 0x4e24, @rand_addr=0x64010102}, 'nr0\x00'}) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={r5, 0x7, 0x0, 0x40, 0x8000, 0xbbc}, &(0x7f0000000080)=0x14) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @private=0x3}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8918, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 1696.785463][ T29] audit: type=1804 audit(1595565981.236:1398): pid=1239 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/41/cgroup.controllers" dev="sda1" ino=16375 res=1 [ 1696.824649][ T1239] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:21 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x37cb1133) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, 0x7, 0xa, 0x0, 0x0, 0x0, {0x5144606ebd393fdf, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x600}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x4800) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="530000720000010000000040000099984f45278f1a62858d29ad5e4732f3d77578a8fd2c3383492fd1b951c4e9b5cbdecca2a6b3fd5caa3780df53dcee509b496d3b2c0bc0f76dc417f52674a0f64c0d57b0d944e3cce906db48c703f8232ff278b7e77631d68e1731007e7381e2ba636280d81d765d7bfd5a5ce327f19618000e8bc7f23673b37d21d7eb58712f", @ANYRES32=0x0, @ANYBLOB="00000000001000002800128008000100677470001c00028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="0800030000000000"], 0x48}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r1}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) r4 = accept4(r3, &(0x7f00000000c0)=@can, &(0x7f0000000040)=0x80, 0x40000) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040081}, 0x0) accept4(r0, 0x0, 0x0, 0x0) [ 1696.885741][ T1251] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. 04:46:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x30, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1696.977149][ T1256] IPVS: ftp: loaded support on port[0] = 21 [ 1697.072305][ T1256] virt_wifi0 speed is unknown, defaulting to 1000 [ 1697.072619][ T29] audit: type=1804 audit(1595565981.526:1399): pid=1262 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/41/cgroup.controllers" dev="sda1" ino=16375 res=1 04:46:21 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1fffff000) 04:46:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1697.325204][ T29] audit: type=1804 audit(1595565981.776:1400): pid=1269 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/42/cgroup.controllers" dev="sda1" ino=16375 res=1 [ 1697.346002][ T1269] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x5, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1697.526255][ T1276] validate_nla: 2 callbacks suppressed [ 1697.526267][ T1276] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:46:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x6, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1697.595977][ T29] audit: type=1804 audit(1595565982.046:1401): pid=1280 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/42/cgroup.controllers" dev="sda1" ino=16375 res=1 04:46:22 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1ffffff7f) 04:46:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000000c0)="4bf70707405f83e5ccfaae71a64120e77235d9f7db2a1566f8fde8410026823ac60837d52a76eccdb94c2d22234c5e717f748717b8baf7aa579d688359637d813f03d1ca7d40517199ca55cfa275dfec565f63a449f488e4412431", 0x5b}, {&(0x7f00000001c0)="fd6864f25c6ca8f3f214442abb65146acae215f304e8ecc038c7a977f8d8377bc945f16311fe231d204ad76cc8dda6e8ca35b484c84a0b88958777e9fc822f62f02eb4dfc56422fbdf5638e02b8930a8248d25a73a8c23f5575078e0d5ded16ebc3a89e5d0b917d3cd5f98631c38f8e26a57d1efc4b00b0214768a2dd8f1328f836f6893fc84cb77e8e5ebda80ccfe135a1fdda0889c71a08126da4ac413ddf5c89b0c1b9ec15b4d8ae5801f82ce59a397fb5298ce289428b3da", 0xba}, {&(0x7f0000000280)="73d3e4919ae4951bb30829ef6a6fcb754b4df599360029b8fa45750b029a62606c2877996ff852043611a807e0b866c06d4a7c17c87203b7c24554166aa9dcf0cb0b32bf63da396a0836b8aff7a19862882af9a1a38c927a9680117879a0e915b15eac1657a6d4969f89fc1880fa8ae7eb576c267d2e4784f877bdbd8a0f9e93dc77f8f38b909758de311505315ed79fa0afedf847714e8e5ab403ee0471027a09a3a1ef499fe677d863859d0e235e0caf90c7d57d25", 0xb6}], 0x3, &(0x7f0000000380)=[@rthdr_2292={{0x88, 0x29, 0x39, {0x87, 0xe, 0x1, 0x0, 0x0, [@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @local, @mcast1, @mcast2, @dev={0xfe, 0x80, [], 0x2d}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x16, 0x0, [], [@ra={0x5, 0x2, 0x5}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x3a, 0x0, [], [@ra={0x5, 0x2, 0x7}]}}}, @dstopts_2292={{0x118, 0x29, 0x4, {0x67, 0x1f, [], [@enc_lim={0x4, 0x1, 0x1}, @generic={0x0, 0xa2, "16cf22d9c19e9c4eea3b14e27a94e65d7db953dbe8514a7eb738a125d9162df27f564e9bf85d34f645bd6967165865d763c07a0bf721c839e365584e960c2c193299b33046324c1fa7f589da63afac3367acc468a40d6cde31c6ce0c38febc1d96cc2dec4f5980a76f1d630e414fd4ee6680ff110139c82f5654646d365156e44aebf33ca1d3bafa46568fbb4d5aad565c39cdba364da717322e2c688e736e83053d"}, @jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x20, {0x3, 0x6, 0xad, 0x6, [0x271, 0x101, 0x6]}}, @ra={0x5, 0x2, 0x3f}, @pad1, @jumbo, @enc_lim={0x4, 0x1, 0x80}, @calipso={0x7, 0x18, {0x0, 0x4, 0x3f, 0x9, [0x8, 0xfc]}}, @pad1]}}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x2f, 0x1b, [], [@generic={0x9, 0x67, "d73885286826f911b2131732a60ba9cba6a43887813ac5bbe0e18dee053a1d42f04c88d2715902fcb502cedec8ff9bf510f746e71a77644037c0b9ef602afb8ea2a01fd5a3cfd21ccb217b9ec6fdc8b567386f22b78e736ad5275848e3339165beae19186f7894"}, @hao={0xc9, 0x10, @private1}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x58, {0x2, 0x14, 0x9, 0x6, [0x4, 0x2, 0x9, 0x80000001, 0x9, 0x7, 0x2, 0x8001, 0xffffffffffffffc0, 0x100000000]}}]}}}], 0x2d0}}], 0x1, 0x8000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x70, 0x3, 0x3, 0x201, 0x0, 0x0, {0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x10000}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x101}, @NFQA_MARK={0x8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x45}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x2}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7f}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x41) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x0) [ 1697.884521][ T29] audit: type=1804 audit(1595565982.336:1402): pid=1285 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/43/cgroup.controllers" dev="sda1" ino=16071 res=1 [ 1697.893984][ T1285] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x9, 0x80000, 0x81, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg(r2, &(0x7f00000006c0)=[{{&(0x7f00000004c0)=@nfc={0x27, 0x0, 0x0, 0x7}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)="ad604d4db07e85ef0aed63cc0ec9c3a567d602dbb368a8ce61a64a89e13a2e22eff687e2761a4121904e2c0e1704c1484e5fe2be817e3f4057b90ec3fa2d7074791d0a252fb5b9e26eb45caebac69487a66b7b7b6c882627010132e30e5077d2f0d2cd2a2d51648b9da96aded0cda9703f1b048a91fbdf8dbbbda458b7536c54bacb3bbd584266bcacfa3451140d53c63ccb6a55a5b274e8a145769cf62e90db8869ccc1648caea3fe65f638bb89e568fe934219314d7dc2b08cb0ff786dd3044849c0", 0xc3}, {&(0x7f0000000640)="aee8f84d8adbdc90a924f3b2542b454c7b91be641ff5572951e8a2cc3f824c52c337a70ee899b9012f3537188f6b8d6a0bf9", 0x32}], 0x2}}], 0x1, 0x40010) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000100)={0x4, &(0x7f0000000240)=[{@none}, {}, {@none}, {@none}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xc00e, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x6}, 0x0) 04:46:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x8, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="030200000000fcdbdf25020b00f808000b00090000116ced00052a00008d0000e69a7b4668c40a008821bbbbbbabbbcd71e4a37b7590986fbe3b0ed4c33a0791876b07d70801798f7176ca6555d4f986ef66e6d780180b22e0f429e4bfdb69626a83c50e1a96eb49ef4d7837b49161782086d8ddb5fc929398f77eaa841a066d303d8c0a865c882557718a8027551975bc877a6c4c09ca5de5c43f6631e1b3ea72b2f0375239455d3febe1e6638fb90c3ed9d39014ecc749533c2e6b01f58973aa975570ae7edbf65e04ab2a55e5492ba11d405925a6e7474c5249b6d7d2060f73c463e885c2cf8d8cf5d88c14d4242829"], 0x30}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc0a8d00}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x500, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000054}, 0x8000) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) r6 = accept4(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f00000000c0)=0x80, 0x80800) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r6, 0x9, 0xffffffff00000001, 0x40}) [ 1698.242153][ T1322] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1698.288762][ T1325] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1698.382509][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1698.413884][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 04:46:22 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1ffffff9e) 04:46:22 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000380)={{0x5, 0x20}, 0x2}, 0x10) sendto(r1, &(0x7f0000000040)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0xfffffffffffffd7d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags=0x8}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000025c0)={0x0, 'veth1_to_bridge\x00', {0x3}, 0x3}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000140)=0x43b4, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000014, &(0x7f0000000000)=0x80000000002, 0xe3) r2 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000002600)={{0x2, 0x0, @reserved="fd8fd23becae2f6dca4cff8f7f6f2e15db5207f0b90a3f754b439c26d08c5da1"}}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{&(0x7f0000002640)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000026c0)=""/94, 0x5e}, {&(0x7f0000002740)=""/75, 0x4b}, {&(0x7f0000003f80)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/244, 0xf4}], 0x4}}], 0x1, 0xea225aec34b1dd0e, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x3, 0x0, 0x80000001}) recvmsg$can_bcm(r3, &(0x7f0000002580)={&(0x7f00000001c0)=@vsock, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/102, 0x66}], 0x1, &(0x7f0000000300)=""/101, 0x65}, 0x100) 04:46:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x9, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0)='batadv\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r6}, @CGW_SRC_IF={0x8, 0x9, r6}]}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r9}, @CGW_SRC_IF={0x8, 0x9, r9}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9b9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x40814}, 0x40000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) recvmsg$can_raw(r1, &(0x7f0000000440)={&(0x7f0000000000)=@ll, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/5, 0x5}, {&(0x7f00000001c0)=""/227, 0xe3}, {&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/92, 0x5c}], 0x4}, 0xa020) 04:46:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x3, @mcast2, 0x1}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19404, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0xd9fa, 0x1000, 0x0, 0xfd22, 0xfffff801, 0x8, 0x0, 0x100, r6}, &(0x7f0000000100)=0x20) [ 1698.438369][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1698.526645][ T1335] IPVS: ftp: loaded support on port[0] = 21 04:46:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0xa, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1698.635735][ T1335] virt_wifi0 speed is unknown, defaulting to 1000 [ 1698.642548][ T29] audit: type=1804 audit(1595565983.086:1403): pid=1336 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/44/cgroup.controllers" dev="sda1" ino=16370 res=1 [ 1698.659910][ T1336] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1698.736767][ T1324] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1698.769495][ T1324] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. 04:46:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0xb, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:23 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x18) unshare(0x28040100) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000100)={0x7, 0x8000, 0xfffe, 0x7, 0x8, 0x80, 0x200}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 04:46:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x10, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:23 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1ffffffe4) 04:46:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x11, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1699.277433][ T29] audit: type=1804 audit(1595565983.726:1404): pid=1361 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/45/cgroup.controllers" dev="sda1" ino=16079 res=1 [ 1699.305038][ T1361] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/146, 0x92}, {&(0x7f00000000c0)=""/115, 0x73}], 0x2, &(0x7f00000002c0)=""/29, 0x1d}, 0x10085) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000140007080000000000000500000000000000279639a91d797f0000017daf4204a00b32ea255b5a694dab5848e3d8960f65b27ee8125f42260500000015739d53d5000000"], 0x48}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="5225e9090000000000000000b8d983606c753c74d8ca85b936442adef2590bfdde6c55f510530d72fb12ad074217e2da857fa2af73549040eef5a6168ed44c60531890a246056968b7cf1abe429d3e801a242fc8ce92c4b79cd5e729a0e209a3d66a71247ea2058a5d994bd2c42f92f1565d6cc1ce04c5a80b95e38b0aff4bc08d3387889710060857ee3335d9662076b3d9c66b5e0949e2b63fd6bffc0ae270d8ce05bd4623d861bb7084d90f1e74904b6f1725878ca8de08c83c893a9ad579b7c2214738502f022574713fce2546f0c0388096c97b7c28c8", @ANYRES16=r3, @ANYBLOB="000328bd7000fcdbdf2510000000040003809000058008000100657468002c0002800800020000080000080001002000000008000300f30000000800030007000000080004000008000014000280080003004809000008000200ff0f0001007564700008000100756470002c000280080001000b0000000800010015000000080003007fffffff080001000300000008000400000000001c0006800800010006000000040002000400020004000200040002008a803c654716f948bea7ae4a5c1be24be10460bc5853e565001627d578759a57150aabc6e29b94dc5b5120a896"], 0xc4}, 0x1, 0x0, 0x0, 0x4040004}, 0x81) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x27c, r3, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4f, 0x3, "f2899e38d4a0bc332dae3e56054fc534d07ee732acd46916cacb1993a8b762e47cbe60f4793bff72c3781dcabb55b5b8fbf80052ac87a66084f397ad16db8f58eae3ddf7c901e51f1c339d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x63, 0x3, "f60e02ab5a64a321f78ee30c0cc3c03013f0f08c5cf7c33d87f937ad7756948a51003f5e15791231e41e303f1a9668760b26a8b54cef94405ce777c0904059ec17fc9d93d0f8557e33df64589530f114c9344d69b778f0d24fff1c0b77cb7c"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "f1dbe2717951d1d486ad6001c48e2bb87e9b58c21abe54318bc5"}}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2769}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd8af}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x20000090}, 0x2000c080) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 04:46:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1699.518074][ T1337] IPVS: ftp: loaded support on port[0] = 21 [ 1699.634776][ T1337] virt_wifi0 speed is unknown, defaulting to 1000 [ 1699.641954][ T29] audit: type=1804 audit(1595565984.096:1405): pid=1364 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/45/cgroup.controllers" dev="sda1" ino=16079 res=1 04:46:24 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1fffffff0) 04:46:24 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001800)='cgroup.events\x00', 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r6}, @CGW_SRC_IF={0x8, 0x9, r6}]}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r9}, @CGW_SRC_IF={0x8, 0x9, r9}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, r3, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x140000a0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x9, 0x0, 0x46, 0x0}, 0x20) 04:46:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0x5, 0xbd95}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000140)) splice(r1, 0x0, r2, 0x0, 0x19404, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a884d53041929e914c303723123fb9dcdfabb8e4", @ANYRES32=r6, @ANYRES32], 0xa8}}, 0x0) recvfrom(r3, &(0x7f0000000280)=""/188, 0xbc, 0x2000, &(0x7f0000000340)=@can={0x1d, r6}, 0x80) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[], 0x64}}, 0x0) 04:46:24 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) socket(0x0, 0x0, 0x0) 04:46:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x7ff, @remote, 0x767}, {0xa, 0x4e23, 0xa0, @dev={0xfe, 0x80, [], 0x3e}, 0x1}, 0x800, [0x4, 0x4, 0x4, 0x52d, 0x1, 0x514745c8, 0x80, 0xebf]}, 0x5c) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x140e, 0x15, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000280)={0x40, 0x1409, 0x2, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100000002) 04:46:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x612, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1700.725868][ T29] audit: type=1804 audit(1595565985.176:1406): pid=1438 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/46/cgroup.controllers" dev="sda1" ino=16372 res=1 04:46:25 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) r2 = accept4(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f00000002c0)=0x80, 0x80000) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000300)=0xff, 0x4) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x37cb1133) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r5, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x24}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002340)={&(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES16=r5, @ANYRESDEC=0x0], 0x50}, 0x1, 0x0, 0x0, 0x8040845}, 0x44) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x4c, r5, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x5, 0xfffffff7, 0xc785, 0x2]}, @SEG6_ATTR_DST={0x14, 0x1, @private1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048001}, 0xf3bbc0dc680f2374) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x40080) 04:46:25 executing program 5: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000100)=0x480100000001, 0x4) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'nr0\x00', {0x2, 0x4e22, @broadcast}}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000140)=ANY=[@ANYBLOB="e4000000", @ANYRES16=0x0, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="c80002804c000100240001006c625f74785f6d6574686f6400000000000000000000000000000000000000000500030005000000190004006861ca685f746f5fc348c77a970251706f72745f6d617070696e670000000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040008000000400001192400010000000000000000000000000000000000000000000000000500030003000000080004000000000008000600"/203, @ANYRES32=0x0, @ANYBLOB], 0xe4}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f85e) [ 1700.767816][ T1438] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x3}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1700.862539][ T29] audit: type=1804 audit(1595565985.176:1407): pid=1441 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir054433689/syzkaller.vjG2ax/1252/cgroup.controllers" dev="sda1" ino=16031 res=1 04:46:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x1}, @val, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @rand_addr=0x64010100}, @timestamp}}}, 0x36) 04:46:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX], 0x68}}, 0x0) [ 1701.026539][ T1458] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1701.087691][ T29] audit: type=1804 audit(1595565985.536:1408): pid=1444 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/46/cgroup.controllers" dev="sda1" ino=16372 res=1 04:46:25 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1fffffff4) 04:46:25 executing program 5: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) recvfrom(r2, &(0x7f0000000200)=""/42, 0x2a, 0x2021, &(0x7f0000000240)=@vsock, 0x80) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x19404, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000126bd7000fcdbdf251600010000000a0006000000000000005900000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 04:46:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0xb}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1701.249861][ T1475] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1701.292108][ T1475] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1701.320287][ T1475] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1701.401345][ T29] audit: type=1804 audit(1595565985.856:1409): pid=1478 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/47/cgroup.controllers" dev="sda1" ino=16370 res=1 04:46:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a0000000020100000000000000000000050000095c000e802c000180140003000000000000000000000000000000000014000400fe800000000000000000000000432c00018014000300fc02000000000000000000000000000114000400fe8800000000000000000608000340000000033713bed3977f88897f0000010c00064708000200ac14142a06001240000200002b48613747064dc929612dba3d2dcf692cfe91a8d984433300"/193], 0xa0}, 0x1, 0x0, 0x0, 0x8004}, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x64}}, 0x0) [ 1701.441610][ T1478] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x1a}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1701.554232][ T1485] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1701.580733][ T1485] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:46:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) 04:46:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x1c}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:26 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0x8, 0x5, 0x4, 0x6, 0x2, [{0x20, 0x729, 0x3ed1, [], 0x807}, {0xc87, 0x7ff, 0x9, [], 0x180}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) 04:46:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="00f0000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x5c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r5, 0x2}}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_NUM_RX_QUEUES={0x8}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0xa, 0x802, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xfffffffffffffd8e, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYRES16], 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x40850) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x248, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x140, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e8623ff}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c6ba979}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1dbdea0c}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bd609c5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x532e17}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37c15392}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12bf6333}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24b28cab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4170417b}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bfdeea2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22224f38}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6abc5708}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34c71d1b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e632eee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2000d96a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b766154}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x834e376}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ea9ca77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x48, 0xc, 0x0, 0x1, [{0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65c68406}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x440}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x18b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x85}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f9a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xec6c38a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x850b}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x248}, 0x1, 0x0, 0x0, 0x10}, 0x5) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 1701.810185][ T1495] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:46:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x0) recvmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f00000002c0)=@xdp, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000380)=""/63, 0x3f}, 0x2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x37cb1133) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32=r7, @ANYBLOB="01000000", @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', r7, 0x4, 0x4, 0x1, 0x8000, 0x20, @private1={0xfc, 0x1, [], 0x1}, @loopback, 0x7800, 0x8, 0x248, 0xbb4}}) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 04:46:26 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1fffffff5) [ 1701.851690][ T1495] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1701.857757][ T1497] IPVS: ftp: loaded support on port[0] = 21 [ 1701.870511][ T1498] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 04:46:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x24}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1701.949835][ T1502] device veth93 entered promiscuous mode [ 1701.987913][ T1502] team0: Port device veth93 added [ 1702.008311][ T1497] virt_wifi0 speed is unknown, defaulting to 1000 04:46:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newroute={0x40, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_ENCAP={0x1c, 0x16, 0x0, 0x1, @nested={0x18, 0x2, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x49}}, 0x0) [ 1702.110151][ T1515] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1702.142238][ T29] audit: type=1804 audit(1595565986.596:1410): pid=1512 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/48/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 1702.180919][ T1512] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x38}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1702.467409][ T1508] device veth93 left promiscuous mode [ 1702.501709][ T1508] team0: Port device veth93 removed [ 1702.552494][ T29] audit: type=1804 audit(1595565987.006:1411): pid=1516 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/48/cgroup.controllers" dev="sda1" ino=16377 res=1 04:46:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0xb}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1702.616354][ T1519] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1702.652134][ T1538] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 04:46:27 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1fffffffb) [ 1702.684380][ T1499] tipc: Started in network mode [ 1702.697620][ T1499] tipc: Own node identity 7f, cluster identity 4711 [ 1702.729675][ T1499] tipc: 32-bit node address hash set to 7f 04:46:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000011a00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a1fffffff000000000000010000000900010073797a30000000000900020073797a3200000000400003802c0003801c0001007369743000000000000000000000000014000100766c616e3000000000000000000000000800024000000000080001400000000014000000020a0d0000000000000000000000000014000000110001"], 0xc8}}, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000001340)=@phonet, &(0x7f00000013c0)=0x80) syz_genetlink_get_family_id$tipc(&(0x7f0000001440)='TIPC\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x28, r4, 0x23f, 0x0, 0x0, {{}, {0x0, 0x410c, 0xf0}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r4, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x40081) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x28, r6, 0x23f, 0x0, 0x0, {{}, {0x0, 0x410c, 0xf0}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x24, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x103}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x10) 04:46:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x37cb1133) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0xfffffffffffffffd, 0x4000040) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x19404, 0x0) getsockname$netrom(r3, &(0x7f0000000300)={{0x3, @rose}, [@remote, @default, @rose, @rose, @null, @rose, @bcast, @null]}, &(0x7f0000000200)=0x48) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="58040000100005883a9292b65c0ad149069b0aced98cf1c03eb96b860196c1d9a9949c83ebde2f8e0d5abf8b89aa8feb573c64d4a7ac7edf35fc27b1523ac08a2bedf8632229d752828dc3f005e9095656bd7939604c144cbda90f93371c9f4ba4c51be2f895c779a8e2c3abcbefcc23711b878c86b0803af8e003235435297c3a6427fe906e7bece64980e245d5e892d1f37f65988e4aaac807ea5bc2cfb4e8b71e0fb4524a3b8a703f076dd710966bbd01273db446eb84"], 0x48}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r5, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r6, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) ioctl$SIOCX25SENDCALLACCPT(r6, 0x89e9) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x0, 0x0, 0x0) [ 1702.841991][ T1499] IPVS: ftp: loaded support on port[0] = 21 [ 1702.923392][ T1499] virt_wifi0 speed is unknown, defaulting to 1000 04:46:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x1a}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) connect$rds(r1, &(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0xb4, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x0) 04:46:27 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x1fffffffe) 04:46:27 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x37cb1133) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0xffffffff, 0x4) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x7}, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @private}, {0x11, 0x0, 0x0, @dev, "c7"}}}}}, 0x0) 04:46:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="4900ffff"], 0x6) 04:46:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x1c}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac1e0001ffffffff00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0700000089780000"], 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000000)=0x85, 0x4) [ 1703.616556][ T29] audit: type=1804 audit(1595565988.066:1412): pid=1607 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/50/cgroup.controllers" dev="sda1" ino=16380 res=1 [ 1703.653523][ T1607] __nla_validate_parse: 2 callbacks suppressed [ 1703.653535][ T1607] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x19404, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x30, 0x0, 0xb, 0xc46754ecbcb4f7d8, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 04:46:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x24}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:28 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0xffffff1f00000000) 04:46:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x38}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x40}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x91, 0x7, 0x5, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000080)=""/21}, 0x20) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1398010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB="08ffc846", @ANYRES32=r6, @ANYBLOB], 0x44}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1a, 0x3f, 0x24, 0x8001, 0x220, r1, 0x2e, [], 0x0, r7, 0x5, 0x0, 0x5}, 0x40) [ 1703.997416][ T1630] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1704.036728][ T1630] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 04:46:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1704.142778][ T29] audit: type=1804 audit(1595565988.596:1413): pid=1634 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/51/cgroup.controllers" dev="sda1" ino=16380 res=1 [ 1704.192633][ T1638] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 04:46:28 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) write$binfmt_aout(r2, &(0x7f00000010c0)={{0x107, 0x3f, 0x8, 0x398, 0x10d, 0x20185179, 0xb3, 0x1}, "d93117d86e44285541a968735f73da15d172555ea4b1c0a4b72b7ec46b42a66230d12c966723826525967179656c22ca7bbe2b61ffebdcd6f4c507d841bdda8e0c46145433f236e159a5db9ef61d6e3e5c8c42f6643413bd4610111bd76f4b0bc6a9d78de2efcc7f30ad76031fe85f5a25a7eddc12d72ded3357965863209459d5d8a894375f08980f6e155b1d114fbbbb9d152ec655e04aa76f6f3a0d0968be53ab0baf58122b9019d08e6db7203245cb49119b51e5fc05a60a4f3add2222b183247cd50d7a10f72d81fe75ba63ac5a84509504b71d7d80740e2d56d321b76724c4b71c1dc6a12839af083890bd7d0832f784ac387cf3c2a70701499053557b959004e34acc75fc4e1eaf0561ef1b838b82788b4d6d2aa018aa0b11e99f9a3205dfdc7d4d6112bd2c53793f197fa041dec56cebc19f9d2af23ace0943b140ca6ab6e1963719fd7ac71064eb0c65ab0753ceea1773887ffe44f359563c83c04d3180190e86bc1017fbd846b83bb079932346e8b3ea21424e777db35713fc41f47fba2093d663d7294ef17802c8d81747b52f0a94553bab3f8fd71a0a4e7fd28c8315004709b91b289935ec694651c3b2a0a0824e18fff56e7e6f1e47137bbe025e0ab4e1e46855dad91479c3438586c09856d118ea50b4fe5e12e4f84f94c49768c7424984da3d6a164bcf8b1f7de30b3aa1819b8abe4ba3c4eae8c53eb50ef37242998fe9e5a235ade620761f3b7ebcbfc672bb379389e88acc057986b368988b8d41e92dcd808c34103fd2bb72596cb4b7b030b2531c8726654ca9250e4fba0e9ac409ae94a9116bc6417828b039153bdabd51b07044c0bd7526536d83c584396aa6585c9bddc0a7ad66b8c9169891c086dfbebf4761c7437a9cb1fbe213a96550dc4fd66d8668e5e9f719c435c7bcb2aa1c207fb239cbef56cab9bfa366238dca843d878b1d05e56a761127bdbe2f19c60b657c1d766239aa51c3d8915c8a5c772d643de57e251cf5733e2f72d5e3aa4ce7c7b8115588326f6cdce4d8df5b9840eb0878f3e8c46d746e020a9e4f80357df5099e6525e5d98686dd94883b37b64550d9aeb64e64745358a0e571fada3d84deea75e5eb4940fc21fe9942ed02e03c9b8035478ab7698941c0dc320dece82192f906ab4df59b616612f473da7e316bd3cdf7547c55372f9ddc66a21682b19246fc86a25650196c0fd2cb7d2bcfa53fbe071e266c93de6c7b874388065106b1f6f4c6863bf66ab3bf505863489e719c042c1fd1048e1bbcb9b5309b23f16fd13b9def749779a2b3f23aca04003273934053397d2d01dc5342d71f6babbaf277e2f7c6068962f83ec1b294e70aefaf33d492228d35713b7f638c74512580d0442a18868033f6a3d04c863b7067559ecadfbd2a8f3ba479aa7134b4fb1f958ba2d540442332789c887ebc82dc2bd39635c5ffc2ba8dbe1bc6f0cc2e583bdbd7399369d9a324cdd4939a6c1ba37459e5f165c253cac0c45db9bf64831f028558b25486d0ea46e9ca4e819155a1c976b42b6a17d3441564406aec868fd77e141fb2075e8c42f8404020f4dc91759689c54b2230e128d7033739e32f0e4a39ea9518fbf59aa80ef65fe4e6013bac2092df489b24c246137006a9867bc2b2d0fc5521cdb77f3c592bf36766dfc48056318b33dbea319886023fe42c1aeb04193b0d30e5f0c37d3dea7602a6af5ae5efe42499cf3f93a4c731105ff68bc82d79ca768ef194da835478ecd8305e6e87fb8ad0ad9401850ce818df9ae910bb022d19ffbaeb5e70645b2afb446431d71b1fac600fe05ccb622817e31299a679400b4599a19a421d391dc7696c89c85e8be29752059ed14e57c940c247d1cadef1871ea5cdb81ed4a952f333c995a43d637b9bc644bbcd79b9aeb35e38518b2fa522fef4a934097cf92aefebc647800fca0e3559708cb514dba76d9498c0d94d8c50d30ea3369716cc72180059377c71fb4d1a273198303d255f7880a0a5c233489809b37141a2cf103baed16dbc7aee9c30016829efc40bfb92905a9144cc81db0208c4d230618c88e99f6f4fb7f89816d3bf7acb3804162f101c57f18ae9376136f6961a8e96c5ce9a32e5cfb04fee11ccea677bbb1166df127035a68e61fa92796b5c0c4a83761d868bccd2d5b415bb35a0ad3f0d24db9e65377d3d1b839c82d512244307a66355c42156a4c42e8e8430bb786e34bccf52ab5846cdf8fd1a830bb3dc7d1d2551824d6c100fcd0d3a464625e9848ae3ae0f4dcc9ea4fe4aa05cf8063e9b84fff0ab314a3bddf4d3685b78b834b9a9f6c30ab845b5db9276d84aa5e66fedd9665839a87b002f04dc7dc1e535c474668962d691cfd1bfbebb9c7481a5cc7bb7691b830f29c70231fa64fdbf4d341e8815e6e5757b19bdf34b526db150b470877c07043cd2b04e6dd6421865c853e602118a638c21d9527ec543d20169d775c0d3ac25266f003df2c59658f3153e313e50ddd83ea1dc6b4a7301bf0e210c34323a4dbf0a05d89b8552e151c3049f37f67c1bfc20c66ff9edc1b82ff742d09330d1a11989dc3a24ec76688b66faacf4829a4a2b86d4804c2f8d5c074fa74a6a020e4024ca9730772c6785160edb61707ea3323a9b2d07fa20890f686046dfd4e3fb470a39491002d6d566c00958161ef84f6219c3155dd5836e1473a1125acffcc630e1d122b13fa4f001bbe2f8eb0ebe28bd217a6ac2d2f9e3ce04e08b027d923a32b4cac4996764fb1e180f47e987493022ca366d61188d619f87fcb3f76928050e11d46042613e021661a20ac141259c57ae71d16b7028ba6392eb736b8a7e18defc7c8c7a11cff0c190ec289a70a6fef80c9ea610a600260e2f61a78680d40e601886100e98e5381032c1774bfbf93d36e04f65961d68072ee45a88d7cf988205059c8f1526f185d88cee720e09974701b235e0cdc40e23d79f81fd153a8a4769e55d6ba3309c1e9f28f1b622057b68ed5295ff3dbed826f9fe816ae7abf4f4c0b8c568ffddae354545080d86edf8bf9aad41b7862c8672573bd22d9b1dc55ba5263a19b9220411f2452f19808f8bcb18db3918efaa3dbf740c6fbf75093310ab0b8e8b7a90df342a152ac9108d6041498081686997b10457161f4de26e8739dc5315724a56ebf6bd1740306da060ec0fc7568a3cd4d7174dbc4711f89ba77ed5ff297200704da57c48c7b0e7d213e0ef6fcc4d4c38cc6c654236b9a451d9c281083665a842a06524cd7c96c50f95baf3d594a0cd02e438a5c18376e7d277004273b2ffb404f3aa1f93acad6ed9e123e6912675e294ec3557d9f5c6e7cfdc446d2722361ec08aa47ccab4c02e538a671fa8863ad7eea39ddead4afeeb5440c927f8586d9ac211b978bc0320a1de2810f1e07e3561ec9e67643c88d9a1b7be9ad823897bdb72a2effebe367e211eb710862bfbbb66e9b0601941ec7983829eccf0e3726a8f1b11c2d682e8d030f4ac654b463996859a19ef9c8a5b099ef389a84b83ca916b3f6c17c5616f356cdabee9539f687247cec4006a5e299bff696790cde1e907c9e1c5d9d32fb43220b6c465a04f6aec44fa541baa5cd4ca2d7a0c4695b93465b4b034ea8475891f40ed82fb8cb776987d36a43fec208073ffee14a4ccc836d7010c05fa9948cb44b80d6ecfaeb3451e70dcbf563d0a061838edf2c020621ea086b185adc5440290368ecdd5510bce33dc1fe799d3dd723b400262eb80a6b895d3bd27b4d0a02495f9e49277a9765def8a03ca3f9dd245daf03a602d158d70945b537276f353ae96e239febf4d0e045740ea96798e80bc4bb9ab6520f5e4979fec02084f880af80e7fffeb8c1f85e3b02868420ac157edd07c24e96d1e10ae387334cf5f34a598e1f797b223558d3a50bef1b2c453988e0b53313663108db922944bdfb7459978a92a8b35806b06f9d8b106a039e642ef2a3c53c76f712edae47c242e7e30d426e4578ebc56c716229dfd65b58c01a3c26c8ec8275e4fa129c0ee692c61562d51ee1460da246c225273abd92352b6e05ac3df608b43ced725458fbd823b9f05baeeea4bcee22fecaf6ad9531eeaeffbfda7e10f514edd877076757c840c675074374bd6bd55c115468697b7f5cc7553160c6771e4d4eb5c7611f47eade9d24a80b4b4d15e46bf3b0352294788ca50e9199665bf7e6be76f442318cb8f12444340ea9f431385c87b1f6e8d8fa0e7fdd209e363bfc8128478f27d723921bbc7c4788faea534da4d9d451025119b349cbc7e3998b6328b46df0916c361e1b0838a17af290a41bd8f0c49200c45abf8f83212fc2cc8582563de7188f4c2c876bcce131f1ee8b912b6aac4607e9613cb098cdec5d7e13607d991a88ddd6a7d7aed71d82f474cb27afeb814718fb36997c080c851577cf0a705552a1b5470b2f6826a137a7aa3c62b9339c46a3fe4d92c9873cfe868f692639c6452631b0e3da25f791b3e95640bdd05531fedad1abc712ce8c37426607b891ef7ec48929cb18e154098cf19d6419388307ae7eeb3d4ebf3d962b8a1a7917fa8dddc8a04aef54d0e527950253294cf76b5a32142006462f0b67f81ed012e932c8110f22bb5447187216703c7f6367189e2687d813c78bf8d0c9f68ca0ed34968bd31a16398878f874a53617397767f994b364a0159da70303fd5d05b8f2b37a126ac352215943403f14191fb175478ab468e99f036cd89cea99e8f430755d72365e338944ef54870a16ed55c8a048c9514e1667f8f2fd1137b7c2c617dafc208b7dba9bc6f6aaf30382af2dd8cfc5caefe2ddc22f5aa9939719550ce4213375a6d1d408e6e620901bf582776244c597abe0150c9d19a3f4522e5a907bcc25a7f2f140e56da7b139e7ed6d8d40084e7ac706a9821b5ee676f6f04782fa41a106bae750aa470ef74f0aec74c046f8ac16b5848b6dd2299e5490cfa5b5f76807257e62c189ec60cccb264eecb57ab57f0a97307a8a92081b9c59e2ecf75acca21ce00f35cfb2f264b090ec0543a285592856c0f5be9eb62d878a1e1b820f1025defdd6e4f15906c1fb4712a74136e15f4b2c09539c4c3fc91070cd4a451c42ad9f09ec401d312f1944e47384d3478e2a3756975094930839105efdb068b8f154b6b9e2aa5c7603fb25b2a2ba636a23a3fce51d7e7ee686863e1433557bb36b2603a1f87229eeb6b66674c90b3388754c9e21fcd9cd6a2396c96df843008ad2c26eb224cdfba474c87b01e522cf6b937c01294a0a3c1c0713c9366d02d54c5a7893cd68cbf09d4ac71d283e97f1cf5d0ad492f18b5ee7e9d87e8bf962f4296d32625bebc63c41bc4f95e644b8fbf6b5486c576d3da325a3839b476d9142bd23575e795bb99445baf97fa5d6d47a5b63f535249e7e20fd01a19246bc662fbcba7fe7062f61409df39712af2f107eab4c0791392ffb04f7af35dd634f2187642024175c3b3c1ef083483b36f0f9c9a8836b4bb581b463e4cd27fa0edaf035c07c14a60a70bd9a1d1bf0adc58504e9e010eaf96a1e82bffa2d170f231fa863662d9dc667b86fafd829d6b5422d5316f10ae5da6c8b978596c743a1006dcd4bb8e5f782fc55762ebcceba90d04b4e1bb0c39c13acd89cb6ee9195f032d4ab3aaa57b3f78ee3d5d122c6fa275be59adba512156886ab2aeb4b36de5e267d3b7c12f2d2a1a676fa72351879f4740e60d548ff04de5270f85345f5a0a1b430e524c82c5d3b6da852ab4ae6dd6b78a4fad15afbae1e6522ddd4f33c31e06fed69cebbfc6aa01c7538c53fe440ac8ebb8cb", [[], [], [], [], [], [], []]}, 0x1720) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x0) 04:46:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:28 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000940)=0x1) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_AGEING_TIME={0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet6(0xa, 0xa, 0x7) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) write(r4, &(0x7f0000000540)="668e66e436b2e2ed918fc766ef478a5a27f2e4c273db60b92804bea862472f5b1631b8b0fdd85960414e3a223811793175d4634cae0ce7daeafb23b2880118893a45f7c6ccb78cafb4fed953c9fb15c7b357e681c169cfafa324620b077113479b51d4edc9d82c1c270970250a7034021d6afa48478bd61547443162ddfebf184d8f75a98c445f51c9e8a0d9789a6a6228af7d91b755715382112ba95d473710a90d0c6b1cc714c824b142fc", 0xac) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x204, r3, 0x108, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x280}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff59}]}]}, @TIPC_NLA_NODE={0x130, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "27a858413e74f16ce809842e3d2da365d4a9bd8273af8d614c9f09"}}, @TIPC_NLA_NODE_ID={0x39, 0x3, "098ae22f8ebcec406b58e978274d9537901b36da7d6e5203c685fa7177cc6843d736f46b708dbdeeb60b1600503a48d4b68a978818"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0x9b, 0x3, "ac4332ddba9897efca5c0870a7f12b639bd3ce3b67a27f1f4b73c1cbb62c05070b37e4b5a37e09bac2e791ffad983a8f2a218baa5e8f513091ec55fe76b4004a3a5292d33befde2084530bec6a373e79ff7fd5d812af61f87519fb6dc6554ca28fcddff42e6cefda7d56a55762f489f6a12f85a3cd573b10a1bac765c63ee564fcf4d69c64d0437a8aee5c27cf368dad479fa6418ded00"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x204}}, 0x80) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) preadv(r5, &(0x7f00000008c0)=[{&(0x7f0000000000)=""/119, 0x77}, {&(0x7f0000000600)=""/226, 0xe2}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000000700)=""/7, 0x7}, {&(0x7f0000000740)=""/195, 0xc3}, {&(0x7f0000000840)=""/15, 0xf}, {&(0x7f0000000880)=""/62, 0x3e}], 0x7, 0x1000) 04:46:28 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @empty, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000040)=0x1, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000200)=0xc) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 04:46:28 executing program 5: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000100)) socket(0x10, 0x803, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x37cb1133) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) socket(0x10, 0x80002, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x3, 0x0) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 04:46:28 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x22, 0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) socket$phonet_pipe(0x23, 0x5, 0x2) read$alg(r0, &(0x7f00000000c0)=""/61, 0x3d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) pipe(&(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 04:46:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1704.504580][ T29] audit: type=1804 audit(1595565988.956:1414): pid=1651 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/52/cgroup.controllers" dev="sda1" ino=16377 res=1 04:46:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x5) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x32, &(0x7f0000000140)={0x0, 0x28}}, 0x4008800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, 0x0, 0x200000d4) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d806000500010007"], 0x1}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000000) 04:46:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1704.761067][ T29] audit: type=1804 audit(1595565989.216:1415): pid=1686 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir054433689/syzkaller.vjG2ax/1258/cgroup.controllers" dev="sda1" ino=16374 res=1 [ 1704.798097][ T1697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1704.814711][ T29] audit: type=1804 audit(1595565989.246:1416): pid=1697 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/53/cgroup.controllers" dev="sda1" ino=16381 res=1 04:46:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x8}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x9}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xb1d000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = socket$inet(0x2b, 0x801, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000000000001d0100000800b8d79f9cd09fccfecba20a00", @ANYRES32=r5, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r5, @ANYBLOB], 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r8}, @CGW_SRC_IF={0x8, 0x9, r8}]}, 0x24}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x4000090}, 0x44040) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) close(0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendfile(r3, r2, 0x0, 0xffffffff880) 04:46:29 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000200)=0x12, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=@deltaction={0x40, 0x31, 0x2, 0x70bd22, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x80) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000001c0)=0xc) sendfile(r4, r3, 0x0, 0x100000000) 04:46:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xe}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000040)=0x44) mmap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0xa, 0x4000010, r1, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) sendmsg$sock(r1, &(0x7f0000000280)={&(0x7f0000000200)=@can, 0x80, &(0x7f0000000180)=[{&(0x7f0000000000)="19a5c839de44a7a7367e55f1f7", 0xd}], 0x1}, 0x40000) getsockname$unix(r0, &(0x7f00000003c0), &(0x7f00000002c0)=0x6e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) recvmmsg(r3, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000002480)=""/47, 0x2f}, {&(0x7f00000024c0)=""/164, 0xa4}, {&(0x7f0000002580)=""/157, 0x9d}, {&(0x7f0000002640)=""/46, 0x2e}], 0x4}, 0x8000}, {{&(0x7f00000026c0)=@xdp, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002740)=""/221, 0xdd}, {&(0x7f0000002840)=""/113, 0x71}, {&(0x7f00000028c0)=""/213, 0xd5}, {&(0x7f00000029c0)=""/19, 0x13}, {&(0x7f0000002a00)=""/194, 0xc2}], 0x5, &(0x7f0000002b80)=""/94, 0x5e}, 0xd8ca}, {{&(0x7f0000002c00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002c80)=""/36, 0x24}, {&(0x7f0000002cc0)=""/22, 0x16}], 0x2, &(0x7f0000002d40)=""/26, 0x1a}, 0x45}, {{&(0x7f0000002d80)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002e00)=""/218, 0xda}, {&(0x7f0000002f00)=""/150, 0x96}, {&(0x7f0000002fc0)=""/90, 0x5a}], 0x3, &(0x7f0000003080)=""/231, 0xe7}, 0xe929}], 0x4, 0x40000001, &(0x7f0000003280)={0x0, 0x989680}) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000003380)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)=ANY=[@ANYBLOB="10000000640400032cbd7001fbdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x20000840}, 0x20080000) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="ff070000", @ANYBLOB="29cb3c2b56cae3db6b61594e5b1aa077c71b2fa51b390fbba87b419986259f4376ef011c5bdec406c13499fd8b4e9b629148dec9102a3e1000a92001349526bb044378ecca9ec2c6742532d04fb0cfeb2b3f0930673037a74d63b4035728f2a9fa6ce75fd0dcd4454947fb1eb4fe330077e243003b72a66c97724e99cab8b3c996baaba482f640169b1f9c188118d02c3c696b5c4a6562ae64d8dc17daf06cf389d9632593685abd28b6fa4fb4cea21c00000000", @ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendfile(r2, r1, 0x0, 0x100000007) 04:46:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xf}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1705.491196][ T29] audit: type=1804 audit(1595565989.946:1417): pid=1725 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir439724528/syzkaller.F63zFi/1640/memory.events" dev="sda1" ino=15937 res=1 04:46:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x10}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}]}, 0x48}}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000180)={0x1, 'bond_slave_1\x00'}) [ 1705.551107][ T1723] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1705.612145][ T29] audit: type=1800 audit(1595565989.946:1418): pid=1725 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=15937 res=0 04:46:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3800002, 0x8010, r0, 0x62acc000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x37cb1133) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x104, 0x1, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFQA_CT={0xf0, 0xb, 0x0, 0x1, [@CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x5, 0xbb]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7e0}]}, @CTA_TUPLE_MASTER={0x70, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_TUPLE_ORIG={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_TUPLE_MASTER={0x1c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c491) connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) recvmmsg(0xffffffffffffffff, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/170, 0xaa}], 0x1}, 0x8922}, {{&(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000640)=""/211, 0xd3}, {&(0x7f0000000740)=""/181, 0xb5}, {&(0x7f0000000800)=""/208, 0xd0}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/24, 0x18}], 0x5, &(0x7f00000019c0)=""/171, 0xab}, 0x21d}, {{&(0x7f0000001a80)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001b00)=""/13, 0xd}, {&(0x7f0000001b40)=""/44, 0x2c}], 0x2, &(0x7f0000001bc0)=""/157, 0x9d}, 0x100}, {{&(0x7f0000001c80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d00)=""/240, 0xf0}, {&(0x7f0000001e00)=""/192, 0xc0}], 0x2, &(0x7f0000001f00)=""/159, 0x9f}, 0x5}], 0x4, 0x10000, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f00000020c0)=0x18, 0x4) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x19404, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x8c, 0x2, 0x7, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000050) sendfile(0xffffffffffffffff, r1, 0x0, 0x100003000) 04:46:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x60}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1705.734888][ T29] audit: type=1804 audit(1595565989.956:1419): pid=1721 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir439724528/syzkaller.F63zFi/1640/memory.events" dev="sda1" ino=15937 res=1 04:46:30 executing program 2: r0 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x40eae, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) r1 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x7c774aac) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r6}, @CGW_SRC_IF={0x8, 0x9, r6}]}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2001000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20040090}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) close(r0) [ 1705.840557][ T29] audit: type=1800 audit(1595565989.956:1420): pid=1721 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=15937 res=0 04:46:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x3, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1705.959829][ T29] audit: type=1804 audit(1595565989.996:1421): pid=1723 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/54/cgroup.controllers" dev="sda1" ino=16019 res=1 04:46:30 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @remote, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000040)) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000000) [ 1706.107096][ T1751] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 04:46:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0xb, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:30 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) r5 = gettid() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000100)=r5) r6 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) r7 = socket(0x10, 0x80002, 0x0) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e22, 0x0, 0x4e23, 0xfd3, 0xa, 0x80, 0x50, 0x0, 0x0, r8}, {0x5, 0x1, 0xf, 0x2, 0x9, 0x1, 0x3, 0x3}, {0x101, 0x8000, 0x8, 0x1}, 0x8, 0x6e6bb2, 0x1, 0x1, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x3c}, 0x2, @in6=@loopback, 0x3505, 0x2, 0x1, 0x1, 0x5a, 0x80000000, 0x10000}}, 0xe8) r9 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000240)="2c86a7a3626534b60254e8557dca88d76ac21662566203e8128a3e4f88c5d6cb57b31315659d32a24473c4d1a94e57dca421c28ca68b205b268e96f9ed252247c3be257a24b17c6c52ac6adcfdff32493979450cbb7ecc61a31089c806f37704f9d53488ab36df623d0071c82335d20d1d56fa8c95a38e6b199a2fd8a68fb617a3812848619b9b45082c33b5a8ef85b0248a90242f322d764e7efe093a9bbf39a87d9e", 0xa3}, {&(0x7f0000000140)="535a77b44b66efd2ebc54e8f48dee1a4946ffc25a4d4aed35bf92c8fc99f72fcb9ef155c5f610d99e1f3a3", 0x2b}, {&(0x7f0000000300)="95f39a60117836a66cab90b50fddf5f6458392f17f915cd9cb9a4d3ee0be2a84a42114d129b6f3eb952dce2a56acec6a20717f8a946beae9c884f1f51fe4d5a3dfbb7707d1948eaa9499dbd7ca73d367deefea1f5502a6a57f8cc53e93be2044183bee40f8ebed8fdb35e70555", 0x6d}, {&(0x7f0000000380)="27171e628635f8a592b02e31ddca8991ec8caa5f568d973fd3e6efa862e34fb25ebe0b0deeb6dacef580b7ec61320c6bc6fced675a68ad395be988c3ef0f46db5626d1508b8b", 0x46}, {&(0x7f0000000400)="2a48fd8b6f219d323f26c64c85aa4a39503cddb2c38c3cb6474564f8282d44d19ba9b241e7f29f2763179b8a42747548f6eaa6063340e66ef85e38a651bbe8e6a0b43c4a44d1852e6d341f40e315b5805fb34c81fb5bfd960fb15e563018b97a3ed687fa41db1ee2041db2c1da34837ecaa1780efa329c836a1d6e2acff0142494055649114be3e3761630bfc233fb80aa2b538f3658035fbb4226a12691", 0x9e}, {&(0x7f00000004c0)="ea7a047a923c1e3b22d1403199c45c3217a4d7babdd36e848bc557c27edee0fe194340b6211a725fed46ee212098a575535bb8856eecf62043adb43fe314095bbe596b7946a51561a61e982d056293cb4b0ea074487109f89e32da1f395788b3c62de4b19cec667781f7de21845685c1710cbbb0e9454eaeab7973b762a8496b9a7557f7d048ba83a8e97581f1343748a0a387756f9ed606c5549cfc0a98aa1b0307fc01c0d589fc6477d2d62a61789cb858be738c3221c9b23c4c7499bda40610d7d7111f8a30c48600dc543a53553a777f", 0xd2}, {&(0x7f00000005c0)="444a355e95660c4124556990ef0856d8134117d91a93cfa39ee7808e32e513b0bde09c662b8c1f234195619ecec13aa3eef7fa1c549fd8ccfd156d88fa58fa71d7bfb12ca2639d0a655eaa71f862023f62f48356b57b4aae140baf2970ef2d20418bf1ea81b1d80be81c966a733f8e294da76e28144242ea78ade53388cd3fe12494ff81fc203ed385ef590adfcdc0b960adf738961dc7af158d70b81b8b7ff7c30384d9082dd6c6", 0xa8}, {&(0x7f0000000680)="f34fd64441d5d2f90e02070af6358e3914fd59a6a92e06c591979f4f50e6b5ef3401d693e0359ac46d20bc4936668232def21642dc16fb5a4cef033b37c98cc19a43c7e010be724790fec2f7bed20ee1e4c29a634ed6d175287f290a990beeffecb867f837d0a761d1e9d7db828a1a3f109623483c460c9f4f806c4fb8893f9cbdd876b798df2a14bca60ea1d5a4a148ae1fc91c373afda8587285b792473cecf4823c331953dbdd64ee7c9820893000227ff295", 0xb4}, {&(0x7f0000000740)="12f180846b5fd2a8110572813a1103b7a121aa44e5d38c9348eafaa997918908ea95c93ad4acc64b985f37025f7cff5fb7d1c12db9032fb807fee29a8b9428e539bd90599ca69013a6b3f9d2ac9a6923f1cac72a4d6e6c8c5a0fabd5453137f615a7c342ea1f00904d937f779f4bbe90ade329c5a5b2e4b100fed5761e05ea2e39f64840f6a1be1a485fc3a3b32f428d7d522a118792bc8bfecd55f3b1255e6d1ec004b6249f083ea9573bb96bac09597a5e9e011a3fd1548ea2742ed6960dd66db56de5e2732ca51e470c97e3", 0xcd}], 0x9, &(0x7f0000000c80)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff, 0xffffffffffffffff, r0, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, r8, r9}}}], 0x128, 0x40040}, 0x4801) close(r3) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19404, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}}, 0x0) [ 1706.293686][ T1758] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1706.331023][ T1758] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 04:46:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03affff) sendfile(r1, r0, 0x0, 0x800000000000c) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) close(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x4, 0xfffffffd, 0x0, 0x400, 0xff}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0xd709) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f0000000100)=0x9, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 04:46:30 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0xfffd, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000000) [ 1706.375703][ T1758] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:46:30 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x4c}}, 0x0) 04:46:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x1a, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:31 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = socket(0x40000000010, 0x2, 0x3) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x3, @loopback, 0x46}, 0x1c) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r2, 0x8, 0x9, 0x5}) socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x6, 0x800, 0x3}, 0xe) bpf$MAP_UPDATE_ELEM(0x16, &(0x7f0000000140)={r3, 0x0, 0x0}, 0x1c) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r3}, 0x10) [ 1706.596304][ T1769] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:46:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206000400000000000000000000100003fa6169746d61703a706f72740005000400000000000900020073797a3000faffff040005000000000005000100060000001c00078008000640000000a006000440000000000600054000000000"], 0x64}}, 0x0) [ 1706.658832][ T1767] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x1c, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1706.862092][ T1780] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:46:31 executing program 2: r0 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x40eae, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) r1 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x7c774aac) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r6}, @CGW_SRC_IF={0x8, 0x9, r6}]}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2001000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20040090}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) close(r0) 04:46:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x0) 04:46:31 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000200)={0x0, 0x4}, 0x4) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000040), &(0x7f00000001c0)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000000) 04:46:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x24, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xe, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x268, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0xb}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 04:46:31 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03affff) sendfile(r1, r0, 0x0, 0x800000000000c) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) close(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x4, 0xfffffffd, 0x0, 0x400, 0xff}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0xd709) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f0000000100)=0x9, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) [ 1707.297831][ T1798] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 04:46:31 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="080000000000000002004e21ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000400000002004e23ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004ee6e190bb21ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e217f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000027b4dec07fdf378ec169f1e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eb381f34d4f117afed83cb7ed1b790ca9fba053f92e332cd4b6cab46b6089d66517a5129eb6525c163df3c6a41534c5f218a8e0b366ea7e7fec363c72b26a66bda2bface5184fe50c0c5f48d47d0ce857246ca5f528ae158f980fd6c5b02ead5fde9def3c6cd21616704ce8153db430ec53f8c40295be24c8bed221309e397c51da9b1624243cf2816192d458bec00"/814], 0x290) r5 = socket$pppoe(0x18, 0x1, 0x0) splice(r1, 0x0, r5, 0x0, 0x19404, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6400000002060104000000fb0000000000000000100003006269746d61703a706f72740005000400000000000900020073797a30000000000500050000dbbb7bb9000100060000001c00078008000640000000a006000440000000000600054000000000", @ANYRES32=r0, @ANYRES32], 0x64}}, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000040)={{&(0x7f00000001c0)=""/228, 0xe4}, &(0x7f0000000000), 0x2c}, 0x20) 04:46:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x38, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:31 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$alg(0x26, 0x5, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000)=0x81, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20008815) close(r5) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000140)={0x401, 0x0, 0x8, 0x57bf, 0x7ff}, 0xc) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r5, 0x0, 0x19404, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000080)={0x8000, "36aaed"}, 0x6) sendmsg$rds(r0, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{0x1}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1, 0x3205}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000d80)=[{0x0}], 0x1}}], 0x90}, 0x0) [ 1707.448850][ T1801] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1707.523570][ T1815] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 04:46:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x2, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:32 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x13, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x6}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40090) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000000) 04:46:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x3, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:32 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0xfffffffffffffffd, 0x6}) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='devices.list\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x7a05, 0x1700) pwrite64(r4, &(0x7f0000000400)="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", 0x200, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r3, 0xcf9f8000) r5 = socket(0x1e, 0x802, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x84, 0x0, &(0x7f0000000080)) 04:46:32 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd60427a00002d57633b860814cc3d28716a583a00fe8000000000000000000000000000000000000000000001020090780000007c60ff112d80092900ff010000000000000000000000000001fe1000000000000000000000000000bb0000000000003a0004010000000000000002040100000000ff02000000000000c55f0c9a000000010000000000000000"], 0x0) socket(0x1f, 0x80000, 0x25e) 04:46:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x5, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:32 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r0, 0x390, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fffffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, 0x0, 0x200000d4) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000000) 04:46:32 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) r2 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) tee(r1, r2, 0x6, 0x0) 04:46:32 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @remote}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="a6ec1609d0831e5720b1ad56b6c5820fae00210000000000", 0x18) r2 = accept(r1, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4064aafe07d85321e4813caae701c41657c89f95992c46598551e9f5d025f5132d9da178fd4f9f813fc6a57b60602eeaa2b4a40cb57dc6820f1aac86ab8c54dc12ff83328941e9865d1545c316732b2b688e8f7c1941b02631ebb11d8b4d86f6985e75026722fa904fa82c5a64ed2c4b4341d0bdf8", @ANYRES16=0x0, @ANYBLOB="000000000000000000004c0000000600f7000000000004002a00"], 0x20}}, 0x8876) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) r3 = accept$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000000c0)={0x0, 'hsr0\x00', {}, 0x6}) 04:46:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x6, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) [ 1708.748105][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1708.748120][ T29] audit: type=1804 audit(1595565993.196:1431): pid=1845 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/59/cgroup.controllers" dev="sda1" ino=16306 res=1 [ 1708.816807][ T1845] __nla_validate_parse: 1 callbacks suppressed [ 1708.816819][ T1845] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x8, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x26000080) write$binfmt_misc(r0, &(0x7f0000000200)={'syz1', "8ade11773ac38eb91acd6b652b8b4e2a384e9c8ba06b703824fe3d9b491e90e2092319f93d53df635887e51741071370f1ac07f6571e19f74d36f6bb8ecb15fd8f7546db62bcbef27f85a841c8101ba502758643d411c8ec67b21670897036eb0d46c7aaeeb554474a0df53028c36467c342d8a9775fba2dbb7e4ddf29a57bda1eb008b1a501ce58a8e24e1091df58aab4c121845fb5dd5fb56767061add9d318b8b6a10775077f29241f77c5d835bc2fb575765c717b92fa4d0f6"}, 0xbf) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000002060104000002000000000000000000100003006269746d61703a706f72740005813cbe62cd0004000073797a3000000000050005000000000005000100060000090000078008000640000000a00600044000000000060005400000ff15631b"], 0x64}}, 0x0) 04:46:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x9, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1709.183541][ T1875] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 04:46:33 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a400000000e3120000000000000000000000003e7100", @ANYRES32=r1, @ANYBLOB="07000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000100000000000fd0dff080004000000000000000000000000000000000000000000000000000000000000000800000000000004000040000000000000000000000000000000000000000000100002800c0001800800040001000080080005000b000000"], 0xa4}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r5 = gettid() ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast2}, 0x100}) ioctl(0xffffffffffffffff, 0x4, &(0x7f0000000000)) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0b3e000000000000000025000068973e55e36e657464657673696d0000000f0002006e657464657673696d30000008008b00b7e5004facc58103a348bf59d50494ea59708bcf43919e706a029c04b42c194a1e", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x6000000000000000}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000280), 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r8, 0xc0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a40)={r9}, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="07008000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r5, r7, 0x0, 0x3, &(0x7f0000000100)='^^\x00', r9}, 0x30) 04:46:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0xa, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:33 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x24, @local}}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000040)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000000)={0x1, 0x7}) syz_init_net_socket$ax25(0x3, 0x3, 0x6) 04:46:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0xb, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:33 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@ipv4_getroute={0x1c, 0x1a, 0x200, 0x70bd2c, 0x25dfdbfe, {0x2, 0x14, 0x10, 0x5, 0xfc, 0x3, 0xfd, 0x5}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x3, 0x4, 0x6) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r4}]}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r1}, @CGW_SRC_IF={0x8, 0x9, r7}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x1, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x4) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@mpls_getnetconf={0x14, 0x52, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) [ 1709.412203][ T1883] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 04:46:34 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e22, 0x0, 0x4e23, 0xfd3, 0xa, 0x80, 0x50}, {0x5, 0x1, 0xf, 0x2, 0x9, 0x1, 0x3, 0x3}, {0x101, 0x8000, 0x8, 0x1}, 0x8, 0x6e6bb2, 0x1, 0x1, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x3c}, 0x2, @in6=@loopback, 0x3505, 0x2, 0x1, 0x1, 0x5a, 0x80000000, 0x10000}}, 0xe8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x2258, 0x6, 0x2, 0x301, 0x70bd25, 0x25dfdbfd, {0x4, 0x0, 0x4}, [@typed={0xc, 0x59, 0x0, 0x0, @u64=0x4}, @nested={0x205f, 0x75, 0x0, 0x1, [@generic="d0c66509a11d4989b1da88671d", @typed={0x8, 0x11, 0x0, 0x0, @fd}, @generic="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", @generic="34d13af6fa5402ad7f6ca970802ebdc203a048eb37d098387b054e14a171886369afba24155c0a4d74a76e9a6b695dff3d0a120dc50eff3958942854fb978bff4b40aa97fc4f", @generic="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"]}, @generic="e3d4cb67c2fa5701983a612a164dc452222d1585b9a77b017153977be54789541ab7c807e9f2486dc3def8be55cd44472320579a9dcf31c96dc2600e205554578ff3b9268b72cf0af8a3fc5cd304c4aa718bba1306d171ed375595228f98d404078ed3a486b9a7ce96ee33be1b3052809b0ba17211479d2d4622332b8d34f3781ef56f06b5a42facad0305765c26495eae666d25b1e11d3b7b18605d547bada9a4c62a2e675f364466975fb03a0f80c620153ac1795eae4a9f5849257872ad1c8b19f2e8a0ba563163b827846adb5aa9f9ead310fe213372826f9a64bc730591b0f0d783baca", @nested={0x4, 0x56}, @typed={0x8, 0x30, 0x0, 0x0, @uid}, @generic="4107affd1de3dc6f50cbdca4e3162106d4a616ed246e03dfb161da3db34b25ed5b7c43c0c1aa1581abfae4dce2a9fc3687b457879d5b3e933a374e8ef3f434394853915d763b3c0ed33a8e1c5e776c4e2ae53cf284db2774f20b93a0387038b22a7191c1640b693bf92a72b045f775068b96d8c59cc757a13e694a7c39e0b1ce040bcc71c46a0185942cb53492aed2efd599c58b4f0fa26ac046fc1bd17fc83a5a332a0d27151454134a1aa8e6e788da26d75a3442051dea11bcc64145cc0b4002074e172786bbdef1943f343585a3796231bef4979551", @nested={0xc, 0x38, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xe}}]}]}, 0x2258}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007ee8ce5c740f72857f9c68ff21bb0cae7c5263a7d95a61217090a2c1a19b8995899c8bf85799c64d021907d76ec57c33c41"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000000) 04:46:34 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000640)=[{0x0, 0x0, 0x0}], 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000040)=0xd1, 0x4) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x80000020}}], 0x3df, 0x86, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r4, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x7fd}, 0x10) write(r5, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000080)={{0x0, 0x0, @descriptor="31c28552c3463797"}}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket$pptp(0x18, 0x1, 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, 0x0, 0x9, 0x5, 0x0, 0x0, {0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4e4f}}, @NFCTH_TUPLE={0x60, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x40) recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x3fffffffffffe7d, 0x10122, 0x0) 04:46:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x10, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1709.581020][ T1890] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 04:46:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x901, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 04:46:34 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xf9) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0}}], 0x2, 0x44890) [ 1709.703422][ T29] audit: type=1804 audit(1595565994.156:1432): pid=1894 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/60/cgroup.controllers" dev="sda1" ino=16257 res=1 [ 1709.876677][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 04:46:34 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x37cb1133) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x37cb1133) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r4, r5}) socket$inet_icmp(0x2, 0x2, 0x1) r6 = openat$cgroup_ro(r5, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) bind$inet(r6, &(0x7f0000000180)={0x2, 0xfffc, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000000), 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0xd0, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xff}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4cde3561}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_PROBES={0x5, 0x15, 0x3}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x1000}]}]}, 0xd0}}, 0x0) [ 1709.939838][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 04:46:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x11, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0xffffffffffffff3c) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) writev(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f00000001c0)="0c268a927f1f6598b967481241ba78600453f65ac618ded89722b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba000000000000000000a86ac818cf26acd9690c6cb9687f1eb82abbae1bd1b6c585821f06ad2db8c377fc245c50c6b1de5d4b9c6170bd6ba5a4edbc89a57ca985594ece09dfaac6218fb9c5645ec31f7dbbaae725b944669c030a9d5640b0b5d5337bda369d717907fdcb00000000000000000000010000", 0xbb, 0x4000095, 0x0, 0x0) [ 1709.990876][ T29] audit: type=1804 audit(1595565994.436:1433): pid=1903 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/60/cgroup.controllers" dev="sda1" ino=16257 res=1 04:46:34 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x48000000000000}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x77}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x33}}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x24048000) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x80}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0xd0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000000) 04:46:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x12, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1710.173658][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1710.213759][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:46:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x13, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1710.330698][ T1910] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1710.349026][ T29] audit: type=1804 audit(1595565994.796:1434): pid=1923 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/61/cgroup.controllers" dev="sda1" ino=16210 res=1 [ 1710.380237][ T1923] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x300, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:35 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) recvmsg$qrtr(r1, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x38, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000006240)={0x2c, r5, 0x205, 0x0, 0x0, {0x3}, [@HEADER]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="b500000000000000001004"], 0x3}, 0x1, 0x0, 0x0, 0x44891}, 0x4000080) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10020200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}}, 0x4000000) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xb) [ 1710.748598][ T29] audit: type=1804 audit(1595565995.196:1435): pid=1927 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/61/cgroup.controllers" dev="sda1" ino=16210 res=1 [ 1710.922588][ T1944] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 04:46:35 executing program 1: unshare(0x46000000) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000080)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8000008031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={r1, 0x8000, 0x3, 0x80000000}) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000140)=0x1, 0x4) sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffff800) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040), 0x100000001) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000000)={@multicast1, @multicast1, @remote}, &(0x7f0000000040)=0xc) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(r4) 04:46:35 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x20000044) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x200000d4) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @initdev}, &(0x7f00000001c0)=0xc) r2 = socket$pppoe(0x18, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @rand_addr=0x64010101}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a5800e2078000d8ac00050001"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000000) 04:46:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x612, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:35 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000000206010400000000fcff51dee61dffff0000000010000300626918c661703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060018001c00078008000640000000a006000440000000000600054000000000"], 0x64}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa0, 0x0, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x240cc880}, 0x801) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000800}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x230, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT={0x1c4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, [], 0x1}}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @ipv4={[], [], @remote}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x14, 0x4, @private1={0xfc, 0x1, [], 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x11}}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2b29}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}]}, 0x230}}, 0x0) 04:46:35 executing program 5: unshare(0x400) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x37cb1133) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r3, 0x536ae464467e3e0b, 0x0, 0x0, {0x25, 0x0, 0x6800}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0xe7c}}]}, 0x3c}, 0x1, 0x6000000000000000}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8610}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e00100006e3a4541d6e1b75dd0b8010000003e1932353adb4b481bfd24c7bfb67175bb1632e3ee32505e33b28080e0aee93c0f4a69b2b8af", @ANYRES16=r3, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x1}, 0x40080) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000009c0)={0x1e4, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x3ff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x67c000}, {0x6, 0x16, 0x1f}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2f}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7f}, {0x6, 0x16, 0x7d4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0xba1b}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8001}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x81}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x401}, {0x6, 0x16, 0x3ff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xa5}, {0x8, 0xb, 0xb3e}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x401}, {0x6, 0x16, 0x101}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6f1}, {0x8, 0xb, 0x5}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40000}, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000095000000000063dd"], &(0x7f0000000580)='GPL\x00', 0x5, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) r5 = socket(0x1d, 0x3, 0x9) r6 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) r7 = socket(0x10, 0x80002, 0x0) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e22, 0x0, 0x4e23, 0xfd3, 0xa, 0x80, 0x50, 0x0, 0x0, r8}, {0x5, 0x1, 0xf, 0x2, 0x9, 0x1, 0x3, 0x3}, {0x101, 0x8000, 0x8, 0x1}, 0x8, 0x6e6bb2, 0x1, 0x1, 0x3, 0x1}, {{@in6=@empty, 0x4d6, 0x3c}, 0x7, @in6=@loopback, 0x3505, 0x2, 0x1, 0x1, 0x5a, 0x5, 0x10000}}, 0xe8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x4c, r9, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "944c8000"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xffffffffffffff77}, @NL80211_ATTR_KEY_SEQ={0x0, 0xa, "ee7f"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40018}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB="40000000e6a63e364e8d765abec3328945e3a76f3c8d91bbce731d1cfc4179429cc5da63ecdb3ae90bc3e38dcf93e82fafa821337fa85b69932e0343a4b7f1f35781a501f2476291bbdca4ef442595a1f1a861bc8d6ac8860e148ac1c396a19a7cd0e11fcea9045acc9ff222f4f302a15fc048ac75b3512ed172ff2c7f2884188e18f3302a7788020ab6e0613ccf7e85d04c745159d9ace2497c4b409f53c4ef37cafdeb0581b635c30eee3ebe5774f367c7c5", @ANYRES16=r9, @ANYBLOB="00012dbd7000fedbdf2506000000080005000b0000000800050001000000080005000700000008000100020000000c0099000100000002000000"], 0x40}, 0x1, 0x0, 0x0, 0x4080010}, 0x4) [ 1711.227869][ T1954] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. 04:46:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x3}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1711.270127][ T1957] IPVS: ftp: loaded support on port[0] = 21 [ 1711.284248][ T1958] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1711.344354][ T1958] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 04:46:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:35 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x810, r0, 0x5000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280)='NLBL_CALIPSO\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x4c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "944c8000"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xffffffffffffff77}, @NL80211_ATTR_KEY_SEQ={0x0, 0xa, "ee7f"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40018}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="eeefdd655edaed171bb28a0fecb5e17c7dcb9cbfc4430afe8c72616314a2156ccf75b9c2918e220a297b18249be3820bc9547c897405be", @ANYRES16=0x0, @ANYBLOB="090227bd7000fbdbdf251b000000050092000300000008009a0000000000050092003f000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000000) [ 1711.422405][ T1957] virt_wifi0 speed is unknown, defaulting to 1000 [ 1711.459212][ T1958] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.557739][ T1958] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 04:46:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x8}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1711.599985][ T29] audit: type=1804 audit(1595565996.046:1436): pid=1979 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/63/cgroup.controllers" dev="sda1" ino=16194 res=1 [ 1711.675407][ T1958] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 04:46:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0xb}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x10c, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @remote, 0x8001}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb101}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfff, @local, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf6}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc880}, 0x4000884) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x11, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e22, 0x0, 0x4e23, 0xfd3, 0xa, 0x80, 0x50}, {0x5, 0x1, 0xf, 0x2, 0x9, 0x1, 0x3, 0x3}, {0x101, 0x8000, 0x8, 0x1}, 0x8, 0x6e6bb2, 0x1, 0x1, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x3c}, 0x2, @in6=@loopback, 0x3505, 0x2, 0x1, 0x1, 0x5a, 0x80000000, 0x10000}}, 0xe8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x4c, r5, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "944c8000"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xffffffffffffff77}, @NL80211_ATTR_KEY_SEQ={0x0, 0xa, "ee7f"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40018}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044885}, 0x805) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x32, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000070601030007439f436d4ec1da7a8560c9a7925572ff31d8336fbad40e9bd956a61fd9adbebd8f10c9814f5e7e3df20066357650e3502b610b4f364dc4ea35f95d2e84f03fb4d832d88a"], 0x1}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r4, 0x0, 0x100000001) recvmmsg(r6, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a000}}], 0x1, 0x0, 0x0) 04:46:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x10}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1711.911819][ T1958] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.983238][ T1958] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.026783][ T1958] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.039051][ T29] audit: type=1804 audit(1595565996.486:1437): pid=1990 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir054433689/syzkaller.vjG2ax/1266/cgroup.controllers" dev="sda1" ino=16384 res=1 [ 1712.103287][ T1958] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.156920][ T2002] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1712.182556][ T1961] IPVS: ftp: loaded support on port[0] = 21 [ 1712.199953][ T29] audit: type=1804 audit(1595565996.646:1438): pid=2009 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/63/cgroup.controllers" dev="sda1" ino=16194 res=1 [ 1712.205057][ T2002] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.322353][ T1961] virt_wifi0 speed is unknown, defaulting to 1000 [ 1712.384050][ T2002] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.497658][ T2002] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.588524][ T2002] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.791715][ T2002] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.823318][ T2002] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.892555][ T2002] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.926249][ T2002] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 04:46:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x3, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:38 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000002060104000000000000000000000000100003006269746d61703a70e96693b27cedb5fb000000000900020073797a3000000000050005000000000005000100060000001c00078008000640000000a006000440000000000600054000000000"], 0x64}}, 0x0) 04:46:38 executing program 2: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000000) 04:46:38 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="a800000004af2af34b0001007a58008000d8ac000900010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000000) 04:46:38 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@ldst={0x5, 0x0, 0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000240)=0x6, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000140007080000000000000500000000000000279639a91d797f0000017daf4204a00b32ea255b5a694dab5848e3d8960f65b27ee8125f42260500000015739d53d5000000"], 0x48}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="5225e9090000000000000000b8d983606c753c74d8ca85b936442adef2590bfdde6c55f510530d72fb12ad074217e2da857fa2af73549040eef5a6168ed44c60531890a246056968b7cf1abe429d3e801a242fc8ce92c4b79cd5e729a0e209a3d66a71247ea2058a5d994bd2c42f92f1565d6cc1ce04c5a80b95e38b0aff4bc08d3387889710060857ee3335d9662076b3d9c66b5e0949e2b63fd6bffc0ae270d8ce05bd4623d861bb7084d90f1e74904b6f1725878ca8de08c83c893a9ad579b7c2214738502f022574713fce2546f0c0388096c97b7c28c8", @ANYRES16=r3, @ANYBLOB="000328bd7000fcdbdf2510000000040003809000058008000100657468002c0002800800020000080000080001002000000008000300f30000000800030007000000080004000008000014000280080003004809000008000200ff0f0001007564700008000100756470002c000280080001000b0000000800010015000000080003007fffffff080001000300000008000400000000001c0006800800010006000000040002000400020004000200040002008a803c654716f948bea7ae4a5c1be24be10460bc5853e565001627d578759a57150aabc6e29b94dc5b5120a896"], 0xc4}, 0x1, 0x0, 0x0, 0x4040004}, 0x81) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x27c, r3, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4f, 0x3, "f2899e38d4a0bc332dae3e56054fc534d07ee732acd46916cacb1993a8b762e47cbe60f4793bff72c3781dcabb55b5b8fbf80052ac87a66084f397ad16db8f58eae3ddf7c901e51f1c339d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x63, 0x3, "f60e02ab5a64a321f78ee30c0cc3c03013f0f08c5cf7c33d87f937ad7756948a51003f5e15791231e41e303f1a9668760b26a8b54cef94405ce777c0904059ec17fc9d93d0f8557e33df64589530f114c9344d69b778f0d24fff1c0b77cb7c"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "f1dbe2717951d1d486ad6001c48e2bb87e9b58c21abe54318bc5"}}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2769}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd8af}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x20000090}, 0x2000c080) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf8, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd1}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffe00}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x34c4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) 04:46:38 executing program 1: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x7c}}, 0x0) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) r1 = socket(0x18, 0x800, 0x2) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x4, 0x4) bind(r1, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000900), 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000013c0)={0x270, 0x0, 0x0, 0x70bd29, 0x0, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x20c, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x0, @local, 0x9}}]}, {0x1c4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x1a4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x270}, 0x1, 0x0, 0x0, 0x20000844}, 0x4004000) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4c000) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r3, &(0x7f0000000040)=""/184, 0xfffffffffffffe07, 0x40012500, 0x0, 0xfffffe53) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x41032, 0xffffffffffffffff, 0x13f5c000) mmap(&(0x7f00000aa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1714.448322][ T2084] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 04:46:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x70, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa2}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x70}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000) 04:46:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0xb, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1714.538109][ T29] audit: type=1804 audit(1595565998.986:1439): pid=2085 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir054433689/syzkaller.vjG2ax/1267/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 1714.573118][ T2085] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1714.665992][ T29] audit: type=1804 audit(1595565999.046:1440): pid=2093 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/64/cgroup.controllers" dev="sda1" ino=16373 res=1 04:46:39 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1f}, 0x21) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000000c1404002abd7000eedbdf2508000f000200000008000100020000000800010001000000e16e9e890cffdcaf02da006e3a4703d3bd813d0c2d4945f4954ffba105369eea9be5a735910fcd0fa1e45dbf1de52a51b8bb69dffd9299097426e7f56b64acba7246274470bcda2b1783c313219ced79d0a8322453712258c1e21f67d3"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x44000890) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000140)=0x4) pipe(&(0x7f0000000480)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x20) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000440)={r6}, 0x8) close(r3) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x19404, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f00000001c0)={@empty, @remote}, 0x8) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}, 0xd000000}], 0x400000000000132, 0x4000000) 04:46:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x800, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x304) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e22, 0x0, 0x4e23, 0xfd3, 0xa, 0x80, 0x50}, {0x5, 0x1, 0xf, 0x2, 0x9, 0x1, 0x3, 0x3}, {0x101, 0x8000, 0x8, 0x1}, 0x8, 0x6e6bb2, 0x1, 0x1, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x3c}, 0x2, @in6=@loopback, 0x3505, 0x2, 0x1, 0x1, 0x5a, 0x80000000, 0x10000}}, 0xe8) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x19404, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000001c0)={0x1ff, 0x100, 0x5, 0xff, 0x6, 0xff, 0xca2}, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x0) [ 1714.843294][ T29] audit: type=1804 audit(1595565999.226:1441): pid=2093 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/64/cgroup.controllers" dev="sda1" ino=16373 res=1 04:46:39 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x300, 0x70bd2d, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8001}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6e2}, {0x8, 0xb, 0xffffffff}}]}, 0x60}}, 0x4000001) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000000) 04:46:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x3, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_SRC_IF={0x8, 0x9, r5}]}, 0x24}}, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000000)={@rand_addr=0x64010102, @empty, r5}, 0xc) [ 1715.084596][ T29] audit: type=1804 audit(1595565999.536:1442): pid=2091 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir054433689/syzkaller.vjG2ax/1267/cgroup.controllers" dev="sda1" ino=16377 res=1 04:46:39 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket(0x10, 0x80002, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x37cb1133) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x1, &(0x7f0000000100)=0x4, 0x4) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300b6263c62339e8ae31096e4c3a0", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a11", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000fff9) [ 1715.183173][ T29] audit: type=1804 audit(1595565999.626:1443): pid=2118 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/65/cgroup.controllers" dev="sda1" ino=16108 res=1 [ 1715.196588][ T2114] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1715.242343][ T2120] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 04:46:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x5, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xe}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000880) [ 1715.381829][ T29] audit: type=1804 audit(1595565999.836:1444): pid=2124 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir054433689/syzkaller.vjG2ax/1268/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 1715.474171][ T29] audit: type=1804 audit(1595565999.866:1445): pid=2124 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir054433689/syzkaller.vjG2ax/1268/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 1715.521227][ T2132] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 04:46:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x0) mmap(&(0x7f0000fee000/0x11000)=nil, 0x11000, 0x2000004, 0x10, r0, 0xd24da000) 04:46:40 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @private=0xa010102}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r4], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r3, 0x0, 0x100000000) 04:46:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x8, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:40 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000200)={0x1, {{0xa, 0x4e23, 0x10001, @local, 0x39c}}, 0x1, 0x6, [{{0xa, 0x4e23, 0x20, @private2}}, {{0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, [], 0x1}}}, {{0xa, 0x4, 0x6, @mcast2, 0x5}}, {{0xa, 0x4e24, 0x10000, @private0, 0x20}}, {{0xa, 0x4e22, 0x4, @mcast2, 0x7}}, {{0xa, 0x4e20, 0x4, @loopback, 0xfffffffa}}]}, 0x390) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x208000, 0x800}, 0x18) mmap(&(0x7f0000423000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 04:46:40 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000000000008510001e570000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000001800), &(0x7f0000001840)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x24, r4, 0x205, 0x0, 0x0, {0x5, 0x0, 0xa00}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x20044004) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xfd}}]}, 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000006280)={&(0x7f00000061c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006240)={&(0x7f0000006200)={0x14, r4, 0x4, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2001}, 0x4000081) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000200012800b00010067656e65766500001000028006000500810000000400060008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="d5dee1c106dd212f0be092ef45861f4aa2b4a04a935c00"/34], 0x50}}, 0x0) 04:46:40 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={r7, 0x6}, &(0x7f0000000240)=0x8) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e22, 0x0, 0x4e23, 0xfd3, 0xa, 0x80, 0x50, 0x0, 0x0, r8}, {0x5, 0x1, 0xf, 0x2, 0x9, 0x1, 0x3, 0x3}, {0x101, 0x8000, 0x8, 0x1}, 0x8, 0x6e6bb2, 0x1, 0x1, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x3c}, 0x2, @in6=@loopback, 0x3505, 0x2, 0x1, 0x1, 0x5a, 0x80000000, 0x10000}}, 0xe8) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000000)={0x3, @default, r8}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x200}]}}]}, 0x3c}}, 0x0) [ 1715.781994][ T2142] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1715.811827][ T2143] IPVS: ftp: loaded support on port[0] = 21 [ 1715.864962][ T29] audit: type=1804 audit(1595566000.316:1446): pid=2141 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/66/cgroup.controllers" dev="sda1" ino=16123 res=1 [ 1715.874216][ T2149] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 33024 - 0 [ 1715.905623][ T2149] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 33024 - 0 04:46:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0xb, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:40 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000002060104000000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100064559ae31fe5a1da8a51db7700000001c00078008000640000000a006000440"], 0x64}}, 0x0) [ 1715.915643][ T2149] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 33024 - 0 [ 1715.933785][ T2149] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 33024 - 0 [ 1715.971736][ T2149] device geneve4 entered promiscuous mode [ 1716.008381][ T2149] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 33024 - 0 [ 1716.041956][ T2149] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 33024 - 0 [ 1716.071189][ T2149] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 33024 - 0 [ 1716.084413][ T2149] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 33024 - 0 [ 1716.090920][ T2159] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 04:46:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x10, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1716.138066][ T2160] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1716.272615][ T2163] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 04:46:40 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000240)={0x9, 0x0, {0xfffd, @random="216e80b9b072", 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000040)=0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac0005000100076fb15c5ef6e10047c402054cf1444aff25eeddea9a71cbfcb891dd4fb9006f381a6511d1c6ab502ddba7a5d528dba4e4b017724687bbeb686bbb78"], 0x1}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000000) 04:46:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x3, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1716.519057][ T29] audit: type=1804 audit(1595566000.966:1447): pid=2168 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/67/cgroup.controllers" dev="sda1" ino=16109 res=1 04:46:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1716.619651][ T2166] IPVS: ftp: loaded support on port[0] = 21 04:46:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x1a, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:41 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) [ 1716.917304][ T2143] virt_wifi0 speed is unknown, defaulting to 1000 [ 1717.380990][ T2166] virt_wifi0 speed is unknown, defaulting to 1000 04:46:42 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x75, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000100)={r3, 0x2}, 0x8) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000200"/27, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="00000000190f00"/25, @ANYRES32, @ANYRES32=r5]) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x3932, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r6 = accept(0xffffffffffffffff, 0x0, 0x0) accept4$packet(r6, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x800) 04:46:42 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff8}]}, 0x24}}, 0x4008010) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000000) 04:46:42 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x400000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="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"], 0x14}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fcef0000", @ANYRES16=r8, @ANYRESOCT=r7, @ANYRES32=0x0, @ANYRES32], 0x34}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000380), 0x4) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x50}}, 0x0) 04:46:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, '\x00', "b8d5e8382b7cb1d02b30a05c6ef0b81f0920126148d3f0d32c95b2b7a139c441", 'dCe#', "b1034b903a64f865"}, 0x38) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) close(r0) socketpair(0xa, 0x80000, 0x316e, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) 04:46:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x3}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="640200000206010400000000000000000000000010a81fe16d1206000000000000727400050004000010000009000200737f7a3000000000050005000000000005000100060000081c00078008000640000000a0060004400000000006000540a047be4f53417cc60916c43c8642922dafc91e456b731c"], 0x64}}, 0x0) 04:46:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PROBES={0x5, 0x15, 0x8}]}]}, 0x64}}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) r2 = accept(r1, &(0x7f0000000340)=@un=@abs, &(0x7f00000003c0)=0x80) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000400)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={'nr', 0x0}, 0xdf, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x81, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) [ 1718.024872][ T2251] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1718.034715][ T29] audit: type=1804 audit(1595566002.476:1448): pid=2248 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/68/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 1718.094285][ T2255] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1718.102960][ T2248] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:46:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_SRC_IF={0x8, 0x9, r5}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x400d0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r2}) setsockopt$RDS_GET_MR(r6, 0x114, 0x2, &(0x7f0000000380)={{&(0x7f0000000280)=""/250, 0xfa}, &(0x7f0000000180), 0x24}, 0x20) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0x37cb1133) setsockopt$netrom_NETROM_IDLE(r8, 0x103, 0x7, &(0x7f00000003c0)=0x8a7, 0x4) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {0x6, 0x0, 0x9}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000044}, 0x20000000) 04:46:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x9}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1718.809569][ T2255] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 04:46:43 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r1 = socket$inet6(0xa, 0x800, 0x6) setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000040)="bb3a672fa51ecc7a0fcc3a77ab5aaf0652d032", 0x13) syz_emit_ethernet(0x2e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffff7db7aaaaaaaa000000450000200000000000119078ac1c14bbffffe83800004e20000c9078010000009fb8e1e4e0e14897f75b6522fbb9058aa48f2c196ea60ee3d0c4d9faecb317c016136b7b42f68843b35dc4f8992bf9af06d44aad788cdbe1d09fa7a3e58ff927ee3e9d17bf042509cfdfa3dd4731c785c8c0b5f47baa8babe8c0dfc37ce739015901e4c4558657a8012a51ad6f2da46dad61a982b16c9da442f473298c53dc4cff8403"], 0x0) 04:46:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xa}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:43 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xaf8a8000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x1) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f00000001c0)={'xfrm0\x00', {0x2, 0x4e24, @rand_addr=0x640100fe}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000804060102e60001007a5800a3d501a6cdf9addedad0"], 0x1}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) 04:46:43 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000040)={0x3, 0x1e, "2516c2e5cd0cd28f2fca9e33cef244e7342f0cece25b2c93b7c5f6e54e68"}) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x4, @dev={[], 0x44}, 'batadv_slave_0\x00'}}) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x84000}, 0x20000091) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x19, &(0x7f00000000c0)={r6}, 0x8) 04:46:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x0) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000000)) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={r5, @in6={{0xa, 0x4e22, 0x6, @mcast1, 0x6}}, 0x48, 0x2, 0xfffffffa, 0x6, 0xc}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={r6, 0x7}, 0x8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 04:46:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PROBES={0x5, 0x15, 0x9}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x0) 04:46:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xb}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:43 executing program 2: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0xc) ioctl$FIOCLEX(r0, 0x5451) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='THAWED\x00', 0x7) r1 = socket$netlink(0x10, 0x3, 0xe) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x12, 0x9, @udp='udp:syz2\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x800) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000740)={'tunl0\x00', 0x0, 0x700, 0x8000, 0x7, 0x8, {{0x8, 0x4, 0x1, 0x9, 0x20, 0x64, 0x0, 0xb7, 0x2f, 0x0, @loopback, @remote, {[@rr={0x7, 0xb, 0xcd, [@dev={0xac, 0x14, 0x14, 0x24}, @private=0xa010100]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r3, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008914}, 0x24048001) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000d40)={r1}) sendto$packet(r6, &(0x7f0000000d80)="acb5c052fada78d698de56397fff374dce5cef013968e899d9f55022319b1337c8567cc08f43db4b105b101634ea700e1e10d3f4414b29fcc3fef03f933430ec6310e75d33883ed86942e9020ecc991f03498809769fe415918703e88a7570e30dd02163a0d46b1d3b8bb7cd354f3419", 0x70, 0x10, 0x0, 0x0) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000e00)=0x3, &(0x7f0000000e40)=0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8983, &(0x7f0000000e80)={0x7, 'vlan0\x00', {0x320}, 0x9}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000f80)={0x0, 0x3, 0x20, 0x2, 0x4c59}, &(0x7f0000000fc0)=0x18) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000001000)={r8, 0x40, 0x1}, 0x8) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002300)='cpu.stat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f00000023c0)={0x0, 0x8}, &(0x7f0000002400)=0x8) 04:46:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x20) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) ioctl$FIONCLEX(r5, 0x5450) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x20) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r6, 0x1}, &(0x7f0000000240)=0x8) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r1, 0x0, 0x100000000) 04:46:43 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0xb, 0xa, 0x9, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x200048d4) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000000000000000000000020a44a0c90cc5ca0a85bc0acc70b52c68dcc8b567a96e19bd03f1ee42f000000000000005b0d9b2360d724c0780000000000"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000000) 04:46:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x10}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:44 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000200)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x37cb1133) recvfrom$inet6(r3, &(0x7f0000000040)=""/86, 0x56, 0x40000000, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x4}}]}, 0x30}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 04:46:44 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x37cb1133) accept$alg(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x802, 0x73) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "110400", 0x48, 0x2f, 0x0, @dev, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x0, [0x0, 0x0]}}}}}}}, 0x0) sendmmsg$inet6(r1, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000001b40)=[@pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x28}}], 0x2, 0x0) 04:46:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x1, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7f}]}, 0x28}}, 0x48000) socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100003000) 04:46:44 executing program 3: socketpair(0x28, 0x6, 0x2, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, 0x0, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_IFINDEX={0x8}]}, 0x38}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x10}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x91) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b500000000000000001004"], 0x3}, 0x1, 0x0, 0x0, 0x44891}, 0x4000080) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x37cb1133) getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x1, &(0x7f00000003c0), &(0x7f0000000040)=0x80) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r4, @ANYBLOB="000328bd7000fcdbdf250c00000024000280080006000100000005000d000100000008000e004e2400000800050005000000240001800c00070011000000390000000c0007001000000010000000060001000a00000008000400040000002000038008000100000000001400020076657468315f6d616376746170000000bae0220d605ac8def4cbc997863f0c2cc028e639131cc81198f7ad96a246204d4eb787bba2738f51b363e7c9e6f1b9eafe84c6e668f2d6f5024923eb5594a29bdbcf188a2f012f34ad0aac1affe6973aa26fc1be0cacc70bc5eb8140b89c1135d0c1c56b513ae7044e327e17d608649b5add74a9"], 0x8c}, 0x1, 0x0, 0x0, 0x2204c000}, 0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x64}}, 0x0) [ 1719.689205][ T29] audit: type=1804 audit(1595566004.136:1449): pid=2320 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/70/cgroup.controllers" dev="sda1" ino=15707 res=1 04:46:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x11}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1719.801520][ T2332] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.5'. 04:46:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x12}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1719.903349][ T29] audit: type=1804 audit(1595566004.356:1450): pid=2334 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir439724528/syzkaller.F63zFi/1654/cgroup.controllers" dev="sda1" ino=16091 res=1 [ 1719.931794][ T2334] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 04:46:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x13}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 04:46:44 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8acc7fd3689e23e6a67000500e8ff07"], 0x1}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000002480)="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", 0x1018, 0x40000, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000000) 04:46:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x612}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) [ 1720.251628][ T29] audit: type=1804 audit(1595566004.706:1451): pid=2348 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/71/cgroup.controllers" dev="sda1" ino=16380 res=1 04:46:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x3}]}]}, 0x5c}}, 0x0) 04:46:44 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x19404, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000042c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000004280)={0x10, 0x0, 0x0, 0x4002}, 0xc, &(0x7f00000043c0)={&(0x7f0000004300)={0x68, r4, 0x300, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'batadv\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, '-wlan1GPLGPL^:\xa1)+-\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000329bd7000fcdbdfd99a3bac00050001000000000008000400ffffffff14000600000051e0b2fd1a502678c507022b0e75954aded3ceec732fe631509aa0f73833c928fa62dd8a34011c89698bc8b6bf810858e43a02e0d1e8bcb30d78f37078d125f1974e5876656a94888b35880afcadfad34d944efa9ebbc9fde0bc0cb6042b27b2f61e0887a44710ba9fa80a765a1c9d28ccf7482cab86bb5557bc90d2971ea63c7c9e6636ec0cf942d376802c0969d5652ddd"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20008040) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x20008000) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r4, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008840) 04:46:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x5}]}]}, 0x5c}}, 0x0) [ 1720.458023][ T2357] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1720.469297][ T29] audit: type=1804 audit(1595566004.926:1452): pid=2358 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/71/cgroup.controllers" dev="sda1" ino=16380 res=1 04:46:45 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x200000d4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local, 'netdevsim0\x00'}}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$xdp(0x2c, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e24, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000000) [ 1720.572103][ T2362] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:46:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.events\x00', 0x275a, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x9, 0x0, {0x0, @local}}) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16=r0, @ANYRES32, @ANYRES64=r0, @ANYRESDEC=r1], 0x208e24b) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000280)={0x7, {{0x2, 0x4e21, @remote}}}, 0x88) accept4(r2, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x37cb1133) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) 04:46:45 executing program 5: socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000000)=0x2, 0x4) close(r0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000200)) [ 1720.791057][ T29] audit: type=1804 audit(1595566005.246:1453): pid=2367 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/72/cgroup.controllers" dev="sda1" ino=16375 res=1 [ 1720.819176][ T2367] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1721.051314][ T29] audit: type=1804 audit(1595566005.506:1454): pid=2372 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir499582540/syzkaller.BepvrQ/72/cgroup.controllers" dev="sda1" ino=16375 res=1 [ 1721.128112][ T2374] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1721.154311][ T2374] gretap0: Device is already in use. [ 1721.512606][ T29] audit: type=1800 audit(1595566005.966:1455): pid=2368 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="cgroup.events" dev="sda1" ino=16374 res=0 [ 1728.050835][ T0] NOHZ: local_softirq_pending 08 [ 1795.258660][ T0] NOHZ: local_softirq_pending 08 [ 1804.211096][ T1152] INFO: task kworker/u4:5:14314 blocked for more than 143 seconds. [ 1804.219039][ T1152] Not tainted 5.8.0-rc4-syzkaller #0 [ 1804.225078][ T1152] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1804.234896][ T1152] kworker/u4:5 D24960 14314 2 0x00004000 [ 1804.242123][ T1152] Workqueue: netns cleanup_net [ 1804.246902][ T1152] Call Trace: [ 1804.250194][ T1152] __schedule+0x8e1/0x1eb0 [ 1804.255752][ T1152] ? io_schedule_timeout+0x140/0x140 [ 1804.262040][ T1152] schedule+0xd0/0x2a0 [ 1804.266126][ T1152] schedule_timeout+0x1d8/0x250 [ 1804.272154][ T1152] ? usleep_range+0x170/0x170 [ 1804.276872][ T1152] ? mark_held_locks+0x9f/0xe0 [ 1804.282666][ T1152] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1804.287957][ T1152] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1804.295114][ T1152] ? trace_hardirqs_on+0x5f/0x220 [ 1804.300160][ T1152] wait_for_completion+0x163/0x260 [ 1804.306403][ T1152] ? wait_for_completion_interruptible+0x2e0/0x2e0 [ 1804.313632][ T1152] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1804.318940][ T1152] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1804.325894][ T1152] __flush_work+0x51f/0xab0 [ 1804.331064][ T1152] ? queue_work_node+0x370/0x370 [ 1804.336026][ T1152] ? debug_object_init_on_stack+0x20/0x20 [ 1804.342684][ T1152] ? flush_workqueue_prep_pwqs+0x4f0/0x4f0 [ 1804.349051][ T1152] ? mark_held_locks+0x9f/0xe0 [ 1804.354789][ T1152] ? __cancel_work_timer+0x516/0x700 [ 1804.360098][ T1152] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1804.367188][ T1152] __cancel_work_timer+0x5de/0x700 [ 1804.373371][ T1152] ? try_to_grab_pending.part.0+0x7d0/0x7d0 [ 1804.379280][ T1152] ? trace_hardirqs_on+0x5f/0x220 [ 1804.385422][ T1152] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1804.393276][ T1152] ? __dp_destroy+0x325/0x430 [ 1804.397988][ T1152] ovs_exit_net+0x25c/0xba0 [ 1804.403593][ T1152] ? synchronize_rcu+0x10a/0x180 [ 1804.408556][ T1152] ? rcu_qs+0x110/0x110 [ 1804.413768][ T1152] ? ovs_dp_cmd_del+0x270/0x270 [ 1804.418654][ T1152] ? ovs_dp_cmd_del+0x270/0x270 [ 1804.425143][ T1152] ops_exit_list+0xb0/0x160 [ 1804.429661][ T1152] cleanup_net+0x4ea/0xa00 [ 1804.435122][ T1152] ? ops_free_list.part.0+0x3d0/0x3d0 [ 1804.441331][ T1152] ? lock_is_held_type+0xb0/0xe0 [ 1804.446308][ T1152] process_one_work+0x94c/0x1670 [ 1804.455833][ T1152] ? lock_release+0x8d0/0x8d0 [ 1804.461214][ T1152] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 1804.466619][ T1152] ? rwlock_bug.part.0+0x90/0x90 [ 1804.472513][ T1152] ? lockdep_hardirqs_off+0x66/0xa0 [ 1804.477748][ T1152] worker_thread+0x64c/0x1120 [ 1804.483470][ T1152] ? process_one_work+0x1670/0x1670 [ 1804.488695][ T1152] kthread+0x3b5/0x4a0 [ 1804.494053][ T1152] ? __kthread_bind_mask+0xc0/0xc0 [ 1804.499181][ T1152] ? __kthread_bind_mask+0xc0/0xc0 [ 1804.505417][ T1152] ret_from_fork+0x1f/0x30 [ 1804.509897][ T1152] INFO: task kworker/0:13:23310 blocked for more than 143 seconds. [ 1804.518820][ T1152] Not tainted 5.8.0-rc4-syzkaller #0 [ 1804.526298][ T1152] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1804.536047][ T1152] kworker/0:13 D27704 23310 2 0x00004000 [ 1804.543154][ T1152] Workqueue: events ovs_dp_masks_rebalance [ 1804.548986][ T1152] Call Trace: [ 1804.553420][ T1152] __schedule+0x8e1/0x1eb0 [ 1804.557898][ T1152] ? io_schedule_timeout+0x140/0x140 [ 1804.564082][ T1152] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1804.570082][ T1152] ? trace_hardirqs_on+0x5f/0x220 [ 1804.576144][ T1152] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1804.581878][ T1152] schedule+0xd0/0x2a0 [ 1804.585981][ T1152] schedule_preempt_disabled+0xf/0x20 [ 1804.592413][ T1152] __mutex_lock+0x3e2/0x10d0 [ 1804.597023][ T1152] ? ovs_dp_masks_rebalance+0x18/0x80 [ 1804.603286][ T1152] ? mutex_lock_io_nested+0xf60/0xf60 [ 1804.608668][ T1152] ? lock_release+0x8d0/0x8d0 [ 1804.615270][ T1152] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1804.621028][ T1152] ? lock_is_held_type+0xb0/0xe0 [ 1804.625989][ T1152] ovs_dp_masks_rebalance+0x18/0x80 [ 1804.632077][ T1152] process_one_work+0x94c/0x1670 [ 1804.637017][ T1152] ? lock_release+0x8d0/0x8d0 [ 1804.642615][ T1152] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 1804.648011][ T1152] ? rwlock_bug.part.0+0x90/0x90 [ 1804.655010][ T1152] ? lockdep_hardirqs_off+0x66/0xa0 [ 1804.660243][ T1152] worker_thread+0x64c/0x1120 [ 1804.665896][ T1152] ? process_one_work+0x1670/0x1670 [ 1804.671818][ T1152] kthread+0x3b5/0x4a0 [ 1804.675901][ T1152] ? __kthread_bind_mask+0xc0/0xc0 [ 1804.682224][ T1152] ? __kthread_bind_mask+0xc0/0xc0 [ 1804.687357][ T1152] ret_from_fork+0x1f/0x30 [ 1804.693722][ T1152] [ 1804.693722][ T1152] Showing all locks held in the system: [ 1804.702172][ T1152] 2 locks held by kworker/u4:6/244: [ 1804.707390][ T1152] 1 lock held by khungtaskd/1152: [ 1804.713595][ T1152] #0: ffffffff89bc0ec0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 1804.724402][ T1152] 1 lock held by in:imklog/6568: [ 1804.729330][ T1152] #0: ffff8880a0326bb0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 1804.738644][ T1152] 4 locks held by kworker/u4:5/14314: [ 1804.744145][ T1152] #0: ffff8880a97ad138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x82b/0x1670 [ 1804.754585][ T1152] #1: ffffc90001917da8 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x85f/0x1670 [ 1804.764656][ T1152] #2: ffffffff8a7ad4b0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x9b/0xa00 [ 1804.774303][ T1152] #3: ffffffff8aa5e028 (ovs_mutex){+.+.}-{3:3}, at: ovs_exit_net+0x1de/0xba0 [ 1804.784144][ T1152] 3 locks held by kworker/0:13/23310: [ 1804.789567][ T1152] #0: ffff8880aa026d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x82b/0x1670 [ 1804.800190][ T1152] #1: ffffc90004b07da8 ((work_completion)(&(&dp->masks_rebalance)->work)){+.+.}-{0:0}, at: process_one_work+0x85f/0x1670 [ 1804.813077][ T1152] #2: ffffffff8aa5e028 (ovs_mutex){+.+.}-{3:3}, at: ovs_dp_masks_rebalance+0x18/0x80 [ 1804.822774][ T1152] 1 lock held by syz-executor.3/2333: [ 1804.828233][ T1152] #0: ffffffff8a7ad4b0 (pernet_ops_rwsem){++++}-{3:3}, at: register_netdevice_notifier+0x1e/0x260 [ 1804.839292][ T1152] [ 1804.842201][ T1152] ============================================= [ 1804.842201][ T1152] [ 1804.853914][ T1152] NMI backtrace for cpu 1 [ 1804.858353][ T1152] CPU: 1 PID: 1152 Comm: khungtaskd Not tainted 5.8.0-rc4-syzkaller #0 [ 1804.866586][ T1152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1804.876657][ T1152] Call Trace: [ 1804.879957][ T1152] dump_stack+0x18f/0x20d [ 1804.884289][ T1152] nmi_cpu_backtrace.cold+0x70/0xb1 [ 1804.889505][ T1152] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 1804.895141][ T1152] nmi_trigger_cpumask_backtrace+0x1b3/0x223 [ 1804.901121][ T1152] watchdog+0xd7d/0x1000 [ 1804.905457][ T1152] ? reset_hung_task_detector+0x30/0x30 [ 1804.916830][ T1152] kthread+0x3b5/0x4a0 [ 1804.921012][ T1152] ? __kthread_bind_mask+0xc0/0xc0 [ 1804.926127][ T1152] ? __kthread_bind_mask+0xc0/0xc0 [ 1804.931248][ T1152] ret_from_fork+0x1f/0x30 [ 1804.936114][ T1152] Sending NMI from CPU 1 to CPUs 0: [ 1804.942092][ C0] NMI backtrace for cpu 0 [ 1804.942099][ C0] CPU: 0 PID: 6570 Comm: rs:main Q:Reg Not tainted 5.8.0-rc4-syzkaller #0 [ 1804.942106][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1804.942110][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x4/0x20 [ 1804.942129][ C0] Code: 84 00 00 00 00 00 48 8b 0c 24 0f b7 d6 0f b7 f7 bf 03 00 00 00 e9 cc fe ff ff 66 90 66 2e 0f 1f 84 00 00 00 00 00 48 8b 0c 24 <89> f2 89 fe bf 05 00 00 00 e9 ae fe ff ff 0f 1f 40 00 66 2e 0f 1f [ 1804.942133][ C0] RSP: 0018:ffffc90004aa7830 EFLAGS: 00000246 [ 1804.942142][ C0] RAX: 0000000000000007 RBX: ffff88808a6cc778 RCX: ffffffff82036315 [ 1804.942147][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1804.942153][ C0] RBP: ffff88808fb26000 R08: 0000000000000000 R09: ffff88808a6cc977 [ 1804.942158][ C0] R10: 000000000000009b R11: 0000000000000000 R12: ffff8880a772a000 [ 1804.942164][ C0] R13: 0000000000000000 R14: 00000000000000a0 R15: ffffc90004aa7950 [ 1804.942170][ C0] FS: 00007fb794f97700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1804.942174][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1804.942180][ C0] CR2: 00007fb78c037620 CR3: 00000000a7e70000 CR4: 00000000001406f0 [ 1804.942185][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1804.942190][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1804.942193][ C0] Call Trace: [ 1804.942197][ C0] ext4_mark_iloc_dirty+0x1875/0x3700 [ 1804.942202][ C0] ? ext4_reserve_inode_write+0x155/0x280 [ 1804.942206][ C0] __ext4_mark_inode_dirty+0x237/0x910 [ 1804.942210][ C0] ? ext4_expand_extra_isize+0x5a0/0x5a0 [ 1804.942214][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1804.942218][ C0] ? ext4_journal_check_start+0x1ae/0x290 [ 1804.942222][ C0] ? __ext4_journal_start_sb+0x14e/0x4c0 [ 1804.942226][ C0] ? ext4_dirty_inode+0xbc/0x130 [ 1804.942230][ C0] ext4_dirty_inode+0xf3/0x130 [ 1804.942233][ C0] ? ext4_setattr+0x1e70/0x1e70 [ 1804.942237][ C0] __mark_inode_dirty+0x8cc/0x1300 [ 1804.942241][ C0] ? igrab+0xb0/0xb0 [ 1804.942245][ C0] generic_update_time+0x21c/0x370 [ 1804.942248][ C0] file_update_time+0x434/0x520 [ 1804.942252][ C0] ? current_time+0x2c0/0x2c0 [ 1804.942256][ C0] ? down_write_killable+0x170/0x170 [ 1804.942260][ C0] file_modified+0x7d/0xa0 [ 1804.942264][ C0] ext4_buffered_write_iter+0xfc/0x4a0 [ 1804.942268][ C0] ext4_file_write_iter+0x1f3/0x13d0 [ 1804.942271][ C0] ? aa_file_perm+0x5e2/0x1100 [ 1804.942275][ C0] ? ext4_buffered_write_iter+0x4a0/0x4a0 [ 1804.942280][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1804.942283][ C0] ? aa_path_link+0x2f0/0x2f0 [ 1804.942287][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1804.942291][ C0] new_sync_write+0x422/0x650 [ 1804.942295][ C0] ? new_sync_read+0x6e0/0x6e0 [ 1804.942298][ C0] ? lock_downgrade+0x820/0x820 [ 1804.942302][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1804.942306][ C0] ? __sb_start_write+0x1d5/0x470 [ 1804.942309][ C0] vfs_write+0x59d/0x6b0 [ 1804.942313][ C0] ksys_write+0x12d/0x250 [ 1804.942317][ C0] ? __ia32_sys_read+0xb0/0xb0 [ 1804.942320][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1804.942324][ C0] ? do_syscall_64+0x1c/0xe0 [ 1804.942328][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1804.942332][ C0] do_syscall_64+0x60/0xe0 [ 1804.942336][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1804.942340][ C0] RIP: 0033:0x7fb7979db1cd [ 1804.942343][ C0] Code: Bad RIP value. [ 1804.942347][ C0] RSP: 002b:00007fb794f96590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1804.942357][ C0] RAX: ffffffffffffffda RBX: 00007fb78c029610 RCX: 00007fb7979db1cd [ 1804.942368][ C0] RDX: 0000000000000575 RSI: 00007fb78c029610 RDI: 0000000000000009 [ 1804.942373][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1804.942378][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fb78c029390 [ 1804.942384][ C0] R13: 00007fb794f965b0 R14: 000055b53e5d07c0 R15: 0000000000000575 [ 1804.943389][ T1152] Kernel panic - not syncing: hung_task: blocked tasks [ 1805.333108][ T1152] CPU: 1 PID: 1152 Comm: khungtaskd Not tainted 5.8.0-rc4-syzkaller #0 [ 1805.341339][ T1152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1805.351382][ T1152] Call Trace: [ 1805.354669][ T1152] dump_stack+0x18f/0x20d [ 1805.358994][ T1152] panic+0x2e3/0x75c [ 1805.362891][ T1152] ? __warn_printk+0xf3/0xf3 [ 1805.367486][ T1152] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 1805.373129][ T1152] ? preempt_schedule_thunk+0x16/0x18 [ 1805.378706][ T1152] ? watchdog.cold+0x5/0x16b [ 1805.383298][ T1152] ? watchdog+0xa82/0x1000 [ 1805.387803][ T1152] watchdog.cold+0x16/0x16b [ 1805.392304][ T1152] ? reset_hung_task_detector+0x30/0x30 [ 1805.397862][ T1152] kthread+0x3b5/0x4a0 [ 1805.402018][ T1152] ? __kthread_bind_mask+0xc0/0xc0 [ 1805.407123][ T1152] ? __kthread_bind_mask+0xc0/0xc0 [ 1805.412251][ T1152] ret_from_fork+0x1f/0x30 [ 1805.417651][ T1152] Kernel Offset: disabled [ 1805.422055][ T1152] Rebooting in 86400 seconds..