932ce6b93219920e7f31d8276784ce3f05a18c2a00dd3e201d501d92ff8f43259c25152cd469e7458a9a50f896c36926d565dcd238921eaa17f09798a72c1ea2dd68d540d6118872cb4d45856f77095ebbf4a86bad5d3193e33c9c190c186b316d4e05f2cf22d820588773e2c70b0345b9743b20e084c82d65b9e0d1c7e80e3b04a74653ef00d1c0083bc6199e", 0xb1}, {&(0x7f0000001980)="4e5954440884df6381d1beabb0bfd1290b6854c8658239c717d61eea2463cb3360b67efb8107ca158f30046e3957e9b7da220347a384fdfcd14aebe326f850b330f623ad4d37af168bbfe8e2aedb0f285780ceb40545f9cf190f46744ff5ddebe4d98eb9f98752f468f0b5fd7b05a12e610957d320cb902e29d308c1e42221491ab4e3c3cee9fa03d147792d59c021dfeabe2fd232c821c3b50d09194c38e08b53656f1e2196a4d5b35087f4d045aeb402d3b7df27d39ebed4e0cd037f30ddddf0cc43b6646c33241ce985efa711e3eebcb37aba392613f6c871f858c8bf1d55a27a40a9b9a88cc5d76eaf9c67a4", 0xee}, {&(0x7f0000001a80)="49b641182df5", 0x6}, {&(0x7f0000001ac0)="5bec35fe3b043ba1aef992f88295fe276fba37d66d7e6336d94a6a78bc2320fe3c8cf4e83a31a6ab", 0x28}, {&(0x7f0000001b00)="a485b8923a39f1f4afeca6fda6ea52a8e8faf9bee80a4bb208af3d0908d8fb4757906f0b176fc6587753f13e281ef648a790064d60bd772e4111656c7ac7b8301bc2699ca5ed9d64c637ac3d3fb454707a2eec30cf1d8f9c4a66239385cc03ac47865ecfc806a2f1680108d681c2a00107d459bd04d3419604c64bf462ea010ae180a471dfbfb56c70f8d93f8f44d8d55b1c0aeed0dbc490dbc1764f313b2259bb6103be86fe", 0xa6}, {&(0x7f0000001bc0)="007009d68675d0f67ab355f410ec747650e99049de7a9878463147e604f8e70ce5ba7ab8a71512a0ee176027664560d0ca1106e21beed337d80d2591c0021853a1186c10e2840a1b6b4d", 0x4a}], 0x7, &(0x7f0000001cc0)={0x98, 0x112, 0x9, "a89c0b9f5fbd1749a5601aa880ac9ddec17ec4de3f061c00fcf7f4a51b38c7cad670165fb39fb9d134c043b4e44f5cc8fc181799aad2310e84fe66a24b926c267a280a12d80b0c6e36ff6b1ccdc1422d3b69e2da40bb9012002ffa9762bb3a355c3a8fbd1c343e56e68501414696cc6f88aa4457a9bbab2d9a421b32fefa2f0fd7b11d5f18a6"}, 0x98, 0x300048c1}, {&(0x7f0000001d80)={0x27, 0x0, 0x0, 0x1, 0x62, 0x4, "cafa4cfacf226aad95563ba7bf1b1043b93bfb3e50ff5030c798381fe9d6c8abb776a167e71c368b0e85cde5bec242c272f5aceef3944033f63191e5b0c746", 0x3d}, 0x60, &(0x7f0000002080)=[{&(0x7f0000001e00)="f1dcedc6daacbb93d3115815e008c3b5bc22c15656874e449b4cefa383a43898faeed179e0f7cba60f870e8befd06f", 0x2f}, {&(0x7f0000001e40)="9248eec07fae16c01a8c69e5f27ccad824ddd79e374b2b1015980056713111c7dc5fe9d1c121751479ac84c1ecd6f73e4c0ee21e56344ea52680f05e96c30a491f9213c7191a506f198103a5ed34595a1df177b768", 0x55}, {&(0x7f0000001ec0)="d61d15c32d0c9a98937b470b0a6e4d3fa055b8d5e2f5991b6622b9b88e14805518336aa130559da84da9b1a37348b952de68394ae4df6a9ce78d9b5b3323b750ce10b96e73e14a9e92c126f1c35daddbfd056cc128a0d7c763c2ac23c8c1647242abad114c85d4ff20e01bfe2376b433ecb3498a33663b686b26973d6cf0957c4855a7cb3fffc03aba685f52f3ecdab91651fcedee7d3075c9d668f77565a4c3b23403546f499edd0ac04d17d0d9cca04811a4437288318e371753092bcc905a", 0xc0}, {&(0x7f0000001f80)="aa1a1befd679ab8574aad7abe8285e3e607019b1be65ba2167969f617c3179a87bb692f1300517e45334b5e7ee5ff8b4b0a14aa75aa6e78e2bdeb2c522a12706020c907fecc6436b9fc17a8f77cc4454152e49d95bdbc1b7b1ede4ae08cfb256e8cf795855569c7ef4484b31b5936e1af0a3729c3474bc325ce8cbf274fd0b027b6616de65ccf7654c79923c5d38502d5f9b91ac0db681082aa35d11652f0bb0b51c0553a510a122d3734dbc08409975df1c6f067a047bcd05e7ae4d7a7a", 0xbe}, {&(0x7f0000002040)="1e4e8b2902c0856237b8eb649eb2033d217ba67f56cbab188eef2b2bb96781c4", 0x20}], 0x5, &(0x7f0000002100)={0xa0, 0x119, 0x6, "e0e9bf12d93d2e5c9f4d82c00d7dc7c03588449a74036de2567e089049b204f98dc1e8d4da0cf8dd9d545841077ee904fe086701162d3c7314bb426fac32eb501fb51ee113b180c2aae50fb0fa443df6794ec8247620a03aa394a70ed9f472dfaf0b0df87fd668a3ca9ee2a2ebec8aa50fcd9bc5464011b6bac49378d263f928b5537442bec7b8a46339bad5"}, 0xa0}, {&(0x7f00000021c0)={0x27, 0x0, 0x0, 0x1, 0xc9, 0x7, "127b4d145a6b35294088fd8d1299f09cb2bbe7e093abb621bac7c95ab0e7f3a2d43bab3aa635b9185324b51f414ea0002be3b4187b0089eb72b79e1cb885ee", 0x1e}, 0x60, &(0x7f0000002800)=[{&(0x7f0000002240)="6f763cca28302528aa645dee01dcf7b549e1d2890e378dfb0c98ae3c4e3dba4ba536c1b0b3747f137801b06bd908edbb7481de2e4c4e358d28d39a46b345fca74b2ee238ff55faf5557e46a206497cb3b7d451f69e8523098e2ab28e8b82f7fddf89c7e585081d913aaca8afd852f69ed2da6a4fdfd76eb627146face24f4f128d7996d5b2034d2e0cdff8fe7671dc2c291834df2aa25dcf2ad4aff7bdbb478cef8b10855050eb346ffb5b0861a255b462fd3b5bdc32fc04bc802fac38", 0xbd}, {&(0x7f0000002300)="7047945c2057cf6243a44591040240af7af747f96c6511d0b00d030b775646bda3fc19a93643569bdd18d1ee8d0f5712070c4015fe37e62f7f92deefb76a1ceb954bc14c410aa1b7bd08cb78cfba48a760cd87a2f934e1db45b0b703ffa3ffcb29979ddac9a8ad6d177c9e2940ca0ac03253833c2a820a9f32c78cda6e998e4ff22d6c42cdff5272aea37a1a9d7ef014353a590df266d6be7b7c1c60ee98cb9c21cea0ddd6874536e3cb590f2ed805b70a5c50871a0d4db8063e198a05565b87e785de64dca1bf4390330c4c4936a791190b629bd3bb6b4f45391b6b1332b34bd95b03", 0xe3}, {&(0x7f0000002400)="c13ee2db5572a1a3caf78734c807fe9e190faa8f9c95abf64a638e57701a0ae73ff58393e8d376d62164cf5dd2396cedf294a983b5fb4cc995b981def070aebfd9548e77c5a76fb0111be63aed71dfba11064e8bd48cb41593a2883f474b0b00e8d6df3f03da46fb18e9ef7a9fd4c78e1efc23f3320b01cd475b405169395de1157487fbd171cbc9fdafb31c3a721674e254a2d194f14ef6e94c0ed354af1fdf9a859fbbb2ff910cb547d5e13626b72620c9901abcb25a1a3c5f8a7205823d188f8123d96a1d3de64e147df357af15648352ce9208a84ce924aaedcc0c04fb", 0xdf}, {&(0x7f0000002500)="b9b6aaf393f212cf08c6b42bb3112ee7162b7abf9146ddf2bffc4462f0ceb1c0ce8bdc21b590e56a1f2a51a20a23e94f69956ae1f599a1a9804e194d0f1c2f53bb523e74e8a2951d3ef9a64ff2789d6709f23fca22c6e8aede6632853db91cfe74a2822c6d28f5bed1b5bd1a120c8e04293d6f8363b63d00a6f7bf3dc1caef8002a994362f0acaf6a0c49b237e0704a5570eeb3b1808de893184d6bf2b97f161a16884360e427cc252884bd69e6fb1c5828a0749c81186a0acccc570b66c10c06c74bf2101", 0xc5}, {&(0x7f0000002600)="584ee853e7050e1a187eab6969adf84b92972e773059ddded15b938b6da3c29c2c1114feb61ff3d431dadd6ac03cb277ac1bce2157c3d19ace6cbb497256a957fe710836860639538d4690198c214205fd7508822a0584dc8b9145173e815a132d190936c9c78d2d3deaeccab9802c0739c007282a4f59cc1bc3a498bafa51ab05d1d6345b5dd43592d5dd44cb43297da21d5d83f0b2bb2e9a153e8901c95802b941010541a80961388f0d965e2073ce1ad53abdfad34b71e07eb011272daec5346ffebedbdad99a109e3f402d796e584e10dfa50abdfc88383fe162113a6daee604bd42ad1e2c9be55764d000a3fbfea0", 0xf1}, {&(0x7f0000002700)="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", 0xfa}], 0x6, &(0x7f0000002880)={0x78, 0x118, 0x1, "83d1f8f561ccb35e5d0b07247cec7daccb952d38dad4649ad7ff6f1a487609e077307f018be856ccc317fb587533fd455671f9430cc96c9cf1978df7b0f769563a75d7d577518b396de9e190911505d74c14baba5e98325a574451a6fa83e82b845faf494dfb05"}, 0x78, 0x8080}, {&(0x7f0000002900)={0x27, 0x1, 0x0, 0x5, 0x8, 0x0, "8ae412c866637f41c6c9b2c8df5e4770941a6dde472a35a3b17f485bd808d0afd47c56559279e310a74cd8731619fb25649f2d14512af2e93108346db86020", 0x32}, 0x60, &(0x7f0000002a40)=[{&(0x7f0000002980)="a1943ab03f78abe31a9ffc73dd00ea82186bb040c16aca94df6b0c3f39caaf795084dad6c01cb9010ccd81fda28e151dcba3052b54304bfde2f16cc47ca2ee1b57de53965c6b2dbdf2c3dbfd0f446359b3da49b559144821a4aaed5adaf93671ced5f8e0ad73dea768ab67f1f2cd2adf9eb5b992964ecd273a18d2d3179484340261a5d0ce5d374d46ede727393270ff820cc505", 0x94}], 0x1, &(0x7f0000002a80)={0x110, 0x193, 0x1, "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"}, 0x110, 0x80000}, {&(0x7f0000002bc0)={0x27, 0x0, 0x1, 0x1, 0x1a, 0x80, "729ddad483b8093a9998ca6e9a25f642e1ee102506e8849d7c41598253a64207134d20b6c5f27b9b0c609169f4f219c310088dfc7f97a6f729d1c2e38f2ee8", 0x30}, 0x60, &(0x7f0000002cc0)=[{&(0x7f0000002c40)="88cd45a18ee5d06986d5286b4511cf0206dbfbde72cb04d49fbf52deb39ef2484c5176724155be7dbbc737eb4181498ae673652e780cfbe019dde5feca496d3d07db10a67b635a48aa8d6a4dbb1b15278aaf5360", 0x54}], 0x1, 0x0, 0x0, 0x4840}, {&(0x7f0000002d00)={0x27, 0x1, 0x2, 0x4, 0x6, 0x0, "c40c185ad968bc2d8dfa34fab1ef817fcd0d4231fd9ccfbd69533b63b4bd791965c8d6f4270774158d93717e6dfa220fd82f271d1d6c6d00a5c5f4443fa380", 0x29}, 0x60, &(0x7f0000002f80)=[{&(0x7f0000002d80)="c8eb45a5fdd6a078235ded9f2d948de428759b6ec0c44aabe84a205d3eb083eff87299a617bcbe064017bf518ff3514b7ae94e7ffdcd728ddfbf1297aff93c442e2d48d120c8d76cd228dcea", 0x4c}, {&(0x7f0000002e00)="5db2ba0f61940e0c578d99545765c163060267f6d9c02973b9971adb9e0afe99faa465e4efdeb8a11967e2b832af6c232ac87ca908c5594d290b761a571aac177d900d9ef87638ed5dd674221ae0d6bfac8f6c2a20db0e", 0x57}, {&(0x7f0000002e80)="5ca88e8471975ce1c94ea0d52b628d340161637a5296f55778c84c4705a6c32a32704ca488f98f202fd252e261c0483d54c1ac243bad0b61865d9949df685d6a1997af3d6a25bff896c89d8ea0ebb3f226dbdb9efa00036c7bbd9fd3c5aa0553e03f7bebff1ca726df0debf63c06126942118747fafa7d3607c191719d57ceebfb760effeec046c3c15de1a5fca7ba73beb0bf408c6e0c2bd23b227787b35a007d9ae71a670376dec6f7b76b46be194dc03902f02e3ff4d9f41491b53a51136adbb90a1d573cfe1362f960ceb34237caa0a7d81ea2a590247628c77f0ca08e", 0xdf}], 0x3, &(0x7f0000002fc0)={0x78, 0x88, 0xb1, "e833f974fdf08085f1294d931379f454aab962ab14e26cbe8a5d9ed7b97c964d50e2725c1770c56fb218a56bb0c20603a36e89151b3f48781cdf639580a35ced800a1e73dcfeb7f14414a447ba81a64398026466778b8eb86138275d3bed253fd6aad3fb62073e"}, 0x78, 0x800}], 0x8, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYBLOB="b190d640499cab81dfac3957218457c195753a59d35ae9695c1b9640bec561fa7c40ba7e3c8be832d04fadff67c9a329ebac1d12ad275ed9bb3b079c467662425d92b3b05c033f37c06705c860de64d274acd4a984c3b76fc1c2aedaaa45e5f710acd2dfd19691f5d4de352706eb8924d27338029189b67114fcbcef0609"], 0x28}}, 0x0) 15:17:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x3100, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:17:21 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0xff4d) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e000100697036677265746170"], 0x48}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='memory.current\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0x1000, 0x4) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="041074ff", @ANYRES16=r2, @ANYBLOB="000329bd7000fbdbdf251300000008001a01010000000c004300fbffffffffff00000c0013005c22af17190000000800190003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x22004010}, 0x20085) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="34010000", @ANYRES16=r2, @ANYBLOB="000225bd7000fedbdf25100000000f0034001600000000000000e1ff000008007e00010000000500d50000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x60000040) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev={[], 0x1e}}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40084) [ 1157.432510][T25075] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1157.556185][T25092] IPVS: ftp: loaded support on port[0] = 21 [ 1157.692732][ T28] audit: type=1804 audit(1596640641.992:1116): pid=25097 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/862/cgroup.controllers" dev="sda1" ino=16378 res=1 15:17:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1158.101449][T25120] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 15:17:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x3200, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:17:22 executing program 3: r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000000, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x90}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r3, 0xdaa3b002485c5b6d, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) recvmsg(r2, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r4, 0x20, 0x70bd28, 0x25dfdbf8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4bd}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x24000041) [ 1158.265690][T25122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 15:17:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1158.589894][ T28] audit: type=1804 audit(1596640642.892:1117): pid=25166 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/863/cgroup.controllers" dev="sda1" ino=16372 res=1 15:17:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x3300, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1158.970938][T25185] IPVS: ftp: loaded support on port[0] = 21 15:17:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "94035459a2acc366", "db0b91492529a1915c07305e7c28f282", "8375ba2c", "7d751f7d7c536f7a"}, 0x28) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000600)=0x10001805, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860345cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 1159.205478][ T28] audit: type=1804 audit(1596640643.502:1118): pid=25190 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/864/cgroup.controllers" dev="sda1" ino=16372 res=1 15:17:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x3400, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1159.808157][T25178] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1159.883513][ T28] audit: type=1804 audit(1596640644.182:1119): pid=25204 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/865/cgroup.controllers" dev="sda1" ino=16368 res=1 15:17:24 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e5", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:17:24 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3f000000) 15:17:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:24 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x20000000) [ 1160.407522][T25221] __nla_validate_parse: 5 callbacks suppressed [ 1160.407534][T25221] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 15:17:26 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0xff4d) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e000100697036677265746170"], 0x48}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='memory.current\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0x1000, 0x4) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="041074ff", @ANYRES16=r2, @ANYBLOB="000329bd7000fbdbdf251300000008001a01010000000c004300fbffffffffff00000c0013005c22af17190000000800190003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x22004010}, 0x20085) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="34010000", @ANYRES16=r2, @ANYBLOB="000225bd7000fedbdf25100000000f0034001600000000000000e1ff000008007e00010000000500d50000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x60000040) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev={[], 0x1e}}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40084) 15:17:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x3500, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:17:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:26 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e488", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:17:26 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x800e0000) 15:17:26 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e5", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1162.706266][ T7] tipc: TX() has been purged, node left! [ 1162.709191][T25299] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 15:17:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x3600, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1162.867741][T25349] IPVS: ftp: loaded support on port[0] = 21 15:17:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1162.971461][ T28] audit: type=1804 audit(1596640647.272:1120): pid=25354 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/867/cgroup.controllers" dev="sda1" ino=16380 res=1 [ 1163.228680][T25358] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 15:17:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1163.414321][T25351] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1163.439396][T25351] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1163.715555][ T28] audit: type=1804 audit(1596640648.012:1121): pid=25354 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/867/cgroup.controllers" dev="sda1" ino=16380 res=1 15:17:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x3700, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1163.927802][ T28] audit: type=1804 audit(1596640648.232:1122): pid=25420 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/868/cgroup.controllers" dev="sda1" ino=16380 res=1 15:17:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x3800, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1164.588219][T25413] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1164.624738][T25397] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1164.652839][ T28] audit: type=1804 audit(1596640648.952:1123): pid=25433 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/869/cgroup.controllers" dev="sda1" ino=16380 res=1 15:17:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1164.837524][T25445] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1165.395515][ T28] audit: type=1804 audit(1596640649.692:1124): pid=25429 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/869/cgroup.controllers" dev="sda1" ino=16380 res=1 15:17:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x100b000000000000) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00', 0x0, 0xeb7f627bbec0a774}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000380)={0xffffffffffffffff, r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000200000014abefc1a2fc0f"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 15:17:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x3900, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:17:31 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x100000000000000) 15:17:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0xffffff7f, &(0x7f00000001c0)={&(0x7f00000005c0)={0x30, r1, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}]}, 0x30}, 0x1, 0x6c}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x100b000000000000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003c40)={'ip6_vti0\x00', &(0x7f0000003bc0)={'syztnl0\x00', r4, 0x4, 0x2, 0x6, 0x3, 0x6, @private2, @mcast1, 0x700, 0x7, 0x5b4, 0x9}}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="000000ffffffff000000000b000100686673630000000008000200"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000003e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003c80)=ANY=[@ANYBLOB="04010000", @ANYRES16=0x0, @ANYBLOB="ab0228bd7000fcdbdf250b0000001c000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1800018014000200766972745f776966693000000000000028000180140002006261746164763000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="48000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000000800030002000000080003000100000008000100", @ANYRES32=r5, @ANYBLOB="14000200766c616e3100000000000000000000004c000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006261746164765f736c6176655f31000014000200636169663000"/40], 0x104}, 0x1, 0x0, 0x0, 0x84}, 0x4004) 15:17:31 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e488", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:17:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1167.049744][T25505] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1167.101561][T25507] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1167.124963][ T28] audit: type=1804 audit(1596640651.422:1125): pid=25508 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/870/cgroup.controllers" dev="sda1" ino=16365 res=1 [ 1167.334889][T25513] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1167.371244][T25544] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:17:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x3a00, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1167.695002][ T28] audit: type=1804 audit(1596640651.992:1126): pid=25578 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/871/cgroup.controllers" dev="sda1" ino=15842 res=1 [ 1167.732234][T25544] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1167.746483][T25573] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1167.811231][T25574] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1167.914275][T25560] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:17:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:32 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x3b00, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1168.406448][ T28] audit: type=1804 audit(1596640652.712:1127): pid=25630 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/872/cgroup.controllers" dev="sda1" ino=15842 res=1 15:17:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x3c00, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1168.808734][ T28] audit: type=1804 audit(1596640653.112:1128): pid=25638 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/873/cgroup.controllers" dev="sda1" ino=15875 res=1 [ 1168.885516][T25625] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 15:17:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg$can_raw(r6, &(0x7f00000005c0)={&(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/108, 0x6c}, {&(0x7f00000004c0)=""/109, 0x6d}], 0x3, &(0x7f0000000580)=""/43, 0x2b}, 0x41) close(r7) bind$inet(r7, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r7, 0x0, 0x19404, 0x100b000000000000) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newtfilter={0x24, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xd, &(0x7f0000000100)}], 0x492492492492642, 0x0) 15:17:33 executing program 2: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000023c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getpeername(r2, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x34, 0xf, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x40001) ioctl$FICLONE(r1, 0x40049409, r2) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000200)={0x0, 0xf004, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="95c40000000000000000010001590000000009410000004c00180000006062726f6164636173742d6c696e6b0000000000000000000000000000000000000000000000000000000046244fdc38d0c5d367a9310000000064739df59a0049d201f4c1b40198b600"/113], 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x81}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48090}, 0x1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000024c0)={&(0x7f0000002400), 0xc, &(0x7f0000002480)={&(0x7f0000002440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002bbd7000fb01000000000000000941000000140018ebcf506c69623a7866726d3000003f00000000"], 0x30}, 0x1, 0x0, 0x0, 0x4008800}, 0x2000c000) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="699dad2ad43b1887a5a7369e36e9bfb510de5dc179c842a0fde1ec866b2a433750b2203c4b", @ANYRES16=r6, @ANYBLOB="95c4000000000000000001000159000000000941000000140018000000607564703a73797a3200000000"], 0x30}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x3801000000000000, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x2, 0x3, 0x268, 0xd0, 0x0, 0xd0, 0xd0, 0x0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38, 'time\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'rose0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000000)={0x0, 'vlan1\x00', {}, 0x2}) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x100b000000000000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000380)={0x0, 'syz_tun\x00', {}, 0x1}) 15:17:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:33 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x200000000000000) 15:17:33 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e488", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1169.059361][T25646] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1169.160533][T25647] xt_time: unknown flags 0x4 15:17:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0xa, 0xa, 0x101}, 0x1c}, 0x1, 0x0, 0x0, 0xdae9756ca6237238}, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x5, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4801) [ 1169.247348][T25654] xt_time: unknown flags 0x4 15:17:33 executing program 2: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000023c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getpeername(r2, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x34, 0xf, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x40001) ioctl$FICLONE(r1, 0x40049409, r2) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000200)={0x0, 0xf004, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="95c40000000000000000010001590000000009410000004c00180000006062726f6164636173742d6c696e6b0000000000000000000000000000000000000000000000000000000046244fdc38d0c5d367a9310000000064739df59a0049d201f4c1b40198b600"/113], 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x81}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48090}, 0x1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000024c0)={&(0x7f0000002400), 0xc, &(0x7f0000002480)={&(0x7f0000002440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002bbd7000fb01000000000000000941000000140018ebcf506c69623a7866726d3000003f00000000"], 0x30}, 0x1, 0x0, 0x0, 0x4008800}, 0x2000c000) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="699dad2ad43b1887a5a7369e36e9bfb510de5dc179c842a0fde1ec866b2a433750b2203c4b", @ANYRES16=r6, @ANYBLOB="95c4000000000000000001000159000000000941000000140018000000607564703a73797a3200000000"], 0x30}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x3801000000000000, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x2, 0x3, 0x268, 0xd0, 0x0, 0xd0, 0xd0, 0x0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38, 'time\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'rose0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000000)={0x0, 'vlan1\x00', {}, 0x2}) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x100b000000000000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000380)={0x0, 'syz_tun\x00', {}, 0x1}) 15:17:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x3d00, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:17:33 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket(0x2, 0x800000003, 0xfffffff9) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) readv(r4, &(0x7f0000001780)=[{&(0x7f0000000100)=""/81, 0x51}, {&(0x7f0000001200)=""/131, 0x83}, {&(0x7f0000001380)=""/221, 0xdd}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000001480)=""/201, 0xc9}, {&(0x7f0000001580)=""/95, 0x5f}, {&(0x7f0000001600)=""/72, 0x48}, {&(0x7f0000001680)=""/253, 0xfd}], 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000001340)={0x0, 0x1, [], [@generic, @enc_lim={0x4, 0x1, 0x3}, @jumbo, @enc_lim]}, 0x18) [ 1169.460997][T25717] xt_time: unknown flags 0x4 [ 1169.687210][ T28] audit: type=1804 audit(1596640653.992:1129): pid=25754 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/874/cgroup.controllers" dev="sda1" ino=16098 res=1 15:17:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_LABELS_MASK={0x14, 0x17, [0x7, 0x9, 0x80000000, 0x1]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000087}, 0x40000) pipe(&(0x7f0000008900)={0xffffffffffffffff}) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000008a00)={&(0x7f0000008940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000089c0)={&(0x7f0000008980)={0x40, 0x7, 0x6, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x28040) clock_gettime(0x0, &(0x7f0000008a40)={0x0, 0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000008a80)={r2, r3/1000+60000}, 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000008ac0), 0x8) sendmsg$AUDIT_TTY_SET(r4, &(0x7f0000008bc0)={&(0x7f0000008b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000008b80)={&(0x7f0000008b40)={0x18, 0x3f9, 0x10, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000005}, 0x20008001) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000008d40)={&(0x7f0000008c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000008d00)={&(0x7f0000008c40)={0xbc, 0x0, 0x7, 0xd7bbe5294b668c69, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFACCT_QUOTA={0xc}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x20}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x69d}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffb8fd}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf4}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7fffffff}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x40}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x5000) socketpair(0x15, 0x800, 0x2, &(0x7f0000008d80)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000008dc0)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000011dc0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000011b40)=[{{0x0, 0x0, &(0x7f00000090c0)=[{&(0x7f0000008e00)=""/62, 0x3e}, {&(0x7f0000008e40)=""/167, 0xa7}, {&(0x7f0000008f00)=""/189, 0xbd}, {&(0x7f0000008fc0)=""/191, 0xbf}, {&(0x7f0000009080)=""/23, 0x17}], 0x5, &(0x7f0000009140)=""/240, 0xf0}, 0x2}, {{&(0x7f0000009240)=@tipc=@id, 0x80, &(0x7f000000a6c0)=[{&(0x7f00000092c0)=""/188, 0xbc}, {&(0x7f0000009380)=""/4096, 0x1000}, {&(0x7f000000a380)=""/47, 0x2f}, {&(0x7f000000a3c0)=""/164, 0xa4}, {&(0x7f000000a480)=""/64, 0x40}, {&(0x7f000000a4c0)=""/48, 0x30}, {&(0x7f000000a500)=""/214, 0xd6}, {&(0x7f000000a600)=""/192, 0xc0}], 0x8, &(0x7f000000a740)=""/27, 0x1b}, 0x4}, {{&(0x7f000000a780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f000000ac40)=[{&(0x7f000000a800)=""/135, 0x87}, {0xfffffffffffffffd}, {&(0x7f000000a8c0)=""/142, 0x8e}, {&(0x7f000000a980)=""/10, 0xa}, {&(0x7f000000a9c0)=""/203, 0xcb}, {&(0x7f000000aac0)=""/96, 0x60}, {&(0x7f000000ab40)=""/214, 0xd6}], 0x7}, 0x3}, {{0x0, 0x0, &(0x7f000000ad00)=[{&(0x7f000000acc0)=""/1, 0x1}], 0x1, &(0x7f000000ad40)=""/10, 0xa}, 0x732b}, {{&(0x7f000000ad80)=@sco={0x1f, @fixed}, 0x80, &(0x7f000000c300)=[{&(0x7f000000ae00)}, {&(0x7f000000ae40)=""/4096, 0x1000}, {&(0x7f000000be40)=""/102, 0x66}, {&(0x7f000000bec0)=""/145, 0x91}, {&(0x7f000000bf80)=""/241, 0xf1}, {&(0x7f000000c080)=""/107, 0x6b}, {&(0x7f000000c100)=""/78, 0x4e}, {&(0x7f000000c180)=""/211, 0xd3}, {&(0x7f000000c280)=""/89, 0x59}], 0x9, &(0x7f000000c3c0)=""/30, 0x1e}}, {{&(0x7f000000c400)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f000000cac0)=[{&(0x7f000000c480)=""/100, 0x64}, {&(0x7f000000c500)=""/100, 0x64}, {&(0x7f000000c580)=""/205, 0xcd}, {&(0x7f000000c680)=""/237, 0xed}, {&(0x7f000000c780)=""/213, 0xd5}, {&(0x7f000000c880)=""/126, 0x7e}, {&(0x7f000000c900)=""/189, 0xbd}, {&(0x7f000000c9c0)=""/33, 0x21}, {&(0x7f000000ca00)=""/123, 0x7b}, {&(0x7f000000ca80)=""/20, 0x14}], 0xa}, 0x7}, {{0x0, 0x0, &(0x7f000000df80)=[{&(0x7f000000cb80)=""/14, 0xe}, {&(0x7f000000cbc0)=""/241, 0xf1}, {&(0x7f000000ccc0)}, {&(0x7f000000cd00)=""/52, 0x34}, {&(0x7f000000cd40)=""/4096, 0x1000}, {&(0x7f000000dd40)=""/200, 0xc8}, {&(0x7f000000de40)=""/128, 0x80}, {&(0x7f000000dec0)=""/166, 0xa6}], 0x8}, 0x80}, {{&(0x7f000000e000)=@nl=@unspec, 0x80, &(0x7f0000010400)=[{&(0x7f000000e080)=""/4096, 0x1000}, {&(0x7f000000f080)=""/4096, 0x1000}, {&(0x7f0000010080)=""/153, 0x99}, {&(0x7f0000010140)=""/168, 0xa8}, {&(0x7f0000010200)=""/97, 0x61}, {&(0x7f0000010280)=""/69, 0x45}, {&(0x7f0000010300)=""/254, 0xfe}], 0x7, &(0x7f0000010480)=""/167, 0xa7}, 0x8}, {{&(0x7f0000010540)=@isdn, 0x80, &(0x7f0000011680)=[{&(0x7f00000105c0)=""/4096, 0x1000}, {&(0x7f00000115c0)=""/136, 0x88}], 0x2, &(0x7f00000116c0)=""/220, 0xdc}, 0x1}, {{&(0x7f00000117c0)=@tipc=@name, 0x80, &(0x7f0000011a00)=[{&(0x7f0000011840)=""/164, 0xa4}, {&(0x7f0000011900)=""/237, 0xed}], 0x2, &(0x7f0000011a40)=""/238, 0xee}, 0x40}], 0xa, 0x0, &(0x7f0000011e00)={r6, r7+60000000}) sendmsg$AUDIT_TTY_GET(r8, &(0x7f0000011f00)={&(0x7f0000011e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000011ec0)={&(0x7f0000011e80)={0x10, 0x3f8, 0x400, 0x70bd2d, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) socketpair(0x0, 0x4, 0x2, &(0x7f0000011f40)={0xffffffffffffffff}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000011fc0)='ethtool\x00') sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r9, &(0x7f0000012400)={&(0x7f0000011f80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000123c0)={&(0x7f0000012000)={0x3bc, r10, 0x400, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd1, 0x4, "4c40d8f47133fb10dbbf8279959ecb5e6f96046197140eeb293375aa273dcbf411d2a71d5acee294f345b0410513ee2635481f9e6b5622b76da1ae3b484ede84bba0c0e92423a92977ec6b3f673489fca7f97391626449f7b90d3ee624440b303507c02bea7b012c424e18f4b50eaf93a6fd798d9aca5a3857f9d61e785ea159f4ad21e30dcb71aec60d7e34a34e368029a49a2785dfdef14caa2ddbd9044d717946c35d0f0bcac2696caa8625045b1dc0123b5a48171280f8babd1fefbfc3c1bda8f48217f47b7e5ff677d5c9"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x168, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4d, 0x5, "15b6d66b51e0e7af76aa6e5369417713def3f0dfd4e0825b9209aac09c6140fa418587250504fb6ae1be983ac18a43e438339f36459aa39b46b97f90a0f9efb71fbe405c9910b56635"}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-R\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc25}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_MASK={0x6d, 0x5, "ae849eef15512f44f88a570e51dfa835d678f16ee13fa625668b4b4aa876b32570d59233c3d72ac6924fd90402428070fd6642ae10998bc94d2364c72d287531dc37c2eb4f7aad6f014881b88e5eb6af7360e08a8443a067a02bcc3a98fe1d4af994c6951113fd23e8"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x114, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0xfc, 0x5, "7b8ed94f6265dd5da4781b0eb8c346e883b3a20ffa8ec7a4cf35623b574a76d81e1769795ac151d52e92884b8f2f21622c6b6f7a71e9fbdb0bc309403dd24235f210850142fa955c1908c46c65c80f5e1f93e8aebf59162d569d52d3d46f3ef6c96c7d6935ff9e89d511b07c3edf5b856a827696150d11e25dac95d9ed5183e96521da66ec84fafd3d90ed26066fce417f4b6418e0468d1eed06a5fc7c5794f45f388ac7fe02a4158c1ac541c73afaee0fbb0a6d444d76f10d29ce7549f0a31ca8e38491043acf43301d7c9b45ae103bddc5655d22f0cb7795a4490991e383b9be6c1dbb248a9d917d6340102c37b92eb32b932f1b05581e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3f}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000012440)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000012480)={0xffffffffffffffff, 0x3, 0x5, 0x317}) recvmsg$kcm(r11, &(0x7f0000012700)={0x0, 0x0, &(0x7f0000012680)=[{&(0x7f00000124c0)=""/136, 0x88}, {&(0x7f0000012580)=""/84, 0x54}, {&(0x7f0000012600)=""/93, 0x5d}], 0x3, &(0x7f00000126c0)=""/40, 0x28}, 0x2) 15:17:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1169.779030][ T28] audit: type=1804 audit(1596640654.022:1130): pid=25762 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir168958197/syzkaller.Pldjsa/1783/memory.events" dev="sda1" ino=15938 res=1 [ 1169.937133][ T28] audit: type=1800 audit(1596640654.022:1131): pid=25762 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=15938 res=0 15:17:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x3e00, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:17:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1170.338672][ T28] audit: type=1804 audit(1596640654.642:1132): pid=25762 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir168958197/syzkaller.Pldjsa/1783/cgroup.controllers" dev="sda1" ino=16114 res=1 [ 1170.381175][ T28] audit: type=1804 audit(1596640654.672:1133): pid=25750 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir168958197/syzkaller.Pldjsa/1783/cgroup.controllers" dev="sda1" ino=16114 res=1 [ 1170.456663][ T28] audit: type=1804 audit(1596640654.672:1134): pid=25778 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/875/cgroup.controllers" dev="sda1" ino=16018 res=1 15:17:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x3f00, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:17:35 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x1000000000000000) 15:17:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c9", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:35 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e48869873fd9", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1170.968248][ T28] audit: type=1804 audit(1596640655.272:1135): pid=25857 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/876/cgroup.controllers" dev="sda1" ino=16018 res=1 15:17:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000040601020000090e3306268000000b000500010007"], 0x1}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB], 0xe8}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, &(0x7f0000000140)) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) splice(0xffffffffffffffff, 0x0, r4, &(0x7f0000000200), 0x4, 0x7) sendfile(r2, r1, 0x0, 0x100003000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x37cb1133) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x4, 0x2, [0x0, 0x1f]}, &(0x7f0000000180)=0xc) 15:17:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c9", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1171.318432][ T28] audit: type=1804 audit(1596640655.622:1136): pid=25955 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir132604636/syzkaller.E3turL/965/cgroup.controllers" dev="sda1" ino=16082 res=1 15:17:35 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x9}]}) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/249, 0xf9}, {&(0x7f00000003c0)=""/202, 0xca}, {&(0x7f00000004c0)=""/199, 0xc7}], 0x3, &(0x7f0000000600)=""/113, 0x71}, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000580)=ANY=[]}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000016c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001680)={&(0x7f0000000700)={0xf80, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b='\xb0\x80s\xe8\xd4N\x91\xe3\xda\x92,\"C\x82D\xbb\x88\\i\xe2i\xc8\xe9\xd85\xb1\x14):M\xdcn'}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PEERS={0xf30, 0x8, 0x0, 0x1, [{0x204, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_ALLOWEDIPS={0x184, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @private2={0xfc, 0x2, [], 0x1}, 0x8}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "47260e7015c4ac37d6c870eb243b176ec8ea5b65b8f105de0287ed4e070f67ee"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff}]}, {0xd0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7fff, @dev={0xfe, 0x80, [], 0x44}, 0x1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "35fdaf426b69c85f1884918cdc823b132e4bc4057a5d7b687f7646031ef8a1a6"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x80c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x390, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x7}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x34}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x9}}, {0x5}}]}, {0x4}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x10}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x7d}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x3c4, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @empty}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x2e}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "70f7b47aa0f4932fcd5dccd0c20a45064ce6c90fdd4dfd36047afc12ad4c1427"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1b0a}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x9, @local, 0x9}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x37cb1133) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x4, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 15:17:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c9", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1171.703200][T25995] IPVS: ftp: loaded support on port[0] = 21 15:17:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x4000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:17:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f00000002c0)="fc0000001c0007e589477206b86807000aab087a05000000b8485393210001c0f0040000050000010000000000039815fa2c1ec28648000000b9d95662537a00bc000c00f0036cdf0db40060001bd44000fd5ab29d3ef3d92c94170e5bba2e177312e08131493bc8bea05d3a021e8ca062914a463ae4f5df77bc4cfd6239ec2a0f0d1bcae5f5502943283f4baa475bb6b102b2b8f5566791cf190201ded815b2ccd243f3956d94e0ad91bd0733802e079d216984f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000080548deac279cc4848e3825924509260e13429fbe11017d96d70a4727572cfb1d00"/252, 0xfc) 15:17:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x7901, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1172.552163][T26006] __nla_validate_parse: 18 callbacks suppressed [ 1172.552183][T26006] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 15:17:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x7a01, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1172.868541][T26001] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1172.929885][T26055] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 15:17:37 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x2000000000000000) 15:17:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102e", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f00000002c0)="fc0000001c0007e589477206b86807000aab087a05000000b8485393210001c0f0040000050000010000000000039815fa2c1ec28648000000b9d95662537a00bc000c00f0036cdf0db40060001bd44000fd5ab29d3ef3d92c94170e5bba2e177312e08131493bc8bea05d3a021e8ca062914a463ae4f5df77bc4cfd6239ec2a0f0d1bcae5f5502943283f4baa475bb6b102b2b8f5566791cf190201ded815b2ccd243f3956d94e0ad91bd0733802e079d216984f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000080548deac279cc4848e3825924509260e13429fbe11017d96d70a4727572cfb1d00"/252, 0xfc) [ 1173.065905][T26083] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1173.175108][T26087] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 15:17:37 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e48869873fd9", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:17:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102e", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x8400, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1173.475247][T26123] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 1173.487597][T26144] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1173.564910][T26147] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1173.692887][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1173.692907][ T28] audit: type=1804 audit(1596640657.992:1143): pid=26187 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/880/cgroup.controllers" dev="sda1" ino=15812 res=1 15:17:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102e", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:39 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x1000000000000000) 15:17:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x8800, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:17:39 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e48869873fd9", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:17:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x4000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:17:39 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3f00000000000000) [ 1175.602939][ T28] audit: type=1804 audit(1596640659.902:1144): pid=26211 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/881/cgroup.controllers" dev="sda1" ino=16290 res=1 [ 1175.682277][T26212] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1175.713041][ T28] audit: type=1804 audit(1596640660.002:1145): pid=26213 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir168958197/syzkaller.Pldjsa/1786/cgroup.controllers" dev="sda1" ino=16322 res=1 [ 1175.846686][T26219] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 15:17:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef8", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xe703, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1176.171242][T26269] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1176.229089][T26270] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 15:17:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef8", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1176.366287][ T28] audit: type=1804 audit(1596640660.672:1146): pid=26311 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/882/cgroup.controllers" dev="sda1" ino=16290 res=1 15:17:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002440)={&(0x7f0000001f40)={0x4f8, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x180, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xb9, 0x5, "2c2cebf3d186a0cd79eb784584451440f7ded869857a9e4ae80b2125e51ea70bfb1e862dc2ce158b433d6cafb7bca05ef2a9dea5928ec2338b8ef9a59e92268c84d3a9238689e1018c3b15e95e30593289eeecd7a5c041cc46fe9988b35b302fa3d1010aefcabee561fa30f55d84de0e7b46d8dcef85c32208e52223b9b01ccb58e9dc0c27174aeb91e0e4bc39192784da0b1a4671145e28bba115e07d1656e8ac177ab7f092289902db6de811d84cd17103ea8227"}, @ETHTOOL_A_BITSET_MASK={0xb6, 0x5, "57d8d9fdfb9c2abbadac8ff564f15e4891ca45e1a827953465802ab286ec963279378f6811c9806b132113d6bf74080ee1f827cfad251fb694e1881eaa25203d026917a1f6fd930fadbed5c2ecebbcb713b2eb309a9ddedc5fa58b4998c513d77ac5046f1233ef4a4e60a9edc9dc939acbd3fdcbce696cfd357125ff3a1cb0a3e6e6d1785ef701617c6a571690ee7432d8bac6c511d39571d78f2266b8a94dea48846e87ec8c8af05d57f0f1c7a656e41e5f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x254, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x6e, 0x5, "6784c91ee783062f0616de29577b5447a028e57e14f71660b6aced4e703cc3ecf527d88132cbb72543d0ed057e4941763ffb0c72892ff93a82350ac425e4a3570e4ff0c2fc0999f4728ca47285d2e64c2380977d815bc2c59eee305e6deb3ae856286c0f6f1d9cfca87c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10000}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe4, 0x5, "d851cc42d10d54088d14ce18c745423ebeb479d221d9899c7b4dba525a551b5e31742dad757e086f8ae8b8ddc3b291598d1c72c899ec80adb72051935d364f884af7eb0134a3cda5cfc1cb8428600dc87adb3c727cf23dbf88435e2ff0e0a421936e8e99ae7fca64f475d7f63adad2c77bca3c07b15ab5cb77351de5b50d5fa13c1d5328e089d3e70ff9138c527311ffd5a4a905b6dc4efd6b26b1c77fa0322c4914dd4681fa2ab0c39be81a4d79ca50adf62b1d34211b42812ec6ca58eb292930e0bae9d2a02b7b33fed5b4e404efbb182b3dc03eddbcc2594a97e269133ba6"}, @ETHTOOL_A_BITSET_MASK={0x4b, 0x5, "f7552ec73cca372abfb1dd259260c328e4815fbf69e39a0a40d05ae4af1b0b2859c2ddd6f18e90d5c79238b02bca3d6e380fb63aa3c47db8a38bd088fa5a7b496ebe02fb776cd9"}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_MASK={0x87, 0x5, "578c8ab30e8df73236dc538d978d70141dc5db2cc76c0d1ad1191e2dcfa7c8b5f47b9b5872fdabe16e15b3541ec5bf176d6c924fc708d51ac7b301e95a1c20d2bd038722eecc87d88b35647a50291c41e743d88f6b6f168a71c0d5fa49187f28ee1c74ce8264330d841a0d1a8bd9e1f3d0ae6f0d9d8bb4796b8e91515990ed8d788fc1"}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x4f8}}, 0x0) 15:17:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xf400, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1176.927872][ T28] audit: type=1804 audit(1596640661.232:1147): pid=26325 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/883/cgroup.controllers" dev="sda1" ino=16290 res=1 15:17:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xff0f, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1177.292744][ T28] audit: type=1804 audit(1596640661.592:1148): pid=26332 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/884/cgroup.controllers" dev="sda1" ino=16290 res=1 [ 1177.652710][T26313] __nla_validate_parse: 1 callbacks suppressed [ 1177.652723][T26313] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1177.684309][T26315] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 15:17:42 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e48869873fd9ffe8", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:17:42 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x37cb1133) r1 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000040)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x3, 0x81}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200), 0x4) sendto(r2, &(0x7f00000000c0)="a5", 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000002c0)="96", 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) close(r2) 15:17:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef8", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@iv={0x28, 0x117, 0x2, 0xd, "bf0da9c0835ffa903d71e7c1c9"}], 0x28}, 0x40010) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0xff08) recvmmsg(r1, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/194, 0xff18}], 0x1}}], 0x1, 0x0, 0x0) 15:17:42 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x800e000000000000) [ 1177.913154][T26362] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 15:17:42 executing program 3: unshare(0x6c060000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e21, @private=0xa010100}, {0x6, @local}, 0x2, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}, 'ip_vti0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, 0x0, 0x24040051) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000000c0)={r3, 0xfffffffffffffffe, 0xffffffff, 0x8c}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000780)={0x0, 0x2e, &(0x7f0000000740)={&(0x7f00000003c0)={0x28, r7, 0x703, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x200, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40c00}, 0x4000) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r9 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r8, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x3c}, 0x1, 0x6000000000020000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}}, 0x0) [ 1178.057812][T26392] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 15:17:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[@ANYBLOB="befc54b082f9eb9a22ff8f410651137c1e3120549ced03236f16d9b3de59a1fa069e41055d3830036bd36d2925fd68b72324af6a61395b02959b7820c2a40333c23e8de3b213d3bf8e115799ec2651d3cf9f18be5ba54b4a1b755007b5bd58110521e89d63079af0c2f6b77643a9c0f82e78c21bd96060dd51347a9b659b99557469a65a14c7f28dd56c626e11f5d840fc4bec654bd530a748427e40d7709e24878e9be72336bbb5d939513bf7a01f1fb012ae3c884d337d95cf3f81af8924f27e44ed47f5eafe57e3d833749b", @ANYRES64, @ANYBLOB="16e5c4b5a2874ce2a7fa8497671e490006616a218c541aba7f9da44aab129f4ebf20ce987bce4479bbf2a82cf9bba247e240dc0c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10010, 0xffffffffffffffff, 0x98a6f000) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) r1 = socket(0x2, 0x800000003, 0xfffffff9) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r2}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x38}}, 0x8005) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x41c, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7fff}}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 15:17:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x20000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1178.167222][T26416] IPVS: ftp: loaded support on port[0] = 21 15:17:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1178.366374][ T28] audit: type=1804 audit(1596640662.672:1149): pid=26424 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/885/cgroup.controllers" dev="sda1" ino=16359 res=1 [ 1178.469045][T26429] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1178.611632][T26437] 8021q: adding VLAN 0 to HW filter on device bond106 [ 1178.679964][T26437] bond0: (slave bond106): Enslaving as an active interface with an up link 15:17:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x2da00, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1178.953306][T26418] IPVS: ftp: loaded support on port[0] = 21 [ 1179.055894][ T28] audit: type=1800 audit(1596640663.362:1150): pid=26419 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=16179 res=0 [ 1179.153027][ T28] audit: type=1804 audit(1596640663.452:1151): pid=26491 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/886/cgroup.controllers" dev="sda1" ino=16359 res=1 15:17:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000300), 0xfffffe8c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x6) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x36a3a31c, 0x9}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000800)={0x0, 0x2b0, 0x800, 0x4, 0x40000000, 0x9e1}, &(0x7f0000000840)=0xa) 15:17:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x100000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1179.777075][T26483] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 15:17:44 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e48869873fd9ffe8", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:17:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x2da00, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:17:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:44 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000240)={0x304, r6, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x158, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan1\x00'}}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x250}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1a2}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc9c}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x94}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x384}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffc00}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}]}]}, 0x304}}, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1179.988889][ T28] audit: type=1804 audit(1596640664.292:1152): pid=26511 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/887/cgroup.controllers" dev="sda1" ino=16241 res=1 [ 1180.015409][T26519] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1180.094861][ T28] audit: type=1804 audit(1596640664.392:1153): pid=26514 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir132604636/syzkaller.E3turL/972/cgroup.controllers" dev="sda1" ino=16225 res=1 [ 1180.222910][T26525] 8021q: adding VLAN 0 to HW filter on device bond107 [ 1180.268463][T26525] bond0: (slave bond107): Enslaving as an active interface with an up link 15:17:46 executing program 3: unshare(0x6c060000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e21, @private=0xa010100}, {0x6, @local}, 0x2, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}, 'ip_vti0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, 0x0, 0x24040051) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000000c0)={r3, 0xfffffffffffffffe, 0xffffffff, 0x8c}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000780)={0x0, 0x2e, &(0x7f0000000740)={&(0x7f00000003c0)={0x28, r7, 0x703, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x200, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40c00}, 0x4000) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r9 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r8, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x3c}, 0x1, 0x6000000000020000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}}, 0x0) 15:17:46 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6e) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x9}, 0x24000041) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x20040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000040000000000000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB], 0x40}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007948008000000b000500010007"], 0x1}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r7, 0x0, 0x1000000e0) 15:17:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x17a000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:17:46 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e48869873fd9ffe8", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:17:46 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) bind$inet(r7, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r6, 0x0, r7, 0x0, 0x19404, 0x100b000000000000) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYRESHEX=r5, @ANYRES64=r7], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1182.814005][ T28] audit: type=1804 audit(1596640667.112:1154): pid=26619 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir132604636/syzkaller.E3turL/973/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 1182.839482][T26609] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1182.858570][T26604] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1182.858819][T26616] IPVS: ftp: loaded support on port[0] = 21 [ 1182.969032][T26617] 8021q: adding VLAN 0 to HW filter on device bond108 [ 1182.990263][ T28] audit: type=1804 audit(1596640667.182:1155): pid=26627 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/888/cgroup.controllers" dev="sda1" ino=16369 res=1 [ 1183.009825][T26617] bond0: (slave bond108): Enslaving as an active interface with an up link 15:17:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1183.354705][T26668] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1183.468808][T26669] 8021q: adding VLAN 0 to HW filter on device bond109 [ 1183.482071][ T28] audit: type=1804 audit(1596640667.782:1156): pid=26619 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir132604636/syzkaller.E3turL/973/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 1183.493971][T26669] bond0: (slave bond109): Enslaving as an active interface with an up link [ 1183.570512][ T28] audit: type=1804 audit(1596640667.862:1157): pid=26610 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/888/cgroup.controllers" dev="sda1" ino=16369 res=1 15:17:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xa01700, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:17:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1183.792169][ T28] audit: type=1804 audit(1596640668.092:1158): pid=26721 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/889/cgroup.controllers" dev="sda1" ino=16373 res=1 15:17:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xda0200, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1184.313893][T26722] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1184.401805][T26724] 8021q: adding VLAN 0 to HW filter on device bond110 [ 1184.428738][T26724] bond0: (slave bond110): Enslaving as an active interface with an up link 15:17:48 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e48869873fd9ffe8c9", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:17:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x1000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1184.663453][ T28] audit: type=1804 audit(1596640668.962:1159): pid=26787 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/891/cgroup.controllers" dev="sda1" ino=16372 res=1 15:17:50 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000240)={0x304, r6, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x158, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan1\x00'}}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x250}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1a2}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc9c}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x94}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x384}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffc00}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}]}]}, 0x304}}, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:17:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, 0x0, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:50 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x2, 0x800000003, 0xfffffff9) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockname$qrtr(r6, &(0x7f0000000200), &(0x7f0000000240)=0xc) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x37cb1133) ioctl$FICLONE(r2, 0x40049409, r7) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:17:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x2000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:17:50 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e48869873fd9ffe8c9", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1186.497997][T26834] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1186.550536][T26835] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1186.617273][T26873] 8021q: adding VLAN 0 to HW filter on device bond111 [ 1186.653133][T26873] bond0: (slave bond111): Enslaving as an active interface with an up link [ 1186.657127][ T28] audit: type=1804 audit(1596640670.952:1160): pid=26871 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/892/cgroup.controllers" dev="sda1" ino=16375 res=1 15:17:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, 0x0, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x3000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1186.941188][T26834] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1186.964184][T26834] bond0: (slave bond18): Enslaving as an active interface with an up link 15:17:51 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00') mmap(&(0x7f0000035000/0x2000)=nil, 0x2000, 0x4, 0x13, r1, 0x25146000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x208000, 0x800}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000d, 0x28011, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x19404, 0x100b000000000000) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e24, @private=0xa010100}, 0x10) [ 1187.064526][T26928] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1187.148762][ T28] audit: type=1804 audit(1596640671.452:1161): pid=26938 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/893/cgroup.controllers" dev="sda1" ino=16380 res=1 [ 1187.182331][T26931] 8021q: adding VLAN 0 to HW filter on device bond112 [ 1187.199060][T26931] bond0: (slave bond112): Enslaving as an active interface with an up link [ 1187.212085][T26968] IPVS: ftp: loaded support on port[0] = 21 15:17:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, 0x0, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x4000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1187.768839][ T28] audit: type=1804 audit(1596640672.072:1162): pid=26996 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/894/cgroup.controllers" dev="sda1" ino=16380 res=1 [ 1187.992941][T26968] IPVS: ftp: loaded support on port[0] = 21 15:17:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x5000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1188.492066][ T28] audit: type=1804 audit(1596640672.792:1163): pid=27007 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/895/cgroup.controllers" dev="sda1" ino=16380 res=1 [ 1188.937566][T26990] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 15:17:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x3000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:17:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x6000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:17:53 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) write$binfmt_elf64(r4, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x7, 0x7, 0x3, 0x4, 0x3, 0x3, 0x0, 0x109, 0x40, 0xac, 0x7ff, 0x9, 0x38, 0x2, 0x20, 0x8001, 0x3}, [{0x7, 0x81, 0x2, 0x3, 0x81, 0x0, 0x5, 0xc4f}, {0x6474e551, 0x9, 0x0, 0x100, 0xd5, 0x0, 0xfffffffff6a7109e, 0x200}], "4927d5440ef21303838caf50365af7a15c8a292150d3391e17d612cee9e59b4a91afc52e9a4b3dd481eb77b6d095b9543a50bc2c866f032508b21a074c500e61869a2dfeda6239bac545501009888929a853febf16227ead3a51b57118449460d91dc2949005867469233eeada1ff63784bb72c8990263e42e71f088f0dd2fdddbf9e288c96ad92163d16055af2d72f30803aaf05cdccb4f1d4204329da4c181a9bf761deba52794085e26239c19b65f19f74ed79252b30aa86ed116daf1ee78fad1552e76a91536fa8bff18449b8f6e7148", [[]]}, 0x282) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080), 0x4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x1, 0x1, 0x72, 0x7}]}, 0x10) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:17:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:53 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e48869873fd9ffe8c9", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1189.202615][ T28] audit: type=1804 audit(1596640673.502:1164): pid=27031 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/896/cgroup.controllers" dev="sda1" ino=16370 res=1 [ 1189.282169][T27043] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1189.294566][ T25] tipc: TX() has been purged, node left! [ 1189.331988][ T28] audit: type=1804 audit(1596640673.632:1165): pid=27038 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir168958197/syzkaller.Pldjsa/1792/cgroup.controllers" dev="sda1" ino=16374 res=1 [ 1189.653577][T27052] 8021q: adding VLAN 0 to HW filter on device bond113 [ 1189.684866][T27052] bond0: (slave bond113): Enslaving as an active interface with an up link 15:17:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x7000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:17:54 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x100b000000000000) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x200}) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0xb871, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={0x0, 0x1d8}, 0x1, 0x0, 0x0, 0x24004004}, 0x2400c850) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') [ 1189.932626][T27106] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1189.981311][ T28] audit: type=1804 audit(1596640674.282:1166): pid=27105 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/897/cgroup.controllers" dev="sda1" ino=16365 res=1 15:17:54 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x37cb1133) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="c800000010001fff020000001ff08843e3ffff80", @ANYRES32=0x0, @ANYBLOB="00000000000000009c0012001000010069703665727370616e000000880002001400060000000000000000000000ffffe0000000000000000000000800ffac1e0101080003008e000000040012f80700aeb7a4000000040012000800080000000000ffff000000001400060007c08ff2b7a7309dc70000000000000014000d00ff02000000ab000000000000a4a2e6a00c000a00aaaaaaaaaa1c200014757c6d63098e6ea2f7b8a851f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f2329dd392ff584dd1ef32949f4b709f802abe768419b1af9c045ee3e73c5cdb89146a799fae9ad2dbbe0443a121"], 0xc8}, 0x1, 0x0, 0x0, 0x2400c044}, 0x0) r1 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r1, &(0x7f0000000000), 0xe303, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x37cb1133) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x2, 0x4) [ 1190.093792][T27126] IPVS: ftp: loaded support on port[0] = 21 15:17:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x8000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1190.578898][T27106] 8021q: adding VLAN 0 to HW filter on device bond114 [ 1190.598400][T27106] bond0: (slave bond114): Enslaving as an active interface with an up link 15:17:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1190.793373][ T28] audit: type=1804 audit(1596640675.092:1167): pid=27158 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/898/cgroup.controllers" dev="sda1" ino=16364 res=1 [ 1190.831359][T27144] IPVS: ftp: loaded support on port[0] = 21 15:17:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x9000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1191.163359][T27149] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1191.174672][T27149] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1191.198326][T27159] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 15:17:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x8000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1191.277985][T27163] 8021q: adding VLAN 0 to HW filter on device bond115 [ 1191.306853][ T28] audit: type=1804 audit(1596640675.612:1168): pid=27174 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/899/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 1191.335761][T27163] bond0: (slave bond115): Enslaving as an active interface with an up link 15:17:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:55 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f0000000200)={@none, 0x9, 0x3, 0x5, 0x7, 0x100, "0a76fbe965cb7a63a28f1fffc83d34283285c4b07c47fb3664fa94d82e41994a56d6f6af7703eb1e3da3ab2a1353dc2733f6c5ccb3d5dd5b772d67986fb1640697d2ff3ab0ca2a655ed5d4a79142de31b5312ad554cbc8beb03cd23cd12552f23a724883b906bff4d4f3295612d48976cade0934fc157af9a9d5f71de74ab30d"}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f00000000c0)={0x7, 'macvlan0\x00', {0x7ff}}) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1191.535734][T27213] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 15:17:55 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e48869873fd9ffe8c90d", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1191.638295][ T28] audit: type=1804 audit(1596640675.942:1169): pid=27208 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir168958197/syzkaller.Pldjsa/1794/cgroup.controllers" dev="sda1" ino=16366 res=1 [ 1191.709912][T27214] 8021q: adding VLAN 0 to HW filter on device bond116 [ 1191.748623][T27214] bond0: (slave bond116): Enslaving as an active interface with an up link [ 1191.846126][T27227] bond0: (slave bond116): Releasing backup interface 15:17:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xa000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1192.260421][ T28] audit: type=1804 audit(1596640676.562:1170): pid=27267 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/900/cgroup.controllers" dev="sda1" ino=16382 res=1 15:17:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x8000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1192.753260][T27276] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1192.878243][ T28] audit: type=1804 audit(1596640677.182:1171): pid=27280 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir168958197/syzkaller.Pldjsa/1795/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 1193.528296][T27277] 8021q: adding VLAN 0 to HW filter on device bond117 [ 1193.560013][T27277] bond0: (slave bond117): Enslaving as an active interface with an up link [ 1193.582142][T27279] bond0: (slave bond117): Releasing backup interface 15:17:59 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000021008102e00f80ecdb4cb9020a00000400800000810040eb120418000000ca1b40d719", 0x27}, {&(0x7f0000000400)="769cbd1d19f56b", 0x7}], 0x2, 0x0, 0x0, 0x10}, 0x0) 15:17:59 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xb000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:17:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:17:59 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e48869873fd9ffe8c90d", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:17:59 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x402000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000000)={'ip6gretap0\x00', {0x7, 0x4e20, @local}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000300)=@generic={0x9, "7bfdac6b67fd81bb2bff7a4402e317105b009783faf02907f8fa42a81756a14ec905b97abf1d513706cb19372923b7533d9f3ffdc81dcdbe0753601575b70b6782be769008c346e797fc125c0ff7d327836ee9afa6987563873a2d1298161103c82b873175a38153ed6aca88660c1824f36a1cf658eddffe29aa35c355ae"}, 0x80) close(r4) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x19404, 0x100b000000000000) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000002c0)=0x100, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d096696ac61236ceeae9c550f9bfd8100aa6234796f1e26ab664779b25dd5ed690a6a39d7876068c1703b79ba56953f00fb62b396bb9339e4ecade4ac007881c4ba37c68aac5e5bb363a4749d22457ebcb460bcb8ec7c9d22a394a38fa2b8d8e54c6967e1ad00", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x9002}], 0x1, &(0x7f0000000240)={r5, r6+10000000}, &(0x7f0000000280)={[0xfa9]}, 0x8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1195.182025][T27336] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1195.263253][ T28] audit: type=1804 audit(1596640679.562:1172): pid=27357 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/901/cgroup.controllers" dev="sda1" ino=16364 res=1 [ 1195.365826][T27337] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1195.525832][T27339] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1195.551235][T27341] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1195.601051][T27341] device bond7 entered promiscuous mode [ 1195.633113][T27341] bond0: (slave bond7): Enslaving as an active interface with an up link 15:17:59 executing program 2: [ 1195.652663][T27342] 8021q: adding VLAN 0 to HW filter on device bond118 [ 1195.684920][T27342] bond0: (slave bond118): Enslaving as an active interface with an up link 15:18:00 executing program 2: [ 1195.716627][T27378] bond0: (slave bond118): Releasing backup interface 15:18:00 executing program 3: 15:18:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xc000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:00 executing program 2: 15:18:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) socketpair(0x1f, 0x3, 0x0, 0x0) 15:18:00 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB], 0xe8}}, 0x0) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x184, r8, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x53}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffe8}, @TIPC_NLA_NODE_ID={0xe1, 0x3, "b33504fb63bd688e47a02d63c942c3d03d7b0689cd6c4ef07238fff3ee7245a020772952dfdae18f4eae4d11a741963bdbb1ae7210816a822771018513db7c537a10cd943e7d49598993163b5bc4312c1e4af50cb98b118aaf0d813e80b495f4d67d30793a3cc4061251928c407771e4a9158f52a1d82030a8f9f54e4d38386403d2f417839cd1b625a97eba60287d5ea03e53f0adb54e3009edcb060608609049b791551f62a7bb6c5caf0cab521678f6b5ef87f13a90d79b1b8410be9ae1f18e35985b7b590b49e602919ce6be2caa7cd59cf0137690cbef9c7c1f0a"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd92c}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7b9}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000}, 0x10) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1195.968015][ T28] audit: type=1804 audit(1596640680.272:1173): pid=27424 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/902/cgroup.controllers" dev="sda1" ino=16379 res=1 15:18:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) sendto$inet(r0, 0x0, 0xfffffffe, 0x0, &(0x7f0000e68000)={0x2, 0x0, @multicast1}, 0x10) 15:18:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, &(0x7f0000000300)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:18:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) [ 1196.616643][T27443] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1196.766434][T27447] 8021q: adding VLAN 0 to HW filter on device bond119 [ 1196.792552][T27447] bond0: (slave bond119): Enslaving as an active interface with an up link [ 1196.806579][T27448] bond0: (slave bond119): Releasing backup interface 15:18:01 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e48869873fd9ffe8c90d", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x268, 0x0, 0x5, 0x801, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "a601ea73097816a3729060bbf29959b47b7299963c864cc3996957b5ef43ffb4", "9abe1332d6fa062a58b5fdc76af06070ca4d25524f14c8b9ee497f3c02d6537b"}}}]}, 0x268}}, 0x0) 15:18:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xd000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:18:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x14, r1, 0xb03, 0x0, 0x0, {0x13}}, 0x14}, 0x1, 0xe000000}, 0x0) [ 1197.107524][ T28] audit: type=1804 audit(1596640681.412:1174): pid=27491 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/903/cgroup.controllers" dev="sda1" ino=16374 res=1 15:18:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x5, 0x801}, 0x14}}, 0x0) 15:18:01 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 15:18:01 executing program 3: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8932, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000600)=ANY=[]}) [ 1197.649075][T27497] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1197.709189][T27502] 8021q: adding VLAN 0 to HW filter on device bond120 [ 1197.718599][T27502] bond0: (slave bond120): Enslaving as an active interface with an up link [ 1197.729812][T27505] bond0: (slave bond120): Releasing backup interface 15:18:02 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x37cb1133) close(r7) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x37cb1133) ioctl$SIOCX25GSUBSCRIP(r6, 0x89e0, &(0x7f0000000200)={'ipvlan0\x00', 0x0, 0x5}) 15:18:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xe000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2001, 0x3, 0x280, 0x0, 0x0, 0x0, 0x0, 0x150, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'irc-20000\x00'}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev, 0x0, 0x0, 'xfrm0\x00', 'veth1_macvtap\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) 15:18:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @private0}, 0x1c) 15:18:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:18:02 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e48869873fd9ffe8c90d", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r1, 0x0, 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1198.046075][T27566] Cannot find add_set index 0 as target [ 1198.056835][T27568] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1198.165171][ T28] audit: type=1804 audit(1596640682.462:1175): pid=27575 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/904/cgroup.controllers" dev="sda1" ino=15972 res=1 15:18:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r1, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x3}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) 15:18:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x0, 0x0, @dev}, 0x19) [ 1198.265841][T27574] 8021q: adding VLAN 0 to HW filter on device bond121 [ 1198.309440][T27574] bond0: (slave bond121): Enslaving as an active interface with an up link 15:18:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000200)=0xfffffff5, 0x4) 15:18:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:18:02 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r1, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x4110}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) [ 1198.589451][T27635] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 15:18:02 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e48869873fd9ffe8c90d", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r1, 0x0, 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1198.667170][T27639] 8021q: adding VLAN 0 to HW filter on device bond122 [ 1198.704721][T27639] bond0: (slave bond122): Enslaving as an active interface with an up link [ 1198.791754][ T25] tipc: TX() has been purged, node left! 15:18:03 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, 0xffffffffffffffff, 0x0) sendto$netrom(0xffffffffffffffff, &(0x7f0000000600)="386352eb7c5183b47b7ce42c5890e27f478078a6e9151d1cdb1c2d34634e59fea03616ce96b4e5d8e451e38892b630478306112553d358f65e330fedc08a9ae442d1e97fa36748d7c9e6fe972fe191bd2d9b9fef8d17ce288dcbe8ba5365cf659b9cdc19eb8d38d103aa2477ff1b9ad0d270dcd49ec4c2e8910cb098c63cd841b6e3a2ab2d13b05f0329d31685cc3820dfee1d664a3953044d852f52a522fca7a28674da4207c3e1ca4f99ba2af734", 0xaf, 0x20004000, &(0x7f0000000440)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x1a) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'xfrm0\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000140)) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240)='ethtool\x00') accept$packet(r0, 0x0, &(0x7f0000000180)) r8 = accept4$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000340)=0x60, 0x80000) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000380)=0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x100}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x10000}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x8001) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) 15:18:03 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x2}, 0x2) 15:18:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xf000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:03 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e48869873fd9ffe8c90d", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r1, 0x0, 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:18:03 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x7, &(0x7f0000000040)=0x1, 0x4) [ 1199.473903][T27697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 15:18:03 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000080)=""/102, &(0x7f0000000100)=0x66) 15:18:03 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @random="557851f9c452", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) [ 1199.538800][ T28] audit: type=1804 audit(1596640683.842:1176): pid=27696 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/905/cgroup.controllers" dev="sda1" ino=15891 res=1 [ 1199.638125][T27742] IPVS: length: 102 != 8 15:18:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x14, r1, 0xab9535e9a6578fc1}, 0x14}}, 0x0) [ 1199.689917][T27705] 8021q: adding VLAN 0 to HW filter on device bond123 [ 1199.723550][T27705] bond0: (slave bond123): Enslaving as an active interface with an up link 15:18:04 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @random="557851f9c452", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) 15:18:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) 15:18:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r1, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0xe000000}, 0x0) [ 1200.309799][T27762] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1200.392012][T27765] 8021q: adding VLAN 0 to HW filter on device bond124 [ 1200.401325][T27765] bond0: (slave bond124): Enslaving as an active interface with an up link 15:18:04 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded949293d25bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x10000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) 15:18:04 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e48869873fd9ffe8c90d", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) 15:18:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0xffff}, 0x1c) 15:18:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r1, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0xe000000}, 0x0) 15:18:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) [ 1200.675203][T27820] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1200.795535][ T28] audit: type=1804 audit(1596640685.092:1177): pid=27822 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/906/cgroup.controllers" dev="sda1" ino=16019 res=1 15:18:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r1, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0xe000000}, 0x0) 15:18:05 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 1201.082655][T27827] 8021q: adding VLAN 0 to HW filter on device bond125 [ 1201.115000][T27827] bond0: (slave bond125): Enslaving as an active interface with an up link 15:18:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) 15:18:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) 15:18:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) [ 1201.335352][T27887] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1201.446267][T27890] 8021q: adding VLAN 0 to HW filter on device bond126 [ 1201.470727][T27890] bond0: (slave bond126): Enslaving as an active interface with an up link [ 1201.479740][ T28] audit: type=1804 audit(1596640685.782:1178): pid=27822 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/906/cgroup.controllers" dev="sda1" ino=16019 res=1 15:18:06 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x4000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r1, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0xe000000}, 0x0) 15:18:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 15:18:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0xa, 0xa, 0x3}, 0x14}}, 0x0) 15:18:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x11000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:06 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e48869873fd9ffe8c90d", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) 15:18:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x158, 0x0, 0x148, 0x0, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'ip6gretap0\x00', {0x0, 0x0, 0x3, 0x0, 0x0, 0x880, 0x7}}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xb, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xd}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) [ 1202.370188][T27944] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 15:18:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, 0x0, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0xe000000}, 0x0) [ 1202.471222][ T28] audit: type=1804 audit(1596640686.772:1179): pid=27941 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/907/cgroup.controllers" dev="sda1" ino=16243 res=1 [ 1202.510074][T27944] 8021q: adding VLAN 0 to HW filter on device bond127 [ 1202.530007][T27944] bond0: (slave bond127): Enslaving as an active interface with an up link [ 1202.622311][T27996] xt_addrtype: both incoming and outgoing interface limitation cannot be selected 15:18:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 15:18:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, 0x0, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0xe000000}, 0x0) 15:18:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000100)={@void, @val={0x11}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}, 0x32) 15:18:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, 0x0, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0xe000000}, 0x0) [ 1202.859863][T28000] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1203.087085][T28003] 8021q: adding VLAN 0 to HW filter on device bond128 [ 1203.107340][T28003] bond0: (slave bond128): Enslaving as an active interface with an up link 15:18:07 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r0, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0xe000000}, 0x0) 15:18:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x12000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 15:18:07 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x37cb1133) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x8713}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) socket$pptp(0x18, 0x1, 0x2) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:07 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r0, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0xe000000}, 0x0) [ 1203.424478][ T28] audit: type=1804 audit(1596640687.722:1180): pid=28056 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/908/cgroup.controllers" dev="sda1" ino=16276 res=1 [ 1204.022697][T28055] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1204.069883][T28059] 8021q: adding VLAN 0 to HW filter on device bond129 [ 1204.080258][T28059] bond0: (slave bond129): Enslaving as an active interface with an up link 15:18:08 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e48869873fd9ffe8c90d", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) 15:18:08 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r0, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0xe000000}, 0x0) 15:18:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x13000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 15:18:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r1, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0xe000000}, 0x0) 15:18:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000100)={@void, @val={0x11}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}, 0x32) 15:18:08 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) sendmsg$inet6(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0xa, 0x4e23, 0xffffffff, @private2={0xfc, 0x2, [], 0x1}, 0x901}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000200)="2b7b1613ad13873c6279aa76f530a42126087196b2c5721a481ccb7dbafc183daf137dd1ddbe7f3a7eb27c3dd3fcfee2940c8b1dacb9221511e5bd1c92ab971c7ebcf691b14e17c33270ace367b895c187df493f1314d3c91a8bf2d9d8e11e4490461e668fde480d1855b8888cd244b467a121b368d5d5930933162a229adc056144bfac6d03882d0f8cb83911d1072ee03db68cac8579312e6c08f7327401d08f7ec83dca2b903474a3", 0xaa}], 0x1}, 0x8c0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36b72a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1204.249730][T28120] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 15:18:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r1, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0xe000000}, 0x0) [ 1204.386394][T28123] 8021q: adding VLAN 0 to HW filter on device bond130 [ 1204.395216][T28123] bond0: (slave bond130): Enslaving as an active interface with an up link [ 1204.397664][ T28] audit: type=1804 audit(1596640688.702:1181): pid=28149 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/909/cgroup.controllers" dev="sda1" ino=16146 res=1 15:18:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 15:18:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r1, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0xe000000}, 0x0) 15:18:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r1, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0xe000000}, 0x0) 15:18:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r1, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0xe000000}, 0x0) [ 1205.192258][T28182] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1205.240234][T28184] 8021q: adding VLAN 0 to HW filter on device bond131 [ 1205.252350][T28184] bond0: (slave bond131): Enslaving as an active interface with an up link 15:18:10 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e48869873fd9ffe8c90d", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 15:18:10 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x14000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r1, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0xe000000}, 0x0) 15:18:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 15:18:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2001, 0x3, 0x280, 0x0, 0x60, 0x0, 0x0, 0x150, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'irc-20000\x00'}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0xfffc}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev, 0x0, 0x0, 'xfrm0\x00', 'veth1_macvtap\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) 15:18:10 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x19404, 0x100b000000000000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'netpci0\x00', 0x201}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1205.785834][T28240] Cannot find add_set index 0 as target [ 1205.820136][T28242] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 15:18:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 15:18:10 executing program 3: socket$netlink(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r0, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0xe000000}, 0x0) [ 1205.876246][ T28] audit: type=1804 audit(1596640690.182:1182): pid=28241 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/910/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 1205.965967][T28247] 8021q: adding VLAN 0 to HW filter on device bond132 [ 1206.013182][T28247] bond0: (slave bond132): Enslaving as an active interface with an up link 15:18:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x818d}]}, 0x30}}, 0x0) 15:18:10 executing program 3: socket$netlink(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r0, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0xe000000}, 0x0) 15:18:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:18:10 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "163dac", 0x0, 0x0, 0x0, @local, @mcast2}}}}}, 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 1206.394870][T28306] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1206.451393][T28309] 8021q: adding VLAN 0 to HW filter on device bond133 [ 1206.461114][T28309] bond0: (slave bond133): Enslaving as an active interface with an up link 15:18:11 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e48869873fd9ffe8c90d", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 15:18:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x15000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:11 executing program 3: socket$netlink(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r0, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0xe000000}, 0x0) 15:18:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1207.127203][T28364] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 15:18:11 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) socket(0x15, 0x2, 0x9) accept$unix(r0, 0x0, &(0x7f00000000c0)) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000200)={{0x2, 0x4e23, @private=0xa010100}, {0x1, @dev={[], 0x21}}, 0x44, {0x2, 0x4e20, @multicast2}, 'rose0\x00'}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r6, 0x0) accept4$bt_l2cap(r6, 0x0, &(0x7f0000000280), 0x81c00) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000002980)) 15:18:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x0) [ 1207.175584][ T28] audit: type=1804 audit(1596640691.472:1183): pid=28363 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/911/cgroup.controllers" dev="sda1" ino=16381 res=1 15:18:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x0) 15:18:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x0) 15:18:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xe000000}, 0x0) 15:18:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xe000000}, 0x0) [ 1207.811464][T28389] 8021q: adding VLAN 0 to HW filter on device bond134 [ 1207.846466][T28389] bond0: (slave bond134): Enslaving as an active interface with an up link [ 1207.905688][ T28] audit: type=1804 audit(1596640692.202:1184): pid=28363 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/911/cgroup.controllers" dev="sda1" ino=16381 res=1 15:18:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1208.392793][T28440] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 15:18:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e257) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a5928fee525deffe85b0500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 15:18:12 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e48869873fd9ffe8c90d", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 15:18:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xe000000}, 0x0) 15:18:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x16000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1208.604388][T28443] 8021q: adding VLAN 0 to HW filter on device bond135 [ 1208.627239][T28443] bond0: (slave bond135): Enslaving as an active interface with an up link 15:18:13 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x19404, 0x100b000000000000) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) socket$packet(0x11, 0x3, 0x300) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1208.763992][ T28] audit: type=1804 audit(1596640693.062:1185): pid=28489 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir132604636/syzkaller.E3turL/1004/cgroup.controllers" dev="sda1" ino=16369 res=1 15:18:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0xe000000}, 0x0) [ 1208.876693][ T28] audit: type=1804 audit(1596640693.162:1186): pid=28493 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/912/cgroup.controllers" dev="sda1" ino=16380 res=1 15:18:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0xe000000}, 0x0) 15:18:13 executing program 2: [ 1209.175204][T28505] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 15:18:13 executing program 2: [ 1209.320015][T28509] 8021q: adding VLAN 0 to HW filter on device bond136 [ 1209.357164][T28509] bond0: (slave bond136): Enslaving as an active interface with an up link 15:18:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0xe000000}, 0x0) 15:18:13 executing program 2: 15:18:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, 0x0, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0xe000000}, 0x0) [ 1209.572751][ T28] audit: type=1804 audit(1596640693.872:1187): pid=28493 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/912/cgroup.controllers" dev="sda1" ino=16380 res=1 15:18:14 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e48869873fd9ffe8c90d", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 15:18:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:18:14 executing program 2: 15:18:14 executing program 2: 15:18:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x17000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, 0x0, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0xe000000}, 0x0) [ 1210.167059][T28574] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1210.273075][T28577] 8021q: adding VLAN 0 to HW filter on device bond137 15:18:14 executing program 2: [ 1210.318416][T28577] bond0: (slave bond137): Enslaving as an active interface with an up link [ 1210.367161][ T28] audit: type=1804 audit(1596640694.672:1188): pid=28619 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/913/cgroup.controllers" dev="sda1" ino=16373 res=1 15:18:14 executing program 2: 15:18:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, 0x0, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0xe000000}, 0x0) 15:18:14 executing program 2: 15:18:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:18:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r1, 0x0, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0xe000000}, 0x0) [ 1210.642960][T28633] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1210.820721][T28634] 8021q: adding VLAN 0 to HW filter on device bond138 [ 1210.851704][T28634] bond0: (slave bond138): Enslaving as an active interface with an up link 15:18:15 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e48869873fd9ffe8c90d", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 15:18:15 executing program 2: 15:18:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r1, 0x0, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0xe000000}, 0x0) 15:18:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x18000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:15 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r4 = socket(0x2, 0x800000003, 0xfffffff9) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x40}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r5, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040945}, 0x40000000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x7fffffff}, 0x8) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}}, 0x20}}, 0x0) 15:18:15 executing program 2: [ 1211.364168][T28687] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 15:18:15 executing program 2: 15:18:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r1, 0x0, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0xe000000}, 0x0) [ 1211.463038][ T28] audit: type=1804 audit(1596640695.762:1189): pid=28697 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/914/cgroup.controllers" dev="sda1" ino=16368 res=1 15:18:15 executing program 2: 15:18:15 executing program 2: 15:18:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x14, r1, 0xb03, 0x0, 0x0, {0x13}}, 0x14}, 0x1, 0xe000000}, 0x0) [ 1211.631260][T28693] 8021q: adding VLAN 0 to HW filter on device bond139 [ 1211.659870][T28693] bond0: (slave bond139): Enslaving as an active interface with an up link 15:18:16 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e48869873fd9ffe8c90d", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 15:18:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}}, 0x20}}, 0x0) 15:18:16 executing program 2: 15:18:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x14, r1, 0xb03, 0x0, 0x0, {0x13}}, 0x14}, 0x1, 0xe000000}, 0x0) 15:18:16 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x19000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:16 executing program 2: [ 1212.489416][T28762] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1212.594816][ T28] audit: type=1804 audit(1596640696.892:1190): pid=28763 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/915/cgroup.controllers" dev="sda1" ino=16379 res=1 15:18:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x14, r1, 0xb03, 0x0, 0x0, {0x13}}, 0x14}, 0x1, 0xe000000}, 0x0) 15:18:17 executing program 2: [ 1212.727400][T28767] 8021q: adding VLAN 0 to HW filter on device bond140 [ 1212.756636][T28767] bond0: (slave bond140): Enslaving as an active interface with an up link 15:18:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}}, 0x20}}, 0x0) 15:18:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x18, r1, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0xe000000}, 0x0) 15:18:17 executing program 2: [ 1213.008595][T28827] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1213.092424][T28832] 8021q: adding VLAN 0 to HW filter on device bond141 [ 1213.102571][T28832] bond0: (slave bond141): Enslaving as an active interface with an up link 15:18:17 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8923, &(0x7f0000000140)={'syzkaller1\x00', {0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 15:18:17 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c462940967ac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) bind$inet(r7, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r6, 0x0, r7, 0x0, 0x19404, 0x100b000000000000) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f00000000c0)={0x9}, 0x4) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:17 executing program 2: 15:18:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x18, r1, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0xe000000}, 0x0) 15:18:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x1a000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:17 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNGETFILTER(r0, 0x800454d7, 0x0) 15:18:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8923, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 15:18:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x18, r1, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0xe000000}, 0x0) [ 1213.763081][ T28] audit: type=1804 audit(1596640698.062:1191): pid=28885 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/916/cgroup.controllers" dev="sda1" ino=16366 res=1 [ 1213.893921][T28896] : renamed from syzkaller1 15:18:18 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ip6erspan0\x00', 0x101}) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ip6erspan0\x00', 0x101}) 15:18:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f00000000c0)={'ip6erspan0\x00'}) 15:18:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNGETFILTER(r0, 0x800454e0, 0x0) 15:18:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:18:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) 15:18:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x1b000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:18 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30e) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', {0x7, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) [ 1214.445127][ T28] audit: type=1804 audit(1596640698.742:1192): pid=28965 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/917/cgroup.controllers" dev="sda1" ino=16371 res=1 15:18:19 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:19 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:18:19 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 15:18:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) 15:18:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x1c000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_xt={0x2c, 0x5, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) 15:18:19 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1215.244412][ T28] audit: type=1804 audit(1596640699.542:1193): pid=28993 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/918/cgroup.controllers" dev="sda1" ino=16378 res=1 15:18:19 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:18:19 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1215.520847][T29000] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:18:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x1d000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:19 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1215.712325][T29004] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:18:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={[], 0x10}}, 0xe) [ 1215.773965][ T28] audit: type=1804 audit(1596640700.062:1194): pid=29025 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/919/cgroup.controllers" dev="sda1" ino=16380 res=1 [ 1216.013796][ T28] audit: type=1804 audit(1596640700.312:1195): pid=29024 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/919/cgroup.controllers" dev="sda1" ino=16380 res=1 15:18:20 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={'ip6_vti0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) close(r1) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:20 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:18:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) 15:18:20 executing program 4: pipe(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 15:18:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x1e000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:20 executing program 2: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1216.602065][ T28] audit: type=1804 audit(1596640700.902:1196): pid=29049 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/920/cgroup.controllers" dev="sda1" ino=16379 res=1 15:18:21 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 15:18:21 executing program 2: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:18:21 executing program 2: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:18:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x1f000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:21 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:21 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1217.169150][ T28] audit: type=1804 audit(1596640701.472:1197): pid=29074 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/921/cgroup.controllers" dev="sda1" ino=16379 res=1 [ 1217.869091][T29086] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1217.915571][T29097] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:18:22 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xb6ea6f9b087d72b3, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x80}}]}, 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', r8, 0x40, 0x0, 0x200, 0x70b2, {{0xe, 0x4, 0x1, 0x0, 0x38, 0x67, 0x0, 0xf9, 0x0, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x26}, {[@ra={0x94, 0x4, 0x1}, @generic={0x88, 0x2}, @noop, @generic={0x88, 0x8, "dc713d609528"}, @generic={0x86, 0x10, "2e2e026dd372417d47383ea9cdb9"}, @end, @ra={0x94, 0x4}]}}}}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x20000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:22 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:18:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) poll(&(0x7f0000000000)=[{}, {r1, 0x2}, {0xffffffffffffffff, 0xc092}], 0x3, 0x0) 15:18:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) 15:18:22 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1218.194320][T29113] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1218.242027][ T28] audit: type=1804 audit(1596640702.542:1198): pid=29109 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/922/cgroup.controllers" dev="sda1" ino=16373 res=1 15:18:22 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:18:22 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:18:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x21000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1218.778843][ T28] audit: type=1804 audit(1596640703.082:1199): pid=29143 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/923/cgroup.controllers" dev="sda1" ino=16379 res=1 15:18:23 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1219.019370][T29128] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1219.439053][T29139] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:18:23 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000140)={{0x8, @private=0xa010101, 0x4e21, 0x2, 'ovf\x00', 0x20, 0x7ff, 0x31}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x4e22, 0x4, 0x8, 0x6, 0xffff}}, 0x44) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000480)={'veth0\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'ip6_vti0\x00', {0x7, 0x0, @local}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x200, 0x2000}, 0x4) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x32) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x100b000000000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r6, @ANYBLOB="040027bd7000fddbdf251b0000000e0001006e6574646576736973696d3000000801006e657464657673000f0002006e657464657673696d30000008000b0006000006000000006e657464657673696d0000007673696d30000008000b0001000000080001007063690011000200303030303a30303a31302e300000000008000b000700"/143], 0xb0}, 0x1, 0x0, 0x0, 0x41}, 0x845) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:23 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:18:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) 15:18:23 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8b2b, &(0x7f0000000000)) 15:18:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x22000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:23 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:18:24 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1219.724659][ T28] audit: type=1804 audit(1596640704.022:1200): pid=29179 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/924/cgroup.controllers" dev="sda1" ino=16381 res=1 15:18:24 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:18:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) [ 1219.886051][T29192] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:18:24 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:18:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={[], 0x10}, 0x5}, 0xe) 15:18:24 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:18:24 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'wg0\x00', {0x7, 0x4e20, @empty}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="acbd0ec629e2ba81742cecfeace1b42cc3eeeb619c468ecb9d1966969861a36cee959c550f9bfd8100aa4f34796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba56f8739e6b8380a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76a54cb0492dfbb38ff25e5bb36372b1487f15e8a4749d22477ebcb40000", @ANYRES64=r5], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x37cb1133) ioctl$sock_qrtr_TIOCOUTQ(r6, 0x5411, &(0x7f0000000480)) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r7, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r7, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1, 0x3}, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x8, 0x6, 0x5}, &(0x7f0000000300)=0x101, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0x3}}, 0x10) 15:18:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x23000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:24 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:18:24 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) 15:18:24 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1220.594673][ T28] audit: type=1804 audit(1596640704.892:1201): pid=29216 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/925/cgroup.controllers" dev="sda1" ino=16378 res=1 15:18:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:18:25 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:18:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), 0x4) 15:18:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:18:25 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:25 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, r4, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x1f}}, @NL80211_ATTR_SCAN_SSIDS={0x48, 0x2d, 0x0, 0x1, [{0x5, 0x0, [0x1b]}, {0x4}, {0x8, 0x0, [0x18, 0x8, 0x6, 0x7]}, {0x5, 0x0, [0x20]}, {0xd, 0x0, [0x12, 0x4, 0x1f, 0x11, 0x4, 0x3, 0x1b, 0x10, 0x15]}, {0x5, 0x0, [0x15]}, {0x5, 0x0, [0x20]}, {0x5, 0x0, [0xb]}]}, @NL80211_ATTR_SCAN_SSIDS={0x14, 0x2d, 0x0, 0x1, [{0x5, 0x0, [0xa]}, {0x5, 0x0, [0xd]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc040}, 0x4000800) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000003c0)=0x2, &(0x7f0000000400)=0x4) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r5, 0x0, 0x10005, 0x0) 15:18:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x5}, 0xe) 15:18:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:18:25 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x24000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:25 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) 15:18:25 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1221.674536][ T28] audit: type=1804 audit(1596640705.972:1202): pid=29259 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/926/cgroup.controllers" dev="sda1" ino=16378 res=1 15:18:26 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:26 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 15:18:26 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:26 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) [ 1222.135961][T24338] Bluetooth: hci5: command 0x0405 tx timeout 15:18:27 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'ip6erspan0\x00', 0x800}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x37cb1133) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000100)) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x5}, 0xe) 15:18:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x25000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 15:18:27 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:27 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x1) 15:18:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940), 0x0, 0x0) 15:18:27 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x1) [ 1222.934091][ T28] audit: type=1804 audit(1596640707.232:1203): pid=29302 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/927/cgroup.controllers" dev="sda1" ino=16368 res=1 15:18:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940), 0x0, 0x0) 15:18:27 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:27 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x1) 15:18:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940), 0x0, 0x0) 15:18:28 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550ffeeea53e3df7ed923ac40d3d9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c78aac2ded9b76f25e457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad80f019f1a2af0b495875e50af6c0afd624fe", @ANYRESDEC], 0x32) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x48, 0x2c, 0xd27, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}]}]}]}}]}, 0x48}}, 0x11) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r8, 0x0, {0x0, 0x1, 0x1}, 0x1}, 0x18) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:28 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 15:18:28 executing program 3: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(0xffffffffffffffff, 0x1) 15:18:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x26000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a6ec1609d0831e5720b1ad56b6c5820fae00210000000000", 0x18) r1 = accept(r0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="69ee60925f417ccf1ffe9319d6537e5cf29481b9556f04d7a5b04dd63976c9f9e3369a45af35f5ada6118a0257cf3f4c35b3ca946f4473860205951e57320795ff17f3ae4b9e5f0ccb164ac18c6c58e990cf9301be88c8a08a83c46f0b068679568d01cfcddb1f3b5435ce4f99a7083cfd6956e04fbcb70bf49c1515def28762299c0b57ab83348c3d8b1cc6873d76c4ea31cedf30ad074231a97a37e37571deab7079a6bbbb5dad134a22039df36fb755b0ccc68d8f758a6dd9d1de7a34f6979e58", 0xc2}, {&(0x7f0000000240)="2f24382eb3ce80067b49e19b64a8c5a6d4cb85e4fd63f7689ca3b325b4655b3dc55b8aba36ea40394a825dd611c721fdb9d1383cf832fe330a2a01d7dae385251d1d23549ab1a849f670f23e19239d6cf1550bc582c2a8efdcda5cf0d4c5ed06a439440a76b58ceb39", 0x69}, {&(0x7f00000002c0)="9e53b8d726fbf977e359578a5005ad5c0defc6cda4e1169709d5a5cc81b1a5ce87cd534392e524a8922c0e687890bb2a487b6e952cec823343115db1a8fb201584b13db0bba5358346991135686eef98a723a634d4245a7d67f1885f56c1e8ad42d322d6082a84e999a15322ad755424301849041ab8f780b3fd6ed4a795faa79ff4d64e4298a03250eb4f1e4a0e06a232bbe4f83aa4a7b904558295987939d78c8214ae0f4ba3b2dc3c55e48708f889cbcd30c00c49e42cfffba00962d8d4020fafad", 0xc3}, {&(0x7f00000003c0)="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", 0xe13}], 0x4}, 0x0) 15:18:28 executing program 3: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(0xffffffffffffffff, 0x1) 15:18:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000024000b0f00000000e4ff000000000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b00010064736d61726b00000c0002000600010020"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x6}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) 15:18:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a6ec1609d0831e5720b1ad56b6c5820fae00210000000000", 0x18) r1 = accept(r0, 0x0, 0x0) recvfrom$phonet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1223.932718][ T28] audit: type=1804 audit(1596640708.232:1204): pid=29337 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/928/cgroup.controllers" dev="sda1" ino=16367 res=1 15:18:28 executing program 3: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(0xffffffffffffffff, 0x1) 15:18:28 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:28 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'vlan1\x00', @ifru_settings={0x9, 0x0, @fr_pvc=0x0}}) ioctl$sock_netdev_private(r0, 0x8b29, &(0x7f0000000000)) [ 1224.111087][T29352] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:18:29 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) socket$isdn(0x22, 0x3, 0x1) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r6 = socket(0x2, 0x800000003, 0xfffffff9) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x0, [], [{0xfffffffc, 0x0, 0x100000001, 0x3, 0xfff, 0x2}, {0x6, 0x70, 0x10001, 0x4, 0x2, 0x1}], [[], [], []]}) 15:18:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) 15:18:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a6ec1609d0831e5720b1ad56b6c5820fae00210000000000", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="75134224d0ccafc2", 0x35}, {&(0x7f00000006c0)="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"}], 0x1, &(0x7f0000000580)=[@op={0x18}, @assoc], 0x30}], 0x1, 0x0) 15:18:29 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) close(0xffffffffffffffff) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[]]}, 0x178) 15:18:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x27000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:29 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) 15:18:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1225.018087][T29395] IPVS: ftp: loaded support on port[0] = 21 [ 1225.030667][ T28] audit: type=1804 audit(1596640709.332:1205): pid=29389 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/929/cgroup.controllers" dev="sda1" ino=16369 res=1 15:18:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) 15:18:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:18:29 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1225.268215][T29398] IPVS: ftp: loaded support on port[0] = 21 15:18:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x28000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1225.398213][ T41] tipc: TX() has been purged, node left! [ 1225.602136][ T28] audit: type=1804 audit(1596640709.902:1206): pid=29450 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/930/cgroup.controllers" dev="sda1" ino=16372 res=1 15:18:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:18:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) 15:18:30 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:32 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) close(0xffffffffffffffff) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[]]}, 0x178) 15:18:32 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x29000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) 15:18:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:18:32 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:32 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x6c8b02, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x19404, 0x100b000000000000) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x40}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2120100}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="485013ac2fd740c16580000000", @ANYRES16=r6, @ANYBLOB="00082bbd7000ffdbdf25050000000500010001000000140006007465616d30000000000000000000000008000500e000000208000400ac1414aa08000400e0000001"], 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x8854) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) 15:18:32 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1228.486916][ T28] audit: type=1804 audit(1596640712.792:1207): pid=29506 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/931/cgroup.controllers" dev="sda1" ino=15905 res=1 [ 1228.546520][T29508] IPVS: ftp: loaded support on port[0] = 21 15:18:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) shutdown(r0, 0x1) 15:18:33 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:18:33 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) shutdown(r0, 0x1) 15:18:33 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) close(0xffffffffffffffff) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[]]}, 0x178) 15:18:33 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:18:33 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x2a000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) shutdown(r0, 0x1) [ 1229.120091][ T28] audit: type=1804 audit(1596640713.422:1208): pid=29552 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/932/cgroup.controllers" dev="sda1" ino=16003 res=1 [ 1229.145995][ T25] tipc: TX() has been purged, node left! [ 1229.166592][T29555] IPVS: ftp: loaded support on port[0] = 21 15:18:33 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000200)=""/184) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:33 executing program 5: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:18:33 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(0xffffffffffffffff, 0x1) 15:18:33 executing program 5: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:18:33 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x2b000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:18:33 executing program 5: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1229.629367][ T28] audit: type=1804 audit(1596640713.932:1209): pid=29598 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/933/cgroup.controllers" dev="sda1" ino=15857 res=1 15:18:34 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:34 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:18:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:18:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:18:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x50, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @ipv4}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x50}}, 0x0) 15:18:35 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(0xffffffffffffffff, 0x1) 15:18:35 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0x101) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r4 = socket(0x2, 0x800000003, 0xfffffff9) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000200)=0x46d) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d228907528c54a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) getpeername(r7, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x80) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x2c000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:18:35 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002c40)=[{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000080)="e987aa680c7218c887fe8846c0a54e06997fa31af56ddb1700cf500af14e99282f53a767ddd61b2c9f2f4c7ff03180404619258d38a1c047c76e39657addafb71a68f264e494282aa705e201e39e437d18b9c226d57f6ace80a444f9d3366758fd852acc59fac7a818544412aee5422b7cb1", 0x72}, {&(0x7f0000002cc0)="6f18f1e28ddfa96d23e0062cc141e42e82fe3317edf88dd1549867c816590740f6837149a41ccef97eafbfb7b8089a0e2156f6c3aa2ca7868d58d33b8206932f73972c186cc68ed3ba30c3c094ca6f42602a87c5b8e5874d64993e29a3f80042a0cbb6eb01e9cae57795c5c9c1704e09ec2f5e", 0x73}, {&(0x7f0000000340)="9819dcc40fafd4f4fb137c6e8481d78ef2a3aee326e3b52f925d35f29dc8773c0f8a94f01046b641d95658853c96bd242c45b1132edff07df619b3957c7af5edf7c5bd6b9607020d6b2d15d6749ad8a33364062c3cec092fc989965d690e36", 0x5f}, {&(0x7f00000003c0)="debf7d", 0x3}, {&(0x7f00000004c0)="02834a96cd577225b6897894710b122f29a528a2a9183d1331f3bce55088ef37c031cfc1964005364a9908504958568ff6af5cdbf3bee791826b", 0x3a}], 0x5}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) [ 1230.904829][ T28] audit: type=1804 audit(1596640715.202:1210): pid=29628 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/934/cgroup.controllers" dev="sda1" ino=16258 res=1 15:18:35 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:35 executing program 2: 15:18:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 15:18:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 15:18:35 executing program 2: 15:18:35 executing program 2: 15:18:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 15:18:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(0xffffffffffffffff, 0x1) [ 1231.646849][ T28] audit: type=1804 audit(1596640715.952:1211): pid=29628 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/934/cgroup.controllers" dev="sda1" ino=16258 res=1 15:18:36 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x38, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000002400070500702f4007a2a30005000000", @ANYRESDEC=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x48849) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000280)={r8, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:36 executing program 2: 15:18:36 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 15:18:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x2d000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 15:18:36 executing program 2: [ 1232.522624][ T28] audit: type=1804 audit(1596640716.822:1212): pid=29681 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/935/cgroup.controllers" dev="sda1" ino=16379 res=1 15:18:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x0) 15:18:36 executing program 2: 15:18:36 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1232.652823][T29682] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:18:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 15:18:37 executing program 2: [ 1233.226169][ T25] tipc: TX() has been purged, node left! 15:18:37 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) r6 = socket(0x4, 0xa, 0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000080)={r9, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000200)={r9, 0x86, "feec5fb37473c838a9ac30e78d24dd0da6aa3b556d3da6f9555cf4b2b6e4fae485719261eb22bc048e86733c7ededb528a012129e59331d2fb67cf707d175ff3a74dea3493e60ef05263e8a4f80ab5e0b3196830fe351f4dfce111f558c7a2d7d6144fc2d9d4c94d1d622bd545d3eb43344a1a150092b8d83b6ce673ee3c964f800a2bc14786"}, &(0x7f00000000c0)=0x8e) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYRESDEC=r10, @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:18:37 executing program 2: 15:18:37 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x2e000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:37 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x0) 15:18:38 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:38 executing program 2: 15:18:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1233.774919][ T28] audit: type=1804 audit(1596640718.072:1213): pid=29720 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/936/cgroup.controllers" dev="sda1" ino=16380 res=1 15:18:38 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:38 executing program 2: 15:18:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:18:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0xffffff1f}, 0x20}}, 0x0) 15:18:39 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:39 executing program 2: 15:18:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x2f000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:39 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x0) 15:18:39 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="1303000400000000000003"], 0x3}}, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="88000000", @ANYRES16=r5, @ANYBLOB="01002abd7000fcdbdf2503000000050003003300000014006000fe80000000000000000000000000002808000800ac141426040005001400070000000000000000000000ffffac1414aa06000a004e23000014000900fe8000000000000000000000000000bb060001004e23000014000900fe880000000000000000000000000101"], 0x88}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r7, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}}, 0x20008040) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:39 executing program 2: 15:18:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0xffffff1f}, 0x20}}, 0x0) [ 1235.131976][ T28] audit: type=1804 audit(1596640719.432:1214): pid=29758 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/937/cgroup.controllers" dev="sda1" ino=16366 res=1 15:18:39 executing program 2: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000002e001fffffff00"/20, @ANYRES32=r3, @ANYBLOB="000000000000ffff"], 0x2c}}, 0x0) 15:18:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0xffffff1f}, 0x20}}, 0x0) 15:18:39 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1235.438162][T29773] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:18:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) 15:18:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x30000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1235.556005][T29779] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:18:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@mcast2}, {@in6=@dev, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 15:18:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) [ 1235.798519][ T28] audit: type=1804 audit(1596640720.102:1215): pid=29786 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/938/cgroup.controllers" dev="sda1" ino=16382 res=1 15:18:40 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:40 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000040)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000040)=[{0x2c}, {0x6}]}, 0x10) setsockopt(r4, 0xfff, 0x3, &(0x7f0000000180)="46829a8e9b03af913165e6e77f97869ed3eeb0be4c4c4565a1022a18f97478a8192b5bb72b1b517490c8a470c4a12134bc6a3084125771579b7b052509cd81610fac4cfac4fc4dac", 0x48) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) accept$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) recvfrom$inet6(r3, &(0x7f0000000000)=""/209, 0xd1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fedb00250800000008000400040000002c00038090bf731106c678ff860f1ec29d9b06000400000400000804030002000000080001e801000000100001800c00070008000000000000000c00038008000500ffffffff0800050006000000040003800800040001000100140002800800030000000000080009001f0000006c00206e0993e73d6813d0a8e04aa24e06b049fa12006970366772653000000000000000000014000600fe8000000400002b09b93bf939e3ee16b9360000000000000000070600040000080000060007004e24002114000600ff020000000000000000000000000001060007004e21000014000600"/264], 0x100}, 0x1, 0x0, 0x0, 0x20008811}, 0x24040000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100485400}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='[\x00\x00\x00', @ANYRESOCT, @ANYBLOB="169f00a41e1b441e5a1a6f0c87174eabf4ada30000000000c934ffff81c2faacf1e9b748d90c4a3c039dd30dd1", @ANYRESOCT, @ANYBLOB="08000100030000000800050005000000140004006261706164565f736c6176655f30000014000000766c746e08000500f4ff00000c009900030000000300"/76], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x41) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x1, 0x48814, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)={0x8000004, 0x7f}, 0xff31) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd97) 15:18:41 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x1, 0x0, 0x1, 0x80, {{0x24, 0x4, 0x1, 0x8, 0x90, 0x64, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3d}, {[@noop, @lsrr={0x83, 0x1f, 0x7d, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xe}]}, @timestamp_prespec={0x44, 0x24, 0x41, 0x3, 0x8, [{@multicast1, 0x1}, {@loopback, 0x3}, {@multicast2, 0x1dbb}, {@empty, 0x7}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x7, [@empty, @broadcast]}, @generic={0x86, 0xb, "fd38a4230fce887c38"}, @noop, @timestamp_prespec={0x44, 0x1c, 0x41, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffc01}, {@empty, 0x7fff}, {@remote, 0x2}]}]}}}}}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) 15:18:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x31000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:41 executing program 2: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000002e000100"/20, @ANYRES32=r3, @ANYBLOB="000000000000ffff0000f1ff08000b00002d886d"], 0x2c}}, 0x0) 15:18:41 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000f0000000a000100726f7574650000000c0002000800040046f2"], 0x3c}}, 0x0) 15:18:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x3c}}, 0x0) [ 1236.848114][ T28] audit: type=1804 audit(1596640721.152:1216): pid=29822 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/939/cgroup.controllers" dev="sda1" ino=16369 res=1 15:18:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) 15:18:41 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x2e000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:41 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000200)=""/184) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x3c}}, 0x0) [ 1237.390859][ T28] audit: type=1804 audit(1596640721.692:1217): pid=29847 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir132604636/syzkaller.E3turL/1084/cgroup.controllers" dev="sda1" ino=16375 res=1 15:18:42 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'ip_vti0\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) r6 = socket(0x2, 0x800000003, 0xfffffff9) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000200)={{0x2, 0x4e20, @loopback}, {0x6, @multicast}, 0x68, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'bond_slave_1\x00'}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:42 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550ffeeea53e3df7ed923ac40d3d9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c78aac2ded9b76f25e457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad80f019f1a2af0b495875e50af6c0afd624fe", @ANYRESDEC], 0x32) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x48, 0x2c, 0xd27, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}]}]}]}}]}, 0x48}}, 0x11) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r8, 0x0, {0x0, 0x1, 0x1}, 0x1}, 0x18) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x32000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:42 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x3c}}, 0x0) [ 1238.180655][ T28] audit: type=1804 audit(1596640722.482:1218): pid=29877 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/940/cgroup.controllers" dev="sda1" ino=16370 res=1 15:18:42 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, r4, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x1f}}, @NL80211_ATTR_SCAN_SSIDS={0x48, 0x2d, 0x0, 0x1, [{0x5, 0x0, [0x1b]}, {0x4}, {0x8, 0x0, [0x18, 0x8, 0x6, 0x7]}, {0x5, 0x0, [0x20]}, {0xd, 0x0, [0x12, 0x4, 0x1f, 0x11, 0x4, 0x3, 0x1b, 0x10, 0x15]}, {0x5, 0x0, [0x15]}, {0x5, 0x0, [0x20]}, {0x5, 0x0, [0xb]}]}, @NL80211_ATTR_SCAN_SSIDS={0x14, 0x2d, 0x0, 0x1, [{0x5, 0x0, [0xa]}, {0x5, 0x0, [0xd]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc040}, 0x4000800) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000003c0)=0x2, &(0x7f0000000400)=0x4) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r5, 0x0, 0x10005, 0x0) 15:18:42 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b271"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x33000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1238.894775][ T28] audit: type=1804 audit(1596640723.192:1219): pid=29877 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/940/cgroup.controllers" dev="sda1" ino=16370 res=1 [ 1238.970160][T29887] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1239.075283][ T28] audit: type=1804 audit(1596640723.372:1220): pid=29915 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/941/cgroup.controllers" dev="sda1" ino=16379 res=1 [ 1239.147710][T29899] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 15:18:43 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b271"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:43 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x34000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1239.564160][ T28] audit: type=1804 audit(1596640723.862:1221): pid=29928 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/942/cgroup.controllers" dev="sda1" ino=16382 res=1 15:18:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x35000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1240.238393][ T28] audit: type=1804 audit(1596640724.542:1222): pid=29945 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/943/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 1240.492141][T29925] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 15:18:44 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550ffeeea53e3df7ed923ac40d3d9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c78aac2ded9b76f25e457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad80f019f1a2af0b495875e50af6c0afd624fe", @ANYRESDEC], 0x32) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x48, 0x2c, 0xd27, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}]}]}]}}]}, 0x48}}, 0x11) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r8, 0x0, {0x0, 0x1, 0x1}, 0x1}, 0x18) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:45 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b271"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:45 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000001d00)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r3, @ANYBLOB="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"], 0xbc}, 0x1, 0x0, 0x0, 0x20040000}, 0x4840) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000440)=@can={0x1d, 0x0}, 0x80, &(0x7f0000001700)=[{&(0x7f00000004c0)=""/125, 0x7d}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/159, 0x9f}, {&(0x7f0000001600)=""/109, 0x6d}, {&(0x7f0000001680)=""/87, 0x57}], 0x5, &(0x7f0000001780)=""/130, 0x82}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001880)={0x3dc, 0x0, 0x4, 0x70bd2d, 0x25dfdc01, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x52}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x8a}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x8001}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x10ffe275}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d99e0a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 15:18:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x36000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1240.933888][ T28] audit: type=1804 audit(1596640725.232:1223): pid=29964 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/944/cgroup.controllers" dev="sda1" ino=16364 res=1 15:18:45 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1241.155577][T29960] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 15:18:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x37000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1241.349404][T29966] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:18:45 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:45 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1241.636808][ T28] audit: type=1804 audit(1596640725.932:1224): pid=30000 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/945/cgroup.controllers" dev="sda1" ino=16373 res=1 15:18:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x38000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1242.280115][ T28] audit: type=1804 audit(1596640726.582:1225): pid=30016 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/946/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 1242.602550][T30003] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 15:18:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x39000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:47 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1242.882925][ T28] audit: type=1804 audit(1596640727.182:1226): pid=30027 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/947/cgroup.controllers" dev="sda1" ino=16373 res=1 15:18:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x36000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x3a000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1243.444997][ T28] audit: type=1804 audit(1596640727.742:1227): pid=30037 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir132604636/syzkaller.E3turL/1087/cgroup.controllers" dev="sda1" ino=16370 res=1 [ 1243.592203][ T28] audit: type=1804 audit(1596640727.892:1228): pid=30040 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/948/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 1243.832903][T30028] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 15:18:48 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x39000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:48 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'geneve0\x00', {0x7, 0x0, @local}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES32=r7, @ANYRESHEX], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000c0002"], 0x38}}, 0x4010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="986469a72c00270d00000000000000000000000018f72f061835ad0cdaf7d2c7eca9914e8af3c4510083e43b1249356c90f40f1a275f2625d5d8825ba82f5a5b83763770", @ANYRES32=r7, @ANYBLOB="0000000000000000b37200000b000100666c6f776572000018000200140054800c000280080001000000000004000180"], 0x48}}, 0x4000000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={r7, 0x1, 0x6, @multicast}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 15:18:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x3b000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:48 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x1c000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1244.223950][ T28] audit: type=1804 audit(1596640728.522:1229): pid=30051 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir825461252/syzkaller.nl1Ai6/953/cgroup.controllers" dev="sda1" ino=16362 res=1 [ 1244.329787][T30068] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 15:18:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x3c000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1244.450384][ T28] audit: type=1804 audit(1596640728.752:1230): pid=30066 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir132604636/syzkaller.E3turL/1088/cgroup.controllers" dev="sda1" ino=16377 res=1 15:18:48 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a00000018000000"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1244.617594][ T28] audit: type=1804 audit(1596640728.922:1231): pid=30072 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/950/cgroup.controllers" dev="sda1" ino=16378 res=1 15:18:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x1c000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1244.765117][T30076] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 15:18:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:18:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x3d000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x1c000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1245.213957][ T28] audit: type=1804 audit(1596640729.512:1232): pid=30088 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/951/cgroup.controllers" dev="sda1" ino=16378 res=1 [ 1245.334146][ T28] audit: type=1804 audit(1596640729.612:1233): pid=30089 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir132604636/syzkaller.E3turL/1090/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 1245.579166][T30085] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1245.722282][T30091] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1245.762658][T30091] bond0: (slave bond8): Enslaving as an active interface with an up link 15:18:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x3c000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:50 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a00000018000000"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:50 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f00000000c0)=0x8001) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x3e000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:50 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) socket(0x15, 0x2, 0x9) accept$unix(r0, 0x0, &(0x7f00000000c0)) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000200)={{0x2, 0x4e23, @private=0xa010100}, {0x1, @dev={[], 0x21}}, 0x44, {0x2, 0x4e20, @multicast2}, 'rose0\x00'}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r6, 0x0) accept4$bt_l2cap(r6, 0x0, &(0x7f0000000280), 0x81c00) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000002980)) [ 1245.941833][T30139] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 15:18:50 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad1649e48869873fd9ffe8c90d", @ANYRES16, @ANYRESDEC], 0x32) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) [ 1246.032879][ T28] audit: type=1804 audit(1596640730.332:1234): pid=30145 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/952/cgroup.controllers" dev="sda1" ino=15708 res=1 [ 1246.227910][ T28] audit: type=1804 audit(1596640730.532:1235): pid=30144 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir168958197/syzkaller.Pldjsa/1884/cgroup.controllers" dev="sda1" ino=16369 res=1 15:18:50 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a00000018000000"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x3f000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1246.690115][T30167] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1246.747210][ T28] audit: type=1804 audit(1596640731.052:1236): pid=30171 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/953/cgroup.controllers" dev="sda1" ino=16376 res=1 15:18:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) 15:18:51 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a000000180000001400"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x40000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1247.307395][ T28] audit: type=1804 audit(1596640731.612:1237): pid=30183 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/954/cgroup.controllers" dev="sda1" ino=16376 res=1 15:18:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x79010000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1247.910036][ T28] audit: type=1804 audit(1596640732.212:1238): pid=30191 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/955/cgroup.controllers" dev="sda1" ino=16376 res=1 15:18:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) 15:18:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x3f000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1248.119745][T30175] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 15:18:52 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x2, 0x800000003, 0xfffffff9) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) accept4$alg(r1, 0x0, 0x0, 0x800) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @private=0xa010101}}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x7a010000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1248.268628][T30200] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 15:18:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x79010000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1248.471404][T30202] 8021q: adding VLAN 0 to HW filter on device bond8 15:18:52 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a000000180000001400"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1248.525802][T30202] device bond8 entered promiscuous mode [ 1248.532184][T30202] bond0: (slave bond8): Enslaving as an active interface with an up link 15:18:53 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f00000000c0)=0x8001) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:18:53 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a000000180000001400"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x84000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1249.127684][T30266] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1249.244242][T30269] 8021q: adding VLAN 0 to HW filter on device bond19 15:18:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x79010000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1249.299252][T30269] bond0: (slave bond19): Enslaving as an active interface with an up link [ 1249.334040][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1249.334057][ T28] audit: type=1804 audit(1596640733.632:1242): pid=30302 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/957/cgroup.controllers" dev="sda1" ino=16381 res=1 15:18:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x7a010000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1249.600641][ T28] audit: type=1804 audit(1596640733.902:1243): pid=30310 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir825461252/syzkaller.nl1Ai6/957/cgroup.controllers" dev="sda1" ino=16376 res=1 [ 1249.764387][ T28] audit: type=1804 audit(1596640734.062:1244): pid=30313 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir132604636/syzkaller.E3turL/1094/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 1250.075578][ T28] audit: type=1804 audit(1596640734.372:1245): pid=30302 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/957/cgroup.controllers" dev="sda1" ino=16381 res=1 15:18:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x88000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, 0x0, &(0x7f0000000300)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:18:55 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000080)={r7, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r7, 0x9}, 0x8) 15:18:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xa4ffffff, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff99, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000effffe03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 15:18:55 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x0, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1250.749948][T30326] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1250.891333][T30327] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1250.922992][T30327] bond0: (slave bond9): Enslaving as an active interface with an up link [ 1250.935198][T30328] bond0: (slave bond9): Releasing backup interface [ 1250.978925][ T28] audit: type=1804 audit(1596640735.282:1246): pid=30381 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/959/cgroup.controllers" dev="sda1" ino=16376 res=1 [ 1251.245584][T30342] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:18:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xb000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:55 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x0, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:55 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f0000000200)={@none, 0x9, 0x3, 0x5, 0x7, 0x100, "0a76fbe965cb7a63a28f1fffc83d34283285c4b07c47fb3664fa94d82e41994a56d6f6af7703eb1e3da3ab2a1353dc2733f6c5ccb3d5dd5b772d67986fb1640697d2ff3ab0ca2a655ed5d4a79142de31b5312ad554cbc8beb03cd23cd12552f23a724883b906bff4d4f3295612d48976cade0934fc157af9a9d5f71de74ab30d"}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f00000000c0)={0x7, 'macvlan0\x00', {0x7ff}}) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1251.341885][T30377] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1251.352009][T30377] bond0: (slave bond20): Enslaving as an active interface with an up link 15:18:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xe4ffffff, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:55 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x0, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1251.447203][T30383] bond0: (slave bond20): Releasing backup interface [ 1251.565516][ T28] audit: type=1804 audit(1596640735.862:1247): pid=30428 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/960/cgroup.controllers" dev="sda1" ino=16364 res=1 15:18:56 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:56 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:56 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xa4ffffff, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:56 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:18:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xe7030000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1252.314877][ T28] audit: type=1804 audit(1596640736.612:1248): pid=30464 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/961/cgroup.controllers" dev="sda1" ino=16375 res=1 15:18:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xb000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:56 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r7, 0xdaa3b002485c5b6d, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) recvmsg(r6, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r8, 0x20, 0x70bd28, 0x25dfdbf8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4bd}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r8, 0xd22, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6a3ced30}]}, 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x81) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1252.449260][ T28] audit: type=1804 audit(1596640736.752:1249): pid=30461 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir132604636/syzkaller.E3turL/1096/cgroup.controllers" dev="sda1" ino=16366 res=1 15:18:56 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1252.865649][ T28] audit: type=1804 audit(1596640737.162:1250): pid=30473 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir168958197/syzkaller.Pldjsa/1889/cgroup.controllers" dev="sda1" ino=16368 res=1 15:18:57 executing program 5 (fault-call:2 fault-nth:0): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) 15:18:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xf4000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:57 executing program 2 (fault-call:1 fault-nth:0): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:18:57 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1253.358195][T30492] FAULT_INJECTION: forcing a failure. [ 1253.358195][T30492] name failslab, interval 1, probability 0, space 0, times 0 [ 1253.412098][T30492] CPU: 0 PID: 30492 Comm: syz-executor.2 Not tainted 5.8.0-rc7-syzkaller #0 [ 1253.421247][T30492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1253.431310][T30492] Call Trace: [ 1253.434615][T30492] dump_stack+0x18f/0x20d [ 1253.438965][T30492] should_fail.cold+0x5/0x14 [ 1253.443572][T30492] should_failslab+0x5/0xf [ 1253.448001][T30492] kmem_cache_alloc_node+0x257/0x3c0 [ 1253.453302][T30492] __alloc_skb+0x71/0x550 [ 1253.457649][T30492] netlink_sendmsg+0x94f/0xd90 [ 1253.462428][T30492] ? netlink_unicast+0x7d0/0x7d0 [ 1253.467386][T30492] ? netlink_unicast+0x7d0/0x7d0 [ 1253.472339][T30492] sock_sendmsg+0xcf/0x120 [ 1253.476773][T30492] ____sys_sendmsg+0x6e8/0x810 [ 1253.481554][T30492] ? kernel_sendmsg+0x50/0x50 [ 1253.486231][T30492] ? do_recvmmsg+0x6d0/0x6d0 [ 1253.490866][T30492] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1253.496864][T30492] ? _parse_integer+0x132/0x180 [ 1253.501736][T30492] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1253.507752][T30492] ___sys_sendmsg+0xf3/0x170 [ 1253.512357][T30492] ? sendmsg_copy_msghdr+0x160/0x160 [ 1253.517649][T30492] ? __fget_files+0x272/0x400 [ 1253.522339][T30492] ? lock_downgrade+0x820/0x820 [ 1253.527200][T30492] ? find_held_lock+0x2d/0x110 [ 1253.531997][T30492] ? ksys_write+0x212/0x250 [ 1253.536509][T30492] ? __fget_files+0x294/0x400 [ 1253.541192][T30492] ? __fget_light+0xea/0x280 [ 1253.545785][T30492] __sys_sendmsg+0xe5/0x1b0 [ 1253.550286][T30492] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1253.555339][T30492] ? do_syscall_64+0x1c/0xe0 [ 1253.559937][T30492] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1253.565927][T30492] do_syscall_64+0x60/0xe0 [ 1253.570345][T30492] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1253.576237][T30492] RIP: 0033:0x45ccd9 [ 1253.580127][T30492] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1253.599730][T30492] RSP: 002b:00007f2b755bfc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1253.608144][T30492] RAX: ffffffffffffffda RBX: 000000000002c080 RCX: 000000000045ccd9 [ 1253.616119][T30492] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1253.624099][T30492] RBP: 00007f2b755bfca0 R08: 0000000000000000 R09: 0000000000000000 [ 1253.632075][T30492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1253.640157][T30492] R13: 00007ffc915db7cf R14: 00007f2b755c09c0 R15: 000000000078bf0c 15:18:58 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1253.714361][ T28] audit: type=1804 audit(1596640738.012:1251): pid=30493 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/962/cgroup.controllers" dev="sda1" ino=16373 res=1 15:18:58 executing program 2 (fault-call:1 fault-nth:1): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:18:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xb000000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1254.072285][T30502] FAULT_INJECTION: forcing a failure. [ 1254.072285][T30502] name failslab, interval 1, probability 0, space 0, times 0 [ 1254.116882][T30502] CPU: 1 PID: 30502 Comm: syz-executor.2 Not tainted 5.8.0-rc7-syzkaller #0 [ 1254.125688][T30502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1254.135749][T30502] Call Trace: [ 1254.139057][T30502] dump_stack+0x18f/0x20d [ 1254.143407][T30502] should_fail.cold+0x5/0x14 [ 1254.148023][T30502] should_failslab+0x5/0xf [ 1254.152461][T30502] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1254.158284][T30502] __kmalloc_node_track_caller+0x38/0x60 [ 1254.163933][T30502] __alloc_skb+0xae/0x550 [ 1254.168291][T30502] netlink_sendmsg+0x94f/0xd90 [ 1254.173068][T30502] ? netlink_unicast+0x7d0/0x7d0 [ 1254.178024][T30502] ? netlink_unicast+0x7d0/0x7d0 [ 1254.182975][T30502] sock_sendmsg+0xcf/0x120 [ 1254.187403][T30502] ____sys_sendmsg+0x6e8/0x810 [ 1254.192186][T30502] ? kernel_sendmsg+0x50/0x50 [ 1254.196866][T30502] ? do_recvmmsg+0x6d0/0x6d0 [ 1254.201467][T30502] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1254.207462][T30502] ? _parse_integer+0x132/0x180 [ 1254.212323][T30502] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1254.218316][T30502] ___sys_sendmsg+0xf3/0x170 [ 1254.222918][T30502] ? sendmsg_copy_msghdr+0x160/0x160 [ 1254.228216][T30502] ? __fget_files+0x272/0x400 [ 1254.232910][T30502] ? lock_downgrade+0x820/0x820 [ 1254.237857][T30502] ? find_held_lock+0x2d/0x110 [ 1254.242719][T30502] ? ksys_write+0x212/0x250 [ 1254.247244][T30502] ? __fget_files+0x294/0x400 [ 1254.251953][T30502] ? __fget_light+0xea/0x280 [ 1254.256556][T30502] __sys_sendmsg+0xe5/0x1b0 [ 1254.261080][T30502] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1254.266130][T30502] ? do_syscall_64+0x1c/0xe0 [ 1254.270733][T30502] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1254.276730][T30502] do_syscall_64+0x60/0xe0 [ 1254.281243][T30502] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1254.287159][T30502] RIP: 0033:0x45ccd9 [ 1254.291088][T30502] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1254.311659][T30502] RSP: 002b:00007f2b755bfc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1254.320083][T30502] RAX: ffffffffffffffda RBX: 000000000002c080 RCX: 000000000045ccd9 [ 1254.328060][T30502] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1254.336178][T30502] RBP: 00007f2b755bfca0 R08: 0000000000000000 R09: 0000000000000000 [ 1254.344147][T30502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1254.352108][T30502] R13: 00007ffc915db7cf R14: 00007f2b755c09c0 R15: 000000000078bf0c [ 1254.425628][ T28] audit: type=1804 audit(1596640738.722:1252): pid=30493 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/962/cgroup.controllers" dev="sda1" ino=16373 res=1 15:18:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xf5ffffff, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:18:58 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r0, &(0x7f00000003c0)=ANY=[], 0x32) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendto$rose(0xffffffffffffffff, &(0x7f0000000240)="5072160a6cc2ded43e3b8b87fbeec8458f918cbd876a1c5ad8e07958204d34d93dfb95a8dafefcf3b59d27e3a48659bc5a985175850c21a11846b8d579ead6e5d95bd3a78d24e81c10843b70dcc0de43ca60eb8ded59d33abba0c12f25f068c1fdb3c0e9142b6be1f972c508fe03f37eb5089817e68c1626bc", 0x79, 0x80, &(0x7f00000002c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @default}, 0x1c) close(r7) bind$inet(r7, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r6, 0x0, r7, 0x0, 0x19404, 0x100b000000000000) splice(r5, 0x0, r6, 0x0, 0x2, 0x2) 15:18:58 executing program 2 (fault-call:1 fault-nth:2): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:18:58 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) 15:18:58 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1254.611251][T30515] FAULT_INJECTION: forcing a failure. [ 1254.611251][T30515] name failslab, interval 1, probability 0, space 0, times 0 [ 1254.665093][T30515] CPU: 0 PID: 30515 Comm: syz-executor.2 Not tainted 5.8.0-rc7-syzkaller #0 [ 1254.673809][T30515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1254.683876][T30515] Call Trace: [ 1254.687202][T30515] dump_stack+0x18f/0x20d [ 1254.691550][T30515] should_fail.cold+0x5/0x14 [ 1254.696159][T30515] should_failslab+0x5/0xf [ 1254.700585][T30515] kmem_cache_alloc_trace+0x240/0x2d0 [ 1254.705974][T30515] ? lock_is_held_type+0xb0/0xe0 [ 1254.711051][T30515] rtnl_newlink+0x46/0xa0 [ 1254.715398][T30515] ? __rtnl_newlink+0x1750/0x1750 [ 1254.720435][T30515] rtnetlink_rcv_msg+0x44e/0xad0 [ 1254.725422][T30515] ? rtnetlink_put_metrics+0x510/0x510 [ 1254.730901][T30515] ? lock_acquire+0x1f1/0xad0 [ 1254.735589][T30515] ? netlink_deliver_tap+0x146/0xb70 [ 1254.740899][T30515] netlink_rcv_skb+0x15a/0x430 [ 1254.745684][T30515] ? rtnetlink_put_metrics+0x510/0x510 [ 1254.751166][T30515] ? netlink_ack+0xa10/0xa10 [ 1254.755790][T30515] netlink_unicast+0x533/0x7d0 [ 1254.760571][T30515] ? netlink_attachskb+0x810/0x810 [ 1254.765688][T30515] ? _copy_from_iter_full+0x247/0x890 [ 1254.771073][T30515] ? __phys_addr+0x9a/0x110 [ 1254.775602][T30515] ? __phys_addr_symbol+0x2c/0x70 [ 1254.780656][T30515] ? __check_object_size+0x171/0x3e4 [ 1254.785965][T30515] netlink_sendmsg+0x856/0xd90 [ 1254.790754][T30515] ? netlink_unicast+0x7d0/0x7d0 [ 1254.795718][T30515] ? netlink_unicast+0x7d0/0x7d0 [ 1254.800672][T30515] sock_sendmsg+0xcf/0x120 [ 1254.805109][T30515] ____sys_sendmsg+0x6e8/0x810 [ 1254.809896][T30515] ? kernel_sendmsg+0x50/0x50 [ 1254.814580][T30515] ? do_recvmmsg+0x6d0/0x6d0 [ 1254.819185][T30515] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1254.825172][T30515] ? _parse_integer+0x132/0x180 [ 1254.830038][T30515] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1254.836031][T30515] ___sys_sendmsg+0xf3/0x170 [ 1254.840663][T30515] ? sendmsg_copy_msghdr+0x160/0x160 [ 1254.845951][T30515] ? __fget_files+0x272/0x400 [ 1254.850643][T30515] ? lock_downgrade+0x820/0x820 [ 1254.855504][T30515] ? find_held_lock+0x2d/0x110 [ 1254.860537][T30515] ? ksys_write+0x212/0x250 [ 1254.870441][T30515] ? __fget_files+0x294/0x400 [ 1254.875130][T30515] ? __fget_light+0xea/0x280 [ 1254.879738][T30515] __sys_sendmsg+0xe5/0x1b0 [ 1254.884251][T30515] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1254.889305][T30515] ? do_syscall_64+0x1c/0xe0 [ 1254.893907][T30515] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1254.899900][T30515] do_syscall_64+0x60/0xe0 [ 1254.904330][T30515] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1254.910309][T30515] RIP: 0033:0x45ccd9 [ 1254.914351][T30515] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1254.934000][T30515] RSP: 002b:00007f2b755bfc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1254.942426][T30515] RAX: ffffffffffffffda RBX: 000000000002c080 RCX: 000000000045ccd9 [ 1254.950435][T30515] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1254.958417][T30515] RBP: 00007f2b755bfca0 R08: 0000000000000000 R09: 0000000000000000 [ 1254.966400][T30515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1254.974385][T30515] R13: 00007ffc915db7cf R14: 00007f2b755c09c0 R15: 000000000078bf0c 15:18:59 executing program 3 (fault-call:2 fault-nth:0): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1255.004148][ T28] audit: type=1804 audit(1596640739.302:1253): pid=30523 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/963/cgroup.controllers" dev="sda1" ino=16373 res=1 15:18:59 executing program 2 (fault-call:1 fault-nth:3): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1255.210438][T30537] FAULT_INJECTION: forcing a failure. [ 1255.210438][T30537] name failslab, interval 1, probability 0, space 0, times 0 [ 1255.249323][T30537] CPU: 1 PID: 30537 Comm: syz-executor.3 Not tainted 5.8.0-rc7-syzkaller #0 [ 1255.258045][T30537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1255.264042][T30539] FAULT_INJECTION: forcing a failure. [ 1255.264042][T30539] name failslab, interval 1, probability 0, space 0, times 0 [ 1255.269147][T30537] Call Trace: [ 1255.269220][T30537] dump_stack+0x18f/0x20d [ 1255.269245][T30537] should_fail.cold+0x5/0x14 [ 1255.294068][T30537] ? __nf_conntrack_find_get+0x805/0xf30 [ 1255.299711][T30537] should_failslab+0x5/0xf [ 1255.304129][T30537] kmem_cache_alloc+0x40/0x3b0 [ 1255.308906][T30537] __nf_conntrack_alloc+0xda/0x5f0 [ 1255.314026][T30537] init_conntrack.constprop.0+0xdd3/0x1060 [ 1255.319843][T30537] ? __nf_conntrack_find_get+0x827/0xf30 [ 1255.325480][T30537] ? nf_conntrack_alloc+0x40/0x40 [ 1255.330544][T30537] ? hash_conntrack_raw+0x2dc/0x470 [ 1255.335756][T30537] ? __schedule+0x8f2/0x2210 [ 1255.340359][T30537] nf_conntrack_in+0x9b9/0x12a0 [ 1255.345228][T30537] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1255.351397][T30537] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1255.357392][T30537] ? nf_conntrack_find_get+0x40/0x40 [ 1255.362685][T30537] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1255.367799][T30537] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1255.373991][T30537] nf_hook_slow+0xc5/0x1e0 [ 1255.378428][T30537] __ip6_local_out+0x419/0x890 [ 1255.383208][T30537] ? ipv6_select_ident+0x2c0/0x2c0 [ 1255.388324][T30537] ? ip6_dst_hoplimit+0x3d0/0x3d0 [ 1255.393356][T30537] ip6_local_out+0x26/0x1a0 [ 1255.397865][T30537] ip6_send_skb+0xb7/0x340 [ 1255.402307][T30537] udp_v6_send_skb+0x7c2/0x15d0 [ 1255.407182][T30537] udp_v6_push_pending_frames+0x24e/0x360 [ 1255.412903][T30537] ? udp_v6_send_skb+0x15d0/0x15d0 [ 1255.418031][T30537] ? ip6_append_data+0x1f4/0x330 [ 1255.422983][T30537] ? ip_frag_init+0x330/0x330 [ 1255.427676][T30537] udpv6_sendmsg+0x1c3f/0x2b90 [ 1255.432444][T30537] ? ip_frag_init+0x330/0x330 [ 1255.437130][T30537] ? udp_v6_push_pending_frames+0x360/0x360 [ 1255.443040][T30537] ? ima_get_action+0x76/0xa0 [ 1255.447733][T30537] ? __lock_acquire+0xc1e/0x56e0 [ 1255.453553][T30537] ? lock_acquire+0x1f1/0xad0 [ 1255.458231][T30537] ? __might_fault+0xef/0x1d0 [ 1255.462920][T30537] ? find_held_lock+0x2d/0x110 [ 1255.467689][T30537] ? __might_fault+0x11f/0x1d0 [ 1255.472467][T30537] ? lock_downgrade+0x820/0x820 [ 1255.477340][T30537] ? lock_is_held_type+0xb0/0xe0 [ 1255.482294][T30537] ? aa_sk_perm+0x316/0xaa0 [ 1255.486801][T30537] ? __might_fault+0x190/0x1d0 [ 1255.491571][T30537] ? rw_copy_check_uvector+0x298/0x390 [ 1255.497066][T30537] ? aa_af_perm+0x230/0x230 [ 1255.501584][T30537] ? __copy_msghdr_from_user+0x2b4/0x4b0 [ 1255.507226][T30537] inet6_sendmsg+0x99/0xe0 [ 1255.511645][T30537] ? inet6_compat_ioctl+0x310/0x310 [ 1255.516844][T30537] sock_sendmsg+0xcf/0x120 [ 1255.521269][T30537] ____sys_sendmsg+0x331/0x810 [ 1255.526039][T30537] ? kernel_sendmsg+0x50/0x50 [ 1255.530713][T30537] ? do_recvmmsg+0x6d0/0x6d0 [ 1255.535311][T30537] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1255.541298][T30537] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1255.547287][T30537] ___sys_sendmsg+0xf3/0x170 [ 1255.551881][T30537] ? sendmsg_copy_msghdr+0x160/0x160 [ 1255.557172][T30537] ? __fget_files+0x272/0x400 [ 1255.561854][T30537] ? lock_downgrade+0x820/0x820 [ 1255.566739][T30537] ? __fget_files+0x294/0x400 [ 1255.571427][T30537] ? __fget_light+0xea/0x280 [ 1255.576023][T30537] __sys_sendmmsg+0x195/0x480 [ 1255.580727][T30537] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1255.585756][T30537] ? lock_downgrade+0x820/0x820 [ 1255.590605][T30537] ? vfs_write+0x397/0x6b0 [ 1255.595033][T30537] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1255.600575][T30537] ? lock_is_held_type+0xb0/0xe0 [ 1255.605526][T30537] ? wait_for_completion+0x260/0x260 [ 1255.610814][T30537] ? vfs_write+0x1b0/0x6b0 [ 1255.615235][T30537] ? fput_many+0x2f/0x1a0 [ 1255.619652][T30537] ? ksys_write+0x1a5/0x250 [ 1255.624159][T30537] ? lock_is_held_type+0xb0/0xe0 [ 1255.629097][T30537] __x64_sys_sendmmsg+0x99/0x100 [ 1255.634039][T30537] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1255.639152][T30537] do_syscall_64+0x60/0xe0 [ 1255.643586][T30537] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1255.649477][T30537] RIP: 0033:0x45ccd9 [ 1255.653387][T30537] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1255.673008][T30537] RSP: 002b:00007f0d82967c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1255.681525][T30537] RAX: ffffffffffffffda RBX: 0000000000026c80 RCX: 000000000045ccd9 [ 1255.689500][T30537] RDX: 0000000000000001 RSI: 0000000020000940 RDI: 0000000000000003 [ 1255.697492][T30537] RBP: 00007f0d82967ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1255.705469][T30537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1255.713444][T30537] R13: 00007ffcdac232cf R14: 00007f0d829689c0 R15: 000000000078bf0c [ 1255.721443][T30539] CPU: 0 PID: 30539 Comm: syz-executor.2 Not tainted 5.8.0-rc7-syzkaller #0 [ 1255.730128][T30539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1255.740185][T30539] Call Trace: [ 1255.743484][T30539] dump_stack+0x18f/0x20d [ 1255.747834][T30539] should_fail.cold+0x5/0x14 [ 1255.752433][T30539] should_failslab+0x5/0xf [ 1255.756855][T30539] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1255.763335][T30539] __kmalloc_node+0x38/0x60 [ 1255.767850][T30539] kvmalloc_node+0xb4/0xf0 [ 1255.772281][T30539] alloc_netdev_mqs+0x97/0xdc0 [ 1255.777054][T30539] ? br_netpoll_disable+0x60/0x60 [ 1255.782089][T30539] rtnl_create_link+0x219/0xad0 [ 1255.786955][T30539] __rtnl_newlink+0xfa0/0x1750 [ 1255.791741][T30539] ? rtnl_setlink+0x3c0/0x3c0 [ 1255.796428][T30539] ? lock_downgrade+0x820/0x820 [ 1255.801301][T30539] ? is_bpf_text_address+0xcb/0x160 [ 1255.807199][T30539] ? kernel_text_address+0xbd/0xf0 [ 1255.812350][T30539] ? __kernel_text_address+0x9/0x30 [ 1255.817580][T30539] ? unwind_get_return_address+0x51/0x90 [ 1255.823235][T30539] ? profile_setup.cold+0xc1/0xc1 [ 1255.828870][T30539] ? arch_stack_walk+0x97/0xf0 [ 1255.833646][T30539] ? stack_trace_save+0x8c/0xc0 [ 1255.838517][T30539] ? stack_trace_consume_entry+0x160/0x160 [ 1255.844472][T30539] ? mark_lock+0xbc/0x1710 [ 1255.848905][T30539] ? match_held_lock+0x160/0x170 [ 1255.853851][T30539] ? trace_kmalloc+0xfd/0x130 [ 1255.858546][T30539] ? kmem_cache_alloc_trace+0x168/0x2d0 [ 1255.864104][T30539] rtnl_newlink+0x64/0xa0 [ 1255.868438][T30539] ? __rtnl_newlink+0x1750/0x1750 [ 1255.873469][T30539] rtnetlink_rcv_msg+0x44e/0xad0 [ 1255.878417][T30539] ? rtnetlink_put_metrics+0x510/0x510 [ 1255.883923][T30539] ? lock_acquire+0x1f1/0xad0 [ 1255.888607][T30539] ? netlink_deliver_tap+0x146/0xb70 [ 1255.893905][T30539] netlink_rcv_skb+0x15a/0x430 [ 1255.898683][T30539] ? rtnetlink_put_metrics+0x510/0x510 [ 1255.904148][T30539] ? netlink_ack+0xa10/0xa10 [ 1255.908757][T30539] netlink_unicast+0x533/0x7d0 [ 1255.913529][T30539] ? netlink_attachskb+0x810/0x810 [ 1255.918645][T30539] ? _copy_from_iter_full+0x247/0x890 [ 1255.924032][T30539] ? __phys_addr+0x9a/0x110 [ 1255.928536][T30539] ? __phys_addr_symbol+0x2c/0x70 [ 1255.933571][T30539] ? __check_object_size+0x171/0x3e4 [ 1255.938866][T30539] netlink_sendmsg+0x856/0xd90 [ 1255.943642][T30539] ? netlink_unicast+0x7d0/0x7d0 [ 1255.948593][T30539] ? netlink_unicast+0x7d0/0x7d0 [ 1255.953537][T30539] sock_sendmsg+0xcf/0x120 [ 1255.957966][T30539] ____sys_sendmsg+0x6e8/0x810 [ 1255.962738][T30539] ? kernel_sendmsg+0x50/0x50 [ 1255.967422][T30539] ? do_recvmmsg+0x6d0/0x6d0 [ 1255.972030][T30539] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1255.978015][T30539] ? _parse_integer+0x132/0x180 [ 1255.982882][T30539] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1255.988889][T30539] ___sys_sendmsg+0xf3/0x170 [ 1255.993487][T30539] ? sendmsg_copy_msghdr+0x160/0x160 [ 1255.998777][T30539] ? __fget_files+0x272/0x400 [ 1256.003465][T30539] ? lock_downgrade+0x820/0x820 [ 1256.008321][T30539] ? find_held_lock+0x2d/0x110 [ 1256.013087][T30539] ? ksys_write+0x212/0x250 [ 1256.017600][T30539] ? __fget_files+0x294/0x400 [ 1256.022286][T30539] ? __fget_light+0xea/0x280 [ 1256.026888][T30539] __sys_sendmsg+0xe5/0x1b0 [ 1256.031396][T30539] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1256.036459][T30539] ? do_syscall_64+0x1c/0xe0 [ 1256.041060][T30539] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1256.047074][T30539] do_syscall_64+0x60/0xe0 [ 1256.051499][T30539] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1256.057391][T30539] RIP: 0033:0x45ccd9 15:19:00 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x4) 15:19:00 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1256.061290][T30539] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1256.080899][T30539] RSP: 002b:00007f2b755bfc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1256.089319][T30539] RAX: ffffffffffffffda RBX: 000000000002c080 RCX: 000000000045ccd9 [ 1256.097291][T30539] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1256.105269][T30539] RBP: 00007f2b755bfca0 R08: 0000000000000000 R09: 0000000000000000 15:19:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xfbffffff, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1256.113249][T30539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1256.121228][T30539] R13: 00007ffc915db7cf R14: 00007f2b755c09c0 R15: 000000000078bf0c [ 1256.332199][ T28] audit: type=1804 audit(1596640740.632:1254): pid=30551 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/964/cgroup.controllers" dev="sda1" ino=16382 res=1 15:19:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:19:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:19:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x4, 0x0}}], 0x1, 0x0) 15:19:01 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x100b000000000000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0xff00, 0x1, 0x4, 0x2, r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:01 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0xffffff80) 15:19:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xfeffffff, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x7, 0x0}}], 0x1, 0x0) 15:19:01 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0), 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:19:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x8, 0x0}}], 0x1, 0x0) [ 1257.263309][ T28] audit: type=1804 audit(1596640741.562:1255): pid=30585 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/965/cgroup.controllers" dev="sda1" ino=16372 res=1 15:19:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x9, 0x0}}], 0x1, 0x0) 15:19:01 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0), 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:19:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x60, 0x0}}], 0x1, 0x0) 15:19:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xff0f0000, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1257.966146][ T28] audit: type=1804 audit(1596640742.272:1256): pid=30625 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/966/cgroup.controllers" dev="sda1" ino=16376 res=1 15:19:02 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000080)={r4, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e24, 0x3, @ipv4={[], [], @remote}, 0xffffffff}}}, &(0x7f00000000c0)=0x84) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r5, 0x0, 0x10005, 0x0) 15:19:02 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0), 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:19:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x700, 0x0}}], 0x1, 0x0) 15:19:02 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0xffffff81) 15:19:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xffefffff, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x900, 0x0}}], 0x1, 0x0) 15:19:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1258.620991][ T28] audit: type=1804 audit(1596640742.922:1257): pid=30643 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/967/cgroup.controllers" dev="sda1" ino=16382 res=1 15:19:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0xbb8, 0x0}}], 0x1, 0x0) 15:19:03 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 15:19:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xffffefff, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1259.069734][ T28] audit: type=1804 audit(1596640743.372:1258): pid=30670 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/968/cgroup.controllers" dev="sda1" ino=15786 res=1 15:19:04 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 15:19:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x2000, 0x0}}], 0x1, 0x0) 15:19:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:04 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) shutdown(r0, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000000), 0x4) 15:19:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xffffffa4, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:04 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f00000003c0), 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r8, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={r8, @in6={{0xa, 0x4e21, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}}, &(0x7f0000000200)=0x84) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:04 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 15:19:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x3f00, 0x0}}], 0x1, 0x0) 15:19:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1259.968386][ T28] audit: type=1804 audit(1596640744.272:1259): pid=30695 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/969/cgroup.controllers" dev="sda1" ino=15776 res=1 15:19:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x6000, 0x0}}], 0x1, 0x0) 15:19:04 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 15:19:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:04 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 15:19:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0xb80b, 0x0}}], 0x1, 0x0) 15:19:05 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r1, 0x1) 15:19:05 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 15:19:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x40000, 0x0}}], 0x1, 0x0) 15:19:05 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x8}, 0x1) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bc22a394a38da2b8d8e54c6967e1ad6c52077fd832fe9ccd5bd7e4fff19939e81237b4a35dbbbdd02df61d9176aaf41a5e37a20e3eda9eef7420213f2989cbccbc7a7d4276ea6507d15411567b843e856ebcc242dcae02e8e8d0beb62d4669061f711cbb076b6600000000", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xffffffe4, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:05 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000080)={r4, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e24, 0x3, @ipv4={[], [], @remote}, 0xffffffff}}}, &(0x7f00000000c0)=0x84) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r5, 0x0, 0x10005, 0x0) 15:19:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x1000000, 0x0}}], 0x1, 0x0) 15:19:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x4000000, 0x0}}], 0x1, 0x0) [ 1261.312974][ T28] audit: type=1804 audit(1596640745.612:1260): pid=30760 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/970/cgroup.controllers" dev="sda1" ino=16368 res=1 15:19:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x7000000, 0x0}}], 0x1, 0x0) 15:19:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4}, 0xe) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x100b000000000000) recvmsg$qrtr(r1, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0xbc2671266c9c4680) shutdown(r0, 0x1) r3 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1405, 0x1, 0x70bd2b, 0x25dfdbfb, "", [{{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 15:19:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x8000000, 0x0}}], 0x1, 0x0) 15:19:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xfffffff5, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x48, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x9000000, 0x0}}], 0x1, 0x0) 15:19:06 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010e9e458ed0000000000000000000000b98baab7fc2a9741f9bfb26a36f02382ee4a00551c5c85722e5eaf7056c9a489a5969fffc0d5a3730b9125c1270987be77bb8fbb947ac064b04f942e555839ad1df61a4693d6fbcedf1bdc3127ad5465cda7d47f0a770fa4a53224400a4860434cd4ebdce09e21ffbd1fd8d1dbbf", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000001480)={@loopback, 0x2e, r5}) close(r2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRES16=r1], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xffefffff, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x20000000, 0x0}}], 0x1, 0x0) 15:19:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4a, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1262.594130][ T28] audit: type=1804 audit(1596640746.892:1261): pid=30817 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/971/cgroup.controllers" dev="sda1" ino=16378 res=1 15:19:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x100b000000000000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080)={0xa4}, 0x1) shutdown(r0, 0x1) [ 1262.747575][ T28] audit: type=1804 audit(1596640746.972:1262): pid=30822 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir230745986/syzkaller.5RT0Bv/1191/cgroup.controllers" dev="sda1" ino=16379 res=1 15:19:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x3f000000, 0x0}}], 0x1, 0x0) 15:19:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:07 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x100b000000000000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0xff00, 0x1, 0x4, 0x2, r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x60000000, 0x0}}], 0x1, 0x0) 15:19:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xfffffffb, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x100b000000000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYRES16=r2, @ANYBLOB="705eac0e6d9aa8c1f213424735db27a40982060624717a6fbb82e9cf116bd4affaabfea9b22a012e1ca1631065d713b6b52f5783f7ea93dd277555338fe2e661478e313f0d9898b63bf21e2171102b3059d86be43511ad489d7ccde92d649e36ef23b0d15b9a8e76c53c7550a31a1218063f4e3267eb7510aa71cbd91c088f7d8147513f52d1f911d7e0eee5b905595cfa03c69cf27099b8f6f74f81296afd5abfba8e6d883b98fff21fb20309e37b9b0c965d0b86ab57af1bbb5ee54e95d60f63a626"], 0xe8}, 0x1, 0x0, 0x0, 0x10005}, 0x80) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0c030000", @ANYRES16=r4, @ANYBLOB="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"], 0x30c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000640)={r2, 0x609cba4a, 0x6, "9d4a130c56497d12ae71dc5390c5763936c1208a6b5d4885d15cc662df50"}) shutdown(r0, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, r7, 0x800, 0x70bf2c, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0x81}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8011}, 0x884) 15:19:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x68, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1263.352471][ T28] audit: type=1804 audit(1596640747.652:1263): pid=30867 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/972/cgroup.controllers" dev="sda1" ino=15765 res=1 15:19:08 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:08 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x7ffffff7, 0x0}}], 0x1, 0x0) 15:19:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x6c, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xfffffffe, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:08 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x8dffffff, 0x0}}], 0x1, 0x0) 15:19:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x74, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000)=0x8, 0x4) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x3ff, 0x2, 0x9, 0x5, 0x1}, 0x14) [ 1264.103129][ T28] audit: type=1804 audit(1596640748.402:1264): pid=30897 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/973/cgroup.controllers" dev="sda1" ino=15790 res=1 15:19:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xfffffffb, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:08 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0xb80b0000, 0x0}}], 0x1, 0x0) 15:19:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x3, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x7a, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x8a, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1264.820913][ T28] audit: type=1804 audit(1596640749.122:1265): pid=30932 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir230745986/syzkaller.5RT0Bv/1193/cgroup.controllers" dev="sda1" ino=16066 res=1 [ 1264.935012][ T28] audit: type=1804 audit(1596640749.162:1266): pid=30929 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/974/cgroup.controllers" dev="sda1" ino=16050 res=1 15:19:09 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) socket$packet(0x11, 0x2, 0x300) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0xeffdffff, 0x0}}], 0x1, 0x0) 15:19:09 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf8, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x4040004) 15:19:09 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0), 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:19:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x92, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x4, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0xf7ffff7f, 0x0}}], 0x1, 0x0) 15:19:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xcf, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1265.714832][ T28] audit: type=1804 audit(1596640750.012:1267): pid=30960 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/975/cgroup.controllers" dev="sda1" ino=15747 res=1 15:19:10 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0xfffffdef, 0x0}}], 0x1, 0x0) 15:19:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xea, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:10 executing program 4 (fault-call:4 fault-nth:0): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:19:10 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0xffffff7f, 0x0}}], 0x1, 0x0) [ 1266.044080][T30982] FAULT_INJECTION: forcing a failure. [ 1266.044080][T30982] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.103671][T30982] CPU: 0 PID: 30982 Comm: syz-executor.4 Not tainted 5.8.0-rc7-syzkaller #0 [ 1266.112412][T30982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1266.122505][T30982] Call Trace: [ 1266.125809][T30982] dump_stack+0x18f/0x20d [ 1266.130157][T30982] should_fail.cold+0x5/0x14 [ 1266.134788][T30982] should_failslab+0x5/0xf [ 1266.139214][T30982] kmem_cache_alloc_node+0x257/0x3c0 [ 1266.144525][T30982] __alloc_skb+0x71/0x550 [ 1266.148893][T30982] netlink_sendmsg+0x94f/0xd90 [ 1266.153679][T30982] ? netlink_unicast+0x7d0/0x7d0 [ 1266.158638][T30982] ? netlink_unicast+0x7d0/0x7d0 [ 1266.163621][T30982] sock_sendmsg+0xcf/0x120 [ 1266.168054][T30982] ____sys_sendmsg+0x331/0x810 [ 1266.172957][T30982] ? kernel_sendmsg+0x50/0x50 [ 1266.177644][T30982] ? do_recvmmsg+0x6d0/0x6d0 [ 1266.182251][T30982] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1266.188249][T30982] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1266.194257][T30982] ___sys_sendmsg+0xf3/0x170 [ 1266.198874][T30982] ? sendmsg_copy_msghdr+0x160/0x160 [ 1266.204174][T30982] ? __fget_files+0x272/0x400 [ 1266.208875][T30982] ? lock_downgrade+0x820/0x820 [ 1266.213775][T30982] ? __fget_files+0x294/0x400 [ 1266.218487][T30982] ? __fget_light+0xea/0x280 [ 1266.223096][T30982] __sys_sendmmsg+0x195/0x480 [ 1266.227796][T30982] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1266.232841][T30982] ? lock_downgrade+0x820/0x820 [ 1266.237707][T30982] ? vfs_write+0x397/0x6b0 [ 1266.242152][T30982] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1266.247710][T30982] ? lock_is_held_type+0xb0/0xe0 [ 1266.252685][T30982] ? wait_for_completion+0x260/0x260 [ 1266.257981][T30982] ? vfs_write+0x1b0/0x6b0 [ 1266.262409][T30982] ? fput_many+0x2f/0x1a0 [ 1266.266748][T30982] ? ksys_write+0x1a5/0x250 [ 1266.271357][T30982] ? lock_is_held_type+0xb0/0xe0 [ 1266.276307][T30982] __x64_sys_sendmmsg+0x99/0x100 [ 1266.281283][T30982] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1266.286401][T30982] do_syscall_64+0x60/0xe0 [ 1266.290825][T30982] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1266.296721][T30982] RIP: 0033:0x45ccd9 [ 1266.300622][T30982] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1266.320236][T30982] RSP: 002b:00007f9a55eeac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1266.328665][T30982] RAX: ffffffffffffffda RBX: 0000000000026c00 RCX: 000000000045ccd9 [ 1266.336642][T30982] RDX: 0000000004924b68 RSI: 0000000020000140 RDI: 0000000000000003 [ 1266.344614][T30982] RBP: 00007f9a55eeaca0 R08: 0000000000000000 R09: 0000000000000000 [ 1266.352599][T30982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1266.360577][T30982] R13: 00007ffde74960df R14: 00007f9a55eeb9c0 R15: 000000000078bf0c [ 1266.445708][ T28] audit: type=1804 audit(1596640750.742:1268): pid=30960 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/975/cgroup.controllers" dev="sda1" ino=15747 res=1 15:19:11 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000200)) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0xffffff8d, 0x0}}], 0x1, 0x0) 15:19:11 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={r0}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="2a0000002c20b8490a9bdedae8fa8a2d68a5f643c9b0ab84e89bfcb327273d34b52c38f6"], &(0x7f0000000140)=0x32) r4 = socket(0x2, 0x800000003, 0xfffffff9) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x37cb1133) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x140e, 0x8, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000180)={0x1, 'veth0_virt_wifi\x00', 0x4}, 0x18) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000080)=0x100) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) accept4$packet(r6, &(0x7f00000002c0), &(0x7f0000000300)=0x14, 0x80000) shutdown(r0, 0x1) 15:19:11 executing program 4 (fault-call:4 fault-nth:1): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:19:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x6, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1266.920479][T31008] FAULT_INJECTION: forcing a failure. [ 1266.920479][T31008] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.963810][T31008] CPU: 0 PID: 31008 Comm: syz-executor.4 Not tainted 5.8.0-rc7-syzkaller #0 [ 1266.972525][T31008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1266.982594][T31008] Call Trace: [ 1266.985903][T31008] dump_stack+0x18f/0x20d [ 1266.990254][T31008] should_fail.cold+0x5/0x14 [ 1266.994306][ T28] audit: type=1804 audit(1596640751.292:1269): pid=31005 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/976/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 1266.994882][T31008] should_failslab+0x5/0xf [ 1266.994903][T31008] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1266.994934][T31008] __kmalloc_node_track_caller+0x38/0x60 [ 1266.994960][T31008] __alloc_skb+0xae/0x550 [ 1267.039473][T31008] netlink_sendmsg+0x94f/0xd90 [ 1267.044258][T31008] ? netlink_unicast+0x7d0/0x7d0 [ 1267.049228][T31008] ? netlink_unicast+0x7d0/0x7d0 [ 1267.054177][T31008] sock_sendmsg+0xcf/0x120 [ 1267.058610][T31008] ____sys_sendmsg+0x331/0x810 [ 1267.063415][T31008] ? kernel_sendmsg+0x50/0x50 [ 1267.068126][T31008] ? do_recvmmsg+0x6d0/0x6d0 [ 1267.072729][T31008] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1267.078719][T31008] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1267.084713][T31008] ___sys_sendmsg+0xf3/0x170 [ 1267.089337][T31008] ? sendmsg_copy_msghdr+0x160/0x160 [ 1267.094630][T31008] ? __fget_files+0x272/0x400 [ 1267.099335][T31008] ? lock_downgrade+0x820/0x820 [ 1267.104226][T31008] ? __fget_files+0x294/0x400 [ 1267.108943][T31008] ? __fget_light+0xea/0x280 15:19:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x102, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1267.113549][T31008] __sys_sendmmsg+0x195/0x480 [ 1267.118237][T31008] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1267.123267][T31008] ? lock_downgrade+0x820/0x820 [ 1267.128123][T31008] ? vfs_write+0x397/0x6b0 [ 1267.132560][T31008] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1267.138120][T31008] ? lock_is_held_type+0xb0/0xe0 [ 1267.143076][T31008] ? wait_for_completion+0x260/0x260 [ 1267.148372][T31008] ? vfs_write+0x1b0/0x6b0 [ 1267.152801][T31008] ? fput_many+0x2f/0x1a0 [ 1267.157155][T31008] ? ksys_write+0x1a5/0x250 [ 1267.161668][T31008] ? lock_is_held_type+0xb0/0xe0 [ 1267.166618][T31008] __x64_sys_sendmmsg+0x99/0x100 [ 1267.171569][T31008] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1267.176702][T31008] do_syscall_64+0x60/0xe0 [ 1267.181129][T31008] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1267.187026][T31008] RIP: 0033:0x45ccd9 [ 1267.190937][T31008] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1267.210549][T31008] RSP: 002b:00007f9a55eeac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1267.219088][T31008] RAX: ffffffffffffffda RBX: 0000000000026c00 RCX: 000000000045ccd9 [ 1267.227065][T31008] RDX: 0000000004924b68 RSI: 0000000020000140 RDI: 0000000000000003 [ 1267.235043][T31008] RBP: 00007f9a55eeaca0 R08: 0000000000000000 R09: 0000000000000000 [ 1267.243032][T31008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1267.251014][T31008] R13: 00007ffde74960df R14: 00007f9a55eeb9c0 R15: 000000000078bf0c 15:19:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0) 15:19:11 executing program 4 (fault-call:4 fault-nth:2): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:19:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x7}}], 0x1, 0x0) 15:19:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x124, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x7, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1267.606488][T31039] FAULT_INJECTION: forcing a failure. [ 1267.606488][T31039] name failslab, interval 1, probability 0, space 0, times 0 [ 1267.674920][T31039] CPU: 1 PID: 31039 Comm: syz-executor.4 Not tainted 5.8.0-rc7-syzkaller #0 [ 1267.683675][T31039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1267.693739][T31039] Call Trace: [ 1267.697041][T31039] dump_stack+0x18f/0x20d [ 1267.701391][T31039] should_fail.cold+0x5/0x14 [ 1267.705999][T31039] should_failslab+0x5/0xf [ 1267.710438][T31039] kmem_cache_alloc_node+0x257/0x3c0 [ 1267.715739][T31039] __alloc_skb+0x71/0x550 [ 1267.720085][T31039] netlink_sendmsg+0x94f/0xd90 [ 1267.724865][T31039] ? netlink_unicast+0x7d0/0x7d0 [ 1267.729853][T31039] ? netlink_unicast+0x7d0/0x7d0 [ 1267.734807][T31039] sock_sendmsg+0xcf/0x120 [ 1267.739246][T31039] ____sys_sendmsg+0x331/0x810 [ 1267.744058][T31039] ? kernel_sendmsg+0x50/0x50 [ 1267.749183][T31039] ? do_recvmmsg+0x6d0/0x6d0 [ 1267.753825][T31039] ? __lock_acquire+0x16e3/0x56e0 [ 1267.758979][T31039] ___sys_sendmsg+0xf3/0x170 [ 1267.763587][T31039] ? sendmsg_copy_msghdr+0x160/0x160 [ 1267.768979][T31039] ? __fget_files+0x272/0x400 [ 1267.773681][T31039] ? lock_acquire+0x1f1/0xad0 [ 1267.778372][T31039] ? __might_fault+0xef/0x1d0 [ 1267.783067][T31039] ? find_held_lock+0x2d/0x110 [ 1267.787848][T31039] ? __might_fault+0x11f/0x1d0 [ 1267.792653][T31039] ? lock_downgrade+0x820/0x820 [ 1267.797522][T31039] ? lock_is_held_type+0xb0/0xe0 [ 1267.802505][T31039] __sys_sendmmsg+0x195/0x480 [ 1267.807203][T31039] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1267.812262][T31039] ? lock_downgrade+0x820/0x820 [ 1267.817163][T31039] ? vfs_write+0x397/0x6b0 [ 1267.821622][T31039] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1267.827810][T31039] ? lock_is_held_type+0xb0/0xe0 [ 1267.832772][T31039] ? wait_for_completion+0x260/0x260 [ 1267.838065][T31039] ? vfs_write+0x1b0/0x6b0 [ 1267.842496][T31039] ? fput_many+0x2f/0x1a0 [ 1267.846833][T31039] ? ksys_write+0x1a5/0x250 [ 1267.851354][T31039] ? lock_is_held_type+0xb0/0xe0 [ 1267.856336][T31039] __x64_sys_sendmmsg+0x99/0x100 [ 1267.861287][T31039] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1267.866433][T31039] do_syscall_64+0x60/0xe0 [ 1267.870858][T31039] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1267.876751][T31039] RIP: 0033:0x45ccd9 [ 1267.880653][T31039] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1267.900265][T31039] RSP: 002b:00007f9a55eeac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1267.908688][T31039] RAX: ffffffffffffffda RBX: 0000000000026c00 RCX: 000000000045ccd9 [ 1267.916698][T31039] RDX: 0000000004924b68 RSI: 0000000020000140 RDI: 0000000000000003 [ 1267.924677][T31039] RBP: 00007f9a55eeaca0 R08: 0000000000000000 R09: 0000000000000000 [ 1267.932662][T31039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1267.940668][T31039] R13: 00007ffde74960df R14: 00007f9a55eeb9c0 R15: 000000000078bf0c [ 1267.950078][ T28] audit: type=1804 audit(1596640751.972:1270): pid=31043 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/977/cgroup.controllers" dev="sda1" ino=16382 res=1 15:19:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x142, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x8}}], 0x1, 0x0) 15:19:12 executing program 4 (fault-call:4 fault-nth:3): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:19:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000000)=0x7, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) sendmsg$can_raw(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{0x2, 0x1, 0x1, 0x1}, 0x7, 0x2ca15333c387f118, 0x0, 0x0, "c29710c4d0b9ae34"}, 0x10}, 0x1, 0x0, 0x0, 0x2004c845}, 0x40008000) shutdown(r0, 0x1) 15:19:12 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100005e287da7e71fe1a36537b070000000000000000e11f294b3e575093662bc20b21436700000000fae523b3269240e7d0830c54f9463587af7872902833ca2805bb4006a60379ff5852df8e11b5", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', r5, 0x700, 0x8, 0x1, 0x3, {{0x23, 0x4, 0x1, 0x4, 0x8c, 0x65, 0x0, 0x81, 0x4, 0x0, @remote, @empty, {[@timestamp_addr={0x44, 0x34, 0x2e, 0x1, 0x0, [{@local, 0x6}, {@local, 0x800000}, {@rand_addr=0x64010102, 0x200}, {@local, 0x6}, {@empty, 0x6}, {@private=0xa010101, 0x8}]}, @generic={0x83, 0x12, "ba4f64ce3032c5981a69c730491baa78"}, @timestamp={0x44, 0xc, 0xa1, 0x0, 0x8, [0x8, 0x2]}, @end, @ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0x44, 0x0, 0xa, [0xffffff81, 0x7, 0x8, 0x0, 0x0, 0xb06a, 0x9]}]}}}}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x8, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1268.557922][T31064] FAULT_INJECTION: forcing a failure. [ 1268.557922][T31064] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.591442][T31064] CPU: 0 PID: 31064 Comm: syz-executor.4 Not tainted 5.8.0-rc7-syzkaller #0 [ 1268.600151][T31064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1268.610218][T31064] Call Trace: [ 1268.613537][T31064] dump_stack+0x18f/0x20d [ 1268.617886][T31064] should_fail.cold+0x5/0x14 [ 1268.622501][T31064] should_failslab+0x5/0xf [ 1268.626840][T31069] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1268.626932][T31064] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1268.642009][T31064] __kmalloc_node_track_caller+0x38/0x60 [ 1268.647657][T31064] __alloc_skb+0xae/0x550 [ 1268.651986][T31064] netlink_sendmsg+0x94f/0xd90 [ 1268.656756][T31064] ? netlink_unicast+0x7d0/0x7d0 [ 1268.662689][T31064] ? netlink_unicast+0x7d0/0x7d0 [ 1268.667636][T31064] sock_sendmsg+0xcf/0x120 [ 1268.672060][T31064] ____sys_sendmsg+0x331/0x810 [ 1268.676829][T31064] ? kernel_sendmsg+0x50/0x50 [ 1268.681516][T31064] ? do_recvmmsg+0x6d0/0x6d0 [ 1268.686114][T31064] ? __lock_acquire+0x16e3/0x56e0 [ 1268.691171][T31064] ___sys_sendmsg+0xf3/0x170 [ 1268.695768][T31064] ? sendmsg_copy_msghdr+0x160/0x160 [ 1268.701058][T31064] ? __fget_files+0x272/0x400 15:19:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x14e, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1268.705748][T31064] ? lock_acquire+0x1f1/0xad0 [ 1268.710455][T31064] ? __might_fault+0xef/0x1d0 [ 1268.715160][T31064] ? find_held_lock+0x2d/0x110 [ 1268.719930][T31064] ? __might_fault+0x11f/0x1d0 [ 1268.724705][T31064] ? lock_downgrade+0x820/0x820 [ 1268.729572][T31064] ? lock_is_held_type+0xb0/0xe0 [ 1268.734533][T31064] __sys_sendmmsg+0x195/0x480 [ 1268.739221][T31064] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1268.744257][T31064] ? lock_downgrade+0x820/0x820 [ 1268.749113][T31064] ? vfs_write+0x397/0x6b0 [ 1268.753548][T31064] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1268.759119][T31064] ? lock_is_held_type+0xb0/0xe0 [ 1268.764076][T31064] ? wait_for_completion+0x260/0x260 [ 1268.769375][T31064] ? vfs_write+0x1b0/0x6b0 [ 1268.773799][T31064] ? fput_many+0x2f/0x1a0 [ 1268.778133][T31064] ? ksys_write+0x1a5/0x250 [ 1268.782649][T31064] ? lock_is_held_type+0xb0/0xe0 [ 1268.787600][T31064] __x64_sys_sendmmsg+0x99/0x100 [ 1268.792544][T31064] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1268.797665][T31064] do_syscall_64+0x60/0xe0 [ 1268.802093][T31064] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1268.807986][T31064] RIP: 0033:0x45ccd9 [ 1268.811886][T31064] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1268.831503][T31064] RSP: 002b:00007f9a55eeac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1268.839927][T31064] RAX: ffffffffffffffda RBX: 0000000000026c00 RCX: 000000000045ccd9 [ 1268.847928][T31064] RDX: 0000000004924b68 RSI: 0000000020000140 RDI: 0000000000000003 15:19:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x9}}], 0x1, 0x0) [ 1268.855905][T31064] RBP: 00007f9a55eeaca0 R08: 0000000000000000 R09: 0000000000000000 [ 1268.863906][T31064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1268.871884][T31064] R13: 00007ffde74960df R14: 00007f9a55eeb9c0 R15: 000000000078bf0c [ 1268.910595][ T28] audit: type=1804 audit(1596640753.212:1271): pid=31072 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/978/cgroup.controllers" dev="sda1" ino=16381 res=1 15:19:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x189, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x60}}], 0x1, 0x0) 15:19:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1ca, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x700}}], 0x1, 0x0) 15:19:13 executing program 4 (fault-call:4 fault-nth:4): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:19:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1ea, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) shutdown(r0, 0x1) [ 1269.392216][ T28] audit: type=1804 audit(1596640753.692:1272): pid=31104 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/979/cgroup.controllers" dev="sda1" ino=16322 res=1 [ 1269.424654][T31109] FAULT_INJECTION: forcing a failure. [ 1269.424654][T31109] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.481389][T31109] CPU: 1 PID: 31109 Comm: syz-executor.4 Not tainted 5.8.0-rc7-syzkaller #0 [ 1269.490118][T31109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1269.501070][T31109] Call Trace: [ 1269.504375][T31109] dump_stack+0x18f/0x20d [ 1269.508727][T31109] should_fail.cold+0x5/0x14 [ 1269.513333][T31109] should_failslab+0x5/0xf [ 1269.517759][T31109] kmem_cache_alloc_node+0x257/0x3c0 [ 1269.523060][T31109] __alloc_skb+0x71/0x550 [ 1269.527404][T31109] netlink_sendmsg+0x94f/0xd90 [ 1269.532177][T31109] ? netlink_unicast+0x7d0/0x7d0 [ 1269.537142][T31109] ? netlink_unicast+0x7d0/0x7d0 [ 1269.542091][T31109] sock_sendmsg+0xcf/0x120 [ 1269.546522][T31109] ____sys_sendmsg+0x331/0x810 [ 1269.551303][T31109] ? kernel_sendmsg+0x50/0x50 [ 1269.555980][T31109] ? do_recvmmsg+0x6d0/0x6d0 [ 1269.560605][T31109] ? __lock_acquire+0x16e3/0x56e0 [ 1269.565634][T31109] ___sys_sendmsg+0xf3/0x170 [ 1269.570220][T31109] ? sendmsg_copy_msghdr+0x160/0x160 [ 1269.575512][T31109] ? __fget_files+0x272/0x400 [ 1269.580193][T31109] ? lock_acquire+0x1f1/0xad0 [ 1269.584864][T31109] ? __might_fault+0xef/0x1d0 [ 1269.589538][T31109] ? find_held_lock+0x2d/0x110 [ 1269.594307][T31109] ? __might_fault+0x11f/0x1d0 [ 1269.599071][T31109] ? lock_downgrade+0x820/0x820 [ 1269.603931][T31109] ? lock_is_held_type+0xb0/0xe0 [ 1269.608871][T31109] __sys_sendmmsg+0x195/0x480 [ 1269.613580][T31109] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1269.618600][T31109] ? lock_downgrade+0x820/0x820 [ 1269.623443][T31109] ? vfs_write+0x397/0x6b0 [ 1269.627864][T31109] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1269.633400][T31109] ? lock_is_held_type+0xb0/0xe0 [ 1269.638338][T31109] ? wait_for_completion+0x260/0x260 [ 1269.643617][T31109] ? vfs_write+0x1b0/0x6b0 [ 1269.648030][T31109] ? fput_many+0x2f/0x1a0 [ 1269.652368][T31109] ? ksys_write+0x1a5/0x250 [ 1269.656883][T31109] ? lock_is_held_type+0xb0/0xe0 [ 1269.661819][T31109] __x64_sys_sendmmsg+0x99/0x100 [ 1269.666750][T31109] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1269.671855][T31109] do_syscall_64+0x60/0xe0 [ 1269.676266][T31109] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1269.682151][T31109] RIP: 0033:0x45ccd9 [ 1269.686043][T31109] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1269.705642][T31109] RSP: 002b:00007f9a55eeac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1269.714050][T31109] RAX: ffffffffffffffda RBX: 0000000000026c00 RCX: 000000000045ccd9 [ 1269.722024][T31109] RDX: 0000000004924b68 RSI: 0000000020000140 RDI: 0000000000000003 [ 1269.730001][T31109] RBP: 00007f9a55eeaca0 R08: 0000000000000000 R09: 0000000000000000 [ 1269.737966][T31109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1269.745949][T31109] R13: 00007ffde74960df R14: 00007f9a55eeb9c0 R15: 000000000078bf0c 15:19:14 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000200)=0x1c) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x900}}], 0x1, 0x0) 15:19:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0xa, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1f0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:14 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:19:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x100b000000000000) r3 = accept(r2, 0x0, &(0x7f0000000000)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000080)=0x80, 0x8) [ 1270.380106][T31137] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x201, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0xbb8}}], 0x1, 0x0) [ 1270.434297][ T28] audit: type=1804 audit(1596640754.732:1273): pid=31145 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/980/cgroup.controllers" dev="sda1" ino=15845 res=1 15:19:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x2000}}], 0x1, 0x0) 15:19:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x234, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:15 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b0a, 0x0) 15:19:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x3f00}}], 0x1, 0x0) [ 1271.142710][T31163] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1271.508693][T31179] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:15 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x4e24, @local}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) splice(r5, 0x0, r1, 0x0, 0x10003, 0x0) 15:19:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0xb, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x6000}}], 0x1, 0x0) 15:19:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x262, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xffff, @fixed}, 0xe) shutdown(r0, 0x1) 15:19:15 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b25, 0x0) 15:19:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x26d, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1271.740539][T31197] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0xb80b}}], 0x1, 0x0) [ 1271.828979][ T28] audit: type=1804 audit(1596640756.132:1274): pid=31196 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/981/cgroup.controllers" dev="sda1" ino=16367 res=1 15:19:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x0) [ 1272.003814][T31215] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x27d, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0) 15:19:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x28e, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:17 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="acbd0e2cc3f9ff619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb3637f646f2d80648af8c80172a4020022457ebcb4e0bcb8ec7c9d6967e1adbb52161009a2e410585962de5f80824feda35fb17c916e5a2f60455f20a36e66da1899c4dcee92", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) bind$inet(r7, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r6, 0x0, r7, 0x0, 0x19404, 0x100b000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@initdev, @in=@dev}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:17 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b6c, 0x0) 15:19:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0xc, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x295, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) 15:19:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) r1 = socket(0x2, 0x800000003, 0xfffffff9) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x19404, 0x100b000000000000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00002235b44db4ff0000920b090001406866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x84, 0x4a, 0x20, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x1, 0x0, r5, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, [], 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @private0}, @IFAL_LABEL={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x8040}, 0x4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000)=0x7fff, 0x4) [ 1272.909510][T31247] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2fe, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x7000000}}], 0x1, 0x0) [ 1272.971614][T31257] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1273.022613][ T28] audit: type=1804 audit(1596640757.322:1275): pid=31255 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/982/cgroup.controllers" dev="sda1" ino=16380 res=1 15:19:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x8000000}}], 0x1, 0x0) [ 1273.191090][T31270] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x9000000}}], 0x1, 0x0) 15:19:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x0) [ 1273.701756][T31292] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:19:18 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x2) 15:19:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x309, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x0) 15:19:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0xd, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000080)={r7, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000140)=@in={0x2, 0x4e21}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000001c0)="89b54fd9d85264392365e90fa58599ae538c1f3a1f3dc01b0e23fb42ca599d1aa53cd33588db2d5c7685cfb2b212917aa6716f04fe296bd5b9de5a996547d172b946ffb3125b4f36e2492e0b343a9ee564cf39cd5520641d8b4708aa445fe4e534ee333532c68e3e5e7d65790c194f61551538f812a775be72a001e10329017264c4ff229b802ac27fed26e88ee8302a638f7cd8", 0x94}, {&(0x7f0000000280)="99fc12b124ec140caab873a56230ad1dbc29842731d48d198526fac90f8aa3910d51c66e6805cd6b93e888ab8707ddc705c5b90da3c39c85dd1592fd0884538a8362ede4e4022091da27d3d921f6c93b8bd2565e5580c49afcdddaf507f3e97e54120232e61f30671249055a43080d35c65c8d17eb28f88744c4a07bb26152010b92f8bd4d3c9767542d8475edc0323a07ba4a81d4426d8bd5d5eeaedd626a9adbfe5c635320e52ac26ba8075fff7a721a618671e3f5ae66eeb82648ba6fa4685ce6552315d2b1d93b453e087b8d13b17b4e6ae4cc73413b2af0", 0xda}, {&(0x7f0000000380)="b4f4a7c900fdb0006377b77771b31dd27855674ab2ec583ad265d780ceaa91aab9faa896a7570285814ec46ffec8b1c751574d3e0c9bba2e57e8a1f1831bf6", 0x3f}], 0x3, &(0x7f0000000400)=[@authinfo={0x18, 0x84, 0x6, {0x4}}, @authinfo={0x18, 0x84, 0x6, {0x1e4}}], 0x30, 0x20040000}, {&(0x7f0000000440)=@in6={0xa, 0x4e21, 0x2, @mcast1}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000480)="4271836e39011f95f7e7fbdd139883adcee74a39152739478aaa206c4f6d106d4445", 0x22}, {&(0x7f00000004c0)="f05d75bcc5c6bab6084666", 0xb}], 0x2, &(0x7f0000000540), 0x0, 0x4000}, {&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x7ff, @mcast2, 0xd10}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000005c0)="17dd77a6519f43949c", 0x9}, {&(0x7f0000000600)="e47e5bcfe06762000fbc4e00c713534cebf5f5574c41670d43efa30800210dd3de8cc2d065c89b6c602dc7657928b94e2fc09e4aacae25115ce067c4589a1ae2501d4ecfaf6312f4f15de9e1b81cfbe42a21280c86bd81a4d890c6cd5da40509308adfd56336bf2034283f389506e7b574d8851545ff8d3cced6dfb65128a76995", 0x81}, {&(0x7f00000006c0)="685331edb6f4bff427441210cfff5d14e49671d4894a750cc1ff853b0dce7805758aec27db5d7130c9cb264b1d6a4cb344820cf4a696863de6de7b040762994e6b1b18c3a692493720f7e7d6e303d25fc67a8a315aa33eb3cd6d68b38449f5fa31bcda3091e0af002b337944d7915476f16064cc8458513d648afbe9dd1832b65e97a211a22e79389b9052fad5f7818eb60098ca1258c1a844cf20891248820c4375", 0xa2}, {&(0x7f0000000780)="088f1ebb62730edf70847f1ea15f02c08db13d523a5af355e90a201eef1cb1e631cf16a1bb04b4bd4f7ab223d0483cb75d06f141b8966dfe8ca89af07b6ce89291b70f88cd486d6516e002ea35e8985b7a67", 0x52}], 0x4, &(0x7f00000009c0)=[@authinfo={0x18, 0x84, 0x6, {0x3}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0xfffffeff}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x100}}, @sndrcv={0x30, 0x84, 0x1, {0x98a, 0x2c9, 0x8000, 0xff, 0xbe0, 0x5, 0x1ff, 0x4}}, @sndrcv={0x30, 0x84, 0x1, {0x40, 0x2, 0x1, 0xfffffffd, 0xffff, 0x8, 0x59c5, 0x100, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @authinfo={0x18, 0x84, 0x6, {0x5}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xffff}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x8200, 0x0, 0x4481}}, @authinfo={0x18, 0x84, 0x6, {0x20}}], 0x130, 0x50}, {&(0x7f0000000b00)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000b40)="1e7740fdced0d06523ab5e25347608191a2fdbc12bf109a0d446c116407b936bef653dc191cf1878f4addd4a4deb0f86d7fbd5abb543f3de133a44edb041523288959c5aef1d66c693cd908c", 0x4c}, {&(0x7f0000000bc0)="9bbfe9fc91cdf4904eea70667504e89e0009fbecfd6fa63bfad241824030d8084be1aa5a1aef0f501f0896b22772a56ee1aa58b207515d286b96dab03e4c7110f64aa56b695c6e7c6d0cd32f236d7c5faa4acaf12aedd72a3e2f64603d21880b08e9b9d3d7e55ed727491e872a9aae14645affecde63b1235e8f6320bb40291019498ab7e42a8beff119688aed65235fe1ddb7cd829d201d1d204af9af74c9870d4b9a55f277a1955db6a495701f6ef4e30018eb811ffce4e3f6ce6479bf2edbd0ecb87a2e97a64ff4af20e39a759c704ed1594bd04780f6465b1eda38b5623eb2616e423d16ffbc518085af2c7293e1bb43eaed05aa4336", 0xf8}], 0x2, &(0x7f0000000d00)=[@authinfo={0x18, 0x84, 0x6, {0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x8002, 0x9, 0x7, r7}}], 0x38}, {&(0x7f0000000d40)=@in={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000001200)=[{&(0x7f0000000d80)}, {&(0x7f0000000dc0)="0599e7746e038287a09d4d3ac3d0b87bf77512542e4aab2bd83909b9bfd8932006722b6a530d902d8ae09008f17fab519f946c5b0aefaa411212a81e067466c84840a599747e24e6329b9da54d98fa84fc895e14929008ce3159418c15e290df97b16426873d2c80e73e4e8b47f3c52c9bba9ff57967421d70b6f8de2a6acc56d63e27558aeb72b98b2d19305fda556fffc9a4a142505ac47a345b7242363884b9140e7cd179d54139c52e5905", 0xad}, {&(0x7f0000000e80)="2d418a9ff89bb48e251007e68e44a4f01baac841609c65db069decdfa5783ed7b0ab93c8f638a1ed2b07057984559c0c06d21b1197ab036f7391308753a4c78eb8a9844339c57fdbf3274759433f1839dd04b44e41a33c1c5339c95a991a4ee004bd0a02fa026f0e3827feadce5774c8e95382f64a0732eaf1871bfba2c067ae90", 0x81}, {&(0x7f0000000f40)="138b137b9626daa7ff785d5d2dcf7cc394aaeea6841279eeb8c04cac35c5a5ce7f38c8d45a34ee71a9f44d54fae1c2310296c3c5b94a58631a", 0x39}, {&(0x7f0000000f80)="dcf6749e378d76f8010645eaf37caba63407d72019a194621bbcfa151137194d600c7e0ee92e9983bc28acebb40db13573a6a784f34017e66da57d7317182e7eb57817af49dc7f91c220517862a5511c5764c9ce0c003a140cccebd6af86892bb1eeaac7e4fb25005df6541c2abe1cfc8c6cfe9816fd1794d161aecc16da9e894d03f55826df", 0x86}, {&(0x7f0000001040)="3c5bb151d56a2f07e92275d84796c9f822c9cb01f4ad9811059ff551e40ddbaf795fd2b64e8ba36a2b81c213ad0c3c9c757c4185479d0e0108ec48c2c955547b429b6a387c21dcece51494bc62229be7b64ff894a20b4f0060b44cd01c7e89dac806f850df6d52451d3a14d101c06972a86fb142626f45c90d36f17caec29bfec2", 0x81}, {&(0x7f0000001100)="ae2e68f90860c7abc7ba00d8920e366a9ecd4b3aa162e20fc3e2a675c4db008a7700618e05a5f28d0e14cb1f59cdf984af92adbed2ba3914fc0e493f", 0x3c}, {&(0x7f0000001140)="56a8f8c530199f9fed765c67cf10ac986b28d1edd6f75a42364f1eaacb05ab15407cdd5f69d94334b256b5b02e7626b4f6802e1cc5300d40e970c191c92cd3f1034f5f589e5b7fc7d1fb21ed4aaf956047b357977192891b118dd6bcd9ff08570fa5e5c842da460091b6bf13799b58044af5263b4efdf477fab59a3743a1ee01972153a3e11c1984f3c538c8e6abcaef0fff", 0x92}], 0x8, &(0x7f0000001280)=[@authinfo={0x18, 0x84, 0x6, {0x5}}, @init={0x18, 0x84, 0x0, {0x1, 0xe714, 0x8, 0x9}}, @authinfo={0x18, 0x84, 0x6, {0xf8}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x1}}], 0x60, 0x801}], 0x5, 0x810) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000080)={r4, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r4, 0x2, 0xf, 0xfff, 0xeb8b}, &(0x7f0000000080)=0x14) 15:19:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x60000000}}], 0x1, 0x0) 15:19:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x352, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1274.210821][T31311] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1274.273859][ T28] audit: type=1804 audit(1596640758.572:1276): pid=31310 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/983/cgroup.controllers" dev="sda1" ino=16371 res=1 15:19:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x7ffffff7}}], 0x1, 0x0) 15:19:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x36c, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1274.536872][T31327] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x8dffffff}}], 0x1, 0x0) 15:19:18 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba568019b16a7bd3d29e226b5aa8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, r7, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r7, 0x2, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4040054) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x100000}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x1000, &(0x7f0000000200)=""/4096, 0x41100, 0x0, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) ioctl$sock_inet_SIOCGIFADDR(r8, 0x8915, &(0x7f0000001200)={'dummy0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}}) 15:19:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x374, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:19 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x3) 15:19:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0xb80b0000}}], 0x1, 0x0) 15:19:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x38f, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0xeffdffff}}], 0x1, 0x0) 15:19:19 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x4) 15:19:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x100b000000000000) r3 = accept4$alg(r1, 0x0, 0x0, 0x800) shutdown(r3, 0x1) [ 1275.041177][ T28] audit: type=1804 audit(1596640759.342:1277): pid=31354 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/984/cgroup.controllers" dev="sda1" ino=16366 res=1 [ 1275.211269][T31369] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3a1, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0xf7ffff7f}}], 0x1, 0x0) [ 1275.425812][T31377] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3a8, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:20 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f00000000c0)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x37cb1133) ioctl$SIOCAX25OPTRT(r5, 0x89e7, &(0x7f0000000200)={@null, @null, 0x2, 0x44}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$rxrpc(r1, &(0x7f0000000240)="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", 0xfe, 0x20000810, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0xf, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0xfffffdef}}], 0x1, 0x0) 15:19:20 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x5) 15:19:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3a9, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000), 0xe) shutdown(r0, 0x1) 15:19:20 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x6) 15:19:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0xffffff7f}}], 0x1, 0x0) 15:19:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3b0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1276.287631][ T28] audit: type=1804 audit(1596640760.592:1278): pid=31409 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/985/cgroup.controllers" dev="sda1" ino=16379 res=1 15:19:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0xffffff8d}}], 0x1, 0x0) [ 1276.386791][T31422] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3ba, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3ca, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1276.672763][T31442] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:21 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="acbdf211bdd1f634293ac0bf0d0e2cc3eeeb619c468b01000000000000006ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab080000005dd5d9690a6a79d7876068c170ecade4ac007881c4bb37c68aac2ded9b76f25e457ebcb4e0bcb8ec7c9d22a3940000000000000000", @ANYRESDEC], 0x32) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[], 0x1000000c8) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x100b000000000000) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000200)={0x80000000, {{0x2, 0x4e22, @private=0xa010101}}}, 0x88) r5 = socket(0x2, 0x800000003, 0xfffffff9) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) splice(r5, 0x0, r3, 0x0, 0x10000007, 0x6) 15:19:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3cd, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x4000000000000}}], 0x1, 0x0) 15:19:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x12, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:21 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x7) 15:19:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) accept$netrom(r1, &(0x7f0000000080)={{0x3, @netrom}, [@rose, @rose, @netrom, @bcast, @remote, @netrom]}, &(0x7f0000000000)=0x48) 15:19:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x100000000000000}}], 0x1, 0x0) 15:19:21 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x9) 15:19:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3ec, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1277.391482][ T28] audit: type=1804 audit(1596640761.692:1279): pid=31460 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/986/cgroup.controllers" dev="sda1" ino=16369 res=1 15:19:21 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0xa) 15:19:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x400000000000000}}], 0x1, 0x0) [ 1277.641019][T31483] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x700000000000000}}], 0x1, 0x0) [ 1277.871167][T31497] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:22 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460ab4149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e3a632b69a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3ed, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x13, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x800000000000000}}], 0x1, 0x0) 15:19:22 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0xf) 15:19:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={[], 0x3}}, 0xe) shutdown(r0, 0x1) 15:19:22 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x48) 15:19:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3f1, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x900000000000000}}], 0x1, 0x0) [ 1278.555676][ T28] audit: type=1804 audit(1596640762.852:1280): pid=31512 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/987/cgroup.controllers" dev="sda1" ino=16369 res=1 15:19:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x2000000000000000}}], 0x1, 0x0) [ 1278.783278][T31527] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3f4, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x3f00000000000000}}], 0x1, 0x0) [ 1279.042050][T31548] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:23 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000200)=[{0x1, 0x0, {0x2, 0xff, 0x1}, {0x0, 0x1, 0x1}, 0x2, 0xfe}, {0x1, 0x2, {}, {0x2, 0xf0, 0x2}, 0xfe, 0xfe}, {0x3, 0x2, {0x0, 0xff, 0x1}, {0x0, 0xff}, 0x0, 0xff}, {0x1, 0x1, {0x2, 0xf0, 0x4}, {0x2, 0x1e0, 0x4}, 0x0, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x3}, {0x2, 0xf0}, 0x0, 0xfd}], 0xa0) 15:19:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3fa, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x6000000000000000}}], 0x1, 0x0) 15:19:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x14, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:24 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x4c) 15:19:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x19404, 0x100b000000000000) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x41, 0x2}, 0x3}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000000)={@loopback, 0x2d}) shutdown(r0, 0x1) 15:19:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x8dffffff00000000}}], 0x1, 0x0) [ 1279.764394][T31571] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3fd, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1279.826655][ T28] audit: type=1804 audit(1596640764.132:1281): pid=31572 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/988/cgroup.controllers" dev="sda1" ino=16367 res=1 15:19:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0xb80b000000000000}}], 0x1, 0x0) 15:19:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3fe, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1280.097629][T31590] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0xeffdffff00000000}}], 0x1, 0x0) 15:19:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1280.535576][T11657] Bluetooth: hci5: command 0x0405 tx timeout 15:19:25 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f00000000c0)=0x3, 0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'virt_wifi0\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r6, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private0, 0x5}}, 0x0, 0x0, 0x2d, 0x0, "31464265187d83e1a43bcb41ca99b8fbe1cca686ab86ab73c474dc090b641f8dfbf7ebe59b5bdd5e249e5536f1b64a5ed46447fe36f46bed8aa4d7950e9f170c4faf85276a121464bbffee4a480347ed"}, 0xd8) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:25 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x60) 15:19:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x600, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0xf7ffff7f00000000}}], 0x1, 0x0) 15:19:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x15, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000140)=0x4, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) r3 = socket(0x2, 0x800000003, 0xfffffff9) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000300)=0xffffffffffffffff, 0x4) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008801}, 0x40045) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x6) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6) shutdown(r0, 0x1) [ 1281.024751][T31624] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0xffffff7f00000000}}], 0x1, 0x0) 15:19:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1281.095674][ T28] audit: type=1804 audit(1596640765.402:1282): pid=31622 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/989/cgroup.controllers" dev="sda1" ino=16371 res=1 15:19:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0) 15:19:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x900, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1281.278902][T31642] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:25 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r7, 0x1, 0x0, 0x0, {0x4}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000001900)={&(0x7f0000001840), 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x2c, r7, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1ff}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x408d0}, 0x20000000) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x1, 0x0) 15:19:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x903, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:25 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x68) 15:19:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x16, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}], 0x1, 0x0) [ 1281.765300][T31667] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1281.813123][ T28] audit: type=1804 audit(1596640766.112:1283): pid=31666 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/990/cgroup.controllers" dev="sda1" ino=16382 res=1 15:19:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}], 0x1, 0x0) 15:19:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x7fffffff, 0x1, 0x1, 0x5, 0x6, 0x2}, &(0x7f0000000100)=0x20) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0x6) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x100b000000000000) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x2, 0x1ff, 0xff}) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000080)) connect$bt_l2cap(r0, &(0x7f0000000200), 0xe) r5 = socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r5, 0x1) 15:19:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}], 0x1, 0x0) [ 1282.082016][T31687] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xec6, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:27 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) bind$inet(r6, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r6, 0x0, 0x19404, 0x100b000000000000) vmsplice(r6, &(0x7f0000000280)=[{&(0x7f00000000c0)="a4f2cc3a1aca8874960d4db2d20304a20ada192d", 0x14}, {&(0x7f0000000200)="543d358abfb593a3ec7fe825f3dda24e2da7676dbf5d4f42b405c1e0209fd5ed2d3128517b23d7912d4dd3f4a6fe3b86156cd44ba3d064263b81e88f70be79649599477c36bffc72ad001877cc4e5e8e60a1d04c6bf699ce85703d999282e117bca9b178aa8b9817b06b65dab7654bbf7b650dfaebdea31a", 0x78}], 0x2, 0x9) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x17, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x1, 0x0) 15:19:27 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x6c) 15:19:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1282.831907][T31715] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x900}}], 0x1, 0x0) [ 1282.897075][ T28] audit: type=1804 audit(1596640767.202:1284): pid=31712 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/991/cgroup.controllers" dev="sda1" ino=16374 res=1 15:19:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1200, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0xfff}, 0xe) r1 = socket(0x2, 0x800000003, 0xfffffff9) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x19404, 0x100b000000000000) r4 = socket(0x2, 0x800000003, 0xfffffff9) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x53) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x80010, r5, 0x0) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r6}) shutdown(r0, 0x1) 15:19:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}}], 0x1, 0x0) [ 1283.154534][T31735] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2000, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}], 0x1, 0x0) 15:19:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2401, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}}], 0x1, 0x0) 15:19:28 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x74) 15:19:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x18, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3402, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:28 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000e00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000200)=@newtaction={0xb9c, 0x30, 0x2, 0x70bd27, 0x25dfdbfb, {}, [{0x39c, 0x1, [@m_police={0xe0, 0xa, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x4}, {0xb4, 0x6, "a418d5d0b0d64f2369abe65f625613c0d8d160e00dfccaddcfd8a516096052ca3bf74717d191bea8f1253f59a2ae946e51f2b3556cbf52850ea2a7c51ab1cc06095216e8a91a089dff594a9d0bbfac621a13f8b030344d250530d91a498f31eb336d6850fb56f1b6ff4b75dfa011001c27e14e0ee602b2c7a5c7ee26082895c469172e94570f0f42a55eb4efd88f03665bf003cde13c22ac2461fc43306af2ace4d60345233ea3467c778857de073537"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0x14c, 0x20, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xffffff33, 0x0, 0x2, 0x7, 0x6}}, @TCA_CTINFO_ZONE={0x6}]}, {0xff, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_bpf={0x16c, 0x20, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x6c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x4, 0x1f, 0x2, 0x8}, {0x5, 0x81, 0x9b, 0xa4}, {0xffff, 0x0, 0x0, 0x8}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x400, 0x3f, 0x0, 0x7f}, {0x4, 0x20, 0x2, 0xfffffffc}, {0x2, 0x20, 0x7f, 0x8001}, {0x3, 0x80, 0x3, 0x1000}, {0x401, 0x80, 0x3, 0x200}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xd9, 0x6, "18ae888193deb49ec7c27daecafe89363ff74b6a203b83ea57e1c854e30d1c67df2c47d101f6957f088d7aa402ee1cfe3ef4ad9cefc30191024abb9f7208ef5c9a5f9badf6b5b23944647306c99be0fe3a6e80e0f1aa11d8855c54efbebaec401bac05df776ffea94d7d77d1678ecb948f6200d6ba5182f51eb8e5217bc48b200af1df8c51de7e88a26ac4bb44442934b00f687c887a21c7de3f62665659d445f8e2a1fac6ea81914239c7b359ea320743926c9dffd729984ecc2fbd21591c95127dfd2d9f0ee96638adb2126edba390d98f1c9c7d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x290, 0x1, [@m_gact={0x118, 0x17, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8950, 0x9, 0x0, 0x7, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x5bf, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb0b, 0xffff0b5a, 0x4, 0x8, 0x8}}]}, {0xad, 0x6, "3d4ef812bb1c0338051b05ac41905b9382241c02c696a8762e0a591002d2b74400d1541cec5cd6d7e2b3209ee4cff6b8fffacec4874e51181296f564ab7403220cef795bd4d79db2ae3820b2d0c28ce84cca82863f04ae4dfc0be94855c22a81007739b1eac0089c44c8ce5fa1aeb90fa12ad24c592747c3d24d3efca45caa97c7dd3f33431a341e571d295c1d6f4ae1744e2bb0397d0e41b40c2548f178e276fea5e0c35538036d1c"}, {0xc, 0x7, {0x0, 0xc68c156e104882fa}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x10c, 0x1b, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x3908, 0x3, 0x100, 0x1f}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x6, 0x4, 0x3, 0x3}, 0x2, r8}}]}, {0x9e, 0x6, "29e1ffebb6aafa3f526a048d0d1184e09d964bf217634f482944290874c401f84fb70685bbbd9a672a889a1f4125f96c94ab75ad149104664fb6cd43613121b1f38e6d550aff975c9ee7bbb2e4983af2fc4dc05714ddd1ee96540d16feca6788bbaf90754d61c21cb82c9519daf69639fd130c94ddd6e10cf712cc1c2c36fc3c1f294207025a6af5850c52ac322602cc3b6511c21a214c3e640d"}, {0xc}, {0xc, 0x8, {0x3, 0x4144a9d4bdfb8fd2}}}}, @m_vlan={0x68, 0x7, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x24, 0x6, "ddee1e08d824fdfb730ccb9d1e524865f98c2a0cf9ec3ce7cd5714194c96296d"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x55c, 0x1, [@m_vlan={0x10c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xa2b7, 0x401, 0xe, 0x3, 0x8}, 0x2}}]}, {0xc2, 0x6, "648ccc708eabff3ee84e43c1f28423da2f9eb9ca19bc036bc6260e33a43f8da8f8628aeca1784ad2c3da6db401456a3f611d81012a6b287a614816f5c9410703c27d3bec2320b3fae8dddfa1b5566f81ace0118230e597cfdf1069c3b02cf919d471fc95b20a596cba7335f52561645e86b339db9e28d6916b5d07e35723bf50b8ae203d8b5f0de28215f87419133159be704e187a072faa20079e85af9cce240cb75fe968d0fde1da0ede0d03b032aeeff338519379cc227f5ddcd6f092"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0xf0, 0x12, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x4}, {0xc6, 0x6, "f52a3a4248c28aa0940f9dd1408acc91137fbe76504acb42e79bc5ea478a0bf5d688d9079068ba5e18cf4fdcb34ace800bb9390988405555331c154e6d8a84fd16318d75be05eef342b7ffb9325fd219017d877846e05c51fcb69338ca9caf3fd9e09002b8d538ef53838e41bde7643ddca99cfb3d9fbfed4b235bdc7357ffa79066bf66a55cf8f29dca7048cd5a28dd8de45426a103736652e81f39690a2f3506c73ff20ab639eae7643e4dd6a9bd8967270b5b151a3a5302c7c8c62cf858995b7b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_connmark={0xd4, 0x13, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0xffffffff, 0x0, 0x2, 0x81}, 0x75}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x401, 0x4, 0xffffffff, 0x20}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1000, 0x3f, 0x3, 0xfffffffb, 0x1}, 0x9a0}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x1, 0x1, 0x8, 0x7}, 0x6}}]}, {0x32, 0x6, "d3c4aa5a5cc98221470cd7a367a8a3d0aa2fe1df4c954486e6c814d04a7a53402d1ba6a26331ffe8f249f7c55157"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x118, 0x9, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0xd1, 0x6, "c4b23ac491eacd9ead5545afe3c822e2bd82f7aeeae9df340eb3540b1f0245ed3befd356930ab4756b6d2a6a59512f05ad51eec5032da7f2c67db145729decedcecffec06c16a3e5e065edfbaf172830b422e713c01fe79132d3ebfc4882b2216f6e0db401061f9177e3f321b1020d5c8d6ce5a9570cd25fddd54b8aebb34f1e3758c8be3c7e09732b195ed592da58af21e2ac58ea85371268ab92f3714d12e77b08c9fe33099ae41a31b91a511c11c7cede67724b78bc4131fd4d30f7d5cc04c3c1f15ef4ccae602cfad60337"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x5c, 0x6, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x4}, {0x31, 0x6, "b27b5ed9ad39ed198d422836dcec24f4d00d50decb3dd065751c71a73b627d5dc28bfc32e61f8c24137ff4168f"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_bpf={0x114, 0xa, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x6, 0x8, 0x9, 0x70}}]}, {0x99, 0x6, "9a29c03628eca902c4b9cca3745ef68a3f844bc5f295b5084f2978e24e42e2dadb9ced0fcf9f7257f42a48d6deae7bc1eca600e558f2973b395a4f8412f7c5685e2073af5851ec906c020f4b3546cd567b3d3a62d3d10f1ee656a5825edd122fc531456b2c452c152400a9a69e3a7850a9ed67924cfd8a271946b4bfc751263449d6942e997b33f9f9a354da88d78447e51954bd98"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0xb9c}, 0x1, 0x0, 0x0, 0x20004800}, 0x48090) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}], 0x1, 0x0) 15:19:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) [ 1284.366210][T31777] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1284.420238][ T28] audit: type=1804 audit(1596640768.722:1285): pid=31776 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/992/cgroup.controllers" dev="sda1" ino=16364 res=1 15:19:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3c00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xb80b}}], 0x1, 0x0) [ 1284.613116][T31785] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:19:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x0) [ 1284.728688][T31799] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x19, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0) 15:19:29 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x7a) 15:19:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4000, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1285.018258][ T28] audit: type=1804 audit(1596640769.322:1286): pid=31815 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/993/cgroup.controllers" dev="sda1" ino=15757 res=1 15:19:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) [ 1285.114473][T31826] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1285.621722][T31835] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:30 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x37cb1133) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x6}, 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r2, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 15:19:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4088, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:30 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) r3 = socket(0x0, 0xa, 0x7) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4111) splice(r1, 0x0, r2, 0x0, 0x19404, 0x100b000000000000) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x19404, 0x100b000000000000) recvmsg$can_raw(r4, &(0x7f00000004c0)={&(0x7f00000001c0)=@x25, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000300)=""/199, 0xc7}], 0x2, &(0x7f0000000400)=""/168, 0xa8}, 0x40002121) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ae9694b2c31adb37ea4108e1626f35e6105cf406f87863db0540cb51a9f9b5a634bd0e955b8b3f67c48b7cb0f9a3e044dd7ece781146985e845099e712607404f7f25634a4ef673a9549", 0x4a}, {&(0x7f0000000000)="eda66761a8c0964135eabf775adf19f578eb2354fedb2c6509097127884b73d8798b1ee025aa340a54582e1aef8732d632d72f0fa23d89637aa5f0b539abb6", 0x3f}], 0x2, 0x4) 15:19:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x1, 0x0) 15:19:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x1, 0x0) 15:19:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4201, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:30 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0xc0) [ 1285.898009][ T28] audit: type=1804 audit(1596640770.202:1287): pid=31851 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/994/cgroup.controllers" dev="sda1" ino=16369 res=1 15:19:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}}], 0x1, 0x0) [ 1286.150060][T31875] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4800, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x0) 15:19:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x0) [ 1286.463852][T31889] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1286.606957][ T28] audit: type=1804 audit(1596640770.902:1288): pid=31851 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/994/cgroup.controllers" dev="sda1" ino=16369 res=1 15:19:31 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) r6 = socket(0x2, 0x800000003, 0xfffffff9) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$sock_rose_SIOCRSCLRRT(r6, 0x89e4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4a00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}}], 0x1, 0x0) 15:19:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x1) 15:19:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x22, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:31 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0xf0) [ 1287.174419][T31909] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffff7}}], 0x1, 0x0) 15:19:31 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x37cb1133) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x1405, 0x200, 0x70bd2b, 0x25dfdbfc, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x6000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) shutdown(r2, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x37cb1133) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) mmap(&(0x7f0000a56000/0x4000)=nil, 0x4000, 0x9, 0x4010, r4, 0x8f710000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) [ 1287.261686][ T28] audit: type=1804 audit(1596640771.562:1289): pid=31911 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/995/cgroup.controllers" dev="sda1" ino=16379 res=1 15:19:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4c00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff}}], 0x1, 0x0) [ 1287.521228][T31930] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4e01, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xb80b0000}}], 0x1, 0x0) 15:19:32 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'caif0\x00', 0xa732}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x4, 0x7, 0x8, 0x4, 0x0, 0x8, 0xffffff60, 0x80000001}, &(0x7f0000000240)=0x20) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) bind$inet(r7, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r6, 0x0, r7, 0x0, 0x19404, 0x100b000000000000) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000000c0)="7f7c2012b78a0bc10fd2ce5db485e3a6610eaeb44d04794509b5628a2f8609adf963087b655f7724fd92", 0x2a) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9caa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e33b", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5203, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff}}], 0x1, 0x0) 15:19:32 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x29, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:32 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x300) 15:19:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x1) socketpair(0x27, 0xa, 0x80000000, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100)=[{{0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x4, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x38) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000080)={r4, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, 0x1, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x3}, [@CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffffff90}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x200}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8001}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x66000000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xb2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xeec}]}, @CTA_NAT_SRC={0x3c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x17}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x2b4]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000000)={r4, @in={{0x2, 0x4e24, @multicast1}}}, &(0x7f0000000140)=0x84) [ 1288.392252][T31965] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1288.450334][ T28] audit: type=1804 audit(1596640772.752:1290): pid=31963 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/996/cgroup.controllers" dev="sda1" ino=16368 res=1 15:19:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x6202, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f}}], 0x1, 0x0) 15:19:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x6800, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdef}}], 0x1, 0x0) 15:19:33 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/time\x00') r3 = socket(0x2, 0x800000003, 0xfffffff9) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0xc7, {{0x2, 0x4e20, @multicast2}}}, 0x88) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x13c, 0x3b, 0x4, 0x70bd2d, 0x25dfdbfc, {0x2}, [@typed={0x8, 0x43, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x8, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x3f, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0x85}, @generic="1b63240db8da43b6c7359d7457ce77ae3ecb6b04a4", @generic="8efad49c5c04645cce210ec87d5801c000d447a0d35100067482ee147d9b945c27493e2c32b1def02820266cbc9077c2f0dfa8723054f04d332e422139e37748b237062cad65d88675dc5f125fd3d891bfd8f23235b8c825308ba52dd98ed87b10b6273d4adf341bfbca70788894c345fc2cf9fde3d4e11fa401", @nested={0x7b, 0x1d, 0x0, 0x1, [@generic="3921708400fe820ce7f1c0ef08a237c14315e2ef4db86d8b47262c37708917500b3d8abff35f4f1309ff3177746b4bfe0a060626d505ef2106051567a5bba509c8ecc67b8f7242349ded9ef8ffb7995524301d57afe3dbc7b6ea9ac3ebc1f769bcadd191d3a6249cd4de5c980bb8a78ce76368c29b8897"]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) shutdown(r4, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) bind$inet(r6, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r6, 0x0, 0x19404, 0x100b000000000000) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000340)={'wg2\x00', {0x2, 0x4e21, @multicast2}}) [ 1288.745256][T31987] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x30, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1289.049558][ T28] audit: type=1804 audit(1596640773.352:1291): pid=32001 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/997/cgroup.controllers" dev="sda1" ino=15883 res=1 15:19:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}], 0x1, 0x0) 15:19:33 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000080)="1e0dc88166a1969f90b57e46687d58b3b32f4792546d24ddffdfb24c8c6dcbf13c8f0cc3b9aa9c13e591034f8521fe4a8775eacee1ec69cd4bcd4b66d49188cbe562cdbb9af2b3593eb6cc75fbd9b520383bf2ad3d042a1510f132649f77c486d4753d91ad8df227791571e9d8f69860961b47f6598e1bf14ade2514981b53fe4dd651259c0df5c2a4fdd55ee4521e29089b4013f9863694944081649487b4b9a4ae01add0dd75014a63daa248e541216c62d32d1b18c60d9a8811a910bd05386fab6df32861a7b1b7bd1179ef099fe86e0ec874fea571283376b5f934ec43c30f") connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) 15:19:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x6c00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:33 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x500) 15:19:33 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x37cb1133) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00!', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf2519000000080001000100000005001d00800000000500a2000d0000000500a300010000000500a30000000000080001000200000014000200429b28ed5cc479e5940a892bcfdce7030c00990003000000ffffffff"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x22040000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000300)=0x1, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000080), 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r8, 0x0) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYRES64=r8, @ANYRESDEC], 0x32) write$binfmt_misc(r3, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) [ 1289.390760][T32012] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d}}], 0x1, 0x0) 15:19:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x6c03, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x31, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}}], 0x1, 0x0) [ 1289.740282][T32037] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1289.768616][ T28] audit: type=1804 audit(1596640774.072:1292): pid=32038 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/998/cgroup.controllers" dev="sda1" ino=15765 res=1 15:19:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x6d02, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x1, 0x0) 15:19:34 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x600) 15:19:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x7400, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1290.152156][T32059] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:34 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) shutdown(r1, 0x0) 15:19:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}}], 0x1, 0x0) [ 1290.620284][T32067] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:35 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x6}, 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22450800b4e0bcb8fc7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x7403, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x32, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}}], 0x1, 0x0) 15:19:35 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x700) 15:19:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x7a00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1290.852106][ T28] audit: type=1804 audit(1596640775.152:1293): pid=32080 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/999/cgroup.controllers" dev="sda1" ino=15765 res=1 15:19:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}}], 0x1, 0x0) 15:19:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}}], 0x1, 0x0) 15:19:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x7d02, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}}], 0x1, 0x0) 15:19:35 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x6, 0x1, 0x1f, 0x3, 0x5, 0x76, 0x20, 0x0, 0x6, 0x8, 0x7f, 0x81, 0x4}, 0xe) 15:19:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0xe0, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1291.738814][ T28] audit: type=1804 audit(1596640776.042:1294): pid=32124 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/1000/cgroup.controllers" dev="sda1" ino=15883 res=1 15:19:36 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000002c0)) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) bind$inet(r7, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r6, 0x0, r7, 0x0, 0x19404, 0x100b000000000000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x700, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x4004004) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:36 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x900) 15:19:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x8100, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}}], 0x1, 0x0) 15:19:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x1800, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x8901, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1292.113217][T32137] validate_nla: 2 callbacks suppressed [ 1292.113228][T32137] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}}], 0x1, 0x0) [ 1292.254251][ T28] audit: type=1804 audit(1596640776.552:1295): pid=32145 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/1001/cgroup.controllers" dev="sda1" ino=16375 res=1 [ 1292.411836][T32156] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000}}], 0x1, 0x0) 15:19:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x8a00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:36 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x100b000000000000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x39, 0x0, "8b4142338ad401026feb3225b7d00acf1cb1820d77a70d9c644b990c51544c97a52c565a404715bd491e844554bead9f6efaf56b5cf881d02fb7c90606108558c804bd1797926b923dc63e3bac8ed033"}, 0xd8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r2, 0x1) 15:19:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x8e02, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xb80b000000000000}}], 0x1, 0x0) 15:19:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x2000, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:37 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0xa00) 15:19:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x8f03, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff00000000}}], 0x1, 0x0) 15:19:37 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002780)={&(0x7f0000002800)={0x24e0, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x25c5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x975}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2007}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe4, 0x3, "18215b6ddeb6a056daa2c80035a9c6a9f90abf0bdd368f3d372a2d8885dded20f56ad4e8fe79e1807ad1d7c9791c74d231e85cdfe02d0872c3b1531e76de58cb221cf1e97e4659c3186b78920b8a244e1a8783b0401330cc70cf73d4ff97b51151b3a1d16cb2ba294f7f103ec77839059ef10308813bc39e5be0e5a2bb2b64c35383a9a247544ea57ca13aca0848f7b8c4da7a8b68c02a820b1caf9b462c4ddbbfc5e6245e7c6f3ad77a4d506c41d3e68db030d103186df1c16ad949a7d356f2e5c4dfebfc7b70c91cc90204c825abe3b4ba9a973f91533500626b9c0becf761"}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "a63c0a4ee9ee7ca89cd0d56d6a3937c06dc919c7392458ac4aeffd2f"}}]}, @TIPC_NLA_MEDIA={0x108, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xffffff5a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_NODE={0x2140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "931f24ed023f80d45d02a18e2d36550e7a7350cc4f6d700be74beba9b04d74550e8b995090df78fa7dab793d5b6b1bfe89b2634139fe1eb70b4497749ca841b201ee1af306a9d6fb07555a4bf78e7fb89019926e87a5e2ef43b4196210ef715bacfc7330ab3a6dad87b7ee5bf9a831e821d1060c8d472a3eb2cf104b6f2d608b1e55a5915e28a6e7b925bf844a3281699e17f27a50af46139d4ff8ab25895717413fcaccd8949a5853d4e12c92c10a2cee0ce9b5e69feccdc29e7b8ad9899fea2fd2a214aca236e2bb14e00dd4c2321a76a539991b9e675787b04247c631617f14003c9c53a6ca4d336b2b3b6d8bbb6ee3635d6f0b81d75be0eed9726179562fa638add1a675fb316c0f7716b9d7830c9f018a5e25c3ac4aee243cc5e7da81450ca9f0e703eace47de70f1e83071b48d36b448125748af1bf4614651341e9b2890c9dcc75c3990b802e2e4bebb06741439117a9d2532d3fe8709e304eeef6b12f03b0d92ffdcecd7004b9c66a1bb3852faf3cc48cb7028daee9ae5d0f01a43c356f8361c2ccb72ed5b5594ef1305bb7b742a0070882c278a7e53c92f8d246ad0d9efaeaedef999371593e75511f5110570ea6854f972eb85d5de59b55ee32dcae146f95f737298938e8efd6b23ec6ef0f1cf2dc2395899bc465f7a6fd212fb86b96d4d4698daed10d2919b0096957ce986065e45ceebcf1b22434e51ff6c2cec99d362d8fd5cd43c00f07912a50ad4424409b37f036fc31e500e0af0a0fff73660753d3dc901d9946f6ce9695e41429ecdee63ff72bfca0572b872e198b35db52374f0740ad0dcc1f7e80a916c2930676bd6ce111c519b51462a1f12a5f8d108345eff7cdda60730012898103b43fee58640075dff6fe8d322ecf54cb4151047dd94435c28446aa68567d7413c0c19cc75ba396f1a4b827e32f3ca309854b7bd6a8f1d06195e272ee0d89fc0be0cdcfbea6b5d3654c0e8ddec2ef5f8458250be01e41a148f661f723cc33a525d8fcb4e9be75386a79db14b629fd96d9983778d4697608cebe04052e206e3c4a2547c999eabe89ef5dfed8a5fca3dc08aedadbd2951d237da694322ef0370e11209981af982884978ea2996da7c7a529b45f40314e61e60213a517e33301cdfb2d3196ddc9a0f58dc30596144b1b4b09bc0c1579f098ab7a63c0cfe709ef4df6d5421411981e4fcf6e22bbcafd15b6b0ac359d69f19a7758617830760be41d8e92905710abebc243f8af0f5553eee7febbd890a8f77280b48ceb7c64314d425bd68a346fb26a69ba5d8605f07cbb90b5fd734aa96518196a8aa03856016b286370c69f1cfe42c4339ec5daf38c3dd8daf291ecd36f8fd5c134198e928889497b37dd54bb1ce2ce684b8400e0d22942b6da1522246d1047f521a8b0ca0f78fec7255ffebb74607e8b8126abea6ab3671e80c2455884d5ac6978f16021e47204eb69bf31da791a6ccaac5ee190149b9cec43fd37961f2e2fcbb117db724d8e79d3e0936e6d241a858b9bbf798deada0eff1ae59d2db29e0a733ca402cf2dfb24a4517a9485dfe4f58a275582f41bff0f34b9a41bb147b5ae158ca1e2bac28e30075df059de05398abe44936d3166baee1d8e16066e647fb8526191e5f623ea74cc12e5c56f9f2769bca12d3297fb6f56dd81b1ec7bbeb9bb16b82995747115d25358f3f9f8065629de844fb4ab07f29587f08159d50ce6009e9401c5fd7d0d418d1ae0fa50e3e55fdccfb14bad51ed548adc4c4b3dff52b552aee5fc575e463d037876dc8dc80411ecad498bd006b2727412a12697ad54d2147e0404a97456bf47dc5070ec0e583af87806c0231143f65d10659f402c2a53632c9382bdc3b9c165e908e6f61b5798a996c5ce056fe458021b5977c7e33cd9338f90dd99ec27242436e47f87ec3c8d6872055a0f72fa03c38f2d4d29a303529c2e5984733b2a002fde4b53b3d9dc4d3cc8160f9a7267b7e466ae21983feb4b9e536c86a04324a61b4f14e3c01f6a0d8b57f7a621116ee430d8385fb6084aa1dd7d61044c7739563c1fa5c37489fe79193963e4828a27d67e98e66dfb828dae8b56b4b5c08f1581381847a1f5b0cf3a094d935729dc650bfd65ab99f1c36499dcc83c158cfaa4392b1500bbfd98690d12d8a4e66912ef0c3a76c3204195e16e9c8ce5af8d4b2f15e33ab1be14da718860da48f790d74d21b1e9c933e06be4296f01f6a958bc6abf3e2a6510bc32fa82aef72d7454e70660ab7b0b2d5416534cba42579fcd7e5ebb8d520a14fc3851c86a6a3b8b384d4335b4f68c3d045d88a5f659d2373e7177e56d82b107c6440fcdfefb0ff9991ec816442d15d172e209980e4493985d18fc4b9887c51b55b2c576d74dccfa617a4223c0f0ec42a66e29ed3a2f6ab6d42c360345bb6cbe2f9b0dd4c9330065203b767e1fd03b570b3a381405bb2c2eb710ba3f346ee2c463250d3bf32eb3f62c8b6d330f4e2ea6166579219bab23997b0451211ed32b1b29293d214b09fad410fc4171cadcf17c6aa7437fb53c6e29578ee542552e60bb26a7cfbfe2dc4180b78fd0b706749496bafaeb102c62a036749e28ca3c92e41a17d5cbb0f9105da3fb3610f58b8a7593100ef84d3194e384d29b1419e9225788f558283ffa03de27a68fe0d2de2e88a1b2410a66466e6ee4ff9f0c9b021577783b6c88811e0d1a05588277c4f5c3120123e09762ea927dcdbd52d02dff4d140bfcca7ab33ed402990831710e56f1ff9cfe928bf906782b56d688ae765aa570642ee2eb825f4f897a29ce2009926308965122fda9f322b783905a3ba64c5b23ef30d77764dc2bbab6a11ec8ae95d2908b045e60ab9f6fa55439512188821431eec570730489934144aae9f881f94722e11373cb0a9eac1e375b4a428d8160a0760669206ca91920f0b38f6553db4b9c5c4db4564b16a792120fcd0108cf5e168a578a34f45dbfc9ca12d9aa163fe83cd5dd8c6fa8792535ea9eaf7f3c0a9c36633b790c0b25e67b5c97c1a75e80ac42a92ed6c6c4ccdfb36b62d595c41d8fecad7c33d96b408f660fcc3cb0ce84cb4957d42f85f78304a672c1b331b5ff5ae3ce342e73466a0816d2a4c3c37ba90a7a6812400734f58663d00766ecfe605116fbc5405af66331f363a429be536ce6e284c1b788e1dc2186b7eba1a39d8c437aceda60e0fc95031c509258608fd3523c96c13a7f85a97fb417df9d6a61266aede63dc9c547f95c5a06de8b74f2896e66d85cef6dbd23f45a1570e0fd3e3d6605428c2158843daf013e72d1b8525dccc7aba03e7d2617d547d8117dbe99c2ce100f815ae04979caadbe9d7cf00046ee043cffd0bbc09f714934de640ac8e95af355ff1aadaab273f946d6e0113a190c18a11a8ef8b147841fd2eb8d13fc8cf1677940ee96b9a11e506afb438cac38a216a7a86743f5dde0c5daade506fd6168e5612dafe07f07e0a8a1b8d2a8cd3064fe03cd3c6bb4db4d9cf97dc8ddac9df0836fb04a800148d3be1a5fe839cb2ce8f2d93ccfb69164c226e2f2b0c4c068d45f2de14a4896eef636df4a6366a960ae44aebf71d3cb8f12c0d9b362765fdcf76e29514bedae59ac08bc49409bb16325f7dc78c9c2dbb024b3308f8cf1dfa809d295cb4861bcfcad6e73e390fa8fa1360c666579cb4bb6f522a198ae7804bd81abf88327935951d28be8f6ea2c547c6349145df2068fa91f2ed71fbef5722478dcc9ad62d53563d0c5f41ec6e5f4101c3c16d9ba154c56c0bb5491296da2aac9821f0a4aeb91da6884d35240e0ef48195db52d9739ad5133206037fc4c5c0a5f2c7e21dd5b91a597bae8a447fb36e59e3ec2ed9d5869a43dcb3741281eb36966c8398cc93781ab469a24bb15175e58d0a9b246770f5cd10c3f20efe5bc474b19967f0d063af720cad1e32fb37f499bb23c334d7731cbab9578f8827c1965f4547c88cd22c83dd3a5e5659d76ee2f5a475f80696870e324cd7c1023364f0c027a11bd2cd3b0260da388675a4dd05eb68a8e945d443a4dee83655a25973e76c32c04e6c75666604ec345b4f9f93e5b66ea186d3302ad4cc905ea5b76514b42cf5a4976ee233a0fec03160d6284b18ee08b5139a90b200929bdf636d50c05236a155eb848224e52eb680f2e26498bbb6f7265225d776103771230964110daa3bd5818ef001de0a3780ef1bddd380c934a0e8c1c4edd9deb12fecc894caf00e491e8f43ddd9b480addad84a217526237bf7207e2b8758a7f15bb1975b1cf11945fb059fa90dd30a06b31672a646c91f4e961b13ee640fc08e7f6957fd836a0e0a2711369d32df649bc443721db3b4959caf25849b538e7937b609f532e6b238c2fedb71fcaf979c9c6e2d7dc085cf17bf505535e8ce37514f834968b181f0e493305a86fee95eb29341552afbd8c309f2517cab4689b11f5831facf92760490b42c50379a920a0f6f8d1c233ac1202be78b736c230b0fefa34af33a58a54545988c3211c821ac81cb68831e9d7cf9ba669767bc432037e05481e0997dcae5e394d1b7af859f0c0b2d5f2fb27707d754706f67c76d1169d99b296e6017cd2ba310c16c8398f1412f1cbd8f2eb5032a310f0cdffcde7e2e7aedb88f215cb85051cf13191122da41754d7aa9e6bc692be59adad657791ca8a81e38b91af26a0b89c5405dfe30c31e2a190a2df49b7d36d967ed13400f73b879a87778b8859e9eeb2b0932bd512fcca82da15954a7835c97c6cc99ffd86da464ac5f603b7c1c4944c858b845054b7ea95dfca17c63e97589a0b6f38e5e7206186bead1de52bd6e234e391a097d720c8f59b78753a70158fa352a2457ce22a13d5b464e1e579eb2e15389a7463a5f0d70cadbd068df36ab31ae407577e60bc58a6a01be2578106465ec26e5d431aa873bcc89dd303810af9b5135578adfaf73d99c8b05e7188cbb034a1507d5a9a1b26799cd8a448862e519acc6d507144af1d4cbfc20fd7f755561d365f8637f03645c316dab7186f4740648f5663ee899ea78e671830ef8c91366bb1b68c7585727df280d5396ed73343f2aae0222ec0aa2cf5a06d3c1be8b8b7ff7f631f01ac4f3665480c19a2eabc11ae24c875e44a9d7bd04df39b471989ca292cb6b430dab77aa17c3d20681453b98dbe36ba7aa150b0c29c7539effcef780b1b2ec91c13dd6a1dcaf5dee9107520bd373bdb65c0ceb444662adb93a59391af9109b210665bf3dab88c30ea427b67132a8be8f1471b05df3134382eacf1b3f6208c7736044bd59ccbf2cb9fd3c1a57b769d12b5de3c9df6cc7596fa63da164c7a26df21deabfe266b9af40a938b7a38ebe822be0b99055b18c08e2eacea87da5ded89d28c1ccbc3d4e1abe7a7830bcf83b213b84b6e3b9dd1207283b6bd708d7ffa5ebdef5a517d71624fb15cf1e84d623e3d6d9c231c309966e6a641816440197329a132d3abe8ce93488c5e9bd9b8cd6f30f6f483fe01ee3a11e527efd902dfc5da938851e2538adc6f51d9c7e377d6922e460b55496e2d1ddc5718dcf01d839e19c6ac840241756bbef1c35a75e6dc4f2fc0479b77e195568e28d30f27e1406310ee628b519e59fb7543d97f000e79310748eaac96b9d0bc43f2bed6c7ec9eaedc4da921b0e5a9590a76b6059bbf5559725e6675d29439d9e7f776c606890d2724f9e6a732396f41a0071ff38d78eecf93b15bf271b29b4d806de5b190b2d3605bd8aee2a5b3182f5e718950057be1b55bfa9ed4b36befb7393cedede1de2de0f53e50bf2b042ba423f39eb06293d2f8a859b"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d1d2699addf88c788b2aca9093dbf7cd4932c20bd7"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ID={0xef, 0x3, "044374353a83b2e8b6dac52d04b586be58b96c2459d5cad284e4431f0bcda2c9c1bef6332793bd5f612278fea357ec49c2fa066d80ebddcf7984dbb2a756783e928b88812eee0a6530799e97220e4b29972f48e0582c997fea12141e0ca0adb0b3c5aa537278935714cbde4d1eec62418a226b5c0edba028e0ef421fa917966d385091f47a890c17e8158b38ef3943ce6d8d8630309bb99ff8402db05f9e8d1c6a7d6deeef9a4857bce257af1d3c932223d16b15377c17d7340b140651096e84bc77f04c31baf33c82e70346a1caba32ac8c12b70a231b59d8a5e125f2cba3eb2df3c18fb6f330dbf1d4c2"}]}]}, 0x24e0}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) bind$inet(r7, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r6, 0x0, r7, 0x0, 0x19404, 0x100b000000000000) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x400, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1293.347138][T32198] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f00000000}}], 0x1, 0x0) [ 1293.390846][ T28] audit: type=1804 audit(1596640777.692:1296): pid=32195 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/1002/cgroup.controllers" dev="sda1" ino=15881 res=1 15:19:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x9200, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:37 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x19404, 0x100b000000000000) r4 = accept(0xffffffffffffffff, &(0x7f0000000240)=@nfc, &(0x7f0000000080)=0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x24, r6, 0xc15, 0x0, 0x4, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x80) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r6, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) shutdown(r3, 0x1) 15:19:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}}], 0x1, 0x0) [ 1293.663141][T32215] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x9502, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:19:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xa103, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x2800, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xa803, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:38 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0xec0) 15:19:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0) [ 1294.086446][T32242] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1294.229606][ T28] audit: type=1804 audit(1596640778.532:1297): pid=32248 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/1003/cgroup.controllers" dev="sda1" ino=15928 res=1 [ 1294.707511][T32254] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:39 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) bind$inet(r7, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r6, 0x0, r7, 0x0, 0x19404, 0x100b000000000000) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x1, 0x0) 15:19:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xa903, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:39 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) 15:19:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x3000, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:39 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x100b000000000000) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x58, "7a3f324d9f03e327f071d1dc7ebcd3b11a6cb8875c6a32bf1aa8de553f6dc041cb3aaa2667096050f297c60bff18586dece570a66764f8d8186eb3ac0441da21609a240f7c20e409d955b267eb2f215c2829989b45d6c8b2"}, &(0x7f0000000000)=0x7c) shutdown(r0, 0x1) 15:19:39 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0xf00) [ 1294.911142][ T28] audit: type=1804 audit(1596640779.212:1298): pid=32266 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/1004/cgroup.controllers" dev="sda1" ino=15919 res=1 15:19:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}], 0x1, 0x0) 15:19:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xb003, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}], 0x1, 0x0) [ 1295.188491][T32287] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xba03, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}], 0x1, 0x0) [ 1295.429892][T32302] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:40 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e24, 0xa5d, @local}, {0xa, 0x4e24, 0x72d, @dev={0xfe, 0x80, [], 0x27}, 0x79}, 0x8000, [0x50b6, 0x7, 0x9, 0x972e, 0x10001, 0x4, 0x2, 0x401]}, 0x5c) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x1, 0x0) 15:19:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x3800, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc60e, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:40 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x1049) 15:19:40 executing program 5: r0 = socket(0x2, 0x800000003, 0xfffffff9) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socketpair(0x5, 0x800, 0x7ff, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e22, @local}], 0x40) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000140)) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x3, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000050) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x81, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r3, 0x1) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x41}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x8851) 15:19:40 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x2000) [ 1296.166754][ T28] audit: type=1804 audit(1596640780.472:1299): pid=32323 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/1005/cgroup.controllers" dev="sda1" ino=16049 res=1 15:19:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}}], 0x1, 0x0) 15:19:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xca01, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}}], 0x1, 0x0) [ 1296.387196][T32339] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xca03, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}], 0x1, 0x0) [ 1296.684663][T32364] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:41 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x2000}, 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r5, 0x0, 0x10001, 0x2) 15:19:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xcd03, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}}], 0x1, 0x0) 15:19:41 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x3f00) 15:19:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x4000, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:41 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x100b000000000000) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000004d80)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x37cb1133) recvmmsg(r3, &(0x7f0000004b00)=[{{&(0x7f0000000080)=@caif=@util, 0x80, &(0x7f0000001600)=[{&(0x7f0000000100)=""/249, 0xf9}, {&(0x7f0000000200)=""/174, 0xae}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/60, 0x3c}, {&(0x7f00000012c0)=""/109, 0x6d}, {&(0x7f0000001340)=""/17, 0x11}, {&(0x7f0000001380)=""/131, 0x83}, {&(0x7f0000001440)=""/150, 0x96}, {&(0x7f0000001500)=""/196, 0xc4}], 0x9, &(0x7f00000016c0)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001780)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001800)=""/40, 0x28}], 0x1, &(0x7f0000001880)}, 0x8a}, {{&(0x7f00000018c0)=@isdn, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001940)=""/199, 0xc7}, {&(0x7f0000001a40)=""/4096, 0x1000}], 0x2, &(0x7f0000002a80)=""/57, 0x39}, 0x3}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002ac0)=""/127, 0x7f}, {&(0x7f0000002b40)=""/221, 0xdd}, {&(0x7f0000002c40)=""/148, 0x94}], 0x3, &(0x7f0000002d40)=""/254, 0xfe}, 0xfee4}, {{&(0x7f0000002e40)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002ec0)=""/54, 0x36}, {&(0x7f0000002f00)=""/32, 0x20}], 0x2, &(0x7f0000002f80)=""/130, 0x82}, 0x2}, {{&(0x7f0000003040)=@nfc, 0x80, &(0x7f0000003100)=[{&(0x7f00000030c0)=""/6, 0x6}], 0x1, &(0x7f0000003140)=""/18, 0x12}, 0x7fffffff}, {{&(0x7f0000003180)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003580)=[{&(0x7f0000003200)=""/75, 0x4b}, {&(0x7f0000003280)=""/114, 0x72}, {&(0x7f0000003300)=""/120, 0x78}, {&(0x7f0000003380)=""/108, 0x6c}, {&(0x7f0000003400)=""/110, 0x6e}, {&(0x7f0000003480)=""/32, 0x20}, {&(0x7f00000034c0)=""/161, 0xa1}], 0x7}, 0x3}, {{&(0x7f0000003600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003680)=""/35, 0x23}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/200, 0xc8}, {&(0x7f00000047c0)=""/212, 0xd4}, {&(0x7f00000048c0)=""/213, 0xd5}], 0x5, &(0x7f0000004a40)=""/133, 0x85}, 0x3f}], 0x8, 0x40, &(0x7f0000004d00)) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000004d40)=0xad1, 0x4) shutdown(r0, 0x1) 15:19:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}], 0x1, 0x0) [ 1297.377524][T32382] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xcf00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1297.462230][ T28] audit: type=1804 audit(1596640781.762:1300): pid=32383 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/1006/cgroup.controllers" dev="sda1" ino=16129 res=1 15:19:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb80b}}], 0x1, 0x0) 15:19:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xea00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1297.631218][T32403] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x0) 15:19:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xea01, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:42 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080)=0x1000, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="041074ff", @ANYRES16=r4, @ANYBLOB="000329bd7000fbdbdf251300000008001a01010000000c004300fbffffffffff00000c0013005c22af17190000000800190003000000", @ANYBLOB="5fa505ffc5d7fbfa4745e8081d0f94a509570aa63452b78c777957e9f39dadff6fa82c6a3662b76af9e4d91a41932f81e1d8350e7b4dc4ae836112aad028f72b1f87f049cb7824e7029c29d24d574b99b50005", @ANYRESHEX=r0], 0x3c}, 0x1, 0x0, 0x0, 0x22004010}, 0x20085) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="34010000", @ANYRES16=r4, @ANYBLOB="000225bd7000fedbdf25100000000f0034001600000000000000e1ff000008007e00010000000500d50000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x60000040) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7f}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x1}}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}]}, 0x30}}, 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080), 0x4) socket$can_raw(0x1d, 0x3, 0x1) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0) 15:19:42 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x4000) 15:19:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xec03, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x4800, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:42 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x100b000000000000) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.events\x00', 0x0, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0x1}, 0xe) shutdown(r0, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x19404, 0x100b000000000000) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) 15:19:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) [ 1298.628155][T32442] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xed03, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:43 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}}, 0x0) sendmmsg(r1, &(0x7f00000078c0)=[{{&(0x7f0000000080)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000100)="4de77495cb194e40062c8889d86e41962cd22fab3fd8c3b263d2ebfb0bbd87374ee5a2785e941c6fbf964a8f35e31792eccbcccfaaa0a310dcc9f3387504df0113f3021056299312e6a76a5ab4b00d58ce26be4e19f6ec49670da8663f4c36d79b6176651b024a91b123a660b4b7940646861ed5a5bb33606d30be189eaa74bfd661e67ecd1626473dd8e63b0819f06b2e646af72a60626d239ab9b02fbc80cac3ef0d5f367b757edf086568646cd047d0a5fdc82a500c08aa559663688bfd13fafc4687e28173f77e30c4ef2e5090cdeaeacfe2c3b3795a25328e9bd9b1b668cfe28ac4df9fec7424b9412b7241021ed3e2346c5ab0dbc1277f3b690caa1d0e187c36764ce52ea37087ea359522721807dbe3b1f3b13bc4ea923f3f7601c0d4bf0105708ac4d9c928da11ba1f438cdb6b7cf5de37abfc967e2847b52bfc40fe94b6de1e2f0b60e8c50812a7201e158de7fd9d6a4bbd07874695bc338cb512543f50be035ee25f21d8801203837b197a97d398a0f54a1a111848685c938e9c9f1168b8dfd9774b25747d17543149dc9a7c7bbd7ea9237fa36873702e4dcaa07d000725542195edb0da009945e705f610ce42da6c934ad391210c517cea37efd92fcf5c4b232c4bed1b8b7c0769a24d1a15be7a94620c48a7a38edb42fbbaab85e930f6a58832d60ccb8943e602ce3af2ef96a0fbddbcddf4edc85e9654e0b45408cfad60ff7fc72679db349071a4e92aa9bc2c6358dbd127437e83b1c162b058415e28635e7dda5ca5e41c4d2c31e59683d589a6e27f7d8b9c2640a9ccf64a29f43be1f8258b032d31771997046e04b7fa82427031b2899afb6d0688e93e1a63745c93688499fd0db4ce1e94a2ce4b3f266efcfddb2195c2f4c37b1dc00ab3675f3a4bf63511b9d9a862d89e40aa21886add37627f7c8827ee68b68d59104bf08d7f8b14a73c35664ad3cd25de5b236ea4be553f4b0dde55bd8267d8911edd927145a7f56edddc84b5c86c06337f3e365f4da40207568db81ddaa41bb2dd62237bfc3d48aa8953857f8acae45beb26dae953282105eaa0f9a7853a73a38399fde1fdf5d776523abdfd5230c303242785fa0598d7b10b88727b0f3e9c1c6fb8e426f0430ee4cbd34f58086eb101522f9b421140ec17d8d7008e337ff6fee39ab4780e9a6845cff4a245de52b2eacf151d0c28a83ba9004c2bac6ce02542217d1d3331f88e555f56f921e6a29cab5b56213e580d871abf5ee89ff30e949662a20b412cdf86c2b5ebbd9d057e9a604de61fe3541883a131a83702ef18039a81a9b53e49fc676de0644d2f010fd6ac6e9e33ed2bead6d2aec47bfb060759daf1af62bf62c2b422aa2fb7d5d086eb54aa98746509e59c4089eff4cc1d24ff94cf1e509e182d7d7a537c0135352ed5658f78de9e397ae76b2a2cbcf8efb817aefc6826e10fa74ab6f39a7afa40ca21789993683fbb6988214ae45cc94ece1bfbf3fd56545651bb03fcf8a4fdf817a83f6989cea3a184a51a2c7277de344a696cadd718cb39b6c91eede4a389d21a82c439d5894b190a772523c3e16ba374a6929f241dedb989a7bb7127c507e0fc52c92b4b26d95f94516a26879978a49864ff5cb3988067bb6c04f51c03ccbc413ac67cf826e1cad2c106404188e3ddaf4b91aa76da5ac54c3e0ea55ed9ae1b861c729f38a33880b92d19f77a60bb368af915c6d1138f80936e70cfbc794a199ba9282631d5d1bb609dd5b76d237a50ed47f60812f7afb1001aaef9639757a4bb64aab658892dd67aadfa027b6a69ebc388e6b080055e2a4e2224a0907690c6149672d16a0de5374ff357954958fd62195c40562b04ade7b1d866fece99243655019a3a295da4f859591291b5167ea113ca85a18c05cbe0e92f2f6eb2f101a818a6559287c16bf45abcb4bee78c28c346bd055e37b78641f081ca60e0c0349c6778caba241e2385903ab344e3a3d5467d18c1820f71161d6e781c3d76dfa1e65599b62ef7f6aac153d344dcf5aa374cb2401e603071357b321891fae386663590991aa7c882030300f63f5bd10a468f40c93defbc6cd4310f0f8d6ff09c465ed335556ce8106b9d08ae2ecfb75b6c58ae320cca327201b0412253c1740a29f9eb4d94dc27f64cc834a14c573165876fa855e5536b97d2293ee88d5e4fab6c79c26ff784e36d31480120d1e81c8c7d971fef872234296fa8eb719e874c1e28834d6e07d9cb900e9384f26155f39ab74936ead1b88ac875d176d3ad8e92eb4cad77785afd802a3f45c754595b2babe1b9bfc6a2beb968d1133e10b04f39e1cdf3e5be5699c67673f0c912cbaebcaa0f02b7636bc811787574419437abe8e09bedeebc814b50b2129bc388a58fb45413ec50c1478d47c32f608b72c029807f7d51cf7779f4e97c8a3ff3573c55dc4e29dbdc23383ec4b53c8caabc676620d8eb43e20af4891596cc6882793515096941dec2d2910905697727090da44ad28418ae9374ae04f0143cd4724762944958e8d8447cf80ab781bb99064347aa31e0800e8c1af41ef7a3188c5757e008be0ae2f673d735c89873eec5b771f08d6267a618404815b8f705e5d045c1280babc76f16ca43761ad17a420eae33ebc5ec4a3f72aee0a02a41b79ff07f70d528f9fcd70f355d29da03de548d68ecf5e9d1bb71f55032980dcb9fa0200796a6f9a83643e7502615829d745e24c830109948e1e06503519d9425b571cece5325ecc26782aeb7745e0d511b93fccaf2f75881b5fc2b92a554ce4fb3b78a1d3f30a8b5a943c30ed5d6b0ab70bd7bc1bdb81d1610ea9153a6dd5c5ce83bcdc75d014a09f61e685ba38c04fb2cb33ae19eb6acf4aa4f9778780188ffaf2acbfa4de99af509d1cbeeb1d5df75268f6fec0342451aaf8e78725e23c18dba85bc8f459e18b57770c1d7ca09b18bcbd5279be5c7d0a40569b52cc8441ed90310f673e641a8e8cebf544a4c12482bf9b626f399839d16d4c05b645e1f9d101d4277b0fa8a1d2a73bae7c894340cc114e1ddd90ccf25d36576997f2ce20d48342756ae39d511764f5291e5d854cd373b478c92a51ef218d1ba915557ffe013ac07e2172a850334ff2b164fd40a275d9b87e8a27be1b8d70f15f9271271df3890615b50234d2203626fbcf235640d3720c7f69bcd8f6a8a839c2982656e9c271e61878d8c6c74c72612a1f4be6feed5d15c7c62fe09ea2ba4e30d25ddefdcb60ec776c3872e6b000897a059bf05484c2f0fb63dbb776a19735ba04368a5bf5b006683c728581f94448b6a9bab9ce876c9472f79f6abbef1a0ba52cbcb531f47573457a0d1fad039e6e42b87bdd14987502a19031730132c017d53c9f951035c67cd286e562dccf5fead04d85c69d61fccb749baf8a5bcfdab824602bdb22bb0daa03934b9148e30b55be971b4f57a8136f9dec89ec637781c6793d9fb914cd21c0b8d4ebab0c9b988e784d4cc71d05a55bbb61602ef724e7372d9f7f0fe4cdffc8b065977a3dab5ae1e4a5651ec75be8d1eca47460d1ede7557bfef8b422facd741ce8c41c737a0ce6aec4f97e80c10864329b79e26b456a78b16f3925394a446a02bcf88ebcc51ad539b8184eb40f84a0a9268badfaf20fd342a46ad8e54fc03b92df56e632d135d366a7619195130197b27417f456f2f7ed5de117908f9d0b1970e8d7a41b5b5100816f658cf4e4bfa9116f6577def7b897d5ca38846d0f8b11c2567edb2261dfecc6c059ed8c729ecd6b92cb09b487c83772063fc1df791a489468e58115a346d6d59110b6e3ef785013c1efc8ab993996b87b1b5d2ce7d912d6dc40946af053870b2e0ec43bc468842ff26d157c69e7ae34be3f46982ee9dcc6bb0a1201ae6085b3a6d2bfcc060c1d96513289c77402b489d77385f34aae5e3cc031c57836d30063c9843587a6bf364d373aa33e0085a5fc0444f77fbb818695a543da25bb381bedbebfebab1302b2e42a6b140c2db66a67badf36324d05aa55bb5b5dde31190b9275faabac575c3fa54fa85d8eeb0b087b8d0e4b5416f91a009b4adf40d95421fca9d8067ddcb2d2ef90d97656c5a981d2ef4e535865d1370559d24c27ef8132ad61ca9d19200086859e0de57cc99799f0fd4ab5d34c78f6f9ee285cf2f8c07ed12cb00e494c1d8d4033d3a1702fbefbf3924642bb6952cdca20d19cdc49f78c4f24582fe591fa8ab3185f51c73b0838b3aac31ef9f2313b1b155549e4dc54b7fbba84dca894ea5e78764565d1dc6684f5ef82056ac9a00fa0e1e27b6cc2d9b14ba526db2e06ba4c4ab6bca53d09fd5c4e03729902b967780b28e2474ed68efdf338cb520d25073cf7f5d44aff0cf265bb5cbea4a9aadbb3287ba4a8cf671fab1fdcd996822b1ef24eda1c3d4bb586950a9b2a2da679db6918796c2bc79bc1a9dd650b8f0c6c7b3bb58a8db624ab52059135df0140b246b58fd81f863b61aae339eb2df262dd067a5d90f7dd3e37b2c3d7183aafecd96b9355ec8440b6b29d0e31528eefc8d4d43b7b11d27f4ffae62e6fe8bd3f9b54658e7627d7ff0cc120405b691f4b377b02742d2fa8b08484d1cd4687b8c53f70b3bcd131f371c3a717def91d884f9198cfacddd61f19c1ad03c6ce2b7c6445c2ed8ec75e075b0918b33c1606a675e4e329c3c180aa8e14a669823c66f253b3072991188b4b27a59081088a4cc7be5d6b4d976a783e6eb12684b3bc327f5370e6f1ddf80207d5e95f92a61c9e0c7abaa5b872045b057c1cc21ba9729362dce130795bb280af84742ec5fa6e8ec0a1c455a018a0531caa2c5d41bdbe126c7b3a8df300d0f954a3616cc73fb441117a1443753aeffafc2bb3f1dc029e0911503f78876c25b8eed60e47435539c1b3e707390900e30e3a132bc1bb089b3f9de2f6c1fee4d6b5e11348941ce2d837ef3b1c4e37451f4f9e2eb4a653032fa9cc67a118a217ce0f7bd09015c78f2f1114c1f53ff7395aef27703b5b3108dc33c36b9c1a9fc98b06230212822be4f37e29c5a053403db29b0f777ab814b6ce6c5951df47a0e3f4a31d76c80c22a8b68496e7f5bd81dcb967ed1252bdc944a34d6bc1b09ea658acbfb2134b15ee706e310f27f86b357a443d67d9a25fd498959e9377445ab55953f6d6723ef683674ea96e90d3ab7cc4027f25ec9e718b03fde117d35b3bcdbb31929a6b70ab5b44e67964699041caeb06b53443b053c2829c62f5bb14f006adb68493cb82d39cfbef77afa38b5e6ac64631f63a8b94dc4de053ef6a50e2a2217a5f29f1aeed7b887d96ce9a5f71fda46f546c15ceaaa9ae18a7493ffd5303c72d3ec5d9905f898cee4d9c2f44b7830fa8c5dcaa0852d99e9769c0f1ab50d35d15df2fee32d869725b6b238c4060460adb5d7562fcf8b09bcdb0bdc52a05e1b6559a8a0c48ab08601fdda790cce1cbce139d63a20ba9d979206f49c668b97a630ebce9a0c97a8cb2523b9cfd5a704b743ecbc973c04edcacabea9544eae5ea0cc84b8870f2658bfaaf3c14885a6e2e86ea0e84fb18a878bfde410d21980d3c854f5d96db8d2f7a0540b59f753e98d3283370015b82056f077765dcd540922fb2ed0e8b2da35309df1098eda060cd621b08bbf0a09dae7d1f8f424490d3f4aa2d46e5c66a59518f4accb105b3b000fb527496f9464ef09b299ada0209285282de9db407cd7285da5dff3a115d83729de3b2195a79cb7c622795ffaddb97cc23a8c897abeaf14ba813505b40d83aa461c65b5fe25bafedd0f4b1e94e1a5e3f452cb0cc70ce0719db88c3bcebca13514b0", 0x1000}, {&(0x7f0000000000)="94eb29bae2809dc4548a97f0999cd9f6e03b7c339088a45313f066ff2d542262d250c0a7358f625a72907ea39c67a51dddc05fc23d01ad5a045a82b1", 0x3c}, {&(0x7f0000001100)="7c30339071c5a57088df3cffb52233a07855cf73b413f346528f2df29d9f5fd3c7fe98946642d52bc774013e4e18fe7e5834c616075dd48768dc540860c73e054e83d8d87eb9f7da410220b1626c611df2e3f971115bbb8edd3283c40b8bc9c7cd254dbd4558d2be48450ef8dbc3ce51ef279f19a3581930f43a24ae34", 0x7d}, {&(0x7f0000001180)="207b811351866c0f4f5265d9a10446845e4ed5d686851af4593293a028269eabec2378fdd9988774fc591badcc5ec15754191391b765e8b7083ad9c4bd", 0x3d}], 0x4}}, {{&(0x7f0000001200)=@qipcrtr={0x2a, 0x1, 0x8000}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001280)="976569151d0625b36dc9fd9bd18a472045ffd658cdec419a1e7995df51523ffc4dac4b687f180d89aca5b99e1792721e41bbe31772c37fe994ad58bc975c09db99106d0b4719e8e2b91bc599ce8a2e6ed39641608c658ffb9d1c05f59104ba169438b3e0d21b7edcb68ab2a82d4bf78c5da9309729acb823c7a90399d10c496ca46d81fc0e3fcb60f7b2568c6081a23485f7455e9a642bb69c2f9c2b5fface66a847f5", 0xa3}, {&(0x7f0000001340)="76fe484446a962a880f0fbb0b1b04290fae9555f3bfa5190068f6729bca77e7a3f3d6672dd42fd95fb1291b891f1856497cf37592a62f4a830ecb9081d44501389d79ac001f1a717888ea44c5430ec72e416a705bcafada819a4598d61063ce8c1381934623e5474a0b953ac20eb4b22ba323618101a0086896cdb44dde5a3ec81233f026de8ab5d1a4cdcbe4a04f5bbe7ca2ae2ba69ae76cf06096b76c5981087d4742c9ef1597052ea171543fd94eb6dfbd31f1af2eef1ec00be933d77f0eec0018c1cc0a25d372198d7f4fbf1", 0xce}, {&(0x7f0000001440)="8237393cec72abc827bfee1af63c9934975fc75e25cd71849f3c182294f054925b8eea50f5ec3448a1cd1a5e8734c52ca0b7da7db429de53032cbe4f52dea136535251a50ee867f604c8d32f6ba81cd2fd0907c2a75b6f83e989d83a17620d5871c02a7e690bc562205f4ffee9c344adddde3035ee31", 0x76}], 0x3, &(0x7f0000001500)=[{0xf0, 0x84, 0x7f, "8ae5370410b79ddb9cfbc1377b80a7c0f6310768793013e6203042f4cbba5d88dc0060c3315085b973bf1e144de4e56edb58dba3806dfb42cd5bf4bbfd04c0a930bd2a3d4366cbc947f58ab65cfb5441edaa33a4a1ed2eff8cf370407477f489175314ea50802b6004b99fdac5d1baec7d351232ff95ec0b633289de7a21fb11f59d336e45235c7b09ef092228f0d7537fe5c90ae3a2068db9bc83c945b883f581d74c1dafaa2369aed8374b7753831f801aa21c370e7aebedc3c1c9bcbdd00fb8e4f4e83be09e216e5c7eedde05fad359dff454adf96a581760"}, {0x38, 0x112, 0x1, "560ad549562e6d4f2417b7dfeaaef9e718a5ae984eeffa490c7a5b94e800ac409f81ddc644d47f"}, {0x78, 0x1, 0x200, "df6b97e41696b77bf950fcc06e9135d792605f6da966a9fc5a1ed712f27cc3420b1d0b8e566d7847d9160b4594ab9eb14c5556338f7bfef668c0b94cce8a9797b73b2b0c32bb19ab01ea074e8d3102f36ae84e2b8a75d7b548fdb80d6797706c7783beecd6f2d5eb"}, {0x108, 0x110, 0x9, "e456c9e1e80aa66e0fea102d8f275136f1b93304e25a86c94eecd37559689f9d4191f7f6e3aadc65d4c16333f3a7b8551bd40b6a924571106d1a60b075866bdaadc44de57c602e47da7dccdc37d280a0e4dfb5261af16d7e2207b343c8f0a7f14cf89f6004326d0439441940799fc59ee98afc39750da413334fc701772ce25e7a8fb2248a2e85723c03d8feeed4bb687a27d1a2ad51dabe790e9e06e42d10fc3d95ee1d595fd768d3e54947cc4d3a9fb8d12ed4e513072080f872417aac064fcae86d87a267791faf63d16757140ecd5d1a30d770d9804df8bd5d86277334b3fd6288b262d9a132f16fc8bd45e8139a2b42f744d26092"}], 0x2a8}}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f00000017c0)="2adf36a2d23abad743c6134daa235a721f48ebeca053cea2913a6398", 0x1c}, {&(0x7f0000001800)="f9596f47c1a7162f58234830fdf38dc0a359f4920e82056fea6dc23079be11e45f54ac72f4f599dc257ec2a7239f19f59c80e99d638c3f6fe18e55cb7b49c2ef38b3db6fa90707a6fe6d7052482ceb554a55aa6374153e57e3fab3455157f4c363e34d9dd634024fbd948dbeb54f87d67c6319a51f434c", 0x77}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="7fdcb8add39721cd103728de69a15df0b24f103875e7abcc698ffa60be9f3a985b65112ccb03f430e33e3f00aa46337dac87f9f6d538818bddbb5077d542e67048c91103a5eea583a8ae4ed8f189e8f10641f411f583a909fb6a0f83bd845c74e864401343c4", 0x66}], 0x4, &(0x7f0000002940)=[{0x108, 0x1, 0x2, "f4a376611d8b46f175f47f148ab8244531cfb867c27b3a22c252fdabf1abf3d9eb729b436d77883c5f5ea836ea8d457e11c59f2bca1a5816f102d6189efac97cd94e405ffad003b9433152abb90b64bf178767df65c7d4d6a9d4d9e31b0b2e39a572bbb8e404d32b78c487972d9bae9f60d5034dc609397c64f0cb0f8fa58175ff6d58908959c0885229940845bce1f40c8e470a0f250d0e75fd2724230e9b51b711ba6919dfc25cb97da7cf9608b32a5c00e12e31ef01af402aa543dad69f0f7a7d39fbfc5b6b7fac85b0031085d348078d74da08c6961e6ed745c3d5fc1c0945aaba3c7b5c54697aded71541c38ba1e8"}, {0x70, 0x104, 0x9, "e869e715b34d7d2221a7f27d983baee09750c3c3e9576c2853bd3ac2a7e9cf8b09c7607850c6926350e8ee5bc6792bc0f0b892f7788d638f0620745d8c05f8ae87ccd63f52bdd0c513b274922b2eb9df6f60b97b4ea31371d14f"}, {0xc0, 0x104, 0xfffffffc, "5f387f94515b17a4e1cbae29244fcc3b6c6da89bfe57bedb006ae58306b99ea792e2496f3c101440a9cb63fc01327d7e505cedaeb25ea17b68f95de6168346cbf130d4482e064d229368204a139a0a9d15a14c67dc41328270a3f11d1cdc23a9d0dc2f672da1e9e510b6d325f9b03862274edc3aea3e3946c2f1b582b890c5f9aa92ec90e4aa5931a98e89ab42b2b5c9dcddcc884db28433d31c3cc7c891d3c316cf2923bee139fb11ee7df343cef941"}, {0x98, 0x102, 0x5, "e15d44d8bdbabe90edb431798a3a7d2cb5fb5291717bf5b538e6f9963c34b70214b1f6fa87086e100d99018a83e04a8a54237031175296829d1edff69c0fb6a5c15777b5aa6ff11a758f5d96f0412954eff7c3ce63048017a041108b7ed9f6de769fd41728b7ae07b0161387941d3aa9a0d0114c37b06c310e14899426054280e301"}], 0x2d0}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002c40)="bce77eb518e5acbba416f17a435d5359103a0f02ddf7f66c4b3b5541d3af10d159306baf6caa47f83a1fb8ca7b837fd329f670661d4dd5dbc562cb7a2637d080de6693aac78c6f57fafa3f9a85d187f29dfcb5f2b8cf2fd1b3acb9dd036cdb9747e6670f0e3db07aecd2d07cbb2fc4f7fe5a13bf917925b73158c9e3de74beb74b6ead7065de03f485f1e21720c448336a", 0x91}, {&(0x7f0000002d00)="97f911c2ef8bf86e9bb626b0f2b3424d00b7138f185674819b6f85c5655ed79dded223a572be0b85e464d0b8a344115d8fd7bd973c121b3a9f01dc1a6e33ca1f3dd910b55db7573c1e2a97e36888306b52f805b6cf2f31cb90b61b3e0ed18b70149916e9306da7509ff5803244c0881cc055be22f044ba7119526a3e620be64aebedc019c64e35c42ba296d2ed619627a6bec2a4966f8a227d3f1cb86d5888298b6d142d7c41d856710d65c842660685a6c71939d7c79548f87694be2f91c535263085cd3d107e", 0xc7}], 0x2}}, {{&(0x7f0000002e40)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x1, 0x2, 0x2}}, 0x80, &(0x7f0000004f80)=[{&(0x7f0000002ec0)="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", 0x1000}, {&(0x7f0000003ec0)="57af3232a2101096f94e548002f3c7183005ff1772cb169a68359324b5f159a760376c52fb5652d3f6f37722cde19f6914d1c2205358daf10fc639721e", 0x3d}, {&(0x7f0000003f00)="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", 0x1000}, {&(0x7f0000004f00)="3ee9e080d9738d43853471dc522a78401f1f3c0ae961c6db600001c3f14c325d1fe07d56006c74f19eacd9c7f927f919db", 0x31}, {&(0x7f0000004f40)="92e7ec6366cbb8498172e5", 0xb}], 0x5, &(0x7f0000005000)=[{0x20, 0x10e, 0x34e, "0b2a7334ee2809ef165ce457"}, {0xf0, 0x101, 0x3e, "b12865410bba6920b3a98e64cfe2a4f1088b4d08038dcc6995195f05448c968312076a93943be4f143a416d7b5fde35f632776aa683277f55d3899f3de79d19e9306bd50af4a52086e2a6a53ddc32fe84d55abe1ede36a9bd7dcef93c3526db7a7e2ecfdf7acaed9cec56138c4605a34b87e5ca14b10792504e4a5d2149a5532b87599a874de77dd5e9f9f0e7e152250948ba5bf8ac26efeca612ea6e3324e6e3ff14c2623497701181fd3a77db8a4a03fcc79ad1f0db98bb9cd487228d66f9a9cc7dae6a7d195dc54ae029fbb9846a5e53f7e31879a4a3571ae47c21f203eb1"}, {0x78, 0x107, 0x9, "145c660ec4b7f0f30951e97aacc48695452e3e6b0434e83a9323f092f40782251f44269b6d96a3958107648ba49bd58c9cbf4cc75b98273faa472a1faaf3698fcb19e2046741b2af72811f22ca6b51f9668abcf63a8097f5648d5d63cfec4aca4e"}, {0xb8, 0x105, 0x6, "dbcf5296be100094cd2259b5f2a3bb654260141268132d17ccb476d94313e8036c1f6488b81100e470b1dfd9e9bcbe8eb02a14ae3a913e2645ddfc0b00eae9c7ef3b7cbc77c170eac34aa0feeb62d954fbdcb78cfc9cce13839ca3f39ae1677ce83f9ee98b7b6413b872976ba22482fb314e38fe5c05e9f431d4c23feb47322f1e644f33f54e2b3c81db431110c054cd6b2e25b568748db861c461ab8978ebdc07666453f2"}], 0x240}}, {{&(0x7f0000005240)=@generic={0x6, "a414f2ede4a6d150189f31df94e93c57143dc4512762a3764592105f354f6f49018b84be76c38aa75234b3befff3f7f3c89c04d5825882123a4975b310a8a44eb5ee2ed695c42e54b3c6e550dc7c4c1dca7842314b00ce754003a1583f4b5b34c20ffb82fc2522dfe239be2be402faa64831acf62d716e58b9ae50c77e44"}, 0x80, &(0x7f0000005580)=[{&(0x7f00000052c0)="62089f90c7fdc8d01507509424f005a6874d472d6fb8f8e37002c8509a3319f8a9a627cb9f3419ac98f6aacc4fbcbf96b3937c906021813b4386e098d8132bc20d644bc33fc46dec2b15c7446f937456531da32f1a834a648d37d894bc", 0x5d}, {&(0x7f0000005340)="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", 0xfb}, {&(0x7f0000005440)="bd89058daee2565f61466f8d21c25bac4c23b83ab043ee908a00d05a318f2446", 0x20}, {&(0x7f0000005480)="f523b222db5cabc39e345f2c8573f2f20a008aad78c171e57ef839ceb642959e09c0160d2bfb4a79b9eea1fe028dfa4d0e4e543fdfeacf49065f084f631271765fe14b3f0b8bf291210539382c576004ff792deac3bc073e8b0b009ea2bb50965a3c2b0b0cf1978fb7c7c7b47b7310a627fae18a87220dd0945e0a534b442520949a3f37a35afcd1d9618212c1cac8a86e080bc69ad2d4ffab1a3f7be4f8c3e9728bc2dd13a38825e45789a869caf13df121110e3cd2b94e15e5609305708668b48a960a982a8257648640ae643e14001b8bff63567c9d76595e41eb83a29697e9563c4970818b5517a8f676d7c644d74cbb1e9a4e43", 0xf6}], 0x4, &(0x7f00000055c0)=[{0x18, 0x10a, 0x1b, "3d23f77b27814c"}, {0x28, 0x103, 0x1, "a031a3360c73584781563ece3f4f1a65ec87adc267cc43"}, {0x68, 0x10f, 0x1f, "4dabb2a5fe50ea20111b959fb1599effd6aa1e8bcc0bf75a6e390b46da8f4489d0a26d8c35d6e42b99397cc43d98dbf55d90f4fb43680bc37337529445bf3efd87aaf05f958d10d02a58f016c018ab841656"}, {0xd8, 0x111, 0x9, "89f2891f3586730d72d7ff3f23f12cc69b387a19a5a808dd97ad2ec465f882950e72139584953967e98e48a8361622bcd716a70f68a520faaf41950199fa3d486a10ece5aeab06a289549afaa7dc5b84467f13671f540cd8d750f30513a3fa81b9e996c1f5997f36cab797721af44ffb5d0d5d7509d431f8e1335d810865bcce7a9fae91e0591369b787c32d1c2eb0a99c2c27cb6bd251a6e79147cc8a76f0c5682b00593394888acc122361248e3afb9eff15a314a857fec9b78b9b6300ac209f81b4d08ffbf1"}, {0x40, 0x109, 0x80000000, "79e9fd27e17f28e0e4b646b13d362216d32f2c463691e271cbd980624edebf792d9e86ad7e5ae29b5e256938dae5"}, {0x1010, 0x10c, 0x2, "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"}], 0x11d0}}, {{0x0, 0x0, &(0x7f0000006ac0)=[{&(0x7f00000067c0)="dc8ffb768c9d7581de6971d766359a74a424fe12b9642216feb2fcbfa4a2e02279011ece6ced322b97d9ee65d4f42c0dd6de107c3e1ffed942a82d5738db679e572dcb7dd47dca9432c49fe958bf9cd78e60af8c84d9c68fcad9e30163056b4e9ee0fc54bd3a8d4ccb8edb53ac07306389e70635d92e762b0dbb08567703492f31d12a28bd4a423ce70db15dedadc10880c982106582b8852fc8b660f70187ff5181823206e7864807533b368c2b0a953cd616c451b3e2c52dbfdc3c5b6cd49543d65e321b6ff2684bdac152ff20297f06e736ee7a1379", 0xd7}, {&(0x7f00000068c0)="9508f88e7dcbcec3ffa23a2633710b8c2f75bba82db1a14984599629a0f14b968ccaeddff45f0d7f228991d6b263ef0af49a60328dd752ed87c8cdbabd0f8846e1", 0x41}, {&(0x7f0000006940)="0bf00da2ba090e0698899003f1f347b8f30af4f8c90576499ececfc5d1bd7e686ce51385a797358c87377389f6ad2735b83295797a37364c523fa37631b2f28241fb65a7e6ec3579d3af63abfbf29026bae7c37171f3ec092440c8293d498dfa1b87094812c78e3dd7c36820bb32e5461f7880cbca23eb27f4ffbc294ede9f92d989d0c514887e4e97fc931ecffbcd72a577eec598d9f981db4692403af6b3570fd9640453c94977f7f197ed804514ee58cbba2ab2c877c403945c56d92246e37d263463c16bfdecff2fb700968ff93ae9bcb92ab9e72391bb18a7d32f30056188258c5a60a2268f983dcf9b3e93b518129e71ff", 0xf4}, {&(0x7f0000006a40)="6d5211e831a8", 0x6}, {&(0x7f0000006a80)}], 0x5}}, {{&(0x7f0000006b40)=@nfc={0x27, 0x0, 0x0, 0x7}, 0x80, &(0x7f0000007000)=[{&(0x7f0000006bc0)="61ae230605d1d524c57fc481f439c5aef6666f27fd0506aa20fb77a5c2c12680a3710d94c290ef07d4abcd30a8154d97e78df6e61f64baa0505790d161606a9f95704833e8e13fdde11f35bc1ab78e113dba08f1651ac450e68d161a6c9578f30d4de577a64c489ea1b6bb27c35b13a69d3c6967ea7f5299", 0x78}, {&(0x7f0000006c40)="61d67720330038c14358eb1a561487cea7d46d94e7fee4bb99c16b392df8bfa304ada044f7495d1e8a9de5537013b901eaa10db4c7d008ebfdf0b67326edb5712ef86d618e90813a3b3d3c5dc0cea9d9c36ce309bc5b10f6c5fba21fb2550955c6fcabd799ff8aae5674cf32642ff8d69decaa84a837fe50ff01d68309cd37ac4b7cef45f027b807c726bcbe68456ae5a39c90a4a1218e60c54f8a2b6c4d65710f188004b38deac57ca6208e9780d25e67afb65c86b2304960824a58bcc292ba5676891d728cf37d0388d96dc9a6e9e020d45353b158887b3d2bb2e6b527", 0xde}, {&(0x7f0000006d40)="81eb740d7a", 0x5}, {&(0x7f0000006d80)="760cb1f9dc6ec489a46243a029c6807af020837eeaf3f55f9df50e", 0x1b}, {&(0x7f0000006dc0)="37cf0fd16b871335f4410cd16ab059ba1f84b4c9de075f38c797d112b621e1196bc5e2d332c86ad0830b2568d2293e69d69f5567093e9707b9bd14efec545aa992bbc3043ff27584b2054dc7692e0036f82901d6155742aaef6c04a6d9bd146be95bc94f6c69294cfaedb47df1eb88585569802798aa28328d32f4c6cccb8bb4248563c24280f5cd66634c127f3f2b1075c0f2e0a4e1f901828d77ccc0aa03aab4ec20b02c51fce6a240aa5614b9cba088377cf0e09505d2e4479857cd3058ab4ae9f51104161613cc14936f2258ae86563a1fb7f8a43d3ef9414fbbccb460", 0xdf}, {&(0x7f0000006ec0)="0e01d6ac35eb02e13f47996b74e9d19d217db6d1f45413874bcbe2e611375a430adf28582ab7249d75eb8df69320c55734ca71bcdea30656a27771ff21a1ed0866f4a6c02695f5e14e5f24f4dbea0bd0dfa624195581eaefa19e5ce07623e07ceb9d05aaf4532f7d1927968a90c3117d3b169ea13854e6887c6dfa6a67c27a5014", 0x81}, {&(0x7f0000006f80)="de1051c4d9988dd8a1cf05abc6037c6429cc51a88ef8743a49a6e2f24ed397ab63291d2e40a88d9cd4", 0x29}, {&(0x7f0000006fc0)="3bd6e82f3566fc5ed1aea00fc0664bb2fc50a0738a", 0x15}], 0x8, &(0x7f0000007b00)=ANY=[@ANYBLOB="680000000000000006000000aae00000ad9feb81f0134379f7fd07af54108ddc70d0f11d00052fa9aa4bc0781ad24dc35f4804d8604a10b54e7cf7dd1f3d0f23e296d1f45ded43c041de0b3a6d2411a6fa1a6243fa2755396678bdaf1437a452bbc30000000000000001000000000000ff00000000010000eae40e9a27925e19e911244e30a29418a5bfc4dba9f529ca889cde19bb4daacd40139a76cdc36d9f9e7b0582dd91a00188190b8e52e43e86a6f69ed19d6f1cf09eeab2cc72272dbf69c893214ea69db1d62c96f25ae71d542487462e19f3238c62a5a822d790ba6ff10c95e77ef9cbe734acd877106021b3a31f46375a57122eb31de7321e2dfce846673276197bc95eb4e76c49263bdda146b98f4d8911a7e31d7a3fc9954a3e9c88a45539fefba98ccf553f611cdc6d786c99e278249f597d431b0e6496bee98bba542e0d0e02f90f9fb427ac5b83178b5a8675415d9cbe193e92b05a62929e6197f7ad00000000001001000000000000130100003f000000c6c7de71e3689e441a0a889a541a0bd8aa4060458dee9279b3feb7f9a10a4aea0ca0404c43052946d2579f00149775aa8a45171ded1a92f9dfb942f5d9bd672ee188701926ff936394569ca0565935ca50be013aa8b1c6c846a8c28827b8ff1ec0e02f1fc7ebc0637b55dc82386acce73ef6128fad23c0b34a225787f682fb859659fcdd758ea31320681f9b79156d4198d7849c32d55f020781e29a0159b5b78dab58e46e8cb81c01b29a70e9b621a5446354bdc00aa469b63b85f36f3f19622222df6c8d4f1c3c7b60d25921fecd599117b61f4f8b314cbb4bbda761494f0c245bbd026d696ae4f6322e769b13f95afc93d8f2a6387191fe0f48ec038100000000d0000000000000000b010000ff000000e7bcb853d227618a4040bfdb7893bdafd2f67a598b721b100753ebac05060864c7775e00fe796a95fbc1eebd4420256756f53935d208f463ee4a87f6292788b60b86b45d571db88e841befe8d6d614cb07e7115fdefeabcae1ab56dec70c4eb1b32bb65db0b9175807d2047e50697fd8083b1ab72c2e93966fdbd52c4bfacd8ef45ebcce55b9f09a24125f7eba062ea59b3a73aeee5d54f3e88f75553aa1f150a1f234af0c28867421563f7932142a6af22e488dcad0d476cacb00000000000004950ad7f45c8065c6b2d525e8763db597759d156c2483108a2e8059259fb0c950f5fce3e230001e5812183c3c51cf8b1adcabd13b800bb56c7b318dd19365a2d337e907060aa61141936435a714db2156e5713a967cc5fbbbbb544a5c4539fca9f22f3de608f76f551fa245a01d62aaa05f58f2702ab62347c9cbf9d6ee0126579a4c54ce542215400c8618489de056054fb9d1fc0cb6988fb4a9ad37f5b216f7580b28eb489f1bd40abcd6772f08db9b48c06671fd0e6b31a382c70971499e00c68b18577ef626fefff284a5f33ba5419845d7f0245e"], 0x348}}, {{&(0x7f0000007400)=@can={0x1d, r5}, 0x80, &(0x7f00000077c0)=[{&(0x7f0000007480)="8a9ae47e5a25f64dcdfdf440fe90904afedafd7b7adab38968c7676e01e0cf65a7d84d787ce30d26e83f87039d3dd4038c51cf209ccb2381df71fd8565862769b697a33b45517183bab437", 0x4b}, {&(0x7f0000007500)="55f6c0cd323359fbe04e5c0ccdd7c2751ba440635abe9924952e2bf1d69e905f6236b5280cb76b7735d36c79b6a152e509591e54fe977280c17ccd9d4062ecf0d122c8457bc169f9eac2228f2ea2ec5ec7c56d0f17935cb612af16f108096d39c11712c8e5ec086d7293ba2c9a1e8f7a6d033afd80de5159fe4fa4b570bb0b3b8198545fb71f0032e48d16e419fa31695dffe715c336b9dbe586fd7dae590de19477f419f1a9af547b1817382fe00926787edf6b40dc20fe2dc5447af72c6ca99df122", 0xc3}, {&(0x7f0000007600)="d2bbe7e6902ac3f65524959216ca594870a6e24adad648d45d21683ef1fc15588bc22cf99daa51838ff73ccd778bb8b00aed73507c724ce49898ec9ad0c1dba81dc359c49a61c048315061a45ea97a4c495eee0a8d3871c1c99cb792bec173c51e24e3abab04e02272f20d79905ea342e6274df2e731f78922a7b98cd2000a6d071f345a0ab3b786d7e616c436efc347a1f5fee71332d7bd59a308cff263d65df5cee408284562055ecf68f8ac1d278f22a1a7c8", 0xb4}, {&(0x7f00000076c0)="90a6bae99803b68ded29189c0de4668b505c1771ad60e46ad2280098993a5c0ae5be15833ca1b8e1eafd70418c489e13181737dcc622800a9571e7548deb320ea723e45714adcca0c6ca4324c7198325133778c445e1e9a2b74941fe5a9f467f9f7db6ddff78cad6d512d557aaded053877d56ae3a563f6f30685e097601eb657d3949c213a3c58abdd5024c3f1ec30ed15237e37635b53f35ce141027c18ea2bfd9c19b5f7f5c25f427fce857d2f5a673a198025f6a0c3af0a82c4acbeb32077e6047f599ca607f400d09a92c64e4b75c1049116f24763b4fbe78a2ef0e42e88c4a2cdcd69168231d4282445bf3e1099a32744749324c22", 0xf8}], 0x4, &(0x7f0000007800)=[{0x30, 0xff, 0x1, "21b9d593075775134272874a76b01307ed024e006deb956aab24c878412d"}, {0x68, 0x108, 0xffffffff, "d94fef8e086d1302e47b0fba86519d2190e891122daaf11fc893c97c8a3f314eb91018a49808a3e92dcf153fb941b008dbb6c5143c008fb0f85c55288d29606811cda35348e91e85e47621af30cc6fa3b1"}, {0x28, 0x10c, 0x101, "ef7b7af02806d0276912f1b5faa1528585f7e46f54"}], 0xc0}}], 0x9, 0x1) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) [ 1298.732327][ T28] audit: type=1804 audit(1596640783.032:1301): pid=32441 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/1007/cgroup.controllers" dev="sda1" ino=16226 res=1 15:19:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x1, 0x0) [ 1298.939870][T32461] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:19:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf000, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x1, 0x0) [ 1299.029490][T32463] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}}], 0x1, 0x0) 15:19:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf001, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x5000, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:44 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x4800) 15:19:44 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x140c, 0x4, 0x70bd27, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x2, 0x800000003, 0xfffffff9) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x8) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3ee8bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7877668c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb26372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:44 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='memory.current\x00', 0x275a, 0x0) r3 = socket(0x2, 0x800000003, 0xfffffff9) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000004c0)={r0, 0xffffffffffff8000, 0x9, 0x6d}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000080)=0x1000, 0x4) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="041074ff", @ANYRES16=r5, @ANYBLOB="000329bd7000fbdbdf251300000008001a01010000000c004300fbffffffffff00000c0013005c22af17190000000800190003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x22004010}, 0x20085) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="34010000", @ANYRES16=r5, @ANYBLOB="000225bd7000fedbdf25100000000f0034001600000000000000e1ff000008007e00010000000500d50000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x60000040) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x288, r5, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_PROBE_RESP={0x269, 0x91, "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"}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}]}, 0x288}}, 0x8000) shutdown(r0, 0x0) 15:19:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf103, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x0) [ 1299.894230][T32506] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1299.967239][ T28] audit: type=1804 audit(1596640784.272:1302): pid=32504 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/1008/cgroup.controllers" dev="sda1" ino=16305 res=1 15:19:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf403, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x0) 15:19:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfa03, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1300.236002][T32529] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}}], 0x1, 0x0) 15:19:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfd03, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffff7}}], 0x1, 0x0) 15:19:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x5800, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:44 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x4910) [ 1300.713159][ T28] audit: type=1800 audit(1596640785.012:1303): pid=32515 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="memory.current" dev="sda1" ino=15910 res=0 [ 1300.888217][ T28] audit: type=1804 audit(1596640785.192:1304): pid=32557 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/1009/cgroup.controllers" dev="sda1" ino=15830 res=1 [ 1301.079685][T32554] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfe02, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff}}], 0x1, 0x0) 15:19:45 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x80000) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000140)={0xf9, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, @bcast, @netrom={'nr', 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}) 15:19:45 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r6, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x14c, 0x3, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_NAT_DST={0x84, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}]}, @CTA_LABELS_MASK={0x28, 0x17, [0x7, 0xffff, 0x800, 0x78000000, 0x7ff, 0x6, 0x7fff, 0x6, 0x6]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x52c}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x39}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}, @CTA_TUPLE_REPLY={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r8, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="110127bd7000fcdbdf25010000000000000007410000001400180000003f7564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x4054}, 0x4010) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1301.286032][T32570] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfe03, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb80b0000}}], 0x1, 0x0) 15:19:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x6000, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff}}], 0x1, 0x0) 15:19:45 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x4c00) 15:19:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfeff, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1301.662792][ T28] audit: type=1804 audit(1596640785.962:1305): pid=32589 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/1010/cgroup.controllers" dev="sda1" ino=15755 res=1 15:19:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f}}], 0x1, 0x0) [ 1301.738980][T32598] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xff0f, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdef}}], 0x1, 0x0) [ 1301.974522][T32609] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:46 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2, 0x800000003, 0xfffffff9) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r4, 0x10, 0x70bd29, 0x8e96, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x40}, {0x6, 0x16, 0x6}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x40400c1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb0, r5, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) 15:19:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xff7f, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x6800, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}], 0x1, 0x0) 15:19:46 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x6000) 15:19:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffe, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:47 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) pipe(&(0x7f0000004380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r4, &(0x7f0000005500)={&(0x7f00000043c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004440)=""/116, 0x74}], 0x1, &(0x7f0000004500)=""/4096, 0x1000}, 0x40000000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000080), 0x4) recvfrom(r5, &(0x7f00000032c0)=""/127, 0x7f, 0x202, &(0x7f0000003340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x1, {0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, [], 0x1}, 0xfff}}}, 0x80) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r8 = accept4$alg(r1, 0x0, 0x0, 0x800) preadv(r8, &(0x7f0000003240)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/27, 0x1b}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)}], 0x5, 0x0, 0x5) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1302.742071][T32637] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d}}], 0x1, 0x0) [ 1302.808523][ T28] audit: type=1804 audit(1596640787.112:1306): pid=32642 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/1011/cgroup.controllers" dev="sda1" ino=16380 res=1 15:19:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x34000, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:19:47 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x65b, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000140)=@security={'security\x00', 0xe, 0x4, 0x540, 0xffffffff, 0x0, 0x148, 0x218, 0xffffffff, 0xffffffff, 0x470, 0x470, 0x470, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x4d6, 0x4d2], 0x3ff, 0xdd}}, @common=@dst={{0x48, 'dst\x00'}, {0x6, 0x1, 0x0, [0x8001, 0x7, 0x4, 0x1, 0xfff8, 0x9, 0xb4e, 0x2, 0x0, 0x5, 0x6, 0xc9, 0x6, 0x3, 0x3, 0xdb], 0x10}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x3}, {0x2, 0x6, 0x6}}}}, {{@ipv6={@mcast1, @private0, [0xffffff, 0xffffff00, 0xffffff00, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffffff], 'dummy0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x6c, 0x7f, 0x7, 0x60}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x210, 0x258, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x2, [0x665, 0x1], 0xff, 0x10, 0x0, [@remote, @private2={0xfc, 0x2, [], 0x1}, @loopback, @private2={0xfc, 0x2, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={[], [], @remote}, @private1={0xfc, 0x1, [], 0x1}, @private2={0xfc, 0x2, [], 0x1}, @ipv4={[], [], @multicast1}, @private0, @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private0={0xfc, 0x0, [], 0x1}, @loopback, @private1={0xfc, 0x1, [], 0x1}, @remote], 0x9}}, @common=@srh={{0x30, 'srh\x00'}, {0x62, 0x8, 0x1f, 0x5, 0x200, 0x1, 0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={[], [], @rand_addr=0x64010102}, 'bond0\x00', {0x7}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r1, 0x1) 15:19:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3ffff, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1303.094024][T32657] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0) 15:19:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x40000, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x7000, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:47 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x6800) 15:19:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0) 15:19:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb10, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1303.476897][T32681] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1303.598112][ T28] audit: type=1804 audit(1596640787.902:1307): pid=32682 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/1012/cgroup.controllers" dev="sda1" ino=15957 res=1 [ 1304.160800][T32691] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb11, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0) 15:19:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x7800, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:48 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f00000001c0)=@rose={'rose', 0x0}, 0x10) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19404, 0x100b000000000000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x37cb1133) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000080)={r7, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000080)={r7, 0xb6, "f4eea87fe95997a88b19ffb60cc55fd4be1e3505739c5a721ee90308ca4130fa079b160a93b13beabc57779546b3d36f6efe10042cacde8a2d13cfaae19eccec70e16c13681f4af3788d5ee6a95c86198d38218f1fa0fe0fa774f736213a74551c6289ed275735567f04136220164120ae9b2e618e101808b04e482c1b2418d94c2ef5e967b43d8db8587aca897530f7b2a1dc8294129bcdc373c6e43d4be70646e9fd33f9974092f0a559d2b634ae6b29b63b49f9b6"}, &(0x7f0000000000)=0xbe) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r8, 0x810}, 0x8) 15:19:48 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x6c00) 15:19:48 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x41}, @in=@dev={0xac, 0x14, 0x14, 0x16}, 0x4e20, 0x5cf, 0x4e22, 0x0, 0x2, 0x20, 0x0, 0x0, r5, r6}, {0x80, 0x596d, 0xffffffff, 0x45c, 0x0, 0xffff, 0x7f, 0xb4}, {0x10, 0xffffffffffffffff, 0x9, 0x7}, 0x6, 0x6e6bbd, 0x2, 0x0, 0x3, 0x2}, {{@in6=@empty, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3506, 0x1, 0x3, 0x0, 0x40, 0x4, 0x7}}, 0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@private1={0xfc, 0x1, [], 0x1}, @in=@private=0xa010100, 0x4e24, 0x1, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0x3c, 0x0, r6}, {0x9, 0xff, 0x1, 0x1000, 0x6, 0x20, 0xfffffffffffffffa, 0x84b}, {0x2, 0x2, 0x9, 0x3ff}, 0x6c7d83c3, 0x6e6bb1, 0x1, 0x0, 0x4, 0x1}, {{@in6=@mcast1, 0x4d6, 0x6c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x3, 0x1, 0x7f, 0x9, 0x500}}, 0xe8) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r9, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r9, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x200}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x2c014) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8000000000000000460aaa149526ab664700000000d90000000000000400c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad2a088026e39388e905d985fca8b49626f5480b697cb9ae33957cb175a656ad543acdc5451a8d0a338eabce0c0bccc158d6f88497674c0ae54b58157267f2e926b3da70dd494056e91c8e79a58fe75a56", @ANYRESDEC], 0x32) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES64, @ANYBLOB="358ecb0b34817473da775752da96be26d8e12cfbab5dc9c37cdfd9add14a92b680e9d448994671155a39edd0208954ac69faf7f50da23a355039ed344e3c9c360fe801c7b1d163cd97a4bf067a86d3eb6dae5ae09c2bc0cc7a9d3c3b93fc0e5d6cec624c074680b30d990e0e804c70d4d82131eed11e0b29c5149d1262fa781dc4fe9029aeb776c286c9f8c3053d2cdd9041911b90fe0871547bf7fd175320bca4776b0eb1efce7a463f4b966e0cec6c0fd9dd1f94b31e5b23eaca07e51226434465f2130c6d09d859ea5efff7455387801602d6412002d42bf0083e6d59e6ab508f0d61543a6b5871d55d0562c1442227c9893a", @ANYRES16], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0) 15:19:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb12, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1304.427547][ T28] audit: type=1804 audit(1596640788.732:1308): pid=32711 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/1013/cgroup.controllers" dev="sda1" ino=15946 res=1 15:19:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x60}], 0x1, 0x0) [ 1304.652243][T32720] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x700}], 0x1, 0x0) 15:19:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb13, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x900}], 0x1, 0x0) 15:19:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xbb8}], 0x1, 0x0) 15:19:49 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x0) 15:19:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x8800, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x2000}], 0x1, 0x0) [ 1305.321062][ T28] audit: type=1804 audit(1596640789.622:1309): pid=32753 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/1014/cgroup.controllers" dev="sda1" ino=15872 res=1 [ 1305.428337][T32743] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:49 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x7400) 15:19:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x3f00}], 0x1, 0x0) 15:19:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb14, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:49 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x1}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080), 0x4) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r7, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYRESOCT=r8, @ANYBLOB="448b0d7f497711174cbf7876c6250d87e31621c478aa87897c8b49ece83797aa688cf0cfcc38e9bca70385d76422b2c673d0fa3dda31bed23cd4716696be3503cc2ef68446d6dbbda54306c9eeefaf12884620ee4d8859d3"], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9000, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6000}], 0x1, 0x0) 15:19:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb15, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1305.804244][ T310] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1305.929767][ T28] audit: type=1804 audit(1596640790.232:1310): pid=314 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/1015/cgroup.controllers" dev="sda1" ino=15734 res=1 15:19:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xb80b}], 0x1, 0x0) 15:19:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb16, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:50 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x1}, 0xe) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f00000001c0)=""/160, &(0x7f0000000280)=0xa0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r4, &(0x7f0000000000)={0x23, 0x0, 0x3c}, 0x10) close(r3) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x5}, 0x4) splice(r2, 0x0, r3, 0x0, 0x19404, 0x100b000000000000) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000000)=0x964e) shutdown(r0, 0x1) [ 1306.105542][ T328] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x40000}], 0x1, 0x0) 15:19:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb17, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:50 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x7a00) 15:19:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x1000000}], 0x1, 0x0) 15:19:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb18, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1306.841168][ T351] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:51 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x2, 0x800000003, 0xfffffff9) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000200)={'veth1_virt_wifi\x00', {0x7, 0x4e23, @multicast1}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="acbd072cc3eeeb619c468bcb9d096611b47ec250f5963b8de156a72a3e480f9b1b8100aa6234796f1e460aaa1c9526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a3b1a38da2b8090000000ae06967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9800, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x4000000}], 0x1, 0x0) 15:19:51 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x100b000000000000) sendto$ax25(r1, &(0x7f0000000080)="36fe2531ab5e6f786b4b66f34599c2df48daa5179406fad873f0c8cf1b3f4a02474810ba8989a1923be5a07b67185b611ceea56100818758404d75b65da6a45b4b5dae4444e334876b238fd8e828621408bc6fd9bbd96e441bead1611464444cd3f57abbcff36026ed7a642feb3f6106219aea37dca078c289c140ba4aa94a8e7fe73d40bc15836785b20265ba565ca1d4c89ad0dcbcd37dcd3295a6ea3223b6698447440dde5b7d33a7650c1d77e1a28091b806b55a7c7289d82c48a614a0dee4933e49d48104a2f27aee798e2d07140b7e9b428727e9", 0xd7, 0x4000844, &(0x7f0000000180)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) shutdown(r0, 0x1) 15:19:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb19, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1306.958607][ T361] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x7000000}], 0x1, 0x0) [ 1307.129194][ T28] audit: type=1804 audit(1596640791.432:1311): pid=369 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/1016/cgroup.controllers" dev="sda1" ino=16380 res=1 15:19:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb1a, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:51 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0xc000) 15:19:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x8000000}], 0x1, 0x0) 15:19:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb1b, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x9000000}], 0x1, 0x0) 15:19:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0xa000, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1307.769412][ T28] audit: type=1804 audit(1596640792.072:1312): pid=406 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/1017/cgroup.controllers" dev="sda1" ino=15872 res=1 15:19:52 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000200)=0x4, 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb1c, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x20000000}], 0x1, 0x0) 15:19:52 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0xc00e) 15:19:52 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x589, 0x1ff, 0x7}) shutdown(r0, 0x1) socket(0x23, 0x800, 0x4b) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000080)={r4, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) vmsplice(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)="702ebfcd749013fc6d36e190e96944c5d1eafd6dd0087c9e8e265117e6c753e7ba924fc6f7311caec527cc7868f728c68696776a8d2675739250dc0a1cd775609781a9851746a87361dc0f52d1185bad1f7e28771556d3b10de90b31aef8d352f16cef514ccd5469df5ae4b21e812ab08e1e5ef8b5f7d95eb4ef61d13926d47192e8248d74136d2c", 0x88}, {&(0x7f0000000180)="ac24c60a794c8023e1292c2bd6fd1589a27df252869d168ed6d84771a0e08e3777116f95e3d65d6f7fd01f1d0103b24874d5e98760c515b814ea5b77c0c0e28b778223ea9c481397e81660693c4ab7ccba072bc00c4e77a0797ebdb8f79e7e61ca2be53bd935457872150b087e8ca4edb37e154fe91d10555d1cce43642a61061d8c56cc0f4ebf47e2881219a0491b187e746032ac4340dc3c91c99faeb2d13667fd27b3eb1f2e7c447ceab0e8d476f21929dd4b", 0xb4}, {&(0x7f0000000240)="87191e0020769cc278170c65", 0xc}, {&(0x7f0000000280)="5ace91c90951b1dcf3e0f3b82baa2ec913c55739d5f19ed3621e3ec59206c6f4c174b79e1bf7e1ff1eaf9da77cb305e4372d031e4d0b389c8a8b0b0b92a5808b7b2a07ba2981a812c28517608f56bd25d1b6a9b1d04a910eedfb75689aae131d91a879bb7e1f9a9ff2091c64c6553d5d7576af4ffcaccdbdd7aa91059015e7c2e5d4cf04f3931ddbacf38fd80019e27eea6542b061762846e92b5b462ee55a634cd502607725bb4113fb4cfc146137a9812cd5473de80e453d941513aeb02382eabe29c37d007e5a88a797db82915828914b206220fb05", 0xd7}, {&(0x7f0000000380)="c8d90e779b12d8b906b704077457cedad829e1a693844515ee79bddfc0372e0b3a9ee495e87c2753ab4727220e972810070b7aee0a8997274222dd05bee8bd84c95cfcf17b18c6819660b57380c52579", 0x50}], 0x5, 0x0) [ 1308.186449][ T424] validate_nla: 2 callbacks suppressed [ 1308.186460][ T424] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x3f000000}], 0x1, 0x0) 15:19:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb1d, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0xa800, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:52 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000080)={0x1, @dev={0xac, 0x14, 0x14, 0x2e}, 0x4e22, 0x2, 'ovf\x00', 0x4, 0x5, 0x53}, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r3 = socket(0x2, 0x800000003, 0xfffffff9) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x30) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) 15:19:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x60000000}], 0x1, 0x0) [ 1308.490371][ T442] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb1e, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1308.540761][ T28] audit: type=1804 audit(1596640792.842:1313): pid=447 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/1018/cgroup.controllers" dev="sda1" ino=15999 res=1 15:19:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x7ffffff7}], 0x1, 0x0) 15:19:53 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0xf000) 15:19:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb1f, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x8dffffff}], 0x1, 0x0) 15:19:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0xb000, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:53 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0xc59f11a3772ee4e2, 0x0) r1 = socket(0x2, 0x800000003, 0xfffffff9) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x7, @any, 0x9, 0x2}, 0xe) shutdown(r0, 0x1) 15:19:53 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080), 0x4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r6, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000002c0)={r6, 0x1, 0x5a, "62f428baf78c2bcafabe5ca8ee255229e5cb4eb6869d16b60661eedb957b0339fbda83b03731dc9909f492286206a40fe6d9b7b75589133a147e396916f739b250de9213d0d58a45170977ac3380bd6ab001cd86429199174eb3"}, 0x62) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r7, 0x7472d000) sendmsg$AUDIT_MAKE_EQUIV(r7, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0x7, &(0x7f0000000340)={&(0x7f0000000200)={0x28, 0x3f7, 0x400, 0x4070bd2b, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1309.418741][ T481] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1309.538260][ T28] audit: type=1804 audit(1596640793.842:1314): pid=485 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/1019/cgroup.controllers" dev="sda1" ino=15999 res=1 15:19:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xb80b0000}], 0x1, 0x0) 15:19:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb20, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:53 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x100b000000000000) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) shutdown(r0, 0x1) [ 1309.723799][ T505] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:54 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d09660042b570f7e864c3f9913602a93a2ebc969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149527ab664790b25dd5d9690a6e39d7876068c1703b79ba56809fc9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb21, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xeffdffff}], 0x1, 0x0) 15:19:54 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0xff03) 15:19:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0xb800, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb22, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xf7ffff7f}], 0x1, 0x0) 15:19:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x1, 0x0) 15:19:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb23, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:54 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x33fe0) [ 1310.249668][ T28] audit: type=1804 audit(1596640794.552:1315): pid=534 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/1020/cgroup.controllers" dev="sda1" ino=15999 res=1 15:19:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb24, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1310.397655][ T551] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:54 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r1 = socket(0x2, 0x800000003, 0xfffffff9) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0xc) r3 = socket(0x2, 0x800000003, 0xfffffff9) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', r2}) shutdown(r0, 0x1) [ 1310.611192][ T557] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:55 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r5 = socket(0x2, 0x800000003, 0xfffffff9) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) splice(r5, 0x0, r1, 0x0, 0x4, 0x0) 15:19:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xffffff7f}], 0x1, 0x0) 15:19:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0xc000, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb25, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:55 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x34000) [ 1311.261250][ T576] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb26, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xffffff8d}], 0x1, 0x0) [ 1311.374212][ T28] audit: type=1804 audit(1596640795.672:1316): pid=578 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/1021/cgroup.controllers" dev="sda1" ino=16375 res=1 [ 1311.457298][ T592] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0) 15:19:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb27, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:55 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x72d976343525a179, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) 15:19:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb28, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:56 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x40000) [ 1311.910883][ T617] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1312.043432][ T623] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:56 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x5, @dev={0xfe, 0x80, [], 0x3d}, 0x10000, 0x3}, 0x20) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x3, 0x0) 15:19:56 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x100b000000000000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000000)=ANY=[@ANYBLOB="010000200000"]) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xa8, 0x4, 0x8, 0x401, 0x0, 0x0, {0xf, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x5f000}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xa88}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xb2fe}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x7c01}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}]}, 0xa8}, 0x1, 0x0, 0x0, 0x48000}, 0x2000c0c5) shutdown(r0, 0x1) 15:19:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0xc800, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb29, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:56 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x400300) 15:19:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x4, 0x0) 15:19:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb2a, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1312.666807][ T28] audit: type=1804 audit(1596640796.972:1317): pid=649 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/1022/cgroup.controllers" dev="sda1" ino=16379 res=1 15:19:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x6, 0x0) 15:19:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb2b, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x9, 0x0) 15:19:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb2c, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:57 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="acbd0e2cc3eeeb619c468bcb9d0966969861a36ceeae9c550f9bfd8100aa6234796f1e460aaa149526ab664790b25dd5d9690a6a39d7876068c1703b79ba5680a8c9fb62b396bb9339e4ecade4ac007881c4ba37c68aac2ded9b76f25e5bb36372a4749d22457ebcb4e0bcb8ec7c9d22a394a38da2b8d8e54c6967e1ad", @ANYRESDEC], 0x32) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}}}, &(0x7f00000002c0)=0x84) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) bind$inet(r7, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r6, 0x0, r7, 0x0, 0x19404, 0x100b000000000000) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f00000000c0)) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:19:57 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0xf0ffff) 15:19:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0xe0, 0x0) 15:19:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb2d, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0xd000, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 15:19:57 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) close(r3) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19404, 0x100b000000000000) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) 15:19:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb2e, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 15:19:58 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff21c7617889b27154000a0000001800000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x1000000) 15:19:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0) [ 1313.812398][ T28] audit: type=1804 audit(1596640798.112:1318): pid=692 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir585727379/syzkaller.SDLv3e/1023/cgroup.controllers" dev="sda1" ino=16373 res=1 15:19:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb2f, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1313.939654][ T713] validate_nla: 2 callbacks suppressed [ 1313.939666][ T713] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:19:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xabb30, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1314.055744][T19427] BUG: unable to handle page fault for address: fffffbfff32980d2 [ 1314.063492][T19427] #PF: supervisor read access in kernel mode [ 1314.069462][T19427] #PF: error_code(0x0000) - not-present page [ 1314.075426][T19427] PGD 21ffe5067 P4D 21ffe5067 PUD 21ffe4067 PMD 0 [ 1314.081936][T19427] Oops: 0000 [#1] PREEMPT SMP KASAN [ 1314.087130][T19427] CPU: 0 PID: 19427 Comm: kworker/0:15 Not tainted 5.8.0-rc7-syzkaller #0 [ 1314.095631][T19427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1314.105754][T19427] Workqueue: events l2cap_chan_timeout [ 1314.111224][T19427] RIP: 0010:check_memory_region+0xdb/0x180 [ 1314.117030][T19427] Code: 80 38 00 74 f2 48 89 c2 b8 01 00 00 00 48 85 d2 75 56 5b 5d 41 5c c3 48 85 d2 74 5e 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 50 <80> 38 00 74 f2 eb d4 41 bc 08 00 00 00 48 89 ea 45 29 dc 4d 8d 1c [ 1314.136719][T19427] RSP: 0018:ffffc90001ed78c0 EFLAGS: 00010082 [ 1314.142787][T19427] RAX: fffffbfff32980d2 RBX: fffffbfff32980d3 RCX: ffffffff8159b005 [ 1314.150750][T19427] RDX: fffffbfff32980d3 RSI: 0000000000000008 RDI: ffffffff994c0690 [ 1314.158710][T19427] RBP: fffffbfff32980d2 R08: 0000000000000000 R09: ffffffff994c0697 [ 1314.166679][T19427] R10: fffffbfff32980d2 R11: 0000000000000000 R12: ffff88806a3fc380 [ 1314.174637][T19427] R13: ffff88806a3fcd12 R14: 0000000000000000 R15: ffff88806a3fcc50 [ 1314.182604][T19427] FS: 0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1314.191523][T19427] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1314.198094][T19427] CR2: fffffbfff32980d2 CR3: 000000009cb24000 CR4: 00000000001406f0 [ 1314.206060][T19427] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1314.214046][T19427] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1314.222005][T19427] Call Trace: [ 1314.225297][T19427] __lock_acquire+0x1025/0x56e0 [ 1314.230147][T19427] ? trace_hardirqs_off+0x27/0x210 [ 1314.235276][T19427] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1314.241256][T19427] ? debug_object_assert_init+0x246/0x2e0 [ 1314.246975][T19427] ? debug_object_init_on_stack+0x20/0x20 [ 1314.252707][T19427] lock_acquire+0x1f1/0xad0 [ 1314.257205][T19427] ? lock_sock_nested+0x3b/0x110 [ 1314.262141][T19427] ? lock_release+0x8d0/0x8d0 [ 1314.266827][T19427] ? mark_held_locks+0x9f/0xe0 [ 1314.271606][T19427] ? lock_is_held_type+0xb0/0xe0 [ 1314.276541][T19427] _raw_spin_lock_bh+0x2f/0x40 [ 1314.281299][T19427] ? lock_sock_nested+0x3b/0x110 [ 1314.286229][T19427] lock_sock_nested+0x3b/0x110 [ 1314.290992][T19427] l2cap_sock_teardown_cb+0x88/0x400 [ 1314.296292][T19427] l2cap_chan_del+0xad/0x1300 [ 1314.300983][T19427] l2cap_chan_close+0x118/0xb10 [ 1314.305824][T19427] ? lock_acquire+0x1f1/0xad0 [ 1314.310490][T19427] ? l2cap_retransmit_all+0x760/0x760 [ 1314.315854][T19427] ? lock_release+0x8d0/0x8d0 [ 1314.320565][T19427] ? lock_downgrade+0x820/0x820 [ 1314.325499][T19427] ? __schedule+0x893/0x2210 [ 1314.330091][T19427] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1314.335283][T19427] l2cap_chan_timeout+0x173/0x450 [ 1314.340330][T19427] process_one_work+0x94c/0x1670 [ 1314.345285][T19427] ? lock_release+0x8d0/0x8d0 [ 1314.349964][T19427] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 1314.355327][T19427] ? rwlock_bug.part.0+0x90/0x90 [ 1314.360277][T19427] ? lockdep_hardirqs_off+0x66/0xa0 [ 1314.365477][T19427] worker_thread+0x64c/0x1120 [ 1314.370182][T19427] ? process_one_work+0x1670/0x1670 [ 1314.375370][T19427] kthread+0x3b5/0x4a0 [ 1314.379431][T19427] ? __kthread_bind_mask+0xc0/0xc0 [ 1314.384539][T19427] ? __kthread_bind_mask+0xc0/0xc0 [ 1314.389650][T19427] ret_from_fork+0x1f/0x30 [ 1314.394048][T19427] Modules linked in: [ 1314.397928][T19427] CR2: fffffbfff32980d2 [ 1314.402075][T19427] ---[ end trace 74995b61ea36495b ]--- [ 1314.407534][T19427] RIP: 0010:check_memory_region+0xdb/0x180 [ 1314.413336][T19427] Code: 80 38 00 74 f2 48 89 c2 b8 01 00 00 00 48 85 d2 75 56 5b 5d 41 5c c3 48 85 d2 74 5e 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 50 <80> 38 00 74 f2 eb d4 41 bc 08 00 00 00 48 89 ea 45 29 dc 4d 8d 1c [ 1314.432948][T19427] RSP: 0018:ffffc90001ed78c0 EFLAGS: 00010082 [ 1314.439008][T19427] RAX: fffffbfff32980d2 RBX: fffffbfff32980d3 RCX: ffffffff8159b005 [ 1314.446977][T19427] RDX: fffffbfff32980d3 RSI: 0000000000000008 RDI: ffffffff994c0690 [ 1314.454958][T19427] RBP: fffffbfff32980d2 R08: 0000000000000000 R09: ffffffff994c0697 [ 1314.462920][T19427] R10: fffffbfff32980d2 R11: 0000000000000000 R12: ffff88806a3fc380 [ 1314.470974][T19427] R13: ffff88806a3fcd12 R14: 0000000000000000 R15: ffff88806a3fcc50 [ 1314.478948][T19427] FS: 0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1314.487869][T19427] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1314.495140][T19427] CR2: fffffbfff32980d2 CR3: 000000009cb24000 CR4: 00000000001406f0 [ 1314.503122][T19427] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1314.511089][T19427] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1314.519076][T19427] Kernel panic - not syncing: Fatal exception in interrupt [ 1314.527470][T19427] Kernel Offset: disabled [ 1314.531790][T19427] Rebooting in 86400 seconds..