3591816b6d595125b79ccd7287aede5376c2c6dfbdb7f7e6356546968de142c67d0f37e9ec4cedeafd2f1f9e804ff9770e1af05d11c53aef5de2572ac2de0e5a691baf430faa1823fa04a6801dc4fb17e1285264759ba8e3643db993ebff32f60dafe4b611547b8fc4770f19e0ef7238f6212172856d81dd4cd38e9a46988f9d4aaf6dc8a4c371e98f4bcfaf142d9c6acc6d38632ecb09e1d96367884811b80b226d60a1eaaf502f915365bc1e709f09bfcccd9e73d166b5fafd283f75bff3cef7fa47547aab0e8d66c79d4ca277881705f489464d7261b3dce", 0xe4}, {&(0x7f0000000400)="f59433d2dbcb73074a1c6f88554f75154fed5da05f5b5b6d9dd453cdccc718f2b2dec36cc75e4249f6964eaf1dbdaf38e3f65ff49b61472c6025a1243abc1614d0bfc3dc9a4506f334803f03b29b67c2018277ac2edea9a4750f95bab930a2fbeaf806281c14432b", 0x68}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)}], 0x8, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x268}}], 0x1, 0x4) 18:51:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005001000060000000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:51:30 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0xffffffff00000000) 18:51:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x37e7, 0x24ba1dc0}) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0xfffffd37) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ffff0900000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="10012cbd7000fcdbdf2511000000f444d9797e5f521161bd0e9c3d91b6eadb0a5dc3ef81557aa425deb470005d8e8968fdb04a902540b33455f34da7104c0eddb69075eff7b0f2a854eca8a769a0f2"], 0x14}, 0x1, 0x0, 0x0, 0x2008800}, 0x88) 18:51:30 executing program 0: pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x124, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NET={0x70, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xcc2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcc}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x804) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x71adcf207f5427c9}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x7c, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe1}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8c8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind(r5, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @private=0xa010101}}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x8}}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x1, 0x1, {0x8001, 0x930}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x80}}, 0x4) 18:51:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005001100060000000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2161.530141][T26552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2161.557985][T26552] device batadv_slave_1 entered promiscuous mode 18:51:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005001200060000000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005001300060000000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005001e00060000000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) openat$cgroup_ro(r4, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e04, 0x0, @mcast2, 0xfffffffe}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) sendfile(r3, r0, 0x0, 0x8000000000004) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x4, @mcast2, 0x8}}}, 0x84) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000340)={0x7fe, 0xd6cf, 0x1000, 0xfff, 0x8, 0x9}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={0x1, @bcast, @bpq0='bpq0\x00', 0x0, 'syz1\x00', @null, 0xfffffffd, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) [ 2161.891241][T26553] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 18:51:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000003060000000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:31 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x5) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000008f40)) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000001c0)={0xc, [0x8, 0x2, 0x6, 0xfff, 0xffff, 0x7, 0x100, 0x9, 0x80be, 0x9, 0x5, 0x1]}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="030b0000000000000000130000000c0009800800"], 0x20}}, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000180)={0x0, 0x37, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x0, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000580)="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", 0x1000}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 18:51:31 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0xb871, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) r1 = socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x400000, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000040)) socketpair(0x8, 0x80000, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$llc(r3, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000100)=0x10) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="2800000021000101000000000000000002"], 0x28}}, 0x0) [ 2162.234703][ T27] audit: type=1804 audit(1591210291.748:2393): pid=26580 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir911542418/syzkaller.OPMwZH/2882/memory.events" dev="sda1" ino=16361 res=1 18:51:31 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) [ 2162.349477][ T27] audit: type=1800 audit(1591210291.778:2394): pid=26580 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16361 res=0 [ 2162.441516][T26589] IPVS: ftp: loaded support on port[0] = 21 [ 2162.448294][ T27] audit: type=1804 audit(1591210291.798:2395): pid=26580 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir911542418/syzkaller.OPMwZH/2882/memory.events" dev="sda1" ino=16361 res=1 [ 2162.543287][ T27] audit: type=1804 audit(1591210291.988:2396): pid=26586 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir911542418/syzkaller.OPMwZH/2882/memory.events" dev="sda1" ino=16361 res=1 [ 2163.027143][ T27] audit: type=1804 audit(1591210292.548:2397): pid=26586 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir911542418/syzkaller.OPMwZH/2882/memory.events" dev="sda1" ino=16361 res=1 [ 2163.054560][ T27] audit: type=1804 audit(1591210292.548:2398): pid=26591 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir911542418/syzkaller.OPMwZH/2882/memory.events" dev="sda1" ino=16361 res=1 [ 2163.189018][T26589] virt_wifi0 speed is unknown, defaulting to 1000 [ 2163.194538][T26597] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 18:51:32 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0xfffffffffffff000) 18:51:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005001206060000000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="78aa1b0a7db3225ca0bc1ba4af95cf0008000000000000e8b6ed6c42fdfc2e5c01bde560754a76858b4389087d2b1704"], 0xfffffd78) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000280)=0x4) mmap(&(0x7f0000a35000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160\x00'}, 0x58) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8f, &(0x7f0000000e40), 0x2}], 0x8d9, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @remote}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f0000000080)=0x40, 0x4) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r5, @ANYBLOB="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"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0xfffffde6, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 18:51:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:51:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0800000000000000178b1200290001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000db", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x10, 0x2, [@TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @remote}]}}, @TCA_CHAIN={0x8}]}, 0x48}}, 0x0) [ 2163.274558][T26592] IPVS: ftp: loaded support on port[0] = 21 18:51:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:51:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100050000000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2163.449723][T26614] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2163.479479][T26621] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 18:51:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000102060000000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) [ 2163.708616][T26620] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 18:51:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) [ 2163.825284][T26620] device bond16 entered promiscuous mode [ 2163.883562][T26589] virt_wifi0 speed is unknown, defaulting to 1000 [ 2163.890277][T26592] virt_wifi0 speed is unknown, defaulting to 1000 [ 2163.899542][T26621] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2163.942656][T26625] bond16: (slave bridge22): making interface the new active one [ 2163.961131][T26625] device bridge22 entered promiscuous mode [ 2163.979768][T26625] bond16: (slave bridge22): Enslaving as an active interface with an up link [ 2164.022040][T26614] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2164.167455][T26618] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2164.567788][T26625] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2164.585431][T26677] bond16: (slave bridge23): Enslaving as a backup interface with an up link [ 2164.600760][T26589] virt_wifi0 speed is unknown, defaulting to 1000 [ 2164.607580][T26592] virt_wifi0 speed is unknown, defaulting to 1000 [ 2164.894719][T26592] virt_wifi0 speed is unknown, defaulting to 1000 18:51:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601030000000040000000000000000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000000c0)={r5, @in6={{0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, [], 0x1}, 0x10001}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r6, @in={{0x2, 0x4e23, @local}}}, 0x84) 18:51:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000103060000000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:34 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x40000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x275a, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) accept4(r2, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000000080)=0x80, 0x80000) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x2343a726) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000003000)={0x4, &(0x7f0000002fc0)=[{0x4, 0x7, 0x1, 0x4}, {0xbb5b, 0x4, 0x6, 0xb218}, {0x0, 0x7f, 0x80, 0x2}, {0x0, 0x9, 0x6, 0x40}]}) r5 = accept4$tipc(r3, &(0x7f0000000180)=@id, &(0x7f00000001c0)=0x10, 0x800) sendmmsg$inet(r5, &(0x7f0000002ec0)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000240)="ce21860c647b7fe951e85500bd49d929e91d0d8c", 0x14}, {&(0x7f0000000300)="fc5eae10c4db3cb602f6119dfd41e7b20647cc76d83866ca65f15af757f2af60d575b666dfa1f4101af1be21ccb6bf2d25afc1678d0f9e86c1b0c93e984afdbe3a7cac6ed14f3474488f1ce7b2686e5639fc3ea6495ce4fc3062ba72bcdf074f36ee419b9a7045f2ebc2850727e552378afd464cbf70e1f69f1ba2b62afab4c7365d4bc0ea288f22d5d5f26741f0d9b55fb00836d6cf985f6b2811a218ea81d8d691e8d59f5782922fa181a67b8055702b", 0xb1}, {&(0x7f0000000280)='\f', 0x1}, {&(0x7f0000000400)="84a219ed8791ec4af5b74a965e50289a232bbdf569f963bcb53a825e586f99f32d73fdd34ee3411b9969719b8aebd1af4b848dd1f70dff9eef3248c53f4039d69477f2fd9c923f6f37771d98b126346a27d2b4f68263109699c21251517cd8066c3b41606dc6f4e4b00b81c152e2a495025e8ebd713c6943d29d9418cf7dae2f6e98e17ebcb3494325fb3530dce64b2f90ea9c530127bc4718a18147601a556466bbbde4e4720c156c4b84adadc3c6f64893120d9b534b4d120f43768a0cd17ac50f7efa1fd4b3d4472919bfea242e57b33d346518bd1e964ff082db0f2180ba3e1e584c80f7", 0xe6}, {&(0x7f0000000500)="9cdf35b85749bd465aa6913b0643d891db0fc91ea745fad3c6b40f7c1b3a1a1daf36a41b8a0363249fb838bddc967f6ffb0700e81fdd247512eefedc075276b4dc02b3d9947eac1c1ec3dd4c93ce124f6ddc8e954e92e2c08496bfce33d65276aac5205889d783be5b5b411b129a8cd8dc1719ce0ebd3b4c732f05910710b651825c31ffad18a894acaf090976a198b67de969af263b34ad913c8b345de13d76169b5e707007c3fd8f1eede2383233950e5035ee25bf7519aef828713fd9b9a5c7b245239cd1585b7858ba26cb25135d39c15de6138d2ce7a28a69004ab321c3c87622187f1deb6c84304bb0de01", 0xee}, {&(0x7f0000000600)="90a6ce88aaf0077c7b", 0x9}], 0x6, &(0x7f00000006c0)=[@ip_retopts={{0x44, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x4e, 0x1, 0x9, [{@loopback, 0xfcb}, {@rand_addr=0x64010101, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe00000}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x2}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xbb, 0x3, 0x2, [{@multicast1, 0xffffffff}]}]}}}], 0x48}}, {{&(0x7f0000000740)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000780)="6f5c26d849e3d2075d8f4422727669f6a9e067096998fff4c3c5f0d4e0b5a198a1461c9180feed4a923a012818735581d587b83b63349833fcd070bedcda9fa9469c3bf08cba8021a869aab2a6015b2290e647cea47a8c81d5737bb81804c1fba33d949cd8c5811ab0d51edffa14408aa8908a755ffca6698e85be57e0469fc6ae8b844d02ecfefa2227d5b83a6d8d1ab83adba3", 0x94}], 0x1, &(0x7f0000000880)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x48}}, {{&(0x7f0000000900)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000940)="4901b60bdd5e403b53ec", 0xa}, {&(0x7f0000000980)="9aee3123e61a435434e0b32c6da05108f3bd6096cb13a93280d253b4fa27f38fab4e06f2cb30cc2f3a447bbffce20ba5fd80b30060232c11b5883850a72d7a3ec1b1f314c65ceff794fbde1006bf6987cc8b4c235b96471b1ff3560745a0516b78a2f287ba491f44bd64df6ecc92bb5de1a7deb6adc2e864960b4efa32676e85737a35df3564762d05f79631a8cd1aae8046c2cc7510195edc5a77d435819d3827f5d7", 0xa3}, {&(0x7f0000000a40)="daa437ea43a6e13c22b267530749aa3a7cbe5621c700935a87a7059c5ab651b6a789ab1ba23be425312eb73526ee28934d90d1e9d3cc41bbce26025bacd9675a40da0375dcc165b6a3d462f44ab9c1037a84793e979c0fb369dd5431ff2c6181d3f749e3708604cab18227a37fd8f26fc4345bb05b80dc831baa1bef1cb4c20faa727cdcd85e69ea753066d7912f846783464f3b12dd303f38856cd0f75c3ac4bc5dcd0e551345767f3f5625ade929c3dd", 0xb1}], 0x3}}, {{&(0x7f0000000b40)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000002e40)=[{&(0x7f0000000b80)="15876d86f6fb5c039235b5cb0a2c3c0919eb25bb3699fe610019e95a9cc5a3aae8d7366039550b7143e32608cbc9d4d253dd407a03b02aaaf3a2b839356bbaf9c6e6c310d32a456228fbd68c8bb05220c0c96a41932cce5cb38f6c7a9e2c1003779185fc99c7575818c3783555fbfd43c59ba85dbb06cd9ad96adc27494b2333d8a08d4d59c39141a1bb74b19a63fd7d6ea04da243806679f341ef5ef94cac0a0fef9d94427841ee9cac1145cc272f5f7b97e55d84ffedd857e0deec650d27ff0fff81d87549e0afa5af33da2344b7a7f7831cc3dc2aef2fb8c2b2811cdcfa1f53814a7a93edd0a00e7619f91245a11b9e086241c3ee1a1a2d8849", 0xfb}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="fce1c1a14866e030cfab4b0f97ab1026a69485c95b5e602d50907f9b85597051bcaa6d22e13b9f9ffd2c1d", 0x2b}, {&(0x7f0000001cc0)="ff1d8e13c3ffa15b6e55e1cdbc6dfc3721d8c6a8c91648d3b09e5c90fc88518fa58299d091f998c51075bce4aa32fce4d686c56389086fae9712acd0b0ce4e7f44684f4e9fc69fde78ad550fb518db3e3ce061d854d7c0eaa0e40fd1422648ffee852128f0e065f179d17617faa131788fe4ba65af68a006c1c6da7e8e3266e95737df76334473100885fbba7eb826f404141722feab0707b5c9e4eb0317f156", 0xa0}, {&(0x7f0000001d80)="d2e29406847ceaf113d2dd06558a69027780e57aa224f4e14382ce2ca273d5fb50c1f865719a5c73398185071758bb069112c94e6fa6ccb873d5aa5a1422608fc7c0ffcec4eb14e4e607c629530e7416f6ff82b7cacdb70eb8f112ae83df50af5abeed2c4b0de8cab9d85e772829d56a5a40cdf26be1de6aa5b2024f04b766c1d537c7341762d1e738b85297833d61c79186138cac04d5f0a359b44e74ef1edc5db7", 0xa2}, {&(0x7f0000001e40)="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", 0x1000}], 0x6}}], 0x4, 0x20000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3}) 18:51:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:51:34 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000003240)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)=ANY=[@ANYBLOB="2c0000000203010207e80440000000080800054000000008080601110100001f00003d000012080000000000"], 0x2c}}, 0x20008000) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001840)=[{{&(0x7f0000000080)=@ipx={0x4, 0x0, 0x0, "38c7560f9d70"}, 0x80, &(0x7f0000001580)=[{&(0x7f00000003c0)="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", 0xcc2}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)}}], 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000015c0)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@initdev}}, &(0x7f00000016c0)=0xe8) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r10}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001700)={&(0x7f00000010c0)={0x284, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd5c7f7cacdb5d60}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) 18:51:34 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f00000000c0)={0x40002000}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:51:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000104060000000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2165.439390][T26729] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 2165.454653][T26730] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:51:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) [ 2165.552660][T26738] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2165.570141][ T27] audit: type=1804 audit(1591210295.088:2399): pid=26731 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2067/cgroup.controllers" dev="sda1" ino=15740 res=1 18:51:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000105060000000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:35 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x2) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0xa, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008891}, 0xc0) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) getsockname$unix(r6, &(0x7f0000000180)=@abs, &(0x7f0000000000)=0x6e) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000200)={0x2, 0x2d0f, 0x3, 0x0, 0x1, [{0x400, 0x1, 0x5, [], 0x2300}]}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:51:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:51:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000109060000000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:35 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket$unix(0x1, 0x5, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1410, 0xe00, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) getpeername$unix(r2, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 18:51:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000090601011600000000000000000000000500010a060000000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:51:36 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$packet(r2, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001300)={0x2880008, 0xffffffffffffffff, 0x0, 0x8}) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000090}, 0x804) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000140012800b00010067656e6576650000040002"], 0x3c}}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000200)=@rose={'rose', 0x0}, 0x10) 18:51:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000090601011600000000000000000000000500010e060000000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:36 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000780)=0x55, 0x4) recvfrom$inet6(r1, &(0x7f0000000200)=""/165, 0xa5, 0x2002, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000780)=0x55, 0x4) pipe(&(0x7f00000001c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x4b}}}, 0x1c) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r3 = socket$inet(0x2, 0x6, 0x0) r4 = socket(0x23, 0x1, 0xfd) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x0, 0x3, @private1, 0x3}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000080)={r5}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x2}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4000, @local}, 0xd3c6b85bf6ebad7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xf5}) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e558c598ba4904c77813ab29510000000000000087695931475781ae36a4d148f269399022f5ce7ec3b6d944be4fac9508cce4df4d7015eb590bbfb45e2584f446722053f150259880355f7b0100db2281145dd688759944bd49b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60705f3d042967a80a6bd544fa300d066a4d162d7ef85002024faf1b31fffbb5f1a12a6f5f158a752eaf25a859b40a57381147cdd7c9fd7ceae30304783fd7f2eec79c49b6499032ebbc629a61287b591371f3f60b34470692217a8930a11f0e0c796c587da235e5ed34ce8448270301fd8be2b4b36b0b3c9672af727831275017a6aff50c09bfc22ebf548906138e7dae98da3b8a39bf880000000000000049346700db3ab36df7206aac7d6dd8f7bc7bf26ab6c0f886a46e34977966d106078049f411b7fcda78d2faeaaf6cce30ac64640ae9573431cb5190fd9c9989a9f14767f2a59b497f424212ab64a3033356d01925d8d03045d5a99772aaac4f50b017ba07f6e1a51bdf7dca34c2273bf41d5ec200"], 0x18}}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000800), 0x0, 0x21, 0x0) 18:51:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000090601011600000000000000000000000500010f060000000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2166.657872][T26793] IPVS: ftp: loaded support on port[0] = 21 18:51:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:51:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000160060000000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2167.530804][T26793] virt_wifi0 speed is unknown, defaulting to 1000 [ 2167.540747][T26813] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2167.584953][T26813] device geneve4 entered promiscuous mode [ 2167.614155][T26794] IPVS: ftp: loaded support on port[0] = 21 18:51:37 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000000)=""/25, 0xfffffffffffffffe}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r6) socket$rds(0x15, 0x5, 0x0) 18:51:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000009060101160000000000000000000000050001000b0000000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:37 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$packet(r1, &(0x7f0000000040)={0x11, 0xf8, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000000)={'lo\x00', r2}) r3 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'tunl0\x00', {0x1}, 0xd2}) write$binfmt_aout(r3, &(0x7f0000000c40)={{0x107, 0x9, 0x3, 0x38, 0x15d, 0x7f, 0x361, 0x1ff}, "01ddf162c40676fd040da53e756c368644c8e2fffa5d32d42b1cb565134863d517b0ab598495a9dd9df7e161d272044f0306cd1f104743f4ba32ecfc97760b06d23ad69cfb87541dc2c55a365be2a9e5cc8bc9dc8fbb36677ba912e79201d916ea3162b84d95746dc9e221d6360ea0734338dbd8a54997689153eb41dc8af843157c5e5cc41365389ee2ca2c224dd3f786696b2f4e22f034900c5cd3f5863f334aa28de060526ca1eab5453028a48e7996bd8984978e842e47952f1b4f902c52a2", [[], [], [], []]}, 0x4e1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=""/17, 0x11, 0x7302}, 0x3f09) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x110, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f00000000c0), {[{{@arp={@remote, @remote, 0x0, 0xff, 0x0, 0xff, {@empty, {[0x576758c8171dedf4, 0x0, 0xff]}}, {@mac=@random="c5db6fb266b7", {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x5, 0x200, 0xa615, 0x50, 0x2, 0x1, 'vcan0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @private=0xa010101, @local, 0x4, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "1ec3ae47f9c7a4f6a3f20e9dcef6dcc227062cc2997e8fe17d36cb5b09f0"}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, 0xffffffff, 0xffffffff, 0xd, 0x3, {@mac=@dev={[], 0x3b}, {[0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x5, 0x590, 0x81, 0xd471, 0x1f, 0x6, 'netdevsim0\x00', 'bond_slave_0\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x81, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x430) getsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) 18:51:37 executing program 0: r0 = socket(0x27, 0x80804, 0xd0000000) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x4, [{0x4, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x406, 0x1}, 0x20) [ 2167.695431][ T27] audit: type=1804 audit(1591210297.209:2400): pid=26808 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3281/cgroup.controllers" dev="sda1" ino=16365 res=1 [ 2167.732282][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:51:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:51:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100050000000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2167.798290][T26833] IPVS: ftp: loaded support on port[0] = 21 [ 2168.148885][T26835] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2168.571151][T26847] IPVS: ftp: loaded support on port[0] = 21 [ 2168.708114][ T27] audit: type=1804 audit(1591210298.229:2401): pid=26850 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3282/cgroup.controllers" dev="sda1" ino=16369 res=1 [ 2168.762206][T26794] virt_wifi0 speed is unknown, defaulting to 1000 [ 2168.768832][T26793] virt_wifi0 speed is unknown, defaulting to 1000 [ 2169.526075][T26833] virt_wifi0 speed is unknown, defaulting to 1000 [ 2169.526098][T26794] virt_wifi0 speed is unknown, defaulting to 1000 [ 2169.535049][T26793] virt_wifi0 speed is unknown, defaulting to 1000 [ 2169.958347][T26794] virt_wifi0 speed is unknown, defaulting to 1000 [ 2169.972620][T26833] virt_wifi0 speed is unknown, defaulting to 1000 [ 2170.394371][T26833] virt_wifi0 speed is unknown, defaulting to 1000 18:51:40 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000030003b05000001000000000000000000440001360f301442d42a230073616d746c65000000000000000000000000000000000000000008000300000000000800050000000027c2753fd2d02da93e95950004000600000007000000000000000000000008000000"], 0x58}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000080)={r3, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r4, 0x7f}, 0x8) 18:51:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000009060101160000000000000000000000050001000b0000000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:40 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0x4, 0x4) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x9c, 0x2, 0x2, 0x301, 0x0, 0x0, {0xc, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @loopback}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x40000000}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004801}, 0x4040100) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) recvmmsg(r0, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 18:51:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:51:40 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff0180c20000009100000081000000080045000014000000006c9078000000000000000000"], 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:51:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000300020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2170.840251][T26919] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 18:51:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060200000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060300000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2171.398344][ T27] audit: type=1804 audit(1591210300.919:2402): pid=26912 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3283/cgroup.controllers" dev="sda1" ino=16368 res=1 18:51:42 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) connect$l2tp(r2, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100, 0x2}, 0x10) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 18:51:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060400000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}}, 0x0) r2 = socket(0x1e, 0x80000, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000), 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000040)) 18:51:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:51:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'gre0\x00', 0x100}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x3c}}, 0x0) 18:51:42 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, 0x0, 0x0, 0x9, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xaa, 0x6, 0x1f, 0x607}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4050) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)=""/202, 0xca}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000580)=""/103, 0x67}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/29, 0x1d}], 0x5}, 0x142) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) r6 = accept4(r5, &(0x7f0000000200)=@phonet, &(0x7f0000000000)=0x80, 0x800) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x100, 0x10000, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x4}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1001) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="73797a3120d40e2062c7872c8c3c5c4d0fcfaa1be5acb723c6d3c35b5f1723f87efae71cef19ba0afd4fcaf5e025763c0fab13a2608e1ab10f95825d5f055dba7831df712e0d16bf44eeed491ba21ce0abc7b8b714d96e257a"], 0x59) [ 2172.708470][T26956] device gre0 entered promiscuous mode 18:51:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060500000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2172.905461][ T27] audit: type=1804 audit(1591210302.429:2403): pid=26967 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2070/cgroup.controllers" dev="sda1" ino=16368 res=1 18:51:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060900000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2173.030292][ T27] audit: type=1804 audit(1591210302.509:2404): pid=26973 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2070/memory.events" dev="sda1" ino=16361 res=1 [ 2173.134912][ T27] audit: type=1800 audit(1591210302.509:2405): pid=26973 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16361 res=0 18:51:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060a00000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:42 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="ac2c0400ff0f0000000c0080eb7200000075000000200002001c0002000000000000000800010062706600040002000400060000ff156569735843de8b4c1ef779b8d8f7ff00fb33e23753792aafde0c81000000000000002698ebe5f83bc5b1d2c1a19a67bd4cef4476b2e8f7ef9e5b4d833c15e0c8bbe9ff0720753c4aecfdcc0878ee00003f00193870e465324b63063fc06b6d0e39aeef0f00"/168], 0x2}}, 0x0) getsockname(r3, &(0x7f0000000180)=@sco, &(0x7f0000000080)=0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r4, &(0x7f0000000200)="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", 0x200, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x10000ffe0) r5 = socket(0xa, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000100)=0x1ff, 0x4) ioctl(0xffffffffffffffff, 0x100, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r6, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r9 = socket$inet6(0xa, 0x1, 0x85) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r9, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r10, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept$inet6(r10, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 2173.341041][ T27] audit: type=1804 audit(1591210302.629:2406): pid=26973 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2070/cgroup.controllers" dev="sda1" ino=16368 res=1 18:51:42 executing program 2: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) socketpair(0x36, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) getpeername$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000140)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @private0={0xfc, 0x0, [], 0x1}, @mcast2, 0x3f, 0x5, 0x9, 0x400, 0x4, 0x40000, r5}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r8, &(0x7f0000000280)={0x2, 0x0, @loopback}, &(0x7f00000002c0)=0x10) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000240)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r6, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r9 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) splice(r0, 0x0, r9, 0x0, 0x20000000003, 0x0) 18:51:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060e00000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e22, @remote}], 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e21, @empty}], 0x10) [ 2173.516854][ T27] audit: type=1804 audit(1591210303.039:2407): pid=26964 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3284/cgroup.controllers" dev="sda1" ino=16370 res=1 18:51:43 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) [ 2173.618643][ T27] audit: type=1804 audit(1591210303.089:2408): pid=27054 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2071/memory.events" dev="sda1" ino=15955 res=1 18:51:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060f00000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2173.734792][ T27] audit: type=1800 audit(1591210303.089:2409): pid=27054 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=15955 res=0 18:51:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100066000000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2173.853667][ T27] audit: type=1804 audit(1591210303.099:2410): pid=27054 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2071/memory.events" dev="sda1" ino=15955 res=1 [ 2173.993278][ T27] audit: type=1804 audit(1591210303.109:2411): pid=27054 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2071/memory.events" dev="sda1" ino=15955 res=1 18:51:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000090601011600000000000000000000000500010006f000000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:44 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4}, 0x6) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:51:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060003000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {}, {0x0, 0x2000000000000000}, {}, 0x70bd2d, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc}]}, 0x144}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) accept4$alg(r1, 0x0, 0x0, 0x80000) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="280000002100010100000000000000000200000000000000000000000ce117006e19910e3b435b9d254b3935e28d084a335a59e06476c60595f95f06463a0b6a899c0bcf0558dff473543b1c976ada08d6cfe3ea463abebc9212e21af063fd46515848fe85458f4e363b170dee381ff98548be7d7858c5eae862f0bed925d0d11cc23b882015e70769f10d20a428f1d3a87f1045874c3b2b0eb84313fc7267a7bced2cc0", @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="29f050f6dc1760506e0f827a97572ebe26f9e6ee9998c9b297231c3a26b3dceeb03943458c62dfafa70298d529458eb75be2651e011782429b72321c7bfda0af1215636da6233992e9e454992e481a74dcb04e11bc7ed2816c99ff4ec832d2c208187283ec05bb795203d43ce24e8c1493b12a083de2f583d71b6d5086370c2e0195548073a3e2d54e65baca61e795b751f2bb75832cec7b14d34c56085838b442aac6d3c92225dada10c7"], 0x28}}, 0x4914) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000500)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xee00}) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1d54a038cec019f1}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@empty, @in6=@mcast2, 0x4e24, 0x1, 0x4e22, 0x4e6, 0x2, 0x80, 0x20, 0x87, 0x0, r5}, {0x5, 0x6, 0xa99, 0x3, 0xff, 0x0, 0x7, 0x5}, {0x6, 0x7, 0x5, 0xe5}, 0x1, 0x6e6bbd, 0x1, 0x0, 0x2, 0x1}, {{@in=@multicast2, 0x4d2, 0xff}, 0xa, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x4, 0x2, 0x20, 0x10000, 0x1f, 0x5}}, 0xe8) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b7f03e3f7000e0000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf242ab0f8381ad6e74703c48f939a5a7378bc7a581eb886a5e54e8ff51700", 0x4c}], 0x1}, 0x0) 18:51:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000400)=0x5, 0x8) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)=ANY=[@ANYBLOB="480000000206010000000000000000001f0000000d000300686173683a6d61630000000005000486000000080900020073797a300000000005000500020000000500010007000000"], 0x48}}, 0x0) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0x1}], 0x3, 0x8040000) sendfile(r3, r1, 0x0, 0x400) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000100)) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x124, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NET={0x70, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xcc2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcc}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x804) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r6, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4008840) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x4100, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000240)=0x1) 18:51:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x305, 0x0, 0x0, {{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0}}}, 0xb8}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000580)={@dev, 0x0}, &(0x7f00000005c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000018c0)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f00000019c0)=0xe8) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001a00)={0x1fc, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5b59d78d5b02e3e}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000001}, 0x20008001) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2ea400002b00050bd21c80648c63940d0324fc6010000a400a000000053582c137153e370948018000f0170ed1bd", 0x33fe0}], 0x1}, 0x0) 18:51:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:51:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060005000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2174.849323][T27101] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:51:44 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850100"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="1c81030000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @broadcast}, 0x10) [ 2174.915652][T27101] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:51:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060009000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2175.169002][T27115] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2175.213910][T27117] device bridge17 entered promiscuous mode 18:51:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000090601011600000000000000000000000500010006000a000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000090601011600000000000000000000000500010006000e000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2175.498393][T27117] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2175.531486][T27115] device bridge17 entered promiscuous mode 18:51:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000002) [ 2176.311280][T27101] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2176.321204][T27105] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:51:45 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x2000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff0100000008004500001400000000006c907800"/42], 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:51:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000090601011600000000000000000000000500010006000f000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000001240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080028bd6e037000fddbcaa5030000000500020008000200001e3cc158b95d0d7b828bf8dfa93ec8d43f0000000500020005000000050002000900000005000200002000018014000200766c616e30", @ANYRES32=r4, @ANYBLOB="050005000600000005000500a60000000500020001000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0xc084) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0xa4}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:51:45 executing program 1: bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="380100001a000108cf4dac26306b6835397c1e7fac00000000000000007485ac5fb0e3daef21b274a924bab3619673862f5d00"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c0000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001000000000000000000480003006465666c617465"], 0x138}}, 0x0) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) 18:51:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:51:45 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="30150000020700000000000000000000050008"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000004a0001"], 0x1}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000d14"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x2, 0x14) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x8c0, 0x0, 0x4b6ae4f95a5de35b) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) r5 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x6c, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8, 0x1, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc4) [ 2176.471921][T27159] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2176.484684][T27162] netlink: 'syz-executor.0': attribute type 8 has an invalid length. 18:51:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000090601011600000000000000000000000500010006581a000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000090601011600000000000000000000000500010006003f000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:46 executing program 0: close(0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfd06) socket$nl_xfrm(0x10, 0x3, 0x6) getuid() r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfffffd3f}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x501}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0xffffffff}]}, 0x48}}, 0x0) 18:51:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060040000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2176.770741][T27176] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 18:51:46 executing program 1: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@id, &(0x7f0000000080)=0x80, 0x800) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x80, 0x2, 0x1, 0x3ff}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x4000045) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0xe, "c74df546182d388ec964d6628ed9"}, &(0x7f0000000240)=0x16) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000280)={r2, 0x4, 0x10, 0x7ff, 0x7}, &(0x7f00000002c0)=0x18) r4 = socket$rxrpc(0x21, 0x2, 0xa) listen(r4, 0x70c4) bind$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @local}, 0x10) r5 = socket(0xe, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000340)={0x0, 0x6, 0x30}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f00000003c0)={r6, 0x9d, "f13b35157b338f27d1ef22c91653fac0d06f591f9d8bb21f6ac790d3a102943873b3023e8170b5e516b8eda9f835ac811b75f0b854aec6a73bb20fe1fb8a00fc29fb9274ed95362569c0dfbb8144fc328508c6694ac23f83eaeea68cae47191b8d951877ca7c903163751f3db0aadc6e3e6c59b9fd57e20af53910c6f687af744c09204f33da796ce424add082abe94a34c08a522f000b44b78ded83bd"}, &(0x7f0000000480)=0xa5) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500)='l2tp\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003100)=[{{&(0x7f00000017c0)=@un=@abs, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001840)=""/235, 0xeb}, {&(0x7f0000001940)=""/96, 0x60}, {&(0x7f00000019c0)=""/152, 0x98}, {&(0x7f0000001a80)=""/28, 0x1c}, {&(0x7f0000001ac0)=""/197, 0xc5}, {&(0x7f0000001bc0)=""/140, 0x8c}], 0x6, &(0x7f0000001d00)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000002d00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002d80)=""/160, 0xa0}], 0x1, &(0x7f0000002e80)=""/179, 0xb3}, 0xe51}, {{&(0x7f0000002f40)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002fc0)=""/202, 0xca}], 0x1}, 0x6}], 0x3, 0x20, &(0x7f00000031c0)={0x0, 0x989680}) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000032c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003280)={&(0x7f0000003200)={0x68, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xddd}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x22}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nr0\x00'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044800) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000003300)={0x3, 0xcec, 0x8, 0x1000, 0x4, 0x6, 0x1f, 0x0, r3}, 0x20) sendmsg$IPSET_CMD_TYPE(r8, &(0x7f0000003440)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003400)={&(0x7f0000003380)={0x6c, 0xd, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1010}, 0x4) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000003480)={'ip6tnl0\x00', 0x80000000}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000034c0)=0x1f, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000003cc0)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003c80)={&(0x7f0000003c00)={0x54, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xff}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa1}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40080) 18:51:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000001240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080028bd6e037000fddbcaa5030000000500020008000200001e3cc158b95d0d7b828bf8dfa93ec8d43f0000000500020005000000050002000900000005000200002000018014000200766c616e30", @ANYRES32=r4, @ANYBLOB="050005000600000005000500a60000000500020001000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0xc084) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0xa4}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2176.842509][T27184] batman_adv: Cannot find parent device [ 2176.861325][T27184] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2176.890875][T27184] device ip6gretap1 entered promiscuous mode [ 2176.947338][T27190] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 18:51:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2000000, 0x2010, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='memory.events\x00', 0x7a42, 0x1700) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7f}}, 0x100, 0x7}, &(0x7f00000002c0)=0x90) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)=ANY=[@ANYBLOB="44000000020601080000000000000000000005000400000000000900020073797a300000000005000500020000000500010007000000"], 0x44}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x2da8020000060017, 0x500001c) 18:51:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100061a58000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x3e00, @loopback, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) 18:51:47 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x1004e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001640)={'team0\x00', r6}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00%\x00%\b\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00', @ANYRES32=r10, @ANYBLOB="000000000000000008000a0000000000fe3d993551c8ee01bff9b90637b9f213da4f3524efb94edc72b400289dd1f3b1c1bc"], 0x28}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001940)={&(0x7f0000001680)={0x2a8, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xe6}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8, 0x1, r3}, {0x70, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x3c, 0x4, [{0x1f, 0x42, 0x6, 0xa4}, {0x6, 0x80, 0x3, 0x8}, {0x5, 0x3, 0x5, 0xffffa4dd}, {0xc30a, 0xe7, 0x4, 0x8}, {0x2, 0xe0, 0x3, 0xfff}, {0x3, 0x2, 0x1, 0x4}, {0x0, 0x9, 0x0, 0x1000}]}}}]}}, {{0x8, 0x1, r7}, {0x184, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8a}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xcb}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x1, 0x8, 0x3f, 0xfffffff7}, {0x8, 0xb, 0x6, 0x6}, {0x0, 0xe0, 0x7f, 0x7fff}, {0x200, 0x20, 0x5, 0x1000}, {0x100, 0x20, 0x4, 0x4}, {0x3f, 0x5, 0x40, 0x40}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x40004}, 0x80) sendto$inet(r0, &(0x7f00000004c0)="73fa46f879d827383a62aa83935b7ed5ca86204c034b000000000000000000000000fdc6a82f11037bad21eca999c7fdd66e773d", 0x5b, 0x4008800, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000001e40)=""/109, 0x6d}], 0x1}}], 0x1, 0x0, 0x0) 18:51:47 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000)={0x400, 0xad9, 0x6, 0x10001, 0x1}, 0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x4a8002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair(0x1e, 0x3, 0xfe, &(0x7f0000002380)={0x0, 0x0}) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$SOCK_DESTROY(r7, &(0x7f0000002340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002300)={&(0x7f0000000200)={0x20f4, 0x15, 0x0, 0x70bd29, 0x25dfdbfb, {0x21, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x40, 0x1, "8853fe1de4ce7a1dd8b8c185b9ab9694af4cec7406e8b64db99388c5cac61771244b2f0db132bf1e0f40cfc4d713c46d9b7995646504a4ff0e8f8622"}, @INET_DIAG_REQ_BYTECODE={0x44, 0x1, "deaae5c3d8ad16ea80d6e737a05ec8a4ef9a30b1313077985709e7651ee9c9e19afa5d08bd1762a6460ea08a0b6b2e19182ee6c426e3a9b7de1efffa1c3041fb"}, @INET_DIAG_REQ_BYTECODE={0x54, 0x1, "96ff2ae71c8e44ac2e9e76f1cad483f758f26fadbdea7310c0da13255266fbde039250c69aed0b32e38f11a6a002803aec446f9e11757cf51a2a32739f9a6bd0cc84171f0cc93da647e2cbd669f6adb7"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "4727bc7577d6a9a0d1d1530893cf62a3069e3a825211debfc43ce8aee92678ce708b917ff4912ccae2e84f2165f1d0c5c2ef7ea69e995982313a7034f846993b3fb2edded3d3b121444f6d1a11577414c0c34ee9faed469d78de9a2a70bb29a02567d7893c5f48aee189806a1bd432588f6988520ed82ddbf6a0c132f7b39b280726643fd5e2bc2d831ed5130edc009ef886428547ed6f2c974c3f0bfc85f4c6e954b70da6c6232ef194522e0ad273500bed12677b9015287cf5251f9cdb5c044946bc97910e7382d6cd13626cde43c34c2d54ae745c9916ab0fb2a43e9ed55c60a0bd0321fc45df2357f64d47ab5951d7e706ad1eaaa812b59004d7cec682449b50689d2551e5e82ba5864bd664918a495d541611789b5859b85365209bc48c2587160dd186b2449c3821e822140e89c919dfb1a34c1ccf18b5358cace25b44ee2d3e0410645a838c348777cf2b7f6b102c2dcca19dead4485585cf614e6b3a7f9080cf087b9f9076986ecb1cf75158619f213050a2da744a42c6f2c94e9e261cb4e2886d7bf29e88f00323ce73ea2379482b628be66a49839bdec09cdb1ef7bd1ee0e65e5d4a1c080e4f0189b28f766540a03026f71037082a4053a467a2a54dbbf8ca513e7dddad691afd53fa367d5e8f631f8265100e1161f29dfdd1a3f41494e79da75186bce0c2952e8a6df007091c3c91c66afd836177367e75c254f21da724a0655d21e09ee426b746a5a3ea3f015e76ff80b0222d85794fca358371f560f15026848cf707dd802e8574d68c224993a5fc946ab06a10cca37d22d0306ba4807adc16280bddbe9980adc518c7f58f2f9e56b6936b81b01011695d6fc792cda1a4a34b3ebba69b5d189fc3f271d9ba13d3e0e73a64cd5f4757f195c5c2e4f21e15c17d6dbd5d99642be3991361159b5a8022c7fd23d8f825fc6a68ae29d56627ff363c08af98f0b6ef1710efdfbb0b08dad3a4fac3fba339c0bcb252b5dd3dc9dc906fa5f2c188955c28d6c0310fd50d07a37f1a747d6f9c11b0ef223ea4c2cf39013f92932de7740179fe6f9c7b57192f8a177d1d091fcd91b37e33da5bc029e358ea99ee18b3a54150e91260df2f0e9f317a859dd5c404c392a2a9ec31fc99ef84720287ef41e7e62d0df8cf9e490f66acbf9a3807ba81becd5bd0362de04cb5a142738e07615e144ed773a71872529e248428dd9be1966747300ab3175e2d54ef3c9ebf1107fbe775fbe8b924e7e3b31c3ea49773f9007db3634f17f9efc7e45a922bd69cef486a6cff1f8fdbc4a4c162dd4c86739226100d3fdd028e549f6ae57c4a8958606ff528e9d4bf560233c89c201150041ec0183e824b6f703cda11557335715c696e55b70e0bb355fe6d1a7e6be4ef35877b5fabc6fddce6f15d7b82951da26481926b849a129b87cf255b206b88162f0ba710dc98f52cba5b3d788cd533862c5921574343f4981afcf150da6922a11959074aa9f28e5f1bd8fa5fdeae583207efc157bdc920087c951b1b55948114e8e1dfe5b7d0020d6386e6b6b7337c7bfa9ce80c2bbe62da52697213209ec6d4053edfd3d6a3c9904e3c12b8fc4665c7c1c299dc0dea1b49b475d42dd4a05ecc448b56c51cf86cdd1916370a37a835ac75f32886f289f072618c95c478c54296e76892c68c3c308a345c3e80d88ae829440c13d4d62606d392bdf3f52178e7cc396871d95297b0668cf8a7d614dadbb7ec61365fdb30f42429830fbbf890d702d0a3c160ea7dd0efa673142e97ec28428999b35ff9be28137740727f4380b9f69b897efcd333c4e702aecf5b98281b2106e5fbbe21cc78b138c336111d86982e296519de0996f8d1d6e4d881c0805be42aafb52f2169249e3429df9ddff823d6a1a4017146df08c4cb4bce1c5ae728affb5de259e3276d7d647db571cd3551869bc72e9c8a5f98be9b7c4dcafeb98dde88ab7f2fbce804a9c05ddb443382e43a8bc6852b7eb6d74c454d6559a0d7274e0e2c7184d215c80b27287ce4cad2e13c67f6b1f6e1c3c01e52ae413606eb534af7457ce19dffe448fd86fb63040067840bda745a04e0da1e31bf12e332bf37f8d3354fe7d43b50d54e70abc315b9724fb1ecdfeac32b48ed14f067694d246774f2190d2d60090dacb34a35760ce4729cd4afaac19fd6c0b76817ab57fb8e0a11570b7ea6e6a7f31aea35776b7ba9791f3fc6fd39416d3be8ed12d48c8452f8f49898bbd1ec144a4dd043fe57eca570916ca50e60f61e460a8f92a56233fc9b8757340f860c597b8f93f0a7ee88e3fe57baa26dbff1d95327d8a2f6424700bc7ddfbc1f71df7ff8b3ba8ccd2733205aa7378ff528224b472082babdb9f38bb4ec2a4c1d42f59ebf53e16069baee21eb1030ed122855d4232c920ede3417464ddbd94f02ddb4449d1388c5c161d5cdc05888d618528467903384103ff7a969c72946a4b781451f2a8e9406ece683918c7c842afa6ce0411969ec857ae36c4b65e743d973d174b39ea97aa9b4e02e90bb4edd84df996a90944109f1ca0d01f50eb6a9e88380e7a5aa52755b0dccd0e35a447ac9e4d13d970e7f12910c8b46576165817626d96a3692646cfccecd1d5c55c99759f9a54ebd04f1c1e472964315e7f92b1f05071f1f32be4b0212e9e3ecf33610d531e2b9d0417d3d624b3f17a304043cb6618f8b6a8b8ceb0fb313c9df2fe5e3f89b2808d850ce97930d8da88f048456edbf179247e97c4a62579cb2166256902bbe6422fd628a9fb07dc3a216d1e66d1346f54fc25288aa487fab6968cce9a307eb8d3c4d023890d58fc01a63ac48030806d53a881050906054727a8ea453efccd035381c6c6fdcf95f8cbeabdf9ba8f5aecd82a84d4091686944b54d88ccdef5cf549435d2f157bbe0bbcc82dbb39359657c984ed991c80455cf0e697a19911d438761c1c3db11873e3f8c08dc2e79c9b0b90c8d6d5cefbe552145b9a612526061e905b224a655d3661cf284d047e2a58659af5b69b73bf75a7e7bb5b1bca8d5e0a4dedfd69ad5f75a0e77edfe4a418f7c178aaceb2bb2b5cec7e990c344cb3af0a2fdc752789fbf9c3765c1d4c77e9ec9873d5226201196eaf9321821712a654eb636d851790ef0c48a994d9db98b9fb1cabd9d8df67b469e05a6a06d8c89dbd238cfa3e92b2aa08ac7ac26e6aba6c279cb0c3400bdc45dfcc3e1750ae3d8f931282182a9930a4d1a47fe2f7acea00d0fc6d4f76f4dcf45b44daea9bb0f88bb1e03a1a5d4df4e6f9c818a0329611ce1d2849831485ab6191db5898cda648aacaceae329825ea107fcfe39d692c1be489f88a78b5057e1fe6ec2d018856058733690fa25f659e269a1c16caaa0eaecc531d59da35c9e500ab495acadd3adcbc13ef0ea439d72a906045c74896c5aa42b56c84a88324cf6e2c32bf1d13178132560b9ae992cfebdbe40151e4af544baf1145ad98f2cbf756d8cb994ba8a6b20774418444144e705832d2e0f19114c902f6c6dd568969d7b21d9a7778c83ae8fbc826b9bff1acb59c786b6a9aba5aa42eb6b5ea25a2fd53addb353a6dc0cc9a441eb81a35d029851d2eba452e6f960d19710c36f0afef3f562e9cd5e60850afa5e7131c437820ffd4c0957637f902922cfb06dc5f42d7f27ce1b06e957eccc68086e0fd19b6ad92f45d9371835d4dd6c9082e773f47912bef57a768ddd29828d8f7ed7a413fa2d51408a2c6db0b32d560740b939476687c14bae570ef5777fdfbc19c50a6f94b35930c6801788606707313ed73fc4d46577fed612c5eea2fd78e7b3b88a0e6444d334225033ceffab42c3de6d461bf61bbc12e085cec55d47a41bdb190dfd368192db897f3d64026c11a7d1f374aef980de6002a8e3c0d5ba2271d44a4dac026c95d62f509575d6c53e0cd30c18872acd80288e6f466cef71e4328e6826f5d3ce94d61519147aa38a686dc929d4c97e142e3bcc1dbd735724c51f4e469cc1830de3b9ed821afb1a11a9ac292fce512efd559c52aff8d10b1a04f5088011af1f581fb295c82cd003928fe2d37b44d2592f362c08baad2319add79eb9a36a1c888460d93d78a607acc9909c5553cf1461ca72068e38d629bf3ce9740be25e0d27b4f75dcc395a37569461b141b2f753ca4acc77e64f0cf1ecea13b41c2200c222766c74fd0fe857af6145176f5b43da66454242f7f369b82f581e7854d9923d74d8855ed44d306faf4a0dd5f178bd699b878c4770362c1012ce2e4f98bc361121a286e3bc7631501b7ae6793a1ed37ff8f84f59012122c6edeaeb9ec581a64485e88bc13eadb93bb0aa63f88d67f752b4483c218fa9d49fe6c402ac860d6b18b183975b6adb37cec0e754328c24ae325fff2fbc61640e9eaaaacd2b18c52ee91c88c5dc52fb5a9d7b4d056f54aadb41855935d3053ca4389aa7d37a6377d8466aaa0121d15ba0a784ea45e76129ae690f7de649a69bd82c12a72802ce1a8a51235f177b5df2b76752e20c99e1d1d68c8d4f821363b6904704bf9ccfc1124e612cf990a5afff85e1cf587b969c8f167ad4e16be6eb8aed12da3df0c4ef146f3e07b786cd6f64a31de685605f318d21f9c5352433b5e242a8ef8e06269bfce8521cf5b752c788be8d771aff6c27d8810b7699a05df58165d44d94629931c42c37c4cc2d71a935ef21722faec90c0b9d9c6042fa6c470c73178354c63e129a642ed44723c5a0cd0ed60bf76bd49ffabc64998fe39a034e9b0d89e259287ddad0b19ff4d65e0cf6dae564e8b6a038314c59b69db1534b9968490e5f8094d87aa0ae1019304bec1ab748c202159ca43840575b98e6cd3f8ecff7cb4a09932efeeb3176f237d4ccc197f33dbb5451319c6bb94f79fb6a2b55c3c38157d8141af381f5e4ac0118db908794d994a1704b05e5a7906326995f5c229e8fa6f7353906ac9efe34bba95f91919adb6ada4617be28d0097abd1505458d6359cff96b42909b48adbc93f16c0f1a983c504047d99350b29ce96c9ea2d479aa788bce1b8e289aa481e30d9d6cded9153593abd2f5759f927d070e246512ed1f7a90a802a39f491275e6a0cfb9777c2361902ab7b7d00300b5608f94fbcddd20a439470491d60bde061f739f11359eb7886f5b9347505ac9aaee4dd77f2ebdc8cf4f877b22de76d141425eef0105d518f472580dfbcfcc55f64c3bc0f5c0b99e0dc5ae9baa0f51f1daf2f450a8775d8fdf207c96b7dd314b31a5af9838db60429d0ae76c166086884114554e6585f33e1087c72cbff535064f1a80075580c8213cad0f05e7244c4f529285f7f40003a688d48e595ee76fbc1ce57e614438bda342036ca860a2104b2f21f61b07bdade0466569db3d181d289730d0f7a8fd561f58d920025a27f47dac2d8e1b9d27b64903f3216baba4a26f85edcaf8285af0b35226589ae664b4a64a04d47e89082fd4a4daf0d98fc4980e47991955b1fb206bb168b7c6b49f2220f66db3561cba5b553ba4a56edc12e18277a77d69217609ec4bea098c5774881e96d760f70c6f502ff77d199387c07bd6133caea5fc741c596dbab06ba760fea09d1a12dc8d0397c59679994e966773ea81be8df89f4484e6723848f971888ed0400704bc8f13c1c42a54ab209e62ba3d25f268a0e8cdcf029e901b9fa65fa4452080666c210cc98b23524ab33d287ba7e8395fc486c4f7cff09267bc574a19e6af53b94b23db2bfa5f96559e45cc5b5fc52b8b2170ca812f371e7a84cfbe0e02d59949ac872f9130b3f9496b0740cf85e0d2c6ee78bfc545f0fa295b715743a1a341"}]}, 0x20f4}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = accept4$llc(r6, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000004c00)=0x10, 0x0) getpeername$llc(r8, &(0x7f0000004c40)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000004c80)=0x10) splice(r0, 0x0, r3, 0x0, 0x10004, 0x0) 18:51:47 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) [ 2177.815301][T27212] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 18:51:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060060000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2177.871970][T27212] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2177.896713][T27212] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 18:51:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000009060101160000000000000000000000050001000600f0000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000001000020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000001c00020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2178.036626][T27230] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 18:51:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060002000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060003000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2178.604175][T11846] tipc: TX() has been purged, node left! 18:51:48 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100007b00) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200), 0x0) write$binfmt_elf64(r3, &(0x7f00000015c0)=ANY=[@ANYBLOB="8100635b36dd"], 0x6) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002300)={0x0, 'bond0\x00', {}, 0x7}) pipe(0x0) r4 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x4c, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000000}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_DEST={0x0, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x0, 0x5, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x0, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000580)}], 0x1) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 18:51:48 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x73) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x307, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@mpls_getnetconf={0x34, 0x52, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r2}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000400) mmap(&(0x7f00007c1000/0x1000)=nil, 0x1000, 0x2, 0x28011, 0xffffffffffffffff, 0x1000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r1, &(0x7f00000000c0), 0x0}, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r4, &(0x7f00000002c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000bb034d488c54f354d6125f25afb5b3317aaee93eaeef5a859e6a6e158fc6f309af08aa102ed6f300c47e410ea20881200115edb21d2be355116ef873c5c51ef641a02a0fe39d6f6e64647bb95f128f8e9add1fe3640022142c63a6661bd05b37bd76e5dc77e9e3a750942d65ee005d9861d5e7bbc3ee7d6bce59b1281c82a011ccc95eada1bc00b0ddb2000000000000000000000000000000004000"/174], 0x20002154}, 0x1, 0x0, 0x0, 0x9010}, 0x0) setsockopt$sock_linger(r4, 0x1, 0x2b, &(0x7f0000000100), 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000140)=""/48, &(0x7f0000000180)=0x30) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x101, 0x33c) sendmmsg$inet6(r0, &(0x7f00000032c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x7, @loopback, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@dstopts={{0x18}}], 0x18}}, {{&(0x7f00000003c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}], 0x2, 0x0) 18:51:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060004000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2178.764827][T11846] tipc: TX() has been purged, node left! [ 2178.806911][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 2178.806925][ T27] audit: type=1804 audit(1591210308.330:2420): pid=27247 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir171911693/syzkaller.qh6zro/1556/memory.events" dev="sda1" ino=16371 res=1 18:51:48 executing program 1: unshare(0x40000000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) connect$nfc_raw(r1, &(0x7f0000000180)={0x27, 0x1, 0x2, 0x4}, 0x10) setsockopt$inet_dccp_int(r0, 0x21, 0xd9ac32fe5b2db9b2, &(0x7f0000000000)=0x5, 0x4) 18:51:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:51:48 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) pwrite64(r3, &(0x7f0000000180)="3f80f7bcfe02f6070626a5fcc509fa8fcac0a080bc32d0d2f0bdb40b671d78977de99772673bab61b3012cae0eaa6b243bfedd7d2b25a245790af55e9e2d3dfc0d55cdcb904acb5239be8ddf84eb4cdb9013b2cfcdff1434fc8083e26aa5bde6c374f79e176f72b59a925c405b2ddbaad651d2edf5c28f1a569add89083be354d6ef6d281f9988954b8c5eeb", 0x8c, 0x40) 18:51:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060005000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2178.895029][ T27] audit: type=1800 audit(1591210308.330:2421): pid=27247 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16371 res=0 [ 2178.963924][T11846] tipc: TX() has been purged, node left! [ 2179.054451][T11846] tipc: TX() has been purged, node left! [ 2179.060989][T11846] tipc: TX() has been purged, node left! 18:51:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060009000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2179.094297][ T27] audit: type=1804 audit(1591210308.330:2422): pid=27247 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir171911693/syzkaller.qh6zro/1556/memory.events" dev="sda1" ino=16371 res=1 [ 2179.119960][T27265] IPVS: ftp: loaded support on port[0] = 21 [ 2179.165644][T11846] tipc: TX() has been purged, node left! [ 2179.212282][ T27] audit: type=1804 audit(1591210308.590:2423): pid=27250 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir171911693/syzkaller.qh6zro/1556/memory.events" dev="sda1" ino=16371 res=1 18:51:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280f6ff1100ffffffff"], 0x3c}}, 0x0) 18:51:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000090601011600000000000000000000000500010006000a000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2179.366448][T27265] virt_wifi0 speed is unknown, defaulting to 1000 [ 2179.373109][ T27] audit: type=1804 audit(1591210308.710:2424): pid=27247 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir171911693/syzkaller.qh6zro/1556/memory.events" dev="sda1" ino=16371 res=1 [ 2179.462080][ T27] audit: type=1800 audit(1591210308.710:2425): pid=27247 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16371 res=0 18:51:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000090601011600000000000000000000000500010006000e000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(0xffffffffffffffff, &(0x7f00000002c0)='_', 0x1, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008880}, 0x40010) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000080)={0x0, @aes128}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x2880008, r1, 0x402, 0x7fff, 0x3f}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x1, 0x3, 0x0, @remote}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e23, @broadcast}}, [0xfff, 0x19cf, 0x10, 0x400, 0x14, 0x1ff, 0x5, 0xebd, 0x20, 0x5, 0x159b09b9, 0x6, 0x1, 0x8000, 0x3]}, &(0x7f0000000180)=0x100) 18:51:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000090601011600000000000000000000000500010006000f000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:49 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$FIBMAP(r1, 0x1, &(0x7f00000002c0)=0x1) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000280)={0x2, 'veth0_vlan\x00', {0x9}, 0x3cc}) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000380)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x80, 0x0}}], 0x2, 0x0) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000240)=0x7ff) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x1028, 0x1, 0x8, 0x401, 0x70bd25, 0x1, {0x7, 0x0, 0x8}, [@nested={0x1014, 0x2a, 0x0, 0x1, [@typed={0x8, 0x57, 0x0, 0x0, @fd}, @typed={0x8, 0x40, 0x0, 0x0, @fd=r2}, @generic="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"]}]}, 0x1028}, 0x1, 0x0, 0x0, 0x44042}, 0x20040080) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r4}) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000380)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x80, 0x0}}], 0x2, 0x0) connect$nfc_llcp(r5, &(0x7f0000000100)={0x27, 0x1, 0x1, 0x3, 0x4, 0x20, "0d8249449548a12161f22d8b738f9fb6b9919cc7eb8fe4686b5df85b9ce4aaf2fc86285581cf584ea354d00e03a953980618b08fa44dd8c199c482044df421", 0x10}, 0x60) 18:51:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060060000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2179.865614][T27272] IPVS: ftp: loaded support on port[0] = 21 [ 2180.286272][T27265] virt_wifi0 speed is unknown, defaulting to 1000 [ 2180.863587][T27265] virt_wifi0 speed is unknown, defaulting to 1000 18:51:51 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair(0x5, 0xa, 0x199d000, &(0x7f00000000c0)) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000180c20000000180c2000000080600010800060400029f5a4831ca2a00000000000000000000401414bb331c7389e31596356ae3d704159f5b29d487893e4de18fafe87c09d0170fc771c12c0e7e6d9d7e2ae4fe6c"], 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 18:51:51 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:51:51 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r0, &(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x400000}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009000)={0x14, r2, 0x8e6767b8eef245b5}, 0x14}, 0x1, 0x0, 0x0, 0x20044091}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x100000003) 18:51:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000009060101160000000000000000000000050001000600f0000900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0x1) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) socket$inet6(0x10, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000001340)="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", 0x117}], 0x1, 0x4800000000000) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000200)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000480)="7e927ce0952d9dbe3d82e52db4c98cf8f8", 0x11}, {&(0x7f0000000700)}, {0x0}], 0x5, &(0x7f00000009c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @txtime={{0x18}}, @txtime={{0x18}}], 0x48}, 0x40010) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @local}, {0x2, 0x0, @private=0xa010100}, 0x81, 0x0, 0x0, 0x0, 0x560, 0x0, 0x0, 0xd9a}) 18:51:51 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) r5 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000000)) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:51:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000030900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:51 executing program 0: accept(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000200)=0x2c) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000240)={0x8, 'virt_wifi0\x00', {'batadv_slave_1\x00'}, 0x14fa}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)=@ax25={{0x3, @bcast}, [@default, @rose, @rose, @remote, @remote, @rose, @bcast, @null]}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000400)=""/119, 0x77}], 0x1, &(0x7f0000000380)=""/96, 0x60}, 0x2000) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) pipe(&(0x7f00000000c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) [ 2182.309793][ T27] audit: type=1804 audit(1591210311.820:2426): pid=27368 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3290/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 2182.406025][T27380] IPVS: ftp: loaded support on port[0] = 21 18:51:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000050900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2182.530327][T27390] IPVS: ftp: loaded support on port[0] = 21 18:51:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000090900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2182.662988][T27380] virt_wifi0 speed is unknown, defaulting to 1000 18:51:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000009060101160000000000000000000000050001000600000a0900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)=ANY=[@ANYBLOB="48000000020601000000000000000000001300000d000300686173683a6d61630000000005000400000000000900020073797a300000000005000500020000000500225b06410000"], 0x48}}, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000140)=0xe8) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000280)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r7}) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000100)=@allocspi={0x540, 0x16, 0x400, 0x70bd27, 0x25dfdbfd, {{{@in=@broadcast, @in6=@mcast1, 0x4e22, 0x57f0, 0x4e20, 0xe2fe, 0x2, 0x20, 0xa0, 0x88, r3, r6}, {@in6=@local, 0x4d2, 0x3c}, @in=@dev={0xac, 0x14, 0x14, 0x2a}, {0x8, 0x3247, 0x4, 0x10001, 0x1, 0x36a, 0x3, 0x80}, {0x10001, 0x7, 0x4, 0x3}, {0x7f, 0x7, 0x9}, 0x70bd29, 0x3500, 0xa, 0x1, 0x0, 0x21}, 0xff, 0x11fb}, [@algo_crypt={0x74, 0x2, {{'chacha20-neon\x00'}, 0x160, "1f6a48719241a70c38d3ff1b9f6b4607fba626327f2382848ad52cb2b7743fafa13e2203a77f3dfe79d436ce"}}, @policy={0xac, 0x7, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast2, 0x4e23, 0x3ff, 0x4e20, 0x12aa, 0xa, 0x20, 0x0, 0x33, 0x0, r7}, {0x8, 0x60000000000, 0xd2e5, 0x20, 0x401, 0x401, 0xfffffffffffffff8, 0x1}, {0x5, 0x9, 0x100000000, 0x230b}, 0xfff, 0x6e6bb2, 0x2, 0x0, 0x2, 0x3}}, @user_kmaddress={0x2c, 0x13, {@in6=@private2, @in=@local, 0x0, 0x2}}, @algo_comp={0xbb, 0x3, {{'lzjh\x00'}, 0x398, "d4a120f421c932164ce3164c4a75c2835e1e451fe11dfc28154c60b14f3a394b1065bad26bd243e89674b3fd068a919bb62537dcdf4865500ca60745c55f4d941f069431e571252d891a5251d13dcc305195007f62ed799c98bfedb6862c6985e0952f04f429534ee56ecb12b703af921a2fa2"}}, @migrate={0x134, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0x21}, @in=@multicast2, @in=@remote, @in=@local, 0x2b, 0x3, 0x0, 0x3501, 0x2, 0x2}, {@in6=@private0={0xfc, 0x0, [], 0x1}, @in=@empty, @in6=@local, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x33, 0x3, 0x0, 0x3507, 0xa, 0x2}, {@in6=@private2={0xfc, 0x2, [], 0x1}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x33, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in6=@mcast2, @in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x11}, @in6=@empty, 0x2b, 0x4, 0x0, 0x3503, 0xa, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x0, 0x2}}, @lastused={0xc, 0xf, 0x100000001}, @algo_comp={0xc9, 0x3, {{'lzjh\x00'}, 0x408, "3e9b0c2dc63518d821ec0a5b4e2482ea834e9fa847c4e4c693e6762d1b768c13e3e624a3f90c647bd284715bdf1188ba28f3cb2c17260aa9b675c3879e13c13a10ffe36f680abd9b853fa4486de8558551fb351a8007fd9d611cfa55c5c4bff592b74bf541abacb2a6965788cb135cba3a064d69b32cc31a3e993b7add8316d7ef"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5e}]}, 0x540}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r9, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={0x168, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}]}, 0x168}, 0x1, 0x0, 0x0, 0x8094}, 0x40005) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) sendto$inet(r8, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20}, 0x33) [ 2182.927349][T27403] __nla_validate_parse: 6 callbacks suppressed [ 2182.927359][T27403] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2183.133823][T27393] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 2183.302790][T27406] IPVS: ftp: loaded support on port[0] = 21 [ 2183.651501][T27390] virt_wifi0 speed is unknown, defaulting to 1000 [ 2183.663368][T27380] virt_wifi0 speed is unknown, defaulting to 1000 [ 2184.145299][T27390] virt_wifi0 speed is unknown, defaulting to 1000 [ 2184.162716][T27380] virt_wifi0 speed is unknown, defaulting to 1000 [ 2184.669403][T27390] virt_wifi0 speed is unknown, defaulting to 1000 18:51:55 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair(0x5, 0xa, 0x199d000, &(0x7f00000000c0)) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000180c20000000180c2000000080600010800060400029f5a4831ca2a00000000000000000000401414bb331c7389e31596356ae3d704159f5b29d487893e4de18fafe87c09d0170fc771c12c0e7e6d9d7e2ae4fe6c"], 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 18:51:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000009060101160000000000000000000000050001000600000e0900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:51:55 executing program 2: pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newlink={0xfc, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0xd4, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc4, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x753e, 0x3}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x12, 0x14}}, @IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x276e, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7ff, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x101, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x1000}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0xfc}}, 0x24044010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000040)={0x8, 'caif0\x00', {'veth1_to_team\x00'}}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e22, 0x2, @private1, 0xffffffff}}}, 0x84) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000500)=ANY=[@ANYBLOB="48000000020601000000000000000000000000000d000300686173683a6d61630000000005000400000000000900020073797a300000000005000500020000000500010007000000a26f3dc85202b7e09a397def2f33751797846a49a4eef4df4bed6b52d9e8087fcddfe0aea66773a5956e6c934429f5c1451d18cc1f7db43e3976ac84c8202f48950b6d4b07bf0a0edb32c5574722ed6f4d04e7a3697349cae1a4ea023362e120a032a64e28fdbe00d90482ffd23f186d2e2b6e9a3d6a188f3677a37be3caf1dc0466445c92169d1b524cbe11b2872836883ed9b7ed10568d637cb3081b"], 0x48}}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000280)=0xc) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400003c}, 0xc800) 18:51:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000009060101160000000000000000000000050001000600000f0900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2185.734074][T27490] IPVS: ftp: loaded support on port[0] = 21 [ 2185.758063][ T27] audit: type=1804 audit(1591210315.271:2427): pid=27487 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3291/cgroup.controllers" dev="sda1" ino=16368 res=1 [ 2185.859947][T27490] virt_wifi0 speed is unknown, defaulting to 1000 18:51:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000009060101160000000000000000000000050001000600581a0900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000009060101160000000000000000000000050001000600003f0900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2186.659430][T27490] virt_wifi0 speed is unknown, defaulting to 1000 [ 2187.090655][T27490] virt_wifi0 speed is unknown, defaulting to 1000 18:51:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:51:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000400900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@delchain={0x9b4, 0x65, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xf, 0x1}, {0xffe0, 0xa}, {0xfff1, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x520, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x0, 0x6, 0x3}, {0x0, 0x9, 0x4, 0x100}, {0x0, 0x8, 0x2, 0x9}, {0xf93b, 0xac, 0x7, 0x3ff}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0xd}}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x7, 0x7f, 0xff, 0x21cf}, {0x3, 0x50, 0x6, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_CLASSID={0x8, 0x3, {0xa, 0xffff}}, @TCA_BPF_ACT={0x4bc, 0x1, [@m_ctinfo={0x80, 0x1b, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x3c, 0x6, "2fde7d39eeda82d1a9edafe6045806f13fc0b7221bb2c7dbb34fd093755f01e100244a72207a91d4bfff83e688b35ee595c28cf30e22c503"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x140, 0x3, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x242b}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1000}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0x8}}]}, {0xe4, 0x6, "f51f6ddc4eb9edecf086f1a1584f987fe731a27cfc41957d8c3c3e1bc07f23ab48c6e3dcc4910bb2436fc46e20143c97cd36d67bb405ac494ad2e2737a30668545c00f7f8d37e1a3d958fb4ca8946ad419cdf36652dcdacddf81952c3fc448392b9eed784727a21e21a35e3f5dbba6e19e0f0b3fbe58239dc243a840ced9a76bc5d778b44beba3dd0f7ce7f2a123223f2a60c61f39d02daedc63e796cbfa0184ab549a983ee73bf367e4408fb524139889fa5633927f42100a1a8a52f2fbfeae088cf3135eeb6b5bfe5d7108fb22c06d3f995aab00f00552aff70bf8d16022e2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x10638c4e5bcae308}}}}, @m_sample={0xac, 0x7, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x800}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}]}, {0x70, 0x6, "b43b5390674fe1cd5fb5b2f6f2c2ebbe92e1128e47854dcf4b836568a6a33b9ff2d6c5bb5625ef7233ec2f5568f36c7de5ad1aa0cc218defe781310b7cc8f8839b36f5a1b81f358f8f517d770534add70c1ba14d30049fe8fd138dbddc4f8234d1d836137e6351de0090ca84"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x7c, 0x5, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'cpuset\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0xd7, 0x4, 0x7f, 0x8001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x8668, 0x7, 0x7, 0x8}}, @TCA_DEF_DATA={0x9, 0x3, 'mpls\x00'}]}, {0x5, 0x6, "d9"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0xb0, 0xb, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x8000, 0x10000000, 0x4, 0x7}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}]}, {0x63, 0x6, "20dcb5460a4cbc1664954b42491ecf85640d6e4a988978a7477fbb8495e3c79a4295ed3c7454c214a4e8d724abb8a594475e60a050cab39a561ef722fdf188c0a4692280a54572078e6c6369a4f69f7400e5f8c48e7bb525b7d8d554612292"}, {0xc, 0x7, {0xe6b99d619450c143}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x120, 0x9, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xbfec9}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88f7}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0xd4, 0x6, "9c357cb4026c6d35071be195972b8034f2377b5514529e3216dc75ebcc09f4fcd85757f726e9441ef5c4a9627e4ce35385a829dc619fc2e1a40941e17e1616738dbcead85dd3ed08bdd7dc70ab2e72fac0806f6d1a155f709fe510b8fc1c75eeb661c2d9ef6909bbf369ec0a043db3fbd8e60a6662437c4d3987af2732e6a326332f5d727b0429faaf0403dbefbc8a5f12751d116f2574effad216ec232b20222e3984f693dd21a60c62c1bd1117eb1a5891f589f1b2e3a320ed550f17bdc3391d2406c0eaa59c66bec8c2eb65be9537"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x3fc, 0x2, [@TCA_BASIC_EMATCHES={0x3ec, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x26c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x79, 0x3, 0x81}, {0xff, 0x3f, 0x1, 0x6}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x2, 0x7}, {0x10000000, 0x9, 0x0, "17022b0fee83fe050c"}}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x7, 0x9, 0x3}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_CONTAINER={0x60, 0x1, 0x0, 0x0, {{0x3, 0x0, 0x4}, "a540dc62a83a90b66d7182a2c518422f1556fa4a36b95f6ad5dd27d8518cf578915d61a9d12c62ac1142d0be657fedfbc65f188d9f0015b42f857debb87e998a6b1bae196529bcb225fc2edfe1e12792da"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1000, 0x3, 0x401}, {0x4, 0x1f, 0x26d8, 0x1}}}, @TCF_EM_IPT={0x10c, 0x1, 0x0, 0x0, {{0x9, 0x9, 0x7ff}, [@TCA_EM_IPT_MATCH_DATA={0xf3, 0x5, "9bbf9f12731245b8fb513abe16f8c295436e5539fa951f6b443e5fc2af9b4a36df7048f479e364d7476ce4c75ae00a0fb0a6d34897bfa924a42b92214f7facc27f12f0598306146c432402e0cb0c9e376046a360af1d2cd118c4e09a55919f510b3ffc009ba404dbbff9dafbb86febdd7cc44fd6b3a8c2a61a3fe537b5f9d87f1d2846172f4a710bcfd335980160ff88e9b43751e0438a1ccdd92e0040849490745295db6fb44bc28e7a9dffca3b0849295f28294c97ed102d6e935d8108d245854beaeba9f2c2bd038833f49b348e384e48d8d25b81dde9e9b56cc0930335f0740c3574743af9ded516293ebb0bef"}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}]}}, @TCF_EM_CONTAINER={0x7c, 0x1, 0x0, 0x0, {{0x60, 0x0, 0x2}, "572b622a27e7fee7a318e317401f320af2b0c862caa96d87f5caf5b6eebe1a486a9ca610d29b72a1e370cd7eb50c7f7f5d1593783ae85192264833407d84c230c0587c99891762d6cad11eb14858d5c843f1c2177bba0d73cbcd4857cb947240fccb3c2b61067e3bb86b72256e9da05e"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7, 0x1, 0x3ff}, {0x7, 0x1ff, 0x8, 0x3, 0x9, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x13c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x7, 0x2, 0x1}, {0x6}}}, @TCF_EM_META={0x3c, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x1f}, [@TCA_EM_META_LVALUE={0xa, 0x2, [@TCF_META_TYPE_VAR="f0989159165e"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x1, 0x2}, {0x3, 0x9, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x6, 0x2}, {0x7, 0x9}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR="992abdac", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR]}]}}, @TCF_EM_IPT={0x50, 0x2, 0x0, 0x0, {{0x3148, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_DATA={0x34, 0x5, "03018779d85d191f8b9b1accc1eb56233e3a4801ea9648e3b23239f94370c1cd85a0fab89e0587524636b9ad0e0b2c57"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xc}, @TCA_EM_IPT_HOOK={0x8}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x80, 0x8, 0x4}, {0x4, 0x2, 0x6}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x400, 0x8, 0x8}, {0x2, 0x2, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x1f}, {0x7, 0x4, 0x1, "d42a842d"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x5, 0x3, 0x1}, {0x400, 0x8, 0x3, 0xc6}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xffff, 0x1, 0x3}, {0x1, 0x9, 0x1, 0x2, 0x0, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5, 0x7, 0x66}, {{0x2, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x4, 0x2, 0x5}, {0x2d, 0x4, 0x0, "6f91f9a8"}}}]}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x20, 0x7, 0x3}, {{0x4, 0x1}, {0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x80}}]}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7ff}}]}]}}, @filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x2c, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0x2}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x654}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0xea6e}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x9}, @TCA_TCINDEX_FALL_THROUGH={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x7}}]}, 0x9b4}}, 0x0) 18:51:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f00000000c0), 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r3, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000), 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000014, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 18:51:57 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) r5 = ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) sendmmsg$unix(r0, &(0x7f0000002ac0)=[{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000000)="7bd30e2c46578d7aeb48392f29dedec216537d246245786d1352b4a438ce5fc4a0414feb21845c35799c1427d5294dc0cac60e386799a82858d55290", 0x3c}, {&(0x7f00000000c0)="e747481db0", 0x5}, {&(0x7f0000000280)="b9097a90ddba62bf7566a622d29ef1991e49e6df83c2c2aaf6dc742028763c590cfb785b772a507fe74a56e0813aabd25dc8c3b33f6dc6b78d42bdcd242a1a9a6cc91f8f6b3894eb19a02fd0699248425a8a293dbf485b6215eda0e68048fc4b88d363d0b387f6684326cf62f15de7c31cda897de75a08263904cc0cd347eab29774be5a24d5e79d3ac273d1ebe4e43b8e10aaf5145d708af79aa13c9632b72b581dd6ba2c0aae612cd9a169a0d8e3d0f46a8a416571a679a176a93eb45d5d180cd9108d0de48ee683063c738ee8", 0xce}], 0x3, 0x0, 0x0, 0x20000015}, {&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000440)="af839172c5026649cd2094dac8b165fb611763311506c7e1785bfbed7d67b503b589fe7247601fa539da9dc0ea0e644eb9dc421fdff09d55cc2d470e1e38cc74629555e5806634d4bd39c408a1d43368a854219f32944ad5574605d09029e5ee0a3d3a0a5cdff8f3ab572f1ba20c4c08b9a77ede5d74abb3e3cb63e5b1d850dbaaebc89a6e7772ce91404eb678a1c9d77c60ac21c3bc4f8470d458e1a158530cfc", 0xa1}], 0x1, 0x0, 0x0, 0x8081}, {&(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000005c0)="0a6f39d4888f4195a1a3df0cb11cb630bbbbbfd2b5df2780dc82d057c013b65ee40bb093b3c8b6b6aceded9e6a44077af47e0703fa843cc025a1491692fdbd3141c9022e7ae9fae3e0436b26534d4b5ed00beff2db39", 0x56}, {&(0x7f0000000640)="7feffccd844fe37236e81e094243b4868742450be1a04beeb82751262235f9b6ff0006627b77a16d817bee3fb43e961b1868927a6e451077bd2b0ece27fe9bcc722ba249fd8c3dfbe53c1a377b921e74f66d715fe2ef699a1bf56c1c555e9ace2acd0c3c2b96ee982b41a0086b872703f4d9220be44c540563f3eaee5ebc2571c289614bfe919b2fa01ae87a4a91413ef982fb3bc51c2c8cbf0e123087f9c4be1b1493b18af6b871458d24aaf61a17ca51c62eec73d91126bdf7303cccb611f89201c7d0cd", 0xc5}], 0x2, &(0x7f0000000f00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0]}}], 0x110, 0x4000000}, {&(0x7f0000001040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001340)=[{&(0x7f00000010c0)="20a594a358b34ce380fc356f2b518863dd5922f3f2420f33aff73cc506846dc3635d218e814674b4d622344ab599bd0d614fba", 0x33}, {&(0x7f0000001100)="e73acda4a5ff70504762025e11464193ba345b7f1e6fc564df7647252e7e8bd44e18", 0x22}, {&(0x7f0000001140)="337bd488350265b5d5d0bcffe360f67ae18fedcb1c035faf0bef25ce26f45286065b689cc7afcec4de2e56612d0f8f4947ac50a6b0e46fe85eb9b1b81827c6c69e2324c805b5210723afbd8b675d0d5d9232122612648daa9d9980e1218bcfceba3207688b", 0x65}, {&(0x7f00000011c0)="889be36839526124a70f58bba64d1c0b71fd2d46b8259b33956718726099515f67d4c0512b91756bd5433be33bdf4f0c018f758f56eca2f805d243ca33bb77b5b71a4b018690741613f5151268553c3f5f8734eac77d9dd45d33d0d20a811a2b95be8ed61c7894406adbdcecad56fa240642677229da4f31cd4aab96deddd2b6c0820641b79b308d61fde44a22f3ee4be68f95bdb993688f0bb76e5358e23e32c5774c4c03ee71ff436efd9bbf7e15c47cb959dd79fda7d2356b09b96f0337d30e3d2358984a902761", 0xc9}, {&(0x7f00000012c0)="ccef3afd78d662d980805587d3d9a7630e1221df43c6aeb2329b0042b81048be08578cb6450d2113a18032273d26662e12e6d0ab26a3d8fdea72eddbe591fc056c4ae0b3be49ae932b316996a05b0630ef9d86724a53dbe9101246a39167b0190efb475cb61d98c5c8978168bc114db38f8d53a0cc9fc7ddcc0c48b595d5b30f", 0x80}], 0x5, &(0x7f00000013c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}], 0xa8, 0x400c4}, {&(0x7f0000001480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001500)="5e9b28591faccd7c57bac820e074645ae550fe27deb9ff1dd51f23c646d9444b4127b261caa8b6691fc2afe9a9d0d4167eae1d9b520c708edbde35b6803f96ca50c6ea9f33765cf85ef179433b736763f47a73ee0e9b6352bde4899ef70251c03e1cb6d08dff48404000bd1825c96293de97b72f9b5352ec0897488a53fec583b1078d337de907412195a064d09e46220985027201d43c6166dcc1982491c06a62a032fa83e579f7849e9fcfa8b6ca7dbddc88086d861c9f04fcd9950d9bf1e59e02fade206583e5d0ad4cfd37cc7bcf57ae13", 0xd3}, {&(0x7f0000001600)="46af837e1fd0c7749190eb2e018ce267be95623479c5b5527966c9c2e923903958c4ab17b773b6754835d486a742d88602834b076e5bc43d96be93e66373a5102a865336c0e2082d52cbd96e65422d6679de4f5c59076f8b3a8f70d31adc64b6aaa680b4aa9fb511a5a9373d3e66e07e086e6c3a8f492417735919d7a84816275925bba264787f8dd9bf4ca3652783857134fcaf5dcb8303fc86853f77997c826721fdd2583f62c3e4", 0xa9}, {&(0x7f00000016c0)="586bd0057041601cf959254896c217bc5078cf0cae29dc5ef3dad4efdcd99881b8c78cc1f842c4006fe83141958b8f8c42a4afdb23ac4ffce1bdfdc7e493e2d2ef0f36cd6d20bfe9524f3ba004b74cc2eba3e8cf5638420bc5e99fa958292664ce0cf81027a11faab6241fb7f251a94f6d80c43b819a44decaa5cf7cbf183fe3151c3aec8e58f71db3d158deae81f4f0e5aad29f5826e4a53345f6987850d859c72f6e754e99ddfbb0aab61e4f40f779434e3d1289056814d8920f6f1d5eedc7de621c24f5144ca6bd", 0xc9}], 0x3, 0x0, 0x0, 0x4}, {&(0x7f0000001800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001880)="d1f44231c8f4e4a4b1e084c244ece3e7bf0f4acb44e182a347542075a3a5c74f3dad37a0414233ec86e3acbb011037da62036864aa7841944b2095d27a99bb12e689025b84ef2c040c1b56a12f4e3c52d0530b6fc763ef14b6264e9f67eb8302d3a7465cd0a3f71c64ad0d1507865f5ac32b9a028b6289b976b80873a64e0023b5bedaf5698cf01077cee2709688e6cc62af29d6d0e135718d7de143dab6e02154f2dc49f1663e320538e3ad725c9afa7cf4c7ec82a3568c9355d0b2c06c49c44c84efce050f568529d431a36a117167cfffeca667d9b525d217fdcc771e48ae3a6ff90625b6fba7ec39e2", 0xeb}, {&(0x7f0000001980)="89d6e620d7eb6e9b74e8a02c031a74c3ea6259691907eacf8596d7a8d060dac172517eb757b5d7d81e6af7e7a167cb723faec12e758cf8aa5a61f2a3ad28e52edf56bf10c81404f7ecda6c3a8d4b7113b5e012a041ce452880b00085afdef6910d142cbe314a72ac4952bfae7fce20bc27fb9e74b933f34cd52411658319226be70987121edfd9520b191936054c77ca6bb4a48c8306d290d2cb1992b26299eee4c33b720e53c5753a1aedd6c2bd448565bf64e368f16291d977368eedca741c4b6bb1e13580f9cd89eb82021aa0aa39402edd4fe4d7225010774c7ca720ee617001110f6f", 0xe5}, {&(0x7f0000001a80)="658fc7349a1b42136a9b8e33cef89f780056457cce21eb2f10995889dd79cb603795ebcb0388a90aa4a115ca36f3255b2acde0bddfd47253716b56494ec3d98a27ab7b7ddb16577339c229d87f87234c27b748f2984b1de9c280a63b71c3c90b3460ca077c4038544c3e4387ef2a3028ec002613f8dbed9d979852d6b38a5158b52112059b33ba897dde096eeff93f5650fa324370c4bb04a4e60ae83ffd1476f01c7832db27bfe9ba24b7beb260210d3e92fdc6f2075cafa5ceb80cf12d7e14241debaf642cfb5401cb4d3ece9342f17947354377", 0xd5}, {&(0x7f0000001b80)="d8351370532f5552a68f9e842d54b5f71e1f13f73e0524f0e9ed988f1721270a93045977516f39ac09872f54ef4e6eef8426bfeb04d91ea8e5dd5daaa430a428e0cc4ab80a9ed9d4ea8ed426bfa9d8cc51658c35d3cee00a933dcecf7975e443052195ddb7b8977ce8bd22b170a040bc17beef461854d22f0f5180ad204528c8", 0x80}, {&(0x7f0000001c00)="157ee761d871f9cf45be10696698fdf09f42967ac5b32099ace00a25c12a325f1b725ec6a5118d2c2a2e6c9ed7fff1026bdd9e59d6ef8ccae36676f52cdafc966123c7d25dc047e2d3aa3c37fab36615807438a76fd7e3c0265ac0569f4079357fd2b6580de7abcd8a12631a128fb76ff9db3756ffc425a39a8d5bbe09692e8a7e88403f8b4439f5b51198ae337c76aacca3467c2a77b7f5229e4fc09d01a53132d71757300902249ddb8fec93bf3790dc7d24000c772319e2b6883d53b3c099ce", 0xc1}, {&(0x7f0000001d00)="59c2d3b32067e9b609e844afb2aa6d30b24c211dc1f034c523370246c1b6cd9b6af5153fe87024af2571e27079b5da08a7f43439cad15e01b1bd29cd5fd8d02938bed6851ac863599264693d8f0d1e", 0x4f}, {&(0x7f0000001d80)="b6759d67aa3f7a00f187cd190ef7b25b9feb9d348915ca6240fd950f98baf172f14a0cfea0c00f43563a502eb72881", 0x2f}, {&(0x7f0000001dc0)="a6fabdea2fef04d416e9", 0xa}], 0x8, &(0x7f0000001f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}], 0xc0, 0x4000080}, {&(0x7f0000002000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002580)=[{&(0x7f0000002080)="b2dd1aca27bebe34c6a97cdecbeca921c5b820a16adb5879e7ff493d34764009852fa0f8ce0b2367b1e5703d33869b9e48447721fb666893ccd514c765ea50a70654d633145a151c63b4a71a54dc8b6a17cdb3b5b923a1f2e67d3b1af7b9b859192c1a78dc5d46e06b40885e68e6b9d69cc4fd4a861b585d3913da9bf7ed6c4aa6647839c3fba33ec4a871e18d2923d256e2ef", 0x93}, {&(0x7f0000002140)="e1b27f5edc04c4a751de581e7cb55286fafde37b18a5c7bbc7eaeca8708684e2f4299bcaa48d1d55ca76bd827e9f172b781ad8d3e591cd52cf2e4580f0076e4c360f19a4db0e00964a9afef461d549fef1b9db20357e238322cff80dc0415a26dda0aff1552d71d71a70ec816ef677d437c04332684aaaa58209d784706b46b67dad6e54050ee13c5f2b1d9785e8ccf17ac312fc4b23056d7ef4daca91e902a5b8ce35fb0ad840e1ea4960ac2124be1474740832a0617393dd25d1eaa6c9a1f1546defb764a8506805850f364fc96ddb4ce5e8dc1fe3b8c79f3209ea43e56a2e18206106fbf090ba32c2da", 0xeb}, {&(0x7f0000002240)="f341879038b090f3be76000d1438522000f228c798526c4a9463debb70fe6e68fe907b73b3397261a8fe6d69b80702ee05e43ed2636d4f3843d1e2f72c241fcda5489ab854ba5f7aa21159d770f7b9b75eb01c04093828d3a331f351a8d88876f5276c20a62b687920029e62a89436286b3fe00f16d753a38bc0e595faf867de8280accdb3476d7e67214342fdeb27f0c6a6cd940848dc5ee2218a2fc1e5536a73281c027af328e2fb3250c9e9adca72dde4fb1d48c27bc0640bb81bab", 0xbd}, {&(0x7f0000002300)="f74d63e5f9a90e2fbf7757fba21a8e3160f281dd816e7150d739278f03ebb5ce885f261b166c952f94fa89ca3d30d7b9a5c65533e431195359f9d02561a9e312f08e96c906d2432f762c587b06517a1d245cd454664c78f6dd0e1e0662ea6b677b160e8b7c406cc0261fcef68823b4288c9f8261f1ee546a1a61588796d280de4c4cc5aa12ecccb71efca77ebc296ea5e9fda5d4cb2f5657670e5c003ce9307cb202eee0ac7a19b5fcc7044a3397b28561d7daeb7e82302c2172e0f680244a", 0xbf}, {0xfffffffffffffffd}, {&(0x7f00000023c0)="8b2f7c1b5f52aad13e6a7fecc077a9489857d48ad3319701c47c8b3f1b3fc0a568edd9a9b0b14fd0afb1ecc1b7aa3736a65602287945cc4ebd4a831371ce9ed63e7d409e4387dab0286b4873e6d4ed12d64ed67f07dae7447d1110060597b2c50feab91bf55942ff147357fb85050c956f1b7a766cf425a761c219a4ab1f89673030541fc1d8edabf0f393e6b7a85cccc510aa84106075b8272875393298d0dd8706aeeb8abb34eff109b40d58cf83fe42e0e8bd282ba4de2cd7ed2103d8856a3e10d2", 0xc3}, {&(0x7f00000024c0)="936171d9b7eb0d656d27b00edc5d7151bf81d8dee762e6718edd855c2215ce671c70398e0a316fdaca873318c5ad19da827448a100b115dd4a8d25f1e3d92a8fdc98fd8313506dee39a030da68c0ec424ad7f55d3824345b2ffe02f7d1779c2d0808f87d33e9ef3743cade90c17ddaa403f8a83728e1e923cadd620fd0222a17a874e3f373ef5251deb4ae9120cb5e281dd5a98f4acbf492a2a15943cd3da04b1ce530a502d7add32cba0dec489b3d7f8803e467deca24a10887", 0xba}], 0x7, &(0x7f0000002800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00ff7300"], 0x98, 0x8041}, {&(0x7f00000028c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002a00)=[{&(0x7f0000002940)="f6246cc3d0cdfe036eed52cc2945e3ac2b9ee134131c46c0074faf3e47b167957004317edd74eb72d8299b9d50451b25933d94f84d15c608d3e9eb89a21c15f666edf6595e1f1bce0a57c4726a0b695067c419ad89605c9195e8714d12a062b09b2b928fc8ef852e8068551396165d28dc304ccaee90fe56202edfff159ba3a5c2", 0x81}], 0x1, &(0x7f0000002a40)=[@rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r2, r3, r0, r5, r0]}}], 0x80, 0x4}], 0x8, 0x20000) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000180)="538743e1145f8622a3db62475d37cf8bd5ce11695a64df1723219871f7b2ef0e79834b8753a4769bd33383bcecec36dcf50bb84e82fdec997ea87de1df68c702756cd839e53c50307d6c4438aedf66d891a362b69d520afa2385ce39cf33a5b1791081cbdf1a89d60abd633de449e5a15d26065ecc5720b483cbc805c05f", 0x7e) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r6, 0x0, 0x10004, 0x0) 18:51:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = accept$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)=ANY=[@ANYBLOB="7c00000011000000f6005b0d00030068617302000000630008000005000400000000000900020073797a300000a558c8e4923b0bd68e6300"/79], 0x48}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)={0x2, 'wg0\x00', {0x40}, 0x4}) sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1, 0x8dffffff, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 18:51:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000090601011600000000000000000000000500010006001a580900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuset.memory_pressure\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df00000000e9000500010007"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x28, r5, 0x1, 0x0, 0x0, {0x6}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r7, 0x1}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r7, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r7, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44000000}, 0x20004000) recvmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000140)=0x3, 0x4) [ 2188.414556][ T27] audit: type=1804 audit(1591210317.931:2428): pid=27542 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3292/cgroup.controllers" dev="sda1" ino=16364 res=1 18:51:58 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000000700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000780)=""/237, 0xed}, {&(0x7f0000000880)=""/80, 0x50}, {&(0x7f0000000900)=""/135, 0x87}, {&(0x7f00000009c0)=""/93, 0x5d}, {&(0x7f0000000a40)=""/120, 0x78}, {&(0x7f0000000ac0)=""/255, 0xff}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x8}, 0x2000) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000001c80)=0xffffffffffffffff, 0x4) close(r2) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000180)={0x3081, "c269f29f0d61a43c6c5dedbd80f2dfde07b60b84a056860dac2bf9283c54111339602173d58fa7d636cc8cf8dc783ede8c1668dab0d17a498665b5e9a4a06cd632e78342f8f6d0b7e33db01709e5317db275b22d99674275a7032c12aeb9340a4a25efc6963b7e9ff7d566544e7395943c0e8654689d912b5af03ca06a4208a9"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xdc, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0c1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe42}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x44}, 0x880) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x0, r6, 0x2, 0x5, 0x1f, 0x100000001}) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_buf(r7, 0x0, 0x28, &(0x7f00000003c0)=""/130, &(0x7f0000000000)=0x82) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:51:58 executing program 1: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000feff00000000000000000000000000000d000300686173683a6d61630000000005000400000000000900020073797a300000000005000500020000000500010007000000f804170ff5"], 0x48}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x3}) recvmmsg(r1, &(0x7f00000061c0)=[{{&(0x7f0000000b00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000000b80), 0x0, &(0x7f0000000bc0)=""/95, 0x5f}, 0x40}, {{&(0x7f0000000c40)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/1, 0x1}, {&(0x7f0000001d00)=""/156, 0x9c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/35, 0x23}, {&(0x7f0000002e00)=""/103, 0x67}, {&(0x7f0000002e80)=""/48, 0x30}], 0x7}, 0x6}, {{&(0x7f0000002f40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000004280)=[{&(0x7f0000002fc0)=""/12, 0xc}, {&(0x7f0000003000)=""/121, 0x79}, {&(0x7f0000003080)=""/208, 0xd0}, {&(0x7f0000003180)=""/193, 0xc1}, {&(0x7f0000003280)=""/4096, 0x1000}], 0x5, &(0x7f0000004300)=""/34, 0x22}, 0xcead}, {{&(0x7f0000004340)=@can, 0x80, &(0x7f00000046c0)=[{&(0x7f00000043c0)=""/163, 0xa3}, {&(0x7f0000004480)=""/171, 0xab}, {&(0x7f0000004540)=""/35, 0x23}, {&(0x7f0000004580)=""/235, 0xeb}, {&(0x7f0000000540)=""/17, 0x11}], 0x5, &(0x7f0000004740)=""/250, 0xfa}, 0x5}, {{0x0, 0x0, &(0x7f0000004a40)=[{&(0x7f0000004840)=""/73, 0x49}, {&(0x7f00000048c0)=""/200, 0xc8}, {&(0x7f00000049c0)=""/68, 0x44}], 0x3, &(0x7f0000004a80)=""/11, 0xb}, 0x1f}, {{0x0, 0x0, &(0x7f0000004bc0)=[{&(0x7f0000004ac0)=""/249, 0xf9}], 0x1}, 0x10001}, {{&(0x7f0000004c00)=@rc, 0x80, &(0x7f0000004d00)=[{&(0x7f0000004c80)=""/72, 0x48}], 0x1, &(0x7f0000004d40)=""/132, 0x84}}, {{&(0x7f0000004e00)=@nl=@proc, 0x80, &(0x7f0000004e80), 0x0, &(0x7f0000004ec0)=""/126, 0x7e}, 0x8}, {{0x0, 0x0, &(0x7f00000060c0)=[{&(0x7f0000004f40)=""/4096, 0x1000}, {&(0x7f0000005f40)=""/18, 0x12}, {&(0x7f0000005f80)=""/54, 0x36}, {&(0x7f0000000600)=""/96, 0x60}, {&(0x7f0000006040)=""/81, 0x51}], 0x5, &(0x7f0000006140)=""/108, 0x6c}, 0x8000}], 0x9, 0x2141, &(0x7f0000006400)={0x0, 0x3938700}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000000206010000000000000000000000000000000000686173683a6d61630000000005000400000000000900020073797a300000000005001f00020000000500010007000000c74159acd2fcf0f9e44f7f672d3f9ce4b13c64273cc4e82e54e3543513f841c23294"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000006480)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006580)={&(0x7f0000006440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000006540)={&(0x7f00000064c0)=@gettfilter={0x54, 0x2e, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xa, 0xfff1}, {0xfff3, 0xc}, {0x5, 0xfff3}}, [{0x8, 0xb, 0xbd}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x80a0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x1}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={r6, 0x7, 0x75c}, &(0x7f0000000480)=0x8) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="0000000000000000f1ff00000a0001006261736963000000380002003400028028000280240001000000070000000000beff3b05000008babb3b98e42580e73fdad88e13960000000800010001"], 0x68}}, 0x0) r8 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:51:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000600900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2188.732820][T27561] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 18:51:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuset.memory_pressure\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df00000000e9000500010007"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x28, r5, 0x1, 0x0, 0x0, {0x6}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r7, 0x1}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r7, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r7, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44000000}, 0x20004000) recvmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000140)=0x3, 0x4) [ 2188.905256][T27561] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2189.039282][T27582] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2189.064758][T27566] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:51:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:51:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000f00900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x20}) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRES64, @ANYRESOCT=r2, @ANYRESOCT=r5], 0x1}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)) [ 2189.358150][ T27] audit: type=1804 audit(1591210318.871:2429): pid=27592 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3293/cgroup.controllers" dev="sda1" ino=16370 res=1 18:51:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000300020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2189.575057][T27600] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 18:51:59 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff96c1952bf0418294f297d7ff6fe9574b3908004500002ae9f3720000e68f78ac1e0000000800450300315c9c92f4a99c00003b"], 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', @ifru_flags}) 18:51:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000020900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:51:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000030900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2189.944796][T27608] IPVS: ftp: loaded support on port[0] = 21 18:51:59 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) [ 2190.338740][ T27] audit: type=1804 audit(1591210319.851:2430): pid=27613 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3294/cgroup.controllers" dev="sda1" ino=16368 res=1 [ 2190.478329][T27608] virt_wifi0 speed is unknown, defaulting to 1000 18:52:00 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff0180c200000091000000810000000800a500001400000000006c90780000000000000000"], 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:52:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000040900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:52:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x20}) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRES64, @ANYRESOCT=r2, @ANYRESOCT=r5], 0x1}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)) 18:52:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000050900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2190.809791][T27609] IPVS: ftp: loaded support on port[0] = 21 18:52:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000090900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:52:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000009060101160000000000000000000000050001000600000a0900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2191.371670][ T27] audit: type=1804 audit(1591210320.881:2431): pid=27646 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3295/cgroup.controllers" dev="sda1" ino=16368 res=1 18:52:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000009060101160000000000000000000000050001000600000e0900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2191.599358][T27609] virt_wifi0 speed is unknown, defaulting to 1000 [ 2191.606422][T27608] virt_wifi0 speed is unknown, defaulting to 1000 [ 2192.112310][T27608] virt_wifi0 speed is unknown, defaulting to 1000 [ 2192.125754][T27609] virt_wifi0 speed is unknown, defaulting to 1000 [ 2192.404500][T27609] virt_wifi0 speed is unknown, defaulting to 1000 18:52:02 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000280)=""/189, 0xbd}}], 0x1, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[], 0xfffffd6d) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) r2 = socket(0xa, 0x1, 0x10000000000002) sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b400000c13900060008000029ec2400020cd37e99d69cda45a95e", 0xffffffc2}], 0x1}, 0x0) connect$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) sendmmsg(r2, &(0x7f0000005c00), 0x40000000000037b, 0xc000) 18:52:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000009060101160000000000000000000000050001000600000f0900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:52:02 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) sendmsg$AUDIT_TRIM(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21012900}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x3f6, 0x8, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xf578e742cd3d2a46}, 0x4000000) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:52:02 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800004d4e060000000f0000000001000000000075000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x7, 0x4, 0x4f0, 0x0, 0x220, 0x220, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000180), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="0a888c25a0c6", @empty, @remote, @dev={0xac, 0x14, 0x14, 0x3a}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x3, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @multicast2, 0x80000080, 0xffffff00, 0x5, 0xf, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, {}, 0x81, 0x3f, 0x8, 0x4, 0xffff, 0x100, 'syz_tun\x00', 'macvlan1\x00', {}, {0xff}, 0x0, 0x23}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:ping_exec_t:s0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x540) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)=ANY=[@ANYBLOB="48000000020601000000000300686173683a6d61630000000005000400000000000900020073797a300000000005000500020000000500010007000000"], 0x48}}, 0x0) sendfile(r3, r0, &(0x7f00000000c0)=0x3ff, 0xfffffffffffffffe) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000004) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1d54a038cec019f1}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000570d9f49ca40cc933a572ceed4b15300", @ANYRES16=r4, @ANYBLOB="00012dbd7000fedbdf25020000000800010002000000"], 0x1c}}, 0x1) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b000500010007"], 0x1}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r1, 0x0, 0x100000002) 18:52:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:02 executing program 2: r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000000, 0x40031, r0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000140)=0x8000007, 0x12) sendfile(r1, r2, 0x0, 0xffffffff800) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000280), 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000300)="5800000040754fa956e11400ad", 0xd}], 0x1) write$binfmt_elf64(r4, &(0x7f00000015c0)=ANY=[@ANYBLOB="8142882f4bdd2fb07b"], 0x9) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@setneightbl={0x2c, 0x43, 0x300, 0xdc, 0x25dfdbfb, {0x1c}, [@NDTA_THRESH2={0x8, 0x3, 0x9}, @NDTA_THRESH1={0x8, 0x2, 0xff}, @NDTA_THRESH2={0x8, 0x3, 0x7fffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48081}, 0x8044) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000003b80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20060840}, 0x0) pipe(&(0x7f0000008f40)) r5 = socket$netlink(0x10, 0x3, 0x6) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0xb03, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 18:52:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000600900020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2192.932263][ T27] audit: type=1804 audit(1591210322.442:2432): pid=27711 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir171911693/syzkaller.qh6zro/1566/memory.events" dev="sda1" ino=16360 res=1 [ 2192.966630][T27705] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. 18:52:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000001800)) r1 = socket$alg(0x26, 0x5, 0x0) socketpair(0x2b, 0x1, 0x20000000, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000040)=0x3, 0x4) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) accept4$alg(r1, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x208e2a6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.current\x00', 0xb00000000065808, 0x0) r4 = socket$inet(0xa, 0x801, 0x0) openat$cgroup_ro(r4, &(0x7f0000000100)='cgroup.events\x00', 0xb00000000065808, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000240)=ANY=[@ANYBLOB="46045b00c5dce9c6ff284096b7fd74dede1605f56c552e1999d529e528c6609f054fba6a316c913f4c56275f2d5d000062446cd670fe7b6331ee027b7432fa341dd1a230d24e2c616a2364921f71c06b64f0ec07661c015ecd921ba514c825f151d39c970cef8c964a65551cd56eff560f7b3efc15ebeb03f1208fe036068d3f35c5a87d8dde336732ad208675cc80c5f8603a8f3478bd5a3d54c558fefa8130b6a2f77a89e3ea2fd7dec39db87d714ee3989f4f5c22", @ANYRES16=r6, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r7], 0x4}}, 0x0) sendfile(r5, r3, 0x0, 0x100000002) [ 2193.103888][ T27] audit: type=1800 audit(1591210322.442:2433): pid=27711 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16360 res=0 18:52:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000001c00020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2193.201492][ T27] audit: type=1804 audit(1591210322.482:2434): pid=27711 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir171911693/syzkaller.qh6zro/1566/memory.events" dev="sda1" ino=16360 res=1 18:52:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000300020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2193.269919][ T27] audit: type=1804 audit(1591210322.482:2435): pid=27705 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir911542418/syzkaller.OPMwZH/2899/cgroup.controllers" dev="sda1" ino=16368 res=1 [ 2193.333914][ T27] audit: type=1804 audit(1591210322.482:2436): pid=27711 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir171911693/syzkaller.qh6zro/1566/memory.events" dev="sda1" ino=16360 res=1 [ 2193.379836][ T27] audit: type=1800 audit(1591210322.502:2437): pid=27715 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16360 res=0 18:52:03 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TUNSETFILTEREBPF(r1, 0x800c6613, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x64, r3, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3e}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c4}, 0x20000000) [ 2193.459214][ T27] audit: type=1804 audit(1591210322.502:2438): pid=27711 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir171911693/syzkaller.qh6zro/1566/memory.events" dev="sda1" ino=16360 res=1 [ 2193.493711][T27732] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 18:52:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000001000020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2193.684289][T27740] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 18:52:03 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x64bd, 0x0, 0x0, 0x0, 0xc, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_emit_ethernet(0xb1, &(0x7f0000000200)={@local, @remote, @void, {@generic={0x80f3, "e3fbc6ea9af4eecf15111ecb7a095947b4a32e8adccc36b984ed7c7c18e3fd99c7b1a1abed0b92793845e2c3d088d791d6a55808a29651b99b227572fd1668f0fefc58ae22c6cd0cddd5509db41d12dd6bf1914aff399f9f667fa34426eed4f25edb6076de717d6e998031194e91c5007a25781ae8353e7a27f4d7d2cc1000e39ff9609b38385f23710ed11ca26560bef7f215e371c783159fba042feab61d7c5c8d81"}}}, 0x0) 18:52:03 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) [ 2193.961949][ T27] audit: type=1804 audit(1591210323.472:2439): pid=27747 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3297/cgroup.controllers" dev="sda1" ino=16362 res=1 18:52:04 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'veth0_to_hsr\x00', {0x7ff}, 0xd57}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:52:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001480090500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe800900001100002c000000000000aa"], 0x2c}}, 0x0) 18:52:04 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x200, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xb, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x161, 0x11, 0x10, 0xa}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x15, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:52:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000001c00020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:52:04 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipmr_getroute={0x1c, 0x1a, 0x20, 0x70bd2c, 0x25dfdbfc, {0x80, 0x0, 0x14, 0x20, 0xfd, 0x2, 0x0, 0x4, 0x800}, ["", "", "", "", "", ""]}, 0x1c}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 18:52:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000902020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:52:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df0500f1ffe8000500010007"], 0x1}}, 0x48080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x2605125ff536eb7, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000000c0)={0x7, 0xedf, 0x3, 0x81, 0x3, [{0x6, 0x8, 0x7, [], 0x8}, {0x40, 0x1, 0x0, [], 0x1100}, {0xc9, 0x28, 0x5, [], 0x383}]}) 18:52:04 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00', 0xffffffffffffffff}, 0x30) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x4c, 0x6, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) 18:52:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) [ 2194.678050][T27779] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 18:52:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000903020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2194.806952][ T27] audit: type=1804 audit(1591210324.322:2440): pid=27782 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir911542418/syzkaller.OPMwZH/2901/cgroup.controllers" dev="sda1" ino=16378 res=1 [ 2194.876485][T27789] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 18:52:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000904020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2195.099373][T27798] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 18:52:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000905020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2195.294760][T27801] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 18:52:05 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x1, 0x80000, 0xfffffffc) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) accept$netrom(r1, &(0x7f00000001c0)={{0x3, @bcast}, [@netrom, @rose, @rose, @null, @netrom, @bcast, @netrom, @default]}, &(0x7f0000000040)=0x48) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000300)=@routing={0x3a, 0x6, 0x2, 0x1, 0x0, [@mcast2, @private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}]}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x35, 0x0, "b4c020a4e4787b3f5d727339632c610254e0794a9521e6149d5f43eeb645d36bbd19e8b3c1be8539614eb6b49d7d284d8b150e58435f6b9be1e9d0a4ed714e215350204809f2940b662445e489d94ae1"}, 0xd8) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000240), &(0x7f0000000280)=0x40) 18:52:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000909020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:52:05 executing program 1: r0 = socket(0x10, 0x3, 0x4b) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@in={0x2, 0x0, @remote}, &(0x7f0000000140)=0x80, 0x0) ioctl$SIOCX25SDTEFACILITIES(r6, 0x89eb, &(0x7f00000002c0)={0x100, 0x1, 0x3c, 0x0, 0x4, 0xd, 0xa, "545667aa58bada341c348f1c79b6af3aac372f4f", "a255a17432c6f437fd0f67e7f79d4f9eee6c7767"}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x20000001) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000024001d0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000f1ffffff007c26073121c715d0be9ec754683900000008000100736662002c00020028000100"/78], 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xfa}}]}, 0x2c}}, 0x24044085) 18:52:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'lo\x00', {0x7, 0x4e20, @remote}}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="24010000", @ANYRES16=r4, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x804) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1a8, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x312}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @ipv4={[], [], @loopback}, 0xffff}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x27c, @rand_addr=' \x01\x00', 0x80000001}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9908}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3be1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20000000}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4894}, 0x800) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x26) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10004, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) getpeername$netrom(r5, &(0x7f0000000240)={{0x3, @default}, [@null, @remote, @netrom, @rose, @default, @default, @null]}, &(0x7f0000000180)=0x48) connect$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, @fixed={[], 0x10}, 0xf0}, 0xa) [ 2195.579197][T27809] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2195.594385][T27810] bridge0: port 2(bridge_slave_1) entered disabled state [ 2195.607376][T27810] device bridge0 entered promiscuous mode 18:52:05 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000090601011600000000000000000000000500010006000000090a020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:52:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) [ 2195.764612][T27823] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2195.794954][T27825] net_ratelimit: 25 callbacks suppressed [ 2195.794987][T27825] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000090601011600000000000000000000000500010006000000090e020073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2195.878698][T27825] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2195.923689][T27832] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 18:52:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000090601011600000000000000000000000500010006000000090f020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:52:05 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2196.015735][T27816] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2196.052091][T27817] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 18:52:05 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300), 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x801, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x88, 0x9, 0x6, 0x101, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) sendmsg(r1, &(0x7f0000000200)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, 0x19000000, &(0x7f0000000140)=[{&(0x7f0000000000)="b2", 0xff14}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 2196.100473][T27838] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2196.118642][T27839] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000960020073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:52:05 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2196.343330][T27845] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2196.359815][T27846] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000001340)="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", 0x516}, {0x0}], 0x2, 0x4800000000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) recvfrom$llc(r0, &(0x7f00000003c0)=""/203, 0xcb, 0x0, &(0x7f0000000040)={0x1a, 0x20, 0x11, 0x0, 0x9, 0x20}, 0x10) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:52:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000003}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) close(0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r4 = socket$bt_hidp(0x1f, 0x3, 0x6) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000100)="ad6febc578db716b2553382de8274113552f558afe144897ac66bca7b2fdb62d97245150606d247e251c69508852c85404ff67bd0b92949a88855d5e08b36532ff4213d60a208691adcd166e1eebdddb913ca1df7c5b006d32ced7fce9e0d85be030fb79ad120f67e74ee26779566b8d4ceddf293af51c5c8eb67f9fdd38fc087e21dcd4ec67df7f8f6b306d6b78b4f16c133f4899ebfbbc1d05d086a7f6e2b27e4af4712ee0a2b53361bccb3db4b1a5cb5f5c62bef79a223d47", 0xba}, {&(0x7f0000000240)="6bb550472ced01efea559784e9", 0xd}, {&(0x7f0000000280)="5582296c905ae272032741b6eec0c4704b9e97b149586c00515c792a64f446cf6b3368951b3c212738960f6d7f63a31ad99345fe33f7dc808540946f2b55a9c26277f78fd46572f4b358707cbb2f613e21d101675bee21b3ddfd298fcab508ea29fdc7987d5d684228e9a34d1a575d42907e5b71b4c92915f8796973ab3430e1cf2b5f43d0b031fc98e274e594a0fc8af0e599106420bff4", 0x98}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000340)="37fad50e4a626607a7ae6919e2dcb79936b6a61a0acb0f95fcc9bdbe52bc16e241326909aa029a522ff4c716025386465e591830c0d10febd746b1d5c261e5091758ff7bcedb3fb921c7f8b1c1ca128fae4967272a96981c8642b9bd134d83d0a2a181b485bb6f6c3b35a664211038f2aa93bf8323404c659566e7ead74e43ca47f5c22547992cb58ab5c89277168f4024751df251d70748c0d8f9a88eed63e1bad98dbea8", 0xa5}], 0x5) socket$inet(0x2, 0xa, 0x2) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000200)={0x0, 0x20c, &(0x7f00000001c0)={&(0x7f00000005c0)={0x28, r3, 0x1, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x14}]}, 0x28}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000200), 0x8) 18:52:06 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x9, &(0x7f0000000300)="7945dd655a95d18285f36a22c8a3e5aabbf6b162f2fbb9c770bc281822a15d3f27bb3450bc5313139debce13ddd2d3cfb8756b22af60672eff4aa24f2896326afef76d931a7a0bc06ec13d38c14e54a720") r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r5, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xff}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xa5}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080040}, 0x26000800) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) r8 = accept4(r7, &(0x7f0000000280)=@xdp, &(0x7f0000000380)=0x80, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r8, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x3f7, 0x400, 0x70bd2a, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:52:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000009060101160000000000000000000000050001000600000009000b0073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:52:06 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:06 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="28000000250025de9a7ccb9436f0ea0800000000000000000a000000330331fa5972240c6b9268dfea90bb580b73cf4f427e37eaf6c1caa5e8c2d6e8ce8bef65afb463c365b2270b3330d725c14cffe98ee8a5", @ANYRES32=r9, @ANYBLOB="000000000000008108000a0000000000", @ANYBLOB="fad01ab8169ec31559ff340c00bf2a080bb3389f043699ea9d5193d98926d2e915c82cc931cf8f7c8469500fc15bfd5efb12f5b32b5e215d0b9578411cf6f86ce4d179d6cee09bbfe65fb44139ac398acff9b473ba168707905df74ade805c6446fb00f35b6bc639bae2e2a6b2e8", @ANYRES64=r7], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000110000022dbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="08001e00f7ffffff"], 0x38}, 0x1, 0x0, 0x0, 0x14000}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000300000000000000000f100000080003000d5fcd090403188cc98fde96d1924153755f85cd7bc7574fe5eaf97c82e5095b157f2cc7ac", @ANYRES32=r7, @ANYBLOB="c5faad202d80f76716d2832f7bb5fad7adb3096c42649f6fd81b636e8c9cba712876e94d0988b40fc84e6a051e8352ed156044cfd53c2c3bcc06a94dd69639b00509d35e1a25"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0xfffffffc, &(0x7f0000007640)={&(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES16=r5, @ANYBLOB="ff830a00000016000a00", @ANYRESDEC], 0x4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) [ 2197.076544][T27870] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900400073797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2197.121581][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 2197.121593][ T27] audit: type=1804 audit(1591210326.632:2444): pid=27866 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3300/cgroup.controllers" dev="sda1" ino=16381 res=1 18:52:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000001c0)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, {0x2, 0x4e20, @local}, {0x2, 0x4e22, @multicast1}, 0x100, 0x0, 0x0, 0x0, 0x7fff, &(0x7f0000000040)='syzkaller1\x00', 0x6, 0xff, 0x3}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f30503", 0x13) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x64011100}]}, &(0x7f0000000180)=0x10) 18:52:06 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 18:52:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001400)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'bridge_slave_1\x00', 0x2000}) recvmmsg(r1, &(0x7f0000003740)=[{{&(0x7f0000000280)=@ipx, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f0000000300)=""/228, 0xe4}, {&(0x7f0000000400)}], 0x3, &(0x7f00000007c0)=""/237, 0xed}, 0x9}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000008c0)=""/114, 0x72}], 0x1, &(0x7f0000000940)=""/7, 0x7}, 0x6}, {{&(0x7f0000000980)=@nfc_llcp, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/28, 0x1c}, {&(0x7f0000000a40)=""/42, 0x2a}, {&(0x7f0000000a80)=""/48, 0x30}, {&(0x7f0000000ac0)=""/237, 0xed}, {&(0x7f0000000bc0)=""/34, 0x22}], 0x5, &(0x7f0000000c80)=""/117, 0x75}, 0x4}, {{&(0x7f0000000d00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000d80)=""/212, 0xd4}], 0x1, &(0x7f0000000ec0)=""/105, 0x69}, 0x7d68}, {{&(0x7f00000010c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000003440)=[{&(0x7f0000000f40)=""/21, 0x15}, {&(0x7f0000001000)=""/37, 0x25}, {&(0x7f0000001140)=""/160, 0xa0}, {&(0x7f0000001200)=""/161, 0xa1}, {&(0x7f00000012c0)=""/233, 0xe9}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f00000013c0)}, {&(0x7f0000002440)=""/4096, 0x1000}], 0x8}, 0x7}, {{&(0x7f00000034c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003600)=[{&(0x7f0000003540)=""/138, 0x8a}], 0x1, &(0x7f0000003640)=""/245, 0xf5}, 0x9}], 0x6, 0x2300, &(0x7f00000038c0)) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000003a40)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003a00)={&(0x7f0000003940)={0xa4, 0x4, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x64, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x414e7e63}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x39ac615}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6494a54f}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x68a9b9c3}, @NFTA_HOOK_DEV={0x14, 0x3, 'geneve0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3df6b34c}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8040}, 0x2000c080) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x7, @empty, 0xec7}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000100)="dfa577fe9f05281aac322c8880e8a7e09e0378f6299190e1f406346b147a59b803de60a6227f8b9b1132703a1727d25ff5995bbf2d080dd0f50550d7bc38506e4e8cacff41851bd338a0be4fba94d56170588c55c502c05849942cf4e47147eac08557e7b79141e8bdde90f599eb27858cafdd07a1c657d2faba270aafd0a687eca6b296b672623d3f0e9bd101d5d89c69146bebc577d19e5b31f963f6c6c154366bdac532acacb5941b2acd3aa8", 0xae}], 0x1, &(0x7f0000000500)=[@dstopts={{0x88, 0x29, 0x37, {0x3b, 0xd, [], [@jumbo={0xc2, 0x4, 0x7}, @jumbo={0xc2, 0x4, 0x40}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0xfffd}, @calipso={0x7, 0x50, {0x0, 0x12, 0x9, 0xfffe, [0x1ff, 0x5, 0x9, 0x4, 0x401, 0x0, 0x33, 0x7, 0x8]}}, @jumbo={0xc2, 0x4, 0x1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x3b, 0x3, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x48, 0x1, [0x3]}}, @pad1, @jumbo={0xc2, 0x4, 0x5}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3f}}, @rthdrdstopts={{0x140, 0x29, 0x37, {0x3a, 0x24, [], [@hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}, @pad1, @generic={0xc0, 0xe8, "edc37b3b8e9c220c9b7dde520e1173b3438e0eb73408ef554eecd0a69b4dbc42acf266656aed6b79635cdb1815ae65953218e906516a596b67b7a04ab39578e4c55568fa20ed16a7be653d51e3358c539a5be72a0c63533cdd407aae969adf401bd04e5adfa173d48502cd812de01b7c41c0420d3344283142944d75825901aa7888cb4420a171bdf018c7c36dd21ca2d1f9b6b848fd13c08dad27a9ea2e5a6dc8aa7b403e524e1cfbcea07b9c12251c125e48fe4526dcc2df2de2ef25286a4188eb555f3c637c2a1fac34e2039a087da1b1c3aecc850e9f6325e5cd04e35337bcba303aaac3f5af"}, @calipso={0x7, 0x20, {0x0, 0x6, 0xa6, 0x3, [0x1, 0x8, 0x1f]}}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x1, 0x4b, 0x0, [@ipv4={[], [], @loopback}, @private1]}}}, @dstopts={{0x20, 0x29, 0x37, {0x84, 0x0, [], [@enc_lim, @ra={0x5, 0x2, 0xc1}]}}}], 0x288}}], 0x1, 0x4040) close(r0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000240)={'veth1_vlan\x00', @random="01003a1e0310"}) 18:52:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000009060101160000000000000000000000050001000600000009000b0073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:52:07 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 18:52:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020273797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2197.524542][ T27] audit: type=1804 audit(1591210327.042:2445): pid=27885 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir911542418/syzkaller.OPMwZH/2905/cgroup.controllers" dev="sda1" ino=16353 res=1 18:52:07 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x10090) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x20) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:52:07 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 18:52:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020373797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:52:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000010000507000000dfff00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c000280080009007f000001"], 0x38}}, 0x0) 18:52:07 executing program 1: unshare(0xd90073cb5c9a3b34) socket$inet_tcp(0x2, 0x1, 0x0) 18:52:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020473797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2198.313709][T27920] netlink: 'syz-executor.0': attribute type 9 has an invalid length. 18:52:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x80003, 0x6b) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, &(0x7f0000000000)=0xfffffffffffffe4b) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="280400002500250800000000000000000a000048f20000304bd14116c0446371f0ac51402f6444b5aa66f71000"/60, @ANYRES32=r3, @ANYBLOB="00000000001b00000008000a000000000079b164273f21c746e8f193c80056ee1cc04914571ed5f32b31698d0921d623a2ad93d2a9c5d924b656a97ef88832d0691ca51c"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r12}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4c010) 18:52:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x2880008, r2, 0x0, 0x0, 0x200}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) [ 2198.421217][ T27] audit: type=1804 audit(1591210327.932:2446): pid=27923 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3301/cgroup.controllers" dev="sda1" ino=16383 res=1 18:52:08 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020573797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2198.610777][T27937] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:08 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2198.851053][T27947] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2199.101364][T11846] tipc: TX() has been purged, node left! [ 2199.144656][T11846] tipc: TX() has been purged, node left! [ 2199.176088][T11846] tipc: TX() has been purged, node left! [ 2199.194611][T11846] tipc: TX() has been purged, node left! [ 2199.214796][T11846] tipc: TX() has been purged, node left! [ 2199.347236][T11846] tipc: TX() has been purged, node left! 18:52:09 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:52:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020973797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:52:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000034c0)={'sit0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x4, 0x6f, "1293a5f959a2c667b3b4072e73906bcca26508bc7540c696ed7046aca0699e90df0143aed821bf80eb7300ab5d43ff1dfc2ddfcb15537e753920334e37f63891863251636e0b813ce89bff0788432a07b9b8020fb656b38235405c284ac1042717484541f6438914859adb60afab01"}}) 18:52:09 executing program 2 (fault-call:0 fault-nth:0): syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:09 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x10, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x40, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'vlan1\x00', 0x200}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r2, 0x890b, &(0x7f0000000100)={@null=' \x00', 0x3, 'ip6gretap0\x00'}) ioctl$FIOCLEX(r2, 0x5451) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000400)) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e24, @private=0xa010101}, 0x201, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)='ip6gretap0\x00', 0x1, 0x3}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x3a, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3f}, {0xa, 0x4e24, 0x0, @mcast1, 0x3ff}, 0x7, [0x9, 0x2, 0x1, 0x1, 0x4d0e, 0x800, 0x8, 0x8ab4]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, [], 0x33}, 0x2}, {0xa, 0x4e23, 0x0, @mcast1, 0x3}, 0x7, [0x2, 0x0, 0x1, 0x1, 0x7ff, 0x7fff, 0x8, 0x1]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0xce21, 0xfffffffc, @mcast1, 0x916d}, {0xa, 0x4e23, 0x8651, @empty, 0x7}, 0x0, [0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0xfffffffc]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc9, 0x0, 0x0) 18:52:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) [ 2199.542469][T27957] IPVS: ftp: loaded support on port[0] = 21 [ 2199.556748][T27965] FAULT_INJECTION: forcing a failure. [ 2199.556748][T27965] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:52:09 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0xffffffff, 0xfedc) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e21, @remote}, 0x10) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) recvfrom(r1, &(0x7f0000000200)=""/235, 0xeb, 0x2110, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x22008ff9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) [ 2199.588900][ T27] audit: type=1804 audit(1591210329.102:2447): pid=27962 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3302/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 2199.590462][T27965] CPU: 0 PID: 27965 Comm: syz-executor.2 Not tainted 5.7.0-rc7-syzkaller #0 [ 2199.621962][T27965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2199.632021][T27965] Call Trace: [ 2199.635321][T27965] dump_stack+0x188/0x20d [ 2199.639652][T27965] should_fail.cold+0x5/0xa [ 2199.644168][T27965] ? fault_create_debugfs_attr+0x140/0x140 [ 2199.646678][T27957] virt_wifi0 speed is unknown, defaulting to 1000 [ 2199.649971][T27965] ? mark_held_locks+0xe0/0xe0 [ 2199.649989][T27965] ? mark_held_locks+0xe0/0xe0 [ 2199.650009][T27965] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 2199.650029][T27965] __alloc_pages_nodemask+0x17a/0x810 [ 2199.650048][T27965] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2199.684604][T27965] ? tun_build_skb.isra.0+0x1dc/0x13e0 [ 2199.690125][T27965] alloc_pages_current+0xff/0x200 [ 2199.695164][T27965] skb_page_frag_refill+0x25d/0x560 [ 2199.700368][T27965] tun_build_skb.isra.0+0x252/0x13e0 [ 2199.705667][T27965] ? tun_xdp_act.isra.0+0x860/0x860 [ 2199.710869][T27965] ? __lock_acquire+0xcbb/0x4c50 [ 2199.715824][T27965] tun_get_user+0x83a/0x4000 [ 2199.720433][T27965] ? tun_build_skb.isra.0+0x13e0/0x13e0 [ 2199.725977][T27965] ? tun_get+0x16d/0x290 [ 2199.730223][T27965] ? lock_downgrade+0x840/0x840 [ 2199.735076][T27965] ? rcu_read_lock_held_common+0x130/0x130 [ 2199.740905][T27965] tun_chr_write_iter+0xba/0x151 [ 2199.745854][T27965] new_sync_write+0x4a2/0x700 [ 2199.750534][T27965] ? new_sync_read+0x7a0/0x7a0 [ 2199.755298][T27965] ? rcu_read_lock_held_common+0x130/0x130 [ 2199.761108][T27965] ? apparmor_path_rmdir+0x30/0x30 [ 2199.766233][T27965] ? security_file_permission+0x8c/0x470 [ 2199.771867][T27965] __vfs_write+0xc9/0x100 [ 2199.776200][T27965] vfs_write+0x268/0x5d0 [ 2199.780447][T27965] ksys_write+0x12d/0x250 [ 2199.784775][T27965] ? __ia32_sys_read+0xb0/0xb0 [ 2199.789534][T27965] ? __ia32_sys_clock_settime+0x260/0x260 [ 2199.795248][T27965] ? trace_hardirqs_off_caller+0x55/0x230 [ 2199.800972][T27965] do_syscall_64+0xf6/0x7d0 [ 2199.805479][T27965] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 2199.811360][T27965] RIP: 0033:0x4165a1 [ 2199.815249][T27965] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 c4 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2199.834848][T27965] RSP: 002b:00007fe153ef2c60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 18:52:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020a73797a3000b30000100007800c000180"], 0x38}}, 0x0) [ 2199.843254][T27965] RAX: ffffffffffffffda RBX: 0000000000507e00 RCX: 00000000004165a1 [ 2199.851220][T27965] RDX: 000000000000006a RSI: 00000000200000c0 RDI: 00000000000000f0 [ 2199.859182][T27965] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2199.867146][T27965] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000003 [ 2199.875114][T27965] R13: 0000000000000bbe R14: 00000000004ce0ab R15: 00007fe153ef36d4 [ 2199.877957][T27957] virt_wifi0 speed is unknown, defaulting to 1000 18:52:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020e73797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:52:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020f73797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:52:09 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000680)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x10001}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)=[@dstopts={{0x30, 0x29, 0x37, {0x11, 0x2, [], [@jumbo={0xc2, 0x4, 0x7f}, @pad1, @ra={0x5, 0x2, 0x101}, @enc_lim={0x4, 0x1, 0x40}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x4}]}}}, @hopopts={{0x30, 0x29, 0x36, {0xff, 0x2, [], [@jumbo={0xc2, 0x4, 0x13ce}, @jumbo={0xc2, 0x4, 0x400}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x21, 0x14, 0x2, 0x80, 0x0, [@rand_addr=' \x01\x00', @mcast2, @rand_addr=' \x01\x00', @loopback, @mcast1, @private0={0xfc, 0x0, [], 0x1}, @private1, @private2={0xfc, 0x2, [], 0x1}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @local]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r3}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x2f, 0x9, [], [@hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x2, [0xa5, 0x2, 0xffffffffffffff4d, 0x6, 0xfffffffffffffa5e]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffff7}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x1d, 0x0, [], [@enc_lim={0x4, 0x1, 0xfa}]}}}], 0x1e0}}], 0x3, 0x0) [ 2200.140209][T27965] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:09 executing program 2 (fault-call:0 fault-nth:1): syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2200.296733][T27987] FAULT_INJECTION: forcing a failure. [ 2200.296733][T27987] name failslab, interval 1, probability 0, space 0, times 0 [ 2200.310671][T27987] CPU: 1 PID: 27987 Comm: syz-executor.2 Not tainted 5.7.0-rc7-syzkaller #0 [ 2200.319343][T27987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2200.329390][T27987] Call Trace: [ 2200.332686][T27987] dump_stack+0x188/0x20d [ 2200.337023][T27987] should_fail.cold+0x5/0xa [ 2200.341533][T27987] ? fault_create_debugfs_attr+0x140/0x140 [ 2200.347341][T27987] ? lock_downgrade+0x840/0x840 [ 2200.352198][T27987] should_failslab+0x5/0xf [ 2200.356625][T27987] kmem_cache_alloc+0x44/0x740 [ 2200.361384][T27987] ? copyin+0x10e/0x140 [ 2200.365542][T27987] __build_skb+0x21/0x60 [ 2200.369785][T27987] build_skb+0x1c/0x180 [ 2200.373957][T27987] tun_build_skb.isra.0+0xb82/0x13e0 [ 2200.379262][T27987] ? tun_xdp_act.isra.0+0x860/0x860 [ 2200.384455][T27987] ? __lock_acquire+0xcbb/0x4c50 [ 2200.389406][T27987] tun_get_user+0x83a/0x4000 [ 2200.394010][T27987] ? tun_build_skb.isra.0+0x13e0/0x13e0 [ 2200.399552][T27987] ? tun_get+0x16d/0x290 [ 2200.403800][T27987] ? lock_downgrade+0x840/0x840 [ 2200.408655][T27987] ? rcu_read_lock_held_common+0x130/0x130 [ 2200.414466][T27987] tun_chr_write_iter+0xba/0x151 [ 2200.419403][T27987] new_sync_write+0x4a2/0x700 [ 2200.424081][T27987] ? new_sync_read+0x7a0/0x7a0 [ 2200.428848][T27987] ? rcu_read_lock_held_common+0x130/0x130 [ 2200.434656][T27987] ? apparmor_path_rmdir+0x30/0x30 [ 2200.439784][T27987] ? security_file_permission+0x8c/0x470 [ 2200.445418][T27987] __vfs_write+0xc9/0x100 [ 2200.449746][T27987] vfs_write+0x268/0x5d0 [ 2200.453990][T27987] ksys_write+0x12d/0x250 [ 2200.458317][T27987] ? __ia32_sys_read+0xb0/0xb0 [ 2200.463076][T27987] ? __ia32_sys_clock_settime+0x260/0x260 [ 2200.468795][T27987] ? trace_hardirqs_off_caller+0x55/0x230 [ 2200.474521][T27987] do_syscall_64+0xf6/0x7d0 [ 2200.479027][T27987] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 2200.484908][T27987] RIP: 0033:0x4165a1 [ 2200.488796][T27987] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 c4 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2200.508401][T27987] RSP: 002b:00007fe153ef2c60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2200.516981][T27987] RAX: ffffffffffffffda RBX: 0000000000507e00 RCX: 00000000004165a1 [ 2200.524947][T27987] RDX: 000000000000006a RSI: 00000000200000c0 RDI: 00000000000000f0 [ 2200.533013][T27987] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2200.540970][T27987] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000003 [ 2200.548927][T27987] R13: 0000000000000bbe R14: 00000000004ce0ab R15: 00007fe153ef36d4 [ 2200.659746][T27986] __nla_validate_parse: 8 callbacks suppressed [ 2200.659755][T27986] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2200.665153][T27963] IPVS: ftp: loaded support on port[0] = 21 [ 2200.682169][T27957] virt_wifi0 speed is unknown, defaulting to 1000 [ 2200.732757][T27963] virt_wifi0 speed is unknown, defaulting to 1000 18:52:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900026073797a3000b30000100007800c000180"], 0x38}}, 0x0) 18:52:10 executing program 2 (fault-call:0 fault-nth:2): syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:10 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = socket$kcm(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/1809], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, 0x13, 0x0, 0x70bd26, 0x25dfdbfc, {0x6, 0x7, 0x1, 0x0, {0x4e22, 0x4e22, [0xfffffffa, 0x4, 0x5ae, 0x9c], [0x6, 0x9, 0xfffffffa, 0x1], 0x0, [0xffff8001, 0x5]}, 0x5, 0x1ff}}, 0x4c}, 0x1, 0x0, 0x0, 0x4002010}, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={r4, 0x83c}, &(0x7f0000000500)=0x8) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) socket$kcm(0x11, 0x3, 0x300) r5 = socket$kcm(0x11, 0x3, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_ttl={{0x14}}, @ip_retopts={{0xff0d, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}], 0x70}, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) sendmsg$kcm(r6, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0xc) write$cgroup_subtree(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="4dc08b69dfac5c168aaaa890078d86632064b8cd1a72f2c1671017703abcb5d61c122d20387bf69fa76e363db45c7bc83c694992e12bbc33c01c762b1699bde4adc487b3f3a71bd03f019b28e51db4ebe6184dcabdc914a35b095be87c811ecdcf6e68697e4f80d3d0cfcc08eb2f2f505f25e36a3ea8412bd3ba1f2d797122c4e48e10aee97b48d67c810a"], 0xfa38) [ 2201.019826][T27963] virt_wifi0 speed is unknown, defaulting to 1000 [ 2201.115098][T28003] FAULT_INJECTION: forcing a failure. [ 2201.115098][T28003] name failslab, interval 1, probability 0, space 0, times 0 [ 2201.127810][T28003] CPU: 1 PID: 28003 Comm: syz-executor.2 Not tainted 5.7.0-rc7-syzkaller #0 [ 2201.136485][T28003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2201.146556][T28003] Call Trace: [ 2201.149864][T28003] dump_stack+0x188/0x20d [ 2201.154204][T28003] should_fail.cold+0x5/0xa [ 2201.158715][T28003] ? fault_create_debugfs_attr+0x140/0x140 [ 2201.164624][T28003] ? ebt_do_table+0x192f/0x1d70 [ 2201.169491][T28003] should_failslab+0x5/0xf [ 2201.173905][T28003] kmem_cache_alloc+0x44/0x740 [ 2201.178671][T28003] ? br_nf_pre_routing+0x734/0x2188 [ 2201.183882][T28003] __skb_ext_alloc+0x19/0x80 [ 2201.188473][T28003] skb_ext_add+0x3aa/0x650 [ 2201.192904][T28003] br_nf_pre_routing+0x8ee/0x2188 [ 2201.197937][T28003] ? br_nf_pre_routing_finish+0x16c0/0x16c0 [ 2201.203840][T28003] ? rcu_read_lock_held+0x9c/0xb0 [ 2201.208868][T28003] ? rcu_read_lock_held_common+0x130/0x130 [ 2201.214673][T28003] ? __kernel_text_address+0x9/0x30 [ 2201.219954][T28003] br_handle_frame+0x816/0x12b0 [ 2201.224826][T28003] ? br_handle_frame_finish+0x1510/0x1510 [ 2201.230551][T28003] ? br_handle_local_finish+0x20/0x20 [ 2201.235923][T28003] ? rcu_read_lock_held+0x9c/0xb0 [ 2201.240947][T28003] ? rcu_read_lock_held_common+0x130/0x130 [ 2201.246761][T28003] ? br_handle_frame_finish+0x1510/0x1510 [ 2201.252481][T28003] __netif_receive_skb_core+0x101a/0x31c0 [ 2201.258210][T28003] ? do_xdp_generic+0x40/0x40 [ 2201.262887][T28003] ? mark_held_locks+0xe0/0xe0 [ 2201.267662][T28003] ? find_held_lock+0x2d/0x110 [ 2201.272447][T28003] ? __netif_receive_skb_one_core+0xae/0x180 [ 2201.278427][T28003] __netif_receive_skb_one_core+0xae/0x180 [ 2201.284235][T28003] ? __netif_receive_skb_core+0x31c0/0x31c0 [ 2201.290134][T28003] ? ktime_get_with_offset+0x12c/0x360 [ 2201.295683][T28003] ? lockdep_hardirqs_on+0x196/0x620 [ 2201.300987][T28003] ? ktime_get_with_offset+0x247/0x360 [ 2201.306445][T28003] __netif_receive_skb+0x27/0x1c0 [ 2201.311470][T28003] netif_receive_skb+0x16e/0x960 [ 2201.316408][T28003] ? __netif_receive_skb+0x1c0/0x1c0 [ 2201.321703][T28003] ? __build_skb_around+0x21f/0x2d0 [ 2201.326903][T28003] ? __phys_addr+0x9a/0x110 [ 2201.331412][T28003] tun_rx_batched.isra.0+0x47b/0x7d0 [ 2201.336700][T28003] ? tun_get_user+0x129e/0x4000 [ 2201.341617][T28003] ? tun_cleanup+0x30/0x30 [ 2201.346035][T28003] ? lock_release+0x800/0x800 [ 2201.350714][T28003] ? lock_downgrade+0x840/0x840 [ 2201.355580][T28003] ? __local_bh_enable_ip+0x159/0x270 [ 2201.360955][T28003] tun_get_user+0x1438/0x4000 [ 2201.365667][T28003] ? tun_build_skb.isra.0+0x13e0/0x13e0 [ 2201.371213][T28003] ? tun_get+0x16d/0x290 [ 2201.375473][T28003] ? rcu_read_lock_held_common+0x130/0x130 [ 2201.381292][T28003] tun_chr_write_iter+0xba/0x151 [ 2201.386232][T28003] new_sync_write+0x4a2/0x700 [ 2201.390932][T28003] ? new_sync_read+0x7a0/0x7a0 [ 2201.395703][T28003] ? rcu_read_lock_held_common+0x130/0x130 [ 2201.401515][T28003] ? apparmor_path_rmdir+0x30/0x30 [ 2201.406638][T28003] ? security_file_permission+0x8c/0x470 [ 2201.412272][T28003] __vfs_write+0xc9/0x100 [ 2201.416606][T28003] vfs_write+0x268/0x5d0 [ 2201.420854][T28003] ksys_write+0x12d/0x250 [ 2201.425181][T28003] ? __ia32_sys_read+0xb0/0xb0 [ 2201.429960][T28003] ? __ia32_sys_clock_settime+0x260/0x260 [ 2201.435680][T28003] ? trace_hardirqs_off_caller+0x55/0x230 [ 2201.441409][T28003] do_syscall_64+0xf6/0x7d0 [ 2201.445914][T28003] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 2201.451798][T28003] RIP: 0033:0x4165a1 [ 2201.455689][T28003] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 c4 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2201.475284][T28003] RSP: 002b:00007fe153ef2c60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2201.483691][T28003] RAX: ffffffffffffffda RBX: 0000000000507e00 RCX: 00000000004165a1 [ 2201.491655][T28003] RDX: 000000000000006a RSI: 00000000200000c0 RDI: 00000000000000f0 [ 2201.499618][T28003] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2201.507692][T28003] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000003 [ 2201.508264][T27963] virt_wifi0 speed is unknown, defaulting to 1000 [ 2201.515650][T28003] R13: 0000000000000bbe R14: 00000000004ce0ab R15: 00007fe153ef36d4 18:52:11 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x10, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x40, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'vlan1\x00', 0x200}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r2, 0x890b, &(0x7f0000000100)={@null=' \x00', 0x3, 'ip6gretap0\x00'}) ioctl$FIOCLEX(r2, 0x5451) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000400)) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e24, @private=0xa010101}, 0x201, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)='ip6gretap0\x00', 0x1, 0x3}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x3a, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3f}, {0xa, 0x4e24, 0x0, @mcast1, 0x3ff}, 0x7, [0x9, 0x2, 0x1, 0x1, 0x4d0e, 0x800, 0x8, 0x8ab4]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, [], 0x33}, 0x2}, {0xa, 0x4e23, 0x0, @mcast1, 0x3}, 0x7, [0x2, 0x0, 0x1, 0x1, 0x7ff, 0x7fff, 0x8, 0x1]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0xce21, 0xfffffffc, @mcast1, 0x916d}, {0xa, 0x4e23, 0x8651, @empty, 0x7}, 0x0, [0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0xfffffffc]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc9, 0x0, 0x0) 18:52:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3002b30000100007800c000180"], 0x38}}, 0x0) 18:52:11 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = getpid() syz_open_procfs$namespace(r5, 0xfffffffffffffffd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x140, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x34, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_MASTER={0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_MASTER={0x8}, @IFLA_VFINFO_LIST={0xb0, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xf754, 0x429910af}}]}, {0x9c, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xffffaf55, 0x39e3e285}}, @IFLA_VF_RATE={0x10}, @IFLA_VF_RSS_QUERY_EN={0xc}, @IFLA_VF_MAC={0x28, 0x1, {0x0, @broadcast}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x401, 0x1ff}}, @IFLA_VF_MAC={0x28, 0x1, {0x1, @broadcast}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0xb75}}]}]}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x81}, @IFLA_BROADCAST={0xa}]}, 0x140}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000140)=0xe8) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000280)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r6}) r7 = gettid() r8 = getuid() r9 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x100000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000180)={0x10, 0x1e, 0x100, 0x70bd2d, 0x25dfdbfc}, 0x10}], 0x1, &(0x7f00000002c0)=[@rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r9}}}], 0x68, 0x8000001}, 0x4080) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:52:11 executing program 2 (fault-call:0 fault-nth:3): syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2201.836267][T28050] IPVS: ftp: loaded support on port[0] = 21 [ 2201.880093][T28050] virt_wifi0 speed is unknown, defaulting to 1000 [ 2201.899419][T28054] FAULT_INJECTION: forcing a failure. [ 2201.899419][T28054] name failslab, interval 1, probability 0, space 0, times 0 [ 2201.912146][T28054] CPU: 0 PID: 28054 Comm: syz-executor.2 Not tainted 5.7.0-rc7-syzkaller #0 [ 2201.920900][T28054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2201.930953][T28054] Call Trace: [ 2201.934252][T28054] dump_stack+0x188/0x20d [ 2201.938594][T28054] should_fail.cold+0x5/0xa [ 2201.943105][T28054] ? fault_create_debugfs_attr+0x140/0x140 [ 2201.948993][T28054] ? __nf_conntrack_find_get+0x9f4/0x12d0 [ 2201.954735][T28054] should_failslab+0x5/0xf [ 2201.959156][T28054] kmem_cache_alloc+0x44/0x740 [ 2201.963927][T28054] ? print_usage_bug+0x240/0x240 [ 2201.968883][T28054] __nf_conntrack_alloc+0xd6/0x6b0 [ 2201.974002][T28054] init_conntrack.isra.0+0xd7e/0x1080 [ 2201.979397][T28054] ? nf_conntrack_alloc+0x40/0x40 [ 2201.984426][T28054] ? hash_conntrack_raw+0x2d9/0x460 [ 2201.989698][T28054] ? ipt_do_table+0xd23/0x1880 [ 2201.994478][T28054] nf_conntrack_in+0x9ae/0x12b0 [ 2201.999353][T28054] ? nf_conntrack_update+0x1250/0x1250 [ 2202.004811][T28054] ? lock_acquire+0x1f2/0x8f0 [ 2202.009492][T28054] ? __do_replace+0x881/0x8b0 [ 2202.014186][T28054] ? ipv4_conntrack_defrag+0x192/0x5c0 [ 2202.019666][T28054] nf_hook_slow+0xba/0x1e0 [ 2202.024092][T28054] br_nf_pre_routing+0x1c03/0x2188 [ 2202.029213][T28054] ? br_nf_pre_routing_finish+0x16c0/0x16c0 [ 2202.035148][T28054] ? br_nf_forward_arp+0x16f0/0x16f0 [ 2202.040451][T28054] ? rcu_read_lock_held+0x9c/0xb0 [ 2202.045511][T28054] ? rcu_read_lock_held_common+0x130/0x130 [ 2202.051319][T28054] ? __kernel_text_address+0x9/0x30 [ 2202.056533][T28054] br_handle_frame+0x816/0x12b0 [ 2202.061400][T28054] ? br_handle_frame_finish+0x1510/0x1510 [ 2202.067250][T28054] ? br_handle_local_finish+0x20/0x20 [ 2202.072626][T28054] ? rcu_read_lock_held_common+0x130/0x130 [ 2202.078442][T28054] ? br_handle_frame_finish+0x1510/0x1510 [ 2202.084221][T28054] ? run_filter+0x4c0/0x4c0 [ 2202.088728][T28054] __netif_receive_skb_core+0x101a/0x31c0 [ 2202.094462][T28054] ? do_xdp_generic+0x40/0x40 [ 2202.099147][T28054] ? mark_held_locks+0xe0/0xe0 [ 2202.103918][T28054] ? find_held_lock+0x2d/0x110 [ 2202.108696][T28054] ? __netif_receive_skb_one_core+0xae/0x180 [ 2202.114781][T28054] __netif_receive_skb_one_core+0xae/0x180 [ 2202.120595][T28054] ? __netif_receive_skb_core+0x31c0/0x31c0 [ 2202.126509][T28054] ? ktime_get_with_offset+0x12c/0x360 [ 2202.131976][T28054] ? lockdep_hardirqs_on+0x196/0x620 [ 2202.137271][T28054] ? ktime_get_with_offset+0x247/0x360 [ 2202.142743][T28054] __netif_receive_skb+0x27/0x1c0 [ 2202.147772][T28054] netif_receive_skb+0x16e/0x960 [ 2202.152719][T28054] ? __netif_receive_skb+0x1c0/0x1c0 [ 2202.158004][T28054] ? __build_skb_around+0x21f/0x2d0 [ 2202.163314][T28054] ? __phys_addr+0x9a/0x110 [ 2202.167833][T28054] tun_rx_batched.isra.0+0x47b/0x7d0 [ 2202.173118][T28054] ? tun_get_user+0x129e/0x4000 [ 2202.178061][T28054] ? tun_cleanup+0x30/0x30 [ 2202.182487][T28054] ? lock_release+0x800/0x800 [ 2202.187169][T28054] ? lock_downgrade+0x840/0x840 [ 2202.192031][T28054] ? __local_bh_enable_ip+0x159/0x270 [ 2202.197414][T28054] tun_get_user+0x1438/0x4000 [ 2202.202117][T28054] ? tun_build_skb.isra.0+0x13e0/0x13e0 [ 2202.207659][T28054] ? tun_get+0x16d/0x290 [ 2202.211921][T28054] ? rcu_read_lock_held_common+0x130/0x130 [ 2202.217740][T28054] tun_chr_write_iter+0xba/0x151 [ 2202.222683][T28054] new_sync_write+0x4a2/0x700 [ 2202.227362][T28054] ? new_sync_read+0x7a0/0x7a0 [ 2202.232138][T28054] ? rcu_read_lock_held_common+0x130/0x130 [ 2202.238038][T28054] ? apparmor_path_rmdir+0x30/0x30 [ 2202.243167][T28054] ? security_file_permission+0x8c/0x470 [ 2202.248805][T28054] __vfs_write+0xc9/0x100 [ 2202.253150][T28054] vfs_write+0x268/0x5d0 [ 2202.257405][T28054] ksys_write+0x12d/0x250 [ 2202.261735][T28054] ? __ia32_sys_read+0xb0/0xb0 [ 2202.266497][T28054] ? __ia32_sys_clock_settime+0x260/0x260 [ 2202.272211][T28054] ? trace_hardirqs_off_caller+0x55/0x230 [ 2202.277939][T28054] do_syscall_64+0xf6/0x7d0 [ 2202.282443][T28054] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 2202.288329][T28054] RIP: 0033:0x4165a1 [ 2202.292218][T28054] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 c4 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2202.311933][T28054] RSP: 002b:00007fe153ef2c60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2202.320340][T28054] RAX: ffffffffffffffda RBX: 0000000000507e00 RCX: 00000000004165a1 18:52:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3003b30000100007800c000180"], 0x38}}, 0x0) 18:52:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3004b30000100007800c000180"], 0x38}}, 0x0) 18:52:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3005b30000100007800c000180"], 0x38}}, 0x0) 18:52:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3009b30000100007800c000180"], 0x38}}, 0x0) 18:52:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a300ab30000100007800c000180"], 0x38}}, 0x0) [ 2202.328305][T28054] RDX: 000000000000006a RSI: 00000000200000c0 RDI: 00000000000000f0 [ 2202.336268][T28054] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2202.344231][T28054] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000003 [ 2202.352194][T28054] R13: 0000000000000bbe R14: 00000000004ce0ab R15: 00007fe153ef36d4 18:52:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a300eb30000100007800c000180"], 0x38}}, 0x0) [ 2202.452648][T28050] virt_wifi0 speed is unknown, defaulting to 1000 [ 2202.558776][ T27] audit: type=1804 audit(1591210332.073:2448): pid=28075 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3304/cgroup.controllers" dev="sda1" ino=16383 res=1 18:52:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffff82, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="cc0000002400078f96050000000000000092a137", @ANYRES32=r1, @ANYRESHEX], 0xcc}, 0x1, 0x0, 0x0, 0xc0}, 0x40040) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) [ 2203.026256][T28050] virt_wifi0 speed is unknown, defaulting to 1000 [ 2203.026283][T28082] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2203.053369][T28082] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2203.075703][T28086] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2203.086239][T28086] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. 18:52:12 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a300fb30000100007800c000180"], 0x38}}, 0x0) 18:52:12 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$nbd(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xed) 18:52:12 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'hsr0\x00', {0x7, 0x0, @broadcast}}) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@void, @void, @eth={@broadcast, @link_local, @val, {@llc={0x4, {@snap={0x1, 0xaa, "0788", "689492", 0x4aef, "4fe9b1e785ed811bc7f875a2d8894aee7370acc1520a74079d71b07a87b4e4cc65918dc0893a7f6797cf99224f40c39375e76459eca3401ac173"}}}}}}, 0x59) splice(r0, 0x0, r1, 0x0, 0x10004, 0x0) 18:52:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:12 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x700, &(0x7f0000000240)={&(0x7f0000001400)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="7d000000000000001800128008000100736974000c00028008000100", @ANYRES32=r3, @ANYBLOB="940bdf76ab62af9d99b9ad11b2b1f401aefcfe"], 0x38}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x65c15bf2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x1c, 0x9, &(0x7f0000000300)=@raw=[@alu={0x7, 0x1, 0x3, 0x8, 0x6, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0x30}, @call={0x85, 0x0, 0x0, 0x1f}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x52}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0x8, 0x0, 0x0, 0x30, 0x1}], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000380)=""/4096, 0x41100, 0xc, [], r3, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x7, 0x2000000, 0x3}, 0x10, r4, r5}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)=""/73, 0x49, r4}}, 0x10) 18:52:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3060b30000100007800c000180"], 0x38}}, 0x0) [ 2203.359447][T28112] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2203.422381][T28115] IPVS: ftp: loaded support on port[0] = 21 [ 2203.514144][T28115] virt_wifi0 speed is unknown, defaulting to 1000 18:52:13 executing program 2: syz_emit_ethernet(0xd, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30200100007800c000180"], 0x38}}, 0x0) [ 2203.551538][ T27] audit: type=1804 audit(1591210333.073:2449): pid=28120 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3305/cgroup.controllers" dev="sda1" ino=16065 res=1 [ 2203.602803][T28120] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 18:52:13 executing program 2: syz_emit_ethernet(0xaa, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30300100007800c000180"], 0x38}}, 0x0) [ 2203.937052][T28138] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2203.948768][ T27] audit: type=1804 audit(1591210333.453:2450): pid=28131 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2097/cgroup.controllers" dev="sda1" ino=16004 res=1 18:52:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30400100007800c000180"], 0x38}}, 0x0) [ 2204.021856][T28138] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2204.129600][T28119] IPVS: ftp: loaded support on port[0] = 21 18:52:13 executing program 2: syz_emit_ethernet(0x3d0, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2204.328539][T28154] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2204.372214][T28154] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2204.415887][T28115] virt_wifi0 speed is unknown, defaulting to 1000 [ 2204.837520][T28115] virt_wifi0 speed is unknown, defaulting to 1000 18:52:15 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30500100007800c000180"], 0x38}}, 0x0) 18:52:15 executing program 2: syz_emit_ethernet(0xfdef, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x3d, 0x0, "a3cc25cd8b71fce55c57f9175e48ffc428397f4a9dbd18410dfb81c120bfd02561190478d6fbfdc53ddf937aaf10b37198d6b03d74d942046c39507f84990c0678099971f64ac90a954914b81f9c1ecb"}, 0xd8) syz_emit_ethernet(0x8a, &(0x7f0000000600)={@local, @random="f8968583fe2f", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x54, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "cf317901c738b823619bc18f06ead94b"}, @exp_fastopen={0xfe, 0x8, 0xf989, "529f8e53"}, @fastopen={0x22, 0xd, "075bbfb64054e076de437b"}, @mptcp=@ack={0x1e, 0xc, 0x0, 0x4, "a6acbba1a9cc2abd"}, @sack={0x5, 0xa, [0x0, 0x0]}]}}}}}}}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) getsockname$netrom(r1, &(0x7f0000000080)={{0x3, @rose}, [@null, @rose, @bcast, @netrom, @netrom, @rose, @netrom, @netrom]}, &(0x7f0000000000)=0x48) 18:52:15 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) splice(r5, &(0x7f0000000000)=0x7fffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x2, 0x8001, 0x8) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a20ba1ffffffffffff0180c2000000910000008100000008004500001400000000006c90780000000000"], 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) [ 2206.018841][T28187] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30900100007800c000180"], 0x38}}, 0x0) 18:52:15 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r0}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002500250800000000000000e920000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\x00\x00\x00\x00'], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r12}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002a80)={&(0x7f0000002680)={0x3f8, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r12}}}]}}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 18:52:15 executing program 2: syz_emit_ethernet(0x2000012a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2206.076497][T28187] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2206.089159][ T27] audit: type=1804 audit(1591210335.603:2451): pid=28192 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3306/cgroup.controllers" dev="sda1" ino=16289 res=1 [ 2206.143998][T28185] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 18:52:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30a00100007800c000180"], 0x38}}, 0x0) [ 2206.260658][T28200] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2206.294399][T28200] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:52:15 executing program 2: syz_emit_ethernet(0xfffffdef, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30e00100007800c000180"], 0x38}}, 0x0) [ 2206.326224][T28200] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2206.361518][T28200] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:52:16 executing program 2: syz_emit_ethernet(0xfffffffffffffdef, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2206.686763][T28205] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2206.714173][T28205] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2206.757652][T28205] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:52:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30f00100007800c000180"], 0x38}}, 0x0) 18:52:16 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote={[0x6a]}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x1}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bridge\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="1a0000009f0e0000f9ffffff080000000000010000000000"]}) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "400600", 0x14, 0x6, 0x0, @dev, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) [ 2206.895088][T28213] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2206.944705][T28213] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2207.045872][ T27] audit: type=1804 audit(1591210336.563:2452): pid=28218 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3307/cgroup.controllers" dev="sda1" ino=16338 res=1 [ 2207.077707][T28218] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 18:52:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b36000100007800c000180"], 0x38}}, 0x0) 18:52:17 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r0}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002500250800000000000000e920000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\x00\x00\x00\x00'], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r12}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002a80)={&(0x7f0000002680)={0x3f8, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r12}}}]}}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 18:52:17 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote={[0xc0]}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x1}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bridge\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="1a0000009f0e0000f9ffffff080000000000010000000000"]}) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "400600", 0x14, 0x6, 0x0, @dev, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 18:52:17 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "dd52262006b19858bb3445ee23"}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004861}, 0x100) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x6b5f12070aaf0922, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r5, 0x0, 0x10004, 0x0) [ 2207.602098][T28235] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b3f000100007800c000180"], 0x38}}, 0x0) 18:52:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) getpeername(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f00000000c0)=0x80) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r3, 0xfffffffb}, 0x8) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = socket(0x80000000000000a, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x48}}, 0x0) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x0, 0x0, 0x0, 0x120, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ipv6={@dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'tunl0\x00', 'nr0\x00'}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30, 'cluster\x00'}, {0x0, 0x8}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@local, @ipv4, [], [], 'veth1_to_bridge\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 18:52:17 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote={[0xaa, 0x6a]}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2207.680485][T28240] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:52:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30003100007800c000180"], 0x38}}, 0x0) [ 2207.820130][T28249] xt_cluster: node mask cannot exceed total number of nodes 18:52:17 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote={[0xaa, 0xc0]}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:17 executing program 1: socket(0x10, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0xfffffffb, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket(0x23, 0x3, 0x81) sendfile(r3, r2, 0x0, 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x100000001) 18:52:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30005100007800c000180"], 0x38}}, 0x0) [ 2208.028444][ T27] audit: type=1804 audit(1591210337.543:2453): pid=28255 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3308/cgroup.controllers" dev="sda1" ino=16384 res=1 18:52:17 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x42, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000002400070500000040dddc00b4dca707a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000006400200d0000000000000000000000001406631fb0db3232c8e47abfc09b2f48e935358e3080b1a263af73a6b4c0f70593e3e5b32e0e83122055748ed21bd90e36999732", @ANYRES32=r5, @ANYBLOB="0000000000000000000000000b000100666c6f776572000004000200"], 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff2}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @loopback}]}}]}, 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000002060100000073683a6d6163000000001d000000000000000900020073797a30000000000500050002000000050001000700a37dffb895daadc2ea30a88f230fa825127368a267252bf5eacb8a8784ab325d7775bd38074fadd8b0a0168f3e7c9d9f3e0b499bede49450eb433ba36cfa612a12298ad71a401ce6d6def346f118f13e16fd299ded68cf2b521be1f51300b32b5a6da0f52aa6cf7fba"], 0x48}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000a00)={r6}) sendmsg$nl_route(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@mpls_delroute={0x28, 0x19, 0x100, 0x70bd25, 0x25dfdbfb, {0x1c, 0x20, 0x0, 0x20, 0x0, 0x1, 0x0, 0x9, 0x1000}, [@RTA_MULTIPATH={0xc, 0x9, {0x3f, 0x5, 0x7a, r5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000010) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000300), &(0x7f00000003c0)=0x4) 18:52:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30009100007800c000180"], 0x38}}, 0x0) 18:52:17 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote={[0xaa, 0xaa, 0x6a]}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2208.222419][ T27] audit: type=1804 audit(1591210337.743:2454): pid=28266 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2102/cgroup.controllers" dev="sda1" ino=16258 res=1 [ 2208.354314][ T27] audit: type=1804 audit(1591210337.873:2455): pid=28266 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2102/cgroup.controllers" dev="sda1" ino=16258 res=1 [ 2208.438883][ T27] audit: type=1804 audit(1591210337.953:2456): pid=28280 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2102/cgroup.controllers" dev="sda1" ino=16258 res=1 18:52:18 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @eth={@broadcast, @link_local, @val={@val={0x9100, 0x0, 0x0, 0x10}}, {@generic={0x18, "ba9a44597488019e9006c1dbfae9a378db550ddedb"}}}}, 0x2b) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:52:18 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote={[0xaa, 0xaa, 0xc0]}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b3000a100007800c000180"], 0x38}}, 0x0) [ 2208.563520][T28285] net_ratelimit: 7 callbacks suppressed [ 2208.563535][T28285] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2208.662421][T28285] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b3000e100007800c000180"], 0x38}}, 0x0) 18:52:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0xf9}, 0xc) r2 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000800000008000100753332002c0002001400050000000000000000000000000000000000140008006272690600000000000000655f310000"], 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=@deltclass={0x5c, 0x29, 0x30a, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0xffe0}, {0xfff3, 0xc}, {0xffe0, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x80, 0xfe}}, @TCA_RATE={0x6, 0x5, {0x9, 0x3f}}, @tclass_kind_options=@c_red={0x8, 0x1, 'red\x00'}, @tclass_kind_options=@c_drr={{0x8, 0x1, 'drr\x00'}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x8}}}, @tclass_kind_options=@c_prio={0x9, 0x1, 'prio\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000000) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route_sched(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=@gettaction={0x94, 0x32, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdc}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0xc000}, 0x20008000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, 0x90) 18:52:18 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote={[0xaa, 0xaa, 0xaa, 0x6a]}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) read(0xffffffffffffffff, &(0x7f0000000180)=""/89, 0x59) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)={0x94, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x9e}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbtty_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x8085) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x28, r3, 0x1, 0x0, 0x0, {0x6}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r7, 0x1}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x24, r7, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="000029bd7000ffdbdf25010000000000000002410000001000136574683a6261746164763000"], 0x2c}}, 0x1) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xff87, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_VERSION={0x5, 0x6, 0x2}]}}}]}, 0x48}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000140)=0xe8) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000280)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r10}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a80)={{{@in=@multicast1, @in6=@empty, 0x4e22, 0x81, 0x4e21, 0x0, 0xa, 0x20, 0x80, 0x88, 0x0, r10}, {0x8, 0x5, 0x9, 0x7fffffff, 0x7f, 0x400000, 0x3, 0x6}, {0x6, 0x5, 0x4, 0x6}, 0x9, 0x6e6bbf, 0x2, 0x1, 0x1, 0x2}, {{@in6=@mcast2, 0x4d4, 0xd4}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1, 0x2, 0x20, 0x2, 0x80000000, 0x1}}, 0xe8) [ 2208.916417][T28304] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b3000f100007800c000180"], 0x38}}, 0x0) 18:52:18 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote={[0xaa, 0xaa, 0xaa, 0xc0]}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2208.945871][ T27] audit: type=1804 audit(1591210338.464:2457): pid=28301 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3309/cgroup.controllers" dev="sda1" ino=16380 res=1 [ 2208.984272][T28304] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:18 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800f8ff", @ANYRES16=r1, @ANYBLOB="00002bbd7000fddbdf250a00000008028014000100ff0200000000000000000000000000010c00018008000900760000000800050000feffff7f24aa3b86cc40b94d7f4e548da3b635b1f999af009f503dab284c6faf396c68068d908c38466709400f9bc06468c110c87d91670180a2b6218c9abfdb2b8163093926ddb60476511311b6120b49683822ba09472271ef3826f13fa3ebc726a30538cf36975f12d6e38d344ff69ee096c710cb8fbefe72333077e741188819dbb6b222d4176f5a0e135db06171089dbf99e357f06db547991530133c"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0xd0, r1, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x16f}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4640}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40080c1}, 0x4800) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000040)={0x233, 0x7ff, 0x48000, 0xfffffff9, 0x9}) sendfile(r3, r2, 0x0, 0x100000001) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$sock(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000780)="1f11c391ebb0498200c347e9bd47244fd3a5c023544bcb8aa2529d374448452e2f7b27efda85e330dc9220b9081ef4e1f31c0e632cad4fc988caf71b479bc6c8e1c31a471c76fcd44961d295561c906c7f45fb3d2197e86aa42fa237e4880e1c43f22ef649b1e31f8eac87aef5fd0dc37827e4d4a4bf2e4a9a19420abf7950c83a", 0x81}, {0x0}], 0x3}, 0x0) splice(r5, 0x0, r4, 0x0, 0x7, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000240)=""/195, &(0x7f0000000100)=0xc3) 18:52:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b3581a100007800c000180"], 0x38}}, 0x0) [ 2209.106191][T28313] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2209.134926][T28313] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:19 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'dummy0\x00', {0x7, 0x0, @private=0xa010101}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000000c0)='proc\x00'}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfffffee2, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/153, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3e09) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="9c003405", @ANYRES16=0x0, @ANYBLOB="020025bd7000ffdbdf2506000000080001007063690011000200303030303a30303a31302e3000000000080003000000000006000400010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000600040000000000080001007063690011000200303030303a30303a31302e300000000008000300020000000600040002000000"], 0x9c}, 0x1, 0x0, 0x0, 0x20000480}, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000002c0)={r7, @in6={{0xa, 0x4e23, 0x1f, @private2={0xfc, 0x2, [], 0x1}, 0xb}}, 0x4, 0x1}, 0x90) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff01d406001000910000000400000000000000001400000000006c90780000000000000000ad3b340791b5de8f6c0e43181c41b23d960282088dcb7db00a2e2fcbbd9cef2458a17e60b13473cfa0904ff458e61d01a27aea953aed7ef319b661e11d92a34a719b766ead1a678e80e5779ed5d2f5b186f8292aa18dcb9e6a27c0cca67a8d4f26"], 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:52:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b3003f100007800c000180"], 0x38}}, 0x0) 18:52:19 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x6a]}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:19 executing program 1: unshare(0x40000000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0x38}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$isdn_base(0x22, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}}, 0x0) [ 2209.927150][T28333] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30040100007800c000180"], 0x38}}, 0x0) [ 2209.994318][T28333] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2210.013787][T28336] IPVS: ftp: loaded support on port[0] = 21 [ 2210.023549][T28339] rdma_rxe: rxe_register_device failed with error -23 [ 2210.051355][T28339] rdma_rxe: failed to add syz_tun [ 2210.064841][ T27] audit: type=1804 audit(1591210339.584:2458): pid=28335 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3310/cgroup.controllers" dev="sda1" ino=16382 res=1 18:52:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b31a58100007800c000180"], 0x38}}, 0x0) 18:52:19 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xc0]}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2210.135869][T28336] virt_wifi0 speed is unknown, defaulting to 1000 18:52:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30060100007800c000180"], 0x38}}, 0x0) 18:52:19 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local={[0x6a]}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2210.281632][T28354] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2210.306908][T28354] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2210.512050][T28336] virt_wifi0 speed is unknown, defaulting to 1000 [ 2210.637975][T28336] virt_wifi0 speed is unknown, defaulting to 1000 [ 2210.768169][T28339] IPVS: ftp: loaded support on port[0] = 21 [ 2210.816316][T28359] rdma_rxe: rxe_register_device failed with error -23 [ 2210.829058][T28359] rdma_rxe: failed to add syz_tun 18:52:21 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x2488, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {0x6}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r6, 0x1}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r6, 0x800, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4091}, 0x20004000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000030003000000000000000000010000000900020073797a310000000005000100070000000900020073797a32000000000900020073797a320000000005000100070000000900020073797a3000000000283d08ba37164cd4e303f96787f85262a0d9a85247e94dbdf7a9989bb6efaf7b25f7f6927de72e80069fff13d4c0e86684dee195b581c55d59e4df33b937721799a597ca5c662ad0ebc7e4179899bc9239755e82dea14c769fcafeb1d04ddb9a5827a6b3f58bf86b607f51be2b5d0c73d471640f4d9032cdb05a"], 0x54}, 0x1, 0x0, 0x0, 0x20000}, 0x670a7c638b2d0870) sendmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)="ae4a56b3b0002ec93b6060fbab8ab0aa1e784ad8a044d9a565059e06755476cb57c8e19ebf7e5eff", 0x28}], 0x1}}], 0x1, 0x0) 18:52:21 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local={[0xc0]}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b300f0100007800c000180"], 0x38}}, 0x0) 18:52:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:21 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) socketpair(0x1d, 0x5, 0xf79c13e1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'tunl0\x00', r8}) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000001600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000015c0)={&(0x7f00000001c0)={0x13e4, 0x13, 0x100, 0x70bd2c, 0x25dfdbfb, {0x26, 0x1, 0xff, 0x2, {0x4e21, 0x4e23, [0x5, 0x400, 0x3, 0x17350d5f], [0x0, 0x80000000, 0x3f, 0x53], r9, [0x400, 0x1]}, 0x200, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x59, 0x1, "5596177a32586f0b8627118edbd5e1a64cdb9906f67f49c728d1041f5cb63f3006a5b848ad77603953910f1627513fbb4c992e8c5e678527b45d645c2f74c1cfdd67f622816c64d1437020de62e5f097af3d63e275"}, @INET_DIAG_REQ_BYTECODE={0x62, 0x1, "a1fe05d1e923b319bb7eaf3e10e6753e614f823bc8ea7ad238989c2656c5bd4efbbfa0b77ae98990a25068491130385d8ffbf5c5ced86a1aeebd0eb991f033dc75ba61b63622f124ddec5f2080efa0210927ada9e7d8e12d7f69b7aff6f5"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "da8944527294257f17e2de0afe868092c088bec9d0253f40f2e286ae9b8cac99907f8826ce03364714e7881f32fdf33410155194de0b0d75b49dc410fc6e33da647922941a2b6edabdbbfe10751e583a37db26ce7e19f483d7893e5d7e923c422b70b8aa3359d85e0232fa2ca468a1cad0979c48d40f51b7dc276f0969155098c43bb73ea2fdae829a88ff9a3e1d550bae711c17e275e0229a0efd94c896cfca1e5b9b0687bd9ccc2dec5ac2d8"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xba, 0x1, "b10a12beee5cd943f8a7e27834c86525768a15c7ff50995e0bfd1b23618a02070fb9c999173b97b64d92210ecc4c258e6c1c75f5794c4debd3a90b81d5e7be749bcc580232e28bfbfbbabbffd5199ce3f9232dc0502b366258fa012d7585fb38c501e1074b765fba7a49284b9f4b8559c9a2a9b4afb199cab29066a3ef95ff9edc82603180db519d5378913ba306e47fbec2e02d195551d527ed9f4851073b7e812822b749ab515a4d5586ba3d90107a34feb7b0f48f"}, @INET_DIAG_REQ_BYTECODE={0x42, 0x1, "85d03c57ccf17f281272d722dbf99b8222a320b6a6db4c5506272a82f2ca0f51a6d078f79941707b8c13569021f137425365c44b67a448b401eae6636dd9"}, @INET_DIAG_REQ_BYTECODE={0x9d, 0x1, "3b5b7deccef4bb96a400f9daac1786222c5ba94639f4ce94d49e5bf16f409d11dc5dc7b6cd3249a809bc1a1dc14e2aa4acca5067360e3ff5e10efb785fa1f53f7a85bd546094c4cd5c3b7da3cb8da819f32ac3730f563f3245b268cdf262eb78cd73b642d10bc5d8788cfb59e625801fa45d75de1931df4aa51b4ca18e08e6656c21bb2ae28a6c0343e5870176e7e39f76d9882d8d8db6cfca"}, @INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "03dec2913edfc49d0e74d73ecd88c4f01b644179c3132f022b2af0a7c7d00a0122a5097ef211f84621536957be75346fce8e54ad77bef5e41fcc8eb286320b9755c5d05688725c2eabbdf3d369124b3f3fb959735d8d415d5a68581220a331688dffeaf911d7c3e9e68791e089b63acdecb076999df8a6eb6913"}]}, 0x13e4}, 0x1, 0x0, 0x0, 0x400c810}, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:52:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000030007800c000180"], 0x38}}, 0x0) [ 2212.353444][ T27] audit: type=1804 audit(1591210341.874:2459): pid=28391 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3311/cgroup.controllers" dev="sda1" ino=16376 res=1 [ 2212.406745][T28400] __nla_validate_parse: 14 callbacks suppressed [ 2212.406754][T28400] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2212.475621][T28398] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:52:24 executing program 1: unshare(0x40000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) mmap(&(0x7f000059d000/0x1000)=nil, 0x1000, 0x3000004, 0x13, r0, 0x8c378000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={r3, 0x4}, &(0x7f0000000040)=0x8) mmap(&(0x7f000059d000/0x2000)=nil, 0x2000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010800000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={0x0, @in, 0x0, 0x0, 0xfffffffe, 0x0, 0x11}, 0x98) sendmmsg$inet6(r4, &(0x7f000000a840)=[{{&(0x7f0000002840)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c, &(0x7f0000002a80)=[{&(0x7f0000002880)='*', 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x24549}], 0x3b7}}], 0x2, 0x20000040) 18:52:24 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local={[0xaa, 0x6a]}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000090007800c000180"], 0x38}}, 0x0) 18:52:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800b40002060107000000000000000007000004090002ff73797a30000000000500040003000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, [], 0x1}, 0x9}, @in6={0xa, 0x4e24, 0x2400, @private0={0xfc, 0x0, [], 0x1}, 0xff}, @in6={0xa, 0x4e21, 0x7, @empty, 0x7ff}, @in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}], 0xa0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', r4}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000400)=0x8) getsockopt$inet6_int(r6, 0x29, 0x48, &(0x7f0000b67000), &(0x7f0000000040)=0x4) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x3f9, 0x400, 0x70bd27, 0x25dfdbff, {0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 18:52:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:24 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0104020003000b000500ffff0073070500000004ba0d475374d3000500000009ffffffffffff000817a5fd70ddc43256995d3c24714dcac067afef124fb1b3ab9d8bb69beea06d65d3ade8cf6559f3929add309eac0fd0c9c663af6d4a75a0a89d92236d3e4e508cfa995ec16208e54f3b40207248c900000000000000"], 0x7d) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:52:24 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local={[0xaa, 0xc0]}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2214.895371][T28417] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2214.912996][T28420] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2214.981182][T28423] IPVS: ftp: loaded support on port[0] = 21 18:52:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b300000a0007800c000180"], 0x38}}, 0x0) [ 2215.023397][ T27] audit: type=1804 audit(1591210344.544:2460): pid=28426 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3312/cgroup.controllers" dev="sda1" ino=16366 res=1 18:52:24 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local={[0xaa, 0xaa, 0x6a]}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2215.158354][T28436] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2215.187528][T28423] virt_wifi0 speed is unknown, defaulting to 1000 [ 2215.190732][T28424] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:52:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30002100007800c000180"], 0x38}}, 0x0) 18:52:24 executing program 0: socketpair(0x20, 0x6, 0x6, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040), 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000030007b010000000020000000000000002c0001002802010011000100627066001826bc8006001300000000000c0007"], 0x1}}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {0x6}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r6, 0x1}, 0x34}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000000706010100000000000000010c0000030800064000000005050001000700000008000640000000020900020073797a300000000008000640000000800000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x2d2627d82aa594d}, 0x4040000) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x700, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4000090) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 18:52:24 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local={[0xaa, 0xaa, 0xc0]}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2215.436521][T28445] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2215.453678][T28445] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2215.472898][T28445] netlink: 51 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2215.508206][T28445] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2215.656959][T28423] virt_wifi0 speed is unknown, defaulting to 1000 [ 2215.701956][T29879] tipc: TX() has been purged, node left! [ 2215.713459][T29879] tipc: TX() has been purged, node left! [ 2215.738603][T29879] tipc: TX() has been purged, node left! [ 2215.758960][T28430] IPVS: ftp: loaded support on port[0] = 21 [ 2215.766636][T29879] tipc: TX() has been purged, node left! [ 2216.023294][T28423] virt_wifi0 speed is unknown, defaulting to 1000 18:52:26 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f00000015c0)=ANY=[@ANYBLOB="8100635b36dd2f5e31032cfff6"], 0xd) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002300)={0x0, 'bond0\x00', {}, 0x7}) pipe(&(0x7f0000008f40)={0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r7, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000009180)={&(0x7f00000016c0)={0x78, 0x0, 0x8e6767b8eef245b5, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x4}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}]}, 0x78}}, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000001780)={0x54, r8, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40c}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(r9, &(0x7f0000000240)=[{&(0x7f0000000580)="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", 0x1000}], 0x1) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 18:52:26 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local={[0xaa, 0xaa, 0xaa, 0x6a]}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30003100007800c000180"], 0x38}}, 0x0) 18:52:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x1, 0x3f}, 0x8) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000020601000000000000000000000000ffffff7f73683a6d61630000000005000400000000000900020073797a300000000005000500020000000500010007000000492e3156437f430aac503a713461cb940f862d839172633f8a1f0a20ac89d0f0f07e990fc79856a4eede47e4f015a57ab04ddb87cc4e2534c040978a5de120e46eb93fe2060d508f9ffd957590725512f5c692c78c48b7764f76c66587b9900ff8563a49f79c870e1624ec3d44aad22d4664ec77"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x1, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x4) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 18:52:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:26 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@void, @void, @mpls={[{0xb5, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xff}], @generic="8eefb170ab0e8dd95a28d42d9b5aa6ca3cd93e8abae3f311d83e3677c93bfdd27c2af233ea914d4fa92f42ec114e4bcd65f353115e9504eae6dc4d55ee30ed9e8204ceebd9d3a2a112922462f719bd8f98c1f4ca4ffabbd0ed8079a0b810ae06de38bc832f36144926d81c14bb0ae05e57bfec"}}, 0x83) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:52:27 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local={[0xaa, 0xaa, 0xaa, 0xc0]}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30004100007800c000180"], 0x38}}, 0x0) [ 2217.520079][ T27] audit: type=1804 audit(1591210347.045:2461): pid=28491 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2106/memory.events" dev="sda1" ino=15761 res=1 [ 2217.553881][T28494] __nla_validate_parse: 4 callbacks suppressed [ 2217.553890][T28494] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2217.612814][ T27] audit: type=1800 audit(1591210347.075:2462): pid=28491 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=15761 res=0 18:52:27 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0x6a]}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30005100007800c000180"], 0x38}}, 0x0) [ 2217.767253][ T27] audit: type=1804 audit(1591210347.075:2463): pid=28491 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2106/memory.events" dev="sda1" ino=15761 res=1 18:52:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30009100007800c000180"], 0x38}}, 0x0) [ 2217.900236][T28494] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. 18:52:27 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xc0]}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2217.941093][ T27] audit: type=1804 audit(1591210347.085:2464): pid=28487 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3313/cgroup.controllers" dev="sda1" ino=16369 res=1 [ 2218.001172][ T27] audit: type=1804 audit(1591210347.375:2465): pid=28503 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2106/memory.events" dev="sda1" ino=15761 res=1 18:52:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b3000a100007800c000180"], 0x38}}, 0x0) 18:52:27 executing program 1: unshare(0x40000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f000063f000/0x2000)=nil, 0x2000, 0xe4c42423a4c577e1, 0x8031, r0, 0x2231e000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000580)=ANY=[]}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r4, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syz_tun\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x11) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', @ifru_flags}) 18:52:27 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x5, 0x1ff, 0x201, 0x6, 0x6, 0xf29, 0xb, 0x400, r1}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df0500de01e9000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={'macvlan0\x00', {0x2, 0x4e24, @remote}}) sendfile(r4, r3, 0x0, 0x100000001) [ 2218.116013][ T27] audit: type=1800 audit(1591210347.495:2466): pid=28491 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=15761 res=0 18:52:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b3000e100007800c000180"], 0x38}}, 0x0) [ 2218.197851][ T27] audit: type=1804 audit(1591210347.495:2467): pid=28491 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2106/memory.events" dev="sda1" ino=15761 res=1 [ 2218.236592][T28535] IPVS: ftp: loaded support on port[0] = 21 18:52:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e90005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) [ 2218.257650][ T27] audit: type=1804 audit(1591210347.525:2468): pid=28526 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2106/memory.events" dev="sda1" ino=15761 res=1 [ 2218.435961][ T27] audit: type=1804 audit(1591210347.955:2470): pid=28545 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3314/cgroup.controllers" dev="sda1" ino=15764 res=1 [ 2218.768374][T28544] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 18:52:28 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local={[], 0x6a}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b3000f100007800c000180"], 0x38}}, 0x0) 18:52:28 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0180c2000000910000001400000000006c9078000000000000000065b800c4d439e35fcf5002c3b1ae06289387ecf4712bae6ccdde926d85f380311a5b7b81a9b20b1c17eb8fddbf4d6df00d47a765410faae8dcf0a271cfa5c1ee9b019c42719d8a15f6298d22decd2deb715591e111d5aa8624f59191e86ae6f708ce2191e0bf5802c2323261b2d405637b0f091f3e14df479a55c3dae27de54d3cb205b5efd02e505b554595a5b88ab5801902922c0243bd6ae476bb9645ac7a40749c8c4ff25b71db1c328b7c48e51787744ba7da"], 0x2a) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000340)=@ax25, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x97}], 0x1, &(0x7f00000001c0)=""/17, 0x11, 0x7302}, 0x3f09) getsockopt$PNPIPE_INITSTATE(r6, 0x113, 0x4, &(0x7f00000000c0), &(0x7f0000000180)=0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) [ 2218.820121][T28535] virt_wifi0 speed is unknown, defaulting to 1000 18:52:28 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local={[], 0xc0}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30060100007800c000180"], 0x38}}, 0x0) [ 2219.025689][T28536] IPVS: ftp: loaded support on port[0] = 21 18:52:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_ACT={0x18}]}, {0x4}}}]}]}, 0x50}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="cce011f63448db1999bbcf8386de0d1a9ab8c8b27f30d6ec6ccb9b705209d6e57a128c044bca7992f43280b8f5689d46b01b077ba2888fa3bdbaca668a2fd6fa5dacf1bac9b46f6fb20b7575c9b0759e117870343dcf17e02a8bfb23973c0931dee594db64e7301e8c7370", &(0x7f0000000300)="71e2f85f6c84c9d85ca206b278641e382f30eec6aa42d78026e81ef0e97dfa09e2b8974a81b21534d568f9d76c70692847404a6d8f0c81246d71a7a06b93d70e51061ca8d938a3e5589a9d844699550520a147b01fc00720f6d406378e595c0664170228fc893e3fd2c32a46986583ad71c5bedd267911e6208b33fc707be2b92ca5111444a3d1e857161ab8d5b9c7b45a7cbec8765777693daa9a4bf2e91220a4401fde79ef3024e5b686b874333dc278986568f06df12a07735ca78dfedc7a685011b03406a9ce293f48bc5929c1125ec44391b5cad1ff", 0x1}, 0x20) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 18:52:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000200007800c000180"], 0x38}}, 0x0) 18:52:28 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x500, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2219.219491][T28566] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2219.258844][T28576] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2219.263706][T28577] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2219.295703][T28576] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2219.410793][T28535] virt_wifi0 speed is unknown, defaulting to 1000 [ 2219.729852][T28535] virt_wifi0 speed is unknown, defaulting to 1000 18:52:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f00001bc000/0x2000)=nil, 0x2000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000002c0)={0x0, 0xffff}, 0x8) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x18) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r4}, 0x18) sendmmsg(r2, &(0x7f00000019c0)=[{{&(0x7f0000000000)=@can, 0x80, 0x0}}, {{&(0x7f0000000180)=@ethernet={0x6, @random="871338d1ef61"}, 0x80, 0x0}}], 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a01050000000000000000000000000400048009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df"], 0x80}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xbb}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14}}, 0x74}}, 0x0) 18:52:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e90005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:30 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x802, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000020007800c000180"], 0x38}}, 0x0) 18:52:31 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff1980c2000000910000008100000008007bf000e3ea339100006c907800000000af7debebd36fb5a97921e35e8bea27e2e3000000006ba440ea8d5be49b977d3edefb3dd8fc3f4b7ed5394c5b927ff6196b56952b4bfc55"], 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:52:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r3 = accept$phonet_pipe(r2, &(0x7f0000000040), &(0x7f00000000c0)=0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) write$binfmt_script(r3, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRES32=r5, @ANYRES32=r6, @ANYRESDEC, @ANYRES16, @ANYRES16], 0xffffff8b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001008459008000000b000500010007"], 0x1}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r8, 0x0, 0x100000002) [ 2221.543042][T28609] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2221.544696][T28610] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000030007800c000180"], 0x38}}, 0x0) [ 2221.636135][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 2221.636148][ T27] audit: type=1804 audit(1591210351.155:2471): pid=28611 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3315/cgroup.controllers" dev="sda1" ino=16365 res=1 [ 2221.676753][T28610] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:31 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x803, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000700)={'filter\x00', 0x4, 0x4, 0x438, 0x0, 0x0, 0x0, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@uncond=[0x2], 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9c2f413b976613bad414a105f4bdf97425ce81c5d00"}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'ip6tnl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="133a078a8218", @empty, @rand_addr, @dev, 0x11}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @dev, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x611) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) openat$cgroup_ro(r4, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={r5}) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r8, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000844) [ 2221.789577][T28625] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 18:52:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000090007800c000180"], 0x38}}, 0x0) [ 2221.922775][T28631] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2221.983413][T28631] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2222.013646][T28634] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 18:52:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b300000a0007800c000180"], 0x38}}, 0x0) 18:52:31 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x804, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2222.158004][T28639] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2222.226927][T28641] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2222.285322][T28641] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2222.389252][ T27] audit: type=1804 audit(1591210351.915:2472): pid=28612 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir911542418/syzkaller.OPMwZH/2925/cgroup.controllers" dev="sda1" ino=16369 res=1 [ 2222.482669][ T27] audit: type=1804 audit(1591210351.915:2473): pid=28620 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir911542418/syzkaller.OPMwZH/2925/cgroup.controllers" dev="sda1" ino=16369 res=1 18:52:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100207800c000180"], 0x38}}, 0x0) 18:52:32 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200), 0x0) write$binfmt_elf64(r3, &(0x7f00000015c0)=ANY=[@ANYBLOB="8100635b36dd2f5e31032c05"], 0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002300)={0x0, 'bond0\x00', {0x4}, 0x7}) pipe(0x0) r4 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00^', @ANYRES16=r5, @ANYBLOB="00002bbd7000fddbdf250a000000080004000c040000040003801800028014000100ef0200000000000000000000000000010c000180080009875b73026b261bcd803501a8dbad00760000000800050000feffff"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="a6a12f83e0995fa5f818b9bda99d1911f6ac14d6b087cb627c880919b8197c574b151f00c8e87fa6c1d505e8edee94d80445e6f8bff26f39490396e0757a9b9314eb011f1a090f3fd68f832afe2cae6aa00e4f766ac59a18a2638a62c73c01a5a1f9001a7e04ca7ef84cdddacd11f8ad70c1350491ffbf3e15a2e656d3e31cc657371bf49dc9c8d02aa5d42ca8df16b533fe288aaf8add41f4a9a679f03fd8f7df178b3bdf8000b18acf07978390a5d18689c9a57849f67db522753ade17adfe7195efb97ed2e649de19038f4c0883a0a22bad48db5c1371ddb87ba370ab95741569c53bbedb4d6fdafbda589a16c85151b2420445d78efbe069eeb720a15ddde95ebeda152fecf949121d32905aaea78750115b6552e814a24a6af1c6193282b6fd0dae5cf7c3a8cbb758cd028a4f7a2b36437bf9fed25e1812a6710c8e3597b69c7a223e77b17b82beaa0b5deeff2fa114cc4af8ef42e7bbbcda1142b90bbfdd384ed0aa3925c5a08e877eb4299def962e99460bd4f902e1efd761596e58f8454956750f9736b412add0ec6d327fd250a6961255e52cf468720966b046495fb8b6890a4b5250ebe01e315e33356500"/442, @ANYRES16=r5, @ANYBLOB="36d2c290f3797c01040000000000005c38c7bc435565b1ffffffff00000000c74f3fdbd566361fb907"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000580)}], 0x1) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 18:52:32 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x805, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2222.619018][ T27] audit: type=1804 audit(1591210352.145:2474): pid=28645 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir911542418/syzkaller.OPMwZH/2925/cgroup.controllers" dev="sda1" ino=16369 res=1 18:52:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e90005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) [ 2222.742910][T28653] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2222.753909][T28654] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2222.765480][ T27] audit: type=1804 audit(1591210352.285:2475): pid=28655 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2110/memory.events" dev="sda1" ino=16366 res=1 [ 2222.818203][T28654] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2222.857738][ T27] audit: type=1800 audit(1591210352.285:2476): pid=28655 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16366 res=0 [ 2222.966856][ T27] audit: type=1804 audit(1591210352.295:2477): pid=28655 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2110/memory.events" dev="sda1" ino=16366 res=1 [ 2223.126475][ T27] audit: type=1804 audit(1591210352.355:2478): pid=28656 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3316/cgroup.controllers" dev="sda1" ino=16365 res=1 [ 2223.195594][ T27] audit: type=1804 audit(1591210352.545:2479): pid=28662 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2110/memory.events" dev="sda1" ino=16366 res=1 18:52:32 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x806, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:32 executing program 0: syz_emit_ethernet(0x4f, &(0x7f0000000200)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x19, 0x3a, 0xff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast1, [{0x0, 0x0, "27bec3"}]}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xb) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="44800000310d8c3245a5360d1d5c6a22ebd232680283ad96e0bb7fb496374778b821f2a2daeba57853b0ec3cc978f37d50d672ca2475bef2e174520006fad7ba146c7a1fcfde35b6098a674995358c0db5e19c85c8c740d974dbdf05141cbfa0b43b0f545ee432ce4cb67f3f8b66b524c16c2621ae09e9f41afcf5bfafb1b167a632bd87718b6ef4572cda5edff3f32eade8eef2ca1fc323bcc129a177466e4f585f7ab14563ed6f927956e6a3d41c3222ba3c935cefc879996e58fdbc1f778fdc050e77cdd896966a59641695cbbd2521d17c9f85e5f870580c3f40ccf3bd8774aacd8f", @ANYRES16=r4, @ANYBLOB="01000000000000000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000600040000000000"], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[@ANYBLOB="40000000cc67de50460ed4e9e8265df06c72d36d713cd99779010f154df5a3ae7ce6b44917b340c711504c2fd5c6ecc1a13fb1774ccaefc051680ed90503cdf9116a9137e138ab74563abd60d8861739ceb3a0750ae146e5e9d1db2b00931ecb016f11f8f66775953ae9dce4198a85a015d7216c4e0d136f7a2a023f74febc35454478cd4ff0d171688a3e65ee4cf3fae591185456d75e7a4f2eb6631d60f10576e20c046413b69ac3e4002b37eb00fb398eeb2af493de2cd678a0a6a8944c932007", @ANYRES64=r4, @ANYBLOB="000225bd7000fedbdf2506000000080001007063690011000200303030303a30303a31302e300000000008000300020000002600040000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20004840}, 0x48800) r5 = socket$inet6(0xa, 0x3, 0x80000000) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000001d40)={0x3, 0x1, 0x3, 0x1, r7}, &(0x7f0000001d80)=0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r8, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="00040000", @ANYRES16=r8, @ANYBLOB="000125bd7000fedbdf250f000000040016010500a20002000000dd039100c9abc523539951f6693752b41209bdc2daae1ec741e38b84462dcad6cd9a25083a523300a4fb57e206d6ae124a73fa0242aa6dc186587ee27c397773f028e71d904bf887befdf0386da2e427cee05349cda3b883912e119465e57d158a78edadd7e4ab134e71c39c8c16a59f8fb83c7bf662b76cbdc97159538cdd3d9ad17247bb9eba5ce812f1ba3408640d31e0f5c0584aa18c3afa6cff5f638ad1baaebc83067487aa674b03e832692f96b8a7f3a0b964b4e5fefd9b410e5f26312d364f7cba287b2bd370c5bb3d0e69878ec4d5a1713b287ccf5b936dbaf95756771ca55ae9a1e14ba279414609940d5a03cc657824bf375bac940daa9d5320e124a2036e2bf3c136a96060c2230071e94d51f0df727aa7e2ccfc4ba2093c03fce85758eabeca6686300e6f96896902c2ef3fbfe55503cf7271440f57f703ed17240d76fda888561b604b168307684b8e4328791127c57bb50bcd09fd2ba09aacc891bb909652ff835786f09a791aab521ded279292acf77a1e14efe7fdb16130ad74ce6a52ee1dd1b411a55da18c13a3e7fce23cd506e099051990e9d0a7513f107b9e7575ccfc3e9576394aa4f40d9548f316db9b17b617d543f3b9bf178808efdb0bfe60e76bf28177aa328a825728c580c862c4599c6ad50f8cb1840c979fc8c9dc8c0f4ad4c270d4dd77692928a3341720b95f079e13a904b82a9e3c9b2640c1e346fa7f917bb0e7c70e52dbc2ed44ccfacf7a6bfc04d099d781056c2e8b36d0add19ed21acb7d9605d64913913a9d908f356cd4897a7c77f7e6bb9c6254f1665370a4aa0cc3e74bddd4307b18dbf11378eb90a7a8a45314b0803af9ee60fa02f057f5f07141d95e665af394d8ec60db9a795370011e4b996a7b1fc0477629ea874d9accff2a7ac30f3fca03870f43f8e7c96d94998b923a6a233f1dc68a17d824ca596551d920c41781213e493566de5cf1be426fb5eaa8c5aa0e4180233be882ce17170d18ce4100bc2b186a15e62c76dd71a8a20aadde5fbd2444b75f8cd2b2a85884b2e60b6249871d836bfa2a99838a489350484a1b3c287b515c92d3cbcfc7acffc103c88e03b6c5df4afa4d71ee1996763ab9f6dbba38d30e19d057cb5abea41cdd372c4d683214722727e38c48c977f8bbbcadc9397e178f1c2647f7935b9ae5f948b2d7238cf4373c06af66b5693daef67a28515c3d7df482a4df51de5204b4d7d381abe33bb2eae162d29dd33d3e24007097f791c044b9c55843baf6312cba30f3e4228337b5e9d0dd516a3f706f8a1b0742b71bac1dbaf69051c3aff9d6a8be728b8bac0ab290e94b8fd51b5da72ac24222bcea12c6226ef244bec6c73cda433fc5ba939e10637a147a0e91"], 0x400}, 0x1, 0x0, 0x0, 0x20008810}, 0x4008040) 18:52:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100307800c000180"], 0x38}}, 0x0) 18:52:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x904, r2, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x4}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_IE={0x19, 0x2a, "068127823d4b485f01caabcc526c36796f417aeeee"}, @NL80211_ATTR_FTM_RESPONDER={0x150, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xd0, 0x3, "d5456a6cc8d20bb148bb20f894bff0d3123a728c3333b5709eb78fe55ec459174267111e31f397eb4010aaefe3075a34c99228a7c7606de0ae10ccd7aa44d23859ff3bbe624f9a904a5777532ca4d84d6f37c7378f1b525f025d545e4096c7b2d1b1a81df4130e7d09b2dd0998ff51661675323b6e9a1e524bb5bbab5e8072adc882780fcaf692d47b74835ffb0b55d1cc1e80daa1dc5069ff2755d260e017c01b54b53344a51837eff91a435941f3c44f30c278efa942be49f534fcf1966ab07e005565e2f9a6115e7fbe7c"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x69, 0x2, "e21a50d0d101e7a2a575064f3ed01e655f33dde310266c13a4504540e39e49779bddd1ebd4f76c6755a706aab039dc81c77f8199631f805bb9e2af7e985f6cdf611f7cc2ce69a39b4030fe25dc4324b770499cfce508233e729b9fc877dfa08e90e5a6ac3c"}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xa9}, @NL80211_ATTR_BEACON_TAIL={0x714, 0xf, "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"}, @NL80211_ATTR_BEACON_HEAD={0x50, 0xe, "de6b7dc86ef35916e114319bcf859d5724a4a18fac7670328e24d976cfd436e9e369dcae7963c774689ece68f580e7d732f0ea552e3c96a84c66d4222195296e60c7cb0fb9fb27cc958f06c9"}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}]}, 0x904}, 0x1, 0x0, 0x0, 0xc885}, 0x40014) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r3, 0x0, r5, 0x0, 0x10004, 0x0) [ 2223.246065][ T27] audit: type=1804 audit(1591210352.635:2480): pid=28655 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2110/memory.events" dev="sda1" ino=16366 res=1 18:52:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000007800)=[{{&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/128, 0x80}], 0x1}, 0x80000000}, {{&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/95, 0x5f}, {&(0x7f0000000340)=""/103, 0x67}, {&(0x7f00000003c0)=""/215, 0xd7}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/240, 0xf0}], 0x5, &(0x7f0000000680)=""/219, 0xdb}, 0x4}, {{&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/160, 0xa0}, {&(0x7f00000018c0)=""/23, 0x17}, {&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/135, 0x87}, {&(0x7f0000001a00)=""/122, 0x7a}, {&(0x7f0000001a80)=""/183, 0xb7}, {&(0x7f0000001b40)=""/123, 0x7b}, {&(0x7f0000001bc0)=""/223, 0xdf}], 0x9, &(0x7f0000001d80)=""/32, 0x20}, 0x1f}, {{&(0x7f0000001dc0)=@x25, 0x80, &(0x7f0000002180)=[{&(0x7f0000001e40)=""/91, 0x5b}, {&(0x7f0000001ec0)=""/209, 0xd1}, {&(0x7f0000001fc0)=""/138, 0x8a}, {&(0x7f0000002080)=""/26, 0x1a}, {&(0x7f00000020c0)=""/156, 0x9c}], 0x5, &(0x7f0000002200)=""/179, 0xb3}, 0x148}, {{0x0, 0x0, &(0x7f0000004500)=[{&(0x7f00000022c0)=""/146, 0x92}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/10, 0xa}, {&(0x7f00000033c0)=""/107, 0x6b}, {&(0x7f0000003440)=""/79, 0x4f}, {&(0x7f00000034c0)=""/19, 0x13}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x7, &(0x7f0000004580)=""/90, 0x5a}, 0x2}, {{&(0x7f0000004600)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004680)=""/101, 0x65}, {&(0x7f0000004700)=""/238, 0xee}, {&(0x7f0000004800)=""/196, 0xc4}, {&(0x7f0000004900)=""/23, 0x17}, {&(0x7f0000004940)=""/125, 0x7d}, {&(0x7f00000049c0)=""/11, 0xb}], 0x6, &(0x7f0000004a80)=""/198, 0xc6}, 0x1f}, {{&(0x7f0000004b80)=@generic, 0x80, &(0x7f0000005d80)=[{&(0x7f0000004c00)=""/42, 0x2a}, {&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000005c40)}, {&(0x7f0000005c80)=""/239, 0xef}], 0x4, &(0x7f0000005dc0)=""/144, 0x90}, 0x400}, {{0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000005e80)=""/156, 0x9c}, {&(0x7f0000005f40)=""/83, 0x53}], 0x2}, 0x5}, {{&(0x7f0000006000)=@rc={0x1f, @none}, 0x80, &(0x7f0000006140)=[{&(0x7f0000006080)=""/142, 0x8e}], 0x1, &(0x7f0000006180)=""/26, 0x1a}, 0xffff}, {{&(0x7f00000061c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000006780)=[{&(0x7f0000006240)=""/197, 0xc5}, {&(0x7f0000006340)=""/137, 0x89}, {&(0x7f0000006400)=""/97, 0x61}, {&(0x7f0000006480)=""/248, 0xf8}, {&(0x7f0000006580)=""/202, 0xca}, {&(0x7f0000006680)=""/193, 0xc1}], 0x6, &(0x7f0000006800)=""/4096, 0x1000}, 0x30a1f63b}], 0xa, 0x2020, &(0x7f0000007a80)={0x0, 0x989680}) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1932529fe6e69fd1", @ANYRES16=r2, @ANYBLOB="0002ff010000fddbdf250500000008000800ac14140f14000500fe8000000000000000000000000000bb"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000007bc0)={&(0x7f0000007ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000007b80)={&(0x7f0000007b00)={0x58, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x200040d0) 18:52:32 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x807, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2223.367182][T28676] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 18:52:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100407800c000180"], 0x38}}, 0x0) 18:52:33 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x80a, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) [ 2223.549358][T28690] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 18:52:33 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x848, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100507800c000180"], 0x38}}, 0x0) [ 2223.733741][T28698] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 18:52:33 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x84c, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100907800c000180"], 0x38}}, 0x0) [ 2223.894042][T28706] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 18:52:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000022c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f0000004600)=""/210, 0x32, 0xd2, 0x8}, 0x20) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x6, 0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="ff000000415bc504e709a7", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000080)=r3, 0x4) 18:52:33 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x85c, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2224.322074][T28714] BPF: (anon) type_id=0 bits_offset=0 [ 2224.339665][T28714] BPF: [ 2224.343013][T28714] BPF:Invalid type_id [ 2224.347139][T28714] BPF: [ 2224.347139][T28714] 18:52:34 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @empty, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r6 = accept4$nfc_llcp(r5, &(0x7f0000000180), &(0x7f0000000000)=0x60, 0x80000) sendmmsg$nfc_llcp(r6, &(0x7f00000015c0)=[{&(0x7f0000000200)={0x27, 0x0, 0x1, 0x3, 0x0, 0xff, "98936a8fd866a7c8aa198248a3e51a541cb4a90a10945cfd949b3f7a31da2308795459d744f56fc8488238819b718bbcb0e08d6d33ccafc601ebdeb1536498", 0xb}, 0x60, &(0x7f0000001540)=[{&(0x7f0000000280)="ca8f82b73dc442b57952dfc34d58441f6de2de2cbd8a23c03958fe6e5519314f24d039e299701106f49c6036d3634a57d6577117a4ba0468ab6b844dbb299bc156b57ccbeaa71d26e6973725aff3566f65ccc1d9394dc3335a26c8d2b7a04df2dd8fafbfd82cb2fd2c7da48d90950a623a7b0a2d74607cb38273fcb41e7ba569e65ecf6e8a0ff9ff0921f005646a62fb6f3cd58ecacca1124bb6b9870dc9921c1eaa9f762de4ec8d1715d36f4ba8ad68dfea18bec7d5620bce621ac2cd47b7a76f51ec63256b597ee6ee9e72b850087101c1e7a1496ab94d44629f68455e875dd82183f9ff8bd8", 0xe7}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000001380)="0816144f4e315002a7be856d9ed7617a093be3d3a25f9cec4fa5d2791fcc85d310a53e0c7111e355cc6cd4a66080ecd9607e2d1ac0d023b966901c06728c1dbaa28eef7a45397bb888d7526fd78124d12bfd9f207d0394499b4bb0c265175edd67ed630e42c862574c64bc110c20773ba66a56344153033b023a2f457570d0e32fa55d7bb8f5a9c05937f3bcc5a457c161348db53809a66d3b660e59ae725ca6110d55", 0xa3}, {&(0x7f0000001440)="b14b8e52433fdd2ffd1d7e5ad174230679d8bcc5925439c21ba25a5c6bae0dabca3b068a57fbed400e8409c4a65a40341f52a96066e609f28d6956dfb3364d010d1eabd5ad692b159cdd500bb66b4a871177e2a5237d9ebef452e7949d89b9de05fe74de282ee780c789d3cfdc16260707d1aed833846736e9de0548fa6e2852ff32244010eb7d6e040287ea92278c2c21a262661af04b0b020e09bf7e83a9a90aa1079343913311163c8936fc00445deeec16430b9b11f9cdb7d538fa4d2dd5c44a03711947865e76352edba88365886593f112318c8f45027a5ba97cc8090b", 0xe0}], 0x5, 0x0, 0x0, 0x48005}], 0x1, 0x20000b4) 18:52:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100a07800c000180"], 0x38}}, 0x0) 18:52:34 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x860, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df00000000e900050001"], 0x1}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xffffffffffffffff) 18:52:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) [ 2224.827229][T28730] net_ratelimit: 12 callbacks suppressed [ 2224.827242][T28730] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2224.845957][T28729] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2224.870888][T28730] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:34 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x868, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100e07800c000180"], 0x38}}, 0x0) 18:52:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="430000001d000000000000000000000000000000000043cf4ff1cd482fd3496d53e0c9593a26b3a6df6a431e0abd093836d0e43aa621851c94c5db0cb21f2793fee2987105ad319c2806f270eea57fe9f691394a04b68829b826b0d49634e87b7d8ec35848f6f7b70afd29fb8b94e2dadc522abcbf751f888c861b1ea5a6695ad2f8fc2c3c395684295711aa11d67ea341c0bca6275a88facca8343d"]}) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="0bf9a0b5f9d6ee35c52ae744b50c5c7be9ef6bee919652677c36f6ba3e8e2e261fc1d8a902260a6f6b8a4cce45594ba2143e231c661f78a970fd547e4557c4222ea0de3c174695d4fd7a55984c3e1227f7da7fa97fa57378c08c98d88cd759bc663e5f8c8bf6fabc214c0554e68d4bf54734372efbc32786bb24b4", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x7d, &(0x7f0000000180)={r3}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r3, 0xffff}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCAX25GETUID(r4, 0x89e0, &(0x7f00000002c0)={0x3, @default}) setsockopt$rose(r4, 0x104, 0x5, &(0x7f0000000180), 0x4) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a537798610a14ec2867277bc4582e2dcfdaef81c581d1b4223e49887ee68e87ecf37d5b2f27435252b48b2e957e1fac165be0302000074f627927737456b54921f664921e1615264cc762e189704152109b0dff9eb9ca92da732cc5b460b463835025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e5d8790400e81a0a90106099ffc4061064fb90594c0910ed2b58949df85dcbf3d40dadaaa9fbfc464a225b4"], 0x50}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000000240)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYBLOB], 0x4}}, 0x0) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x0, 0x0, 0x0) [ 2225.022881][T28741] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2225.041242][T28743] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2225.057873][T28741] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100f07800c000180"], 0x38}}, 0x0) [ 2225.087592][T28712] BPF: (anon) type_id=0 bits_offset=0 [ 2225.093594][T28712] BPF: [ 2225.096590][T28745] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 2225.105273][T28712] BPF:Invalid type_id [ 2225.134541][T28712] BPF: [ 2225.134541][T28712] 18:52:34 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x86c, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2225.157026][T28745] device macsec2 entered promiscuous mode [ 2225.174188][T28745] device vlan0 entered promiscuous mode [ 2225.184303][T28751] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2225.199358][T28745] device vlan0 left promiscuous mode 18:52:34 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3e) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r1], 0x10}}], 0x2, 0x0) accept(r0, 0x0, &(0x7f0000000040)) 18:52:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000106007800c000180"], 0x38}}, 0x0) [ 2225.280434][T28753] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2225.330289][T28753] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2225.343204][T28758] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2226.021726][T28748] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 2226.057953][T28748] device macsec2 entered promiscuous mode [ 2226.063748][T28748] device vlan0 entered promiscuous mode [ 2226.071480][T28748] device vlan0 left promiscuous mode 18:52:35 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff0180c2000000910000c3468053a18c397582fcd52ca3883eb7008100000008004500001400000000006c90780000000000000000"], 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:52:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b3000010000b800c000180"], 0x38}}, 0x0) 18:52:35 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x874, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:35 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x2, 0x3, 0x2a8, 0xf0, 0x0, 0xf0, 0xf0, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {0x6020000}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x0, 0x60}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'vlan0\x00', 'nr0\x00'}, 0x0, 0xb8, 0x120, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'snmp\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000000), {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0xffffffff, 0x3, 0x7, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@dev={[], 0x2e}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x9, 0x6, 0x7, 0x5, 0x0, 0x20, 'lo\x00', 'macvtap0\x00', {}, {}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7f, 0x3}}}, {{@arp={@local, @broadcast, 0xffffff00, 0x0, 0x3, 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@dev={[], 0x20}, {[0xff]}}, 0x3, 0x4, 0x4, 0x8, 0x0, 0x2, 'geneve0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x0, 0x110}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000810500000000000000ffffffe900", @ANYRES32, @ANYBLOB="000000000000000008002e000200000008000f000080000008002e0004000000"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="c40000001000810500"/20, @ANYRESHEX=r2, @ANYBLOB="00000000000000009c00128009000100766c616e000000008c0002800600010000000000100004800c00010000000000000000000600050081000000340003800c000100da000000000000000c00010000000000000000000c00010000400000000000000c0001000000000000000000280004800c00010000000000000000000c00010000000000000000000c00010000000000000000000c000200000000000000000008000500", @ANYRES32, @ANYRES64], 0xc4}}, 0x0) 18:52:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b3000010000b800c000180"], 0x38}}, 0x0) [ 2226.276526][T28778] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:35 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x40a4) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000300)={0x27, 0x1, 0x2, 0x5, 0xff, 0x8, "6f1809090e2879761345545839fae9dfd88bc3dc45805f68402ee97f584514fee9da701a9424822f6059a3632f37300b9ea9782610fc3b0b04a64821e03cc4", 0x1d}, 0x60) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @dev}}) socket(0x0, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000009700)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f00000000c0)="8fa60dd161b645122816092adb3649821aa9719d6e948685262cc1fee31ebc", 0x1f}, {0x0}, {&(0x7f0000000380)="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", 0x1000}, {0x0}, {0x0}, {&(0x7f0000001500)="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", 0xced}], 0x6, &(0x7f0000002580)=[{0x70, 0x0, 0x1, "2f9b8271e216b87e7834963b0e44bfa86c6b7f6f32dc16c152225f93274691828f3db558b4b6a7acdbcfa0a3ab498961af24b76274dccf8eef4e359cadad3270e0a44a51566e2c02b8bf2d428bfc297407dca3064ac5b975305b"}, {0x68, 0x108, 0x0, "b6b0c85caa0448031e37eb1ed93a1f1988b905fb067df9ea658f92dbe02cd7476f47152ca5d3bf36d056eeaea61398f9c8c869a238224d6cd314354fc55b7a6c92860c8237f9199b5647b5470fc3bf01b0"}, {0x18, 0x119, 0x7fffffff, ';'}, {0xb18, 0x88, 0x9, "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"}, {0xfd0, 0x108, 0x0, "09073f039e252753fc6ce51dc3910d6af654873e8eb03bdcff600c41bf90993577ebf49a17262861d45e580323a6c83798c40c47c239c09f5d5696469ce35042e0d29d79bf0427c5e0fe9c9da193da6a7e9f1063c7780595bdb7efa9660ca96bbd5ac5e95a8eaf7b4de50c2705b78609410b929bef5a1fd49d8b95e19fdd221a5301f467a762b7d246f3630d785e25fcfb9772c4a605df520fb5b246966c6bbd3f0ee2af815794636bcaf614d2a1bfc4a2162dfb8d15ffe864136db39ae5e40a3ed9160e2ee7c0b1485ae1169021a25ef6b043cc3daea34bbf4a37c3220e03dc222df63e273a5eb0d3e24f6c767ec5b357c65ca64cbf09590ea33f5ef759f8b8a31e323f90bf376ad3a80f57a05055e755a5fea61c30a0373afdff946a6f9b68b7162c3cca39bd18e6ef73247239c957f1e9b4d39db0dd7099719a6a1a98ec39598e2d109d7e5cbe2b810ca3cc6452b3b33de0597a44c7506db1140d201ed09511f7b590dd02a9df8675c2ca345cb8111cc4327c33e561f8b5c8dd0277f35fa30d73abbb5cb750a04f06ae842334ca9f103cc5aed03492f1063f66b5fd0f411809348c25f1899a24379ea646dd081f3263f2a48d74d770b4327ba7f53f608c048658c90fc364daad78f1b01513487779d2ce2fea6548e167e603fc08611b66ecbd364d7cf8dea8ee96b6964fc94ebf356bb32b56dd24d5167be6f3cb22fd42ca3e4664800f3cbac0d73e55b3bd16fa1790ed2cbc6117571965b905ab19a38dcf1e574a6958009140e4e485c8f875ddf82fb63cf6775b2cd4e5ba8e3382899956d79a99faa5d93f708ced0349bc957b0d9defb8c92dfdcfbe20dd05ce57686f5bbbf3407e7ea298c4bc53cfd89e2e89c6e99935434118dea93f92b7825bce9230fc105f4aa25b4636560dcb01a8402bf8681aba6ef51c57adf7e54d4b687477ab72aeb585b2f8fa73efa3dd0749d879bfb81998539ef71f57db26480c538673dc8d28dcfe1b2352be993ea3acadc669cd1018f4b869e23878390dd34ff33662cb7ac636d74d1d1a275b4a107466861861832ffbf482d830b7a349fd2cbc340cfe444d62adae718740e171fac66ce2c1e4e16c41f1950e251ed345f2ef99a22139f0a6fb5aa322c99f7446d096ccbc01847f61238817fc4c508b1ca8a8d7fc51002526f46330d50c00b7352604b2473df01d3341e6b9ae334e14cb4bfba3b54e1e2bd02f48896467a3672f34a61fad50c400ba995daf1ed9d3c2bbe83a483a9641dd15d5007cfe31c598b3b629bb24258419b0e4fcfa80cce0a7f078e69a94798487962a58ec52da822f048919b0ba272be9530730c97a48672504b0fd261a6d8bb76daa755648d6a5cd9ef17c690b988fa1c0a410e47d1c078677401aa00d6a7740bbd4506fb983877fe792f684bdd673073f75070bdf0e2067c1000e84a89f21960f55ed7e1cfc67564a90da35db676ff1e8dbd7841f26babc89673926f8e7473daa7b045670bc9d10845a0638111bf3081f9160a2848aafa2704e31b233a8bebbcdde1c67bfeae307226c71f69631bcb4517cd28706ec87e6ab004801f4127c3681b35022736f0b8d697f09129eccdf0b578c9060e17ecc5d6ddb4d49ad7c6f1b4b23f25e405fbeb74784e0af2632c6f7190c4d5ba9d3177f26e638b3547bfd1fb3ab89d63af159ceab3a347b15a1177440605855bc10fa5f34d2e1821f15e21e29d186d2623f04bbf5dc4f2bafe15724edb1eb8e35f1163884204c4bfc3b94a0000a476c2ab473155279e95acb05d391fb29c96cc7677a6dcd33fa6afb694921bdc527ff0553fec344c949e6fe68583b2e63f3e49d74d88e9f56e361a8b8f597cee7f7fbd7ddc0f85f36140090c6f7603163e5e78ee9f5aae3d44d3c9bdd95b93ff6de7ebcace6f9b3e5b5b8ca952ceeb6c161f498778e2d044e28a50294750a16fe2b440f47cef9e0726d2bc2d9f3e87773495f489243507f5919ab33d7bc8606b22fb32981f3122d03a80a4a31fcd03fd43aeeaa91eada5ff05bdc002658eceb7d3c2368aa8a4ca52a9980f0449930609964380a8805241aa6ddeaca33cde7a388e9bdbc5f772a94daf28ed3e4169cb78780a4ac3502c0a32f2489c2f1bf6dfaed2eeac0fa89c9eeaddb717180544584fd04c8390b5b638d38137dd4508d69bc53161c4749967ef6e7e3b49126529c29ed8ea2476d78027442ef6454891fc6e5a4ba3bbb434176801bc0eff9385ab53cdecb7517df6437397ad6216a0707b23481d39f6a1669dd3dd9580b130ee4d52e4602be8cdd13a8f9c26a5e58eb2b3c43a33f7ef100ced8bdde84040d71865ee6ee824a6ac90357601a9866120a169e647ccaba1be5a2c8ab85922ac726e0dc176754b43dd92464615fb5dbb209ecc9af5b3bfad98d980c47d1e6f20ebcdba969bd04430fef90364dee2b8e936d7b1be4b0bcd8a716166fa423b87cb6a93e247334e9ca3c89bde406e2249f0a42ff61c0aae5c1046aec4a4584de4abc88e8d8794749d8bdd77aafb027602fec6e9f07f00dd43fb992d9079ec1b4281febc4cdc915a8d22c42a9cb51d86902ca74457c6eafc0f1e24c296ddfc36e9f45acae0c77d132ef2dd17bc597cd67bc2b8ed85abf844bf5298af4b6b022d4a2273d9902dcfeee9a06e4843610374353745c30a29a564507118ba0587143a968c6b0265aa03688ddf2ca8f6d2fa13f2cbc02095445dde959282ac2628d751a292d096a4701496359a31090859cf9c22d075ce01fd3f5e5116123d2d74a17187f71dff7a38a1050d47268ba9d5b6f77e98683c6f2a79401148adee871a8bb19ee678655f38f2e0f046aeb6796c8bdcfec54732f45d7a3e7124c2f9ceae8aeec6fd006123f35fb988f52ee454c3aa160df711574d456b66bb183482420d949a85174869e00a15545dfc8beb7f3ad7cac7e5bedd26856b3d26531a46d3da643663de6e011fd03ee546c26e40ccc9d044d30900419a9faa6bbf3e9b69b6a73723ed83d80d35c58c44c840185ee81efc49fa9f2b5a65555f21a36e39d637b1ef3ecd57ac7f8599029f98d758a8e159b61a8fef2e6760cfe5a72432034411089ef91396416b84633105300388c62fbdc6497843034bc9fc9d4e8ce6f0ceecd5ff405d53cec320f65d5b472ee74cbcc9ab476706b9c1c3a47ca8f42d54040787bdf73845a0de1ade02adf6cde8e35498b41222cf87d25ba7059e82be90cb3121b5ae89612345046ac2b5824eb7093fe4a9d8a9f78bcd0c29a71f6721debfb8c1d20936f9b4dbedd915af97aa0137e720e05d83bbef0a183b05d2dedf5de2d5b1666f863279a12469c3f7e0eeeef887320cae2717fe642d2a7e8b058d7132e51517b4f09b879dd92f1437f79ca63654c92d4a22b46dc88c46a2c030516da8c8c43a3ecbf95b7826f6afec447798c69b55387f6b74abf436609501adcd99ef76dd80901edaaa0f3eedd31499f159bf9d8ddf0abbcc73c7177ca7f067d8b2c43121db106bfc1c936989eb86eefb3f443fe05a34879316d8ecc66abddc5fd8fcd3d10431c3d2191f6bc71cfa7810c64ad7019bb0c30866462278ac9830897a0f0c3bfa66a4f3663c52604d3b28b3c79924f0cde88eff3f353233c923db948be47dd15621dfb7f70605bd3eb4668dad88857fb940919f2623f6672936f84598985262d28f33fc214e330b1c06197d95c74f618e6524cd657dfe9ea8452ca3e8bd971210c39b378922578cd407802461c5f68f2b25ac11e2d4d33495cf402c1ef843f963a2517b1e5dc2919b00ccbc4cdcd3a09ef2148ac6820d8223d63f6ebe6ca0ff8bac5dc985bbc46555dbd41c0e66b9572253a91f2c449ed9599243356b1056d4b1bc8e83c9b99ca3c1703070279ae32d7bd5bf974681f8c8ab9ee528c166f61f1f279c3402ac61ff6603852508ba4689eb8410e23979ef516e413c8b64d74365faaf470473eab9638dec9bc95f99bcd27562a9a83f2038efaeda222982a47f24411b3c4dc2502b8f8f0042c2e138be2918bd388989baba725622d1ba91b5003376f186427d40f1f9052004d128fd311674f55ecbce7ce538a9aeb4aa48c6f9051007c6580279d8c1442a93e3ad189240eabacb2704854c0e9c3b295ed42a97d898521f60edd0bde8e42d795163f6192446e76e40753688d86479d01aaf128e4a1015249e3beaebd18a04c52e57459eadadb2b44c3da2d642f05b59554ef38bc10c12ff20acf573a301512ef97bbfd9741ee470ec5c55f03f7401c19e28f06f2d5c37df0b1f6d8898a4e0067dff6ccc3e9e8a9c3838490cf70103c12f147f97d729fa6ecaf17867b265f842963b02551260b67bbadb8b675153f5b54e9d80cb97f2e16ec63ba8ba14769dc5516dc284c958d8be5316bf26964d6b602bcfb509c25aec9f41a8e571d76cde43980568b6abe43a09fc989fc9ae8145a97ee035292b7d19e8b50820dd2273c2528c437dc7b6ed9f06f59d44ada1e52fbf1fd82af9f862ca72b22d0a327ab302c8d6e759aa411939f13594d447d72fec6301f9c668fbb38ad38f9eb841a4ee7df775e1ee841caf44d29a0c2a799416a6b8addbfe57bf7148ea4d6e952fba4a708fcb1b4582a6e6b834d205703a0962518d4de1bfb94d26705f9f3a2ee79b3030ce0e7afca0fe1f70c2a58d1cffac7ee44ec4ea906c57daec5421f40cae62d2d52fdf85cdd6ca2ac3198b0f8041b154a92dada691d716deff4a4564683f38d18465ece970be377db288a558246155a35bb696c863d1a3f0e50cc0ff88ae8c99c28068e6164ef5467bdec8bb8836d018a959a87f58deb15b3b3e7de741f3478b2d1ef908ad17ae9e26b227e531008c0c95ebe520b29218d229ecd955c8c43ca237e2a058864412b59b43fc6ce77c989d94bd5a8bf79d1142af8c7e8696dd5d0724bd8bff2adcddf10256a1fc73e0eb43a328404cdae3942465ace503e4fbcdbeaa9a55c66e3f427a4c7feec2ba93cbe573cf53e5a31e1b08f62912b2b3691e26eba2e133fad4002484c0d4c5c3074c05104b6d210936b103441efe8078ee79b13402a61a794e1a0a9f3881c4da4f9ebe2c3a6ec3019ee2dd19f3b670733353027392996d8015f5fb4fdba69b6497a33a93229edd489e0a7f4cbda812d0cd1645b9d9a5f38492702e9d2d450a0c8faf906ae1a4e88ded78efa546c041234aacd86b3f94aad47b4f67d6e61a095ea3573d407bac89c4450a9ffcfcfdc09f458719c1f759a7b58bfaf1807d03887c5f11980263a2555248aeff44ecfce1debed966d12cc2b34293814b4cac150e50355e92a093adb1284649e7e9c75ec2d9a664bda62f6bbe1491c1333b6b3a29b186d0fd7dca6270b066920cecfeace9053556ceae5aa6bd8ff427450a3bcdf6fa9a98fa99ed9cb79cf6978b08045f8d1767e5c9fc862d4bb525d5f5e5ee2b290a0d052069d1ee947238cf62f4dca716f4849a0f3de745a445b885ab01fbf936ba7ca5a49fc1844916cd4c664aef15c572ffd7d3f8a19d8b7e46bd8b31e24ac5028d3bfa947eb4465fdc7d5c72bf1141a87f5284b03a7772bf48183bf930465082d49f560618d63671eb4a3eb21c5a72388774dba32d651d37fbb2bd2892452231f4f8d2d068bfcd89598ce00e417c8c3708f8d4287b49b8a4579f2ace1d988528bed772c089ac1b9203febc89ca93670197c08bb1a9ac4ac8c6d470aa01ac9fd35"}], 0x1bd8}}, {{&(0x7f0000004840)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000009ac0)=[{0x0}, {&(0x7f0000004a00)="5c5396a2d3048b365c19ffa7fcca497017f2868854f6cfce9b5cbb7821ba93738c33d7ef4389275c4a209d586acbc30b298f17e5c9187cc98254fffb5598cc0b8aca841ebcefb6653ccdbd93c2b78702b566b6604c34331973d273e28f66b36398a76d47cf", 0x65}, {&(0x7f0000009880)="280948f82ede773919ec8139f9ea3aad9f50ee7e1b9a1162ee56298ff40108aadced5d6885075915c822c55e5ab2dd9eee95ce76b825813a166aa7fe267d1d3debe063cd2e922093a66dbaeaf6eff653ea6f", 0x52}], 0x3, &(0x7f0000004bc0)}}, {{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000060c0)="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", 0x18c}], 0x2, &(0x7f0000007100)=[{0x68, 0x110, 0x0, "8765e9f5f20f7dd790bfaee8318c1845203aba47404953527f312e5db8667983d4e8d9a280f1000f7259a39ec0d9635005d78b79297d6057c0ad345ea9f630bc398949bcc94464776553b65db2a2c921f0"}], 0x68}}], 0x3, 0x20000000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x34000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r6, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x6, @media='eth\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2226.316839][T28780] Unknown options in mask 60 [ 2226.329603][T28778] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2226.346198][T28780] x_tables: duplicate underflow at hook 1 18:52:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b300001000078002000180"], 0x38}}, 0x0) [ 2226.380747][T28780] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 18:52:35 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x87a, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2226.497895][T28799] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2226.511519][T28799] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b300001000078003000180"], 0x38}}, 0x0) 18:52:36 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x900, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:36 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x1200, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2226.809935][T28789] x_tables: duplicate underflow at hook 1 [ 2227.151292][T29879] tipc: TX() has been purged, node left! [ 2227.162622][T29879] tipc: TX() has been purged, node left! 18:52:37 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) splice(r0, 0x0, r5, 0x0, 0x10004, 0x0) 18:52:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b300001000078004000180"], 0x38}}, 0x0) 18:52:37 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x2f00, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000001) recvmmsg(r1, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:37 executing program 0: socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet(0x10, 0x2, 0xfffffffd) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0x0) pipe(&(0x7f0000000100)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000004) r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='5\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002bbd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x1d54a038cec019f5}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="d00c0040e125d5ac6f3571fe0fdbc19461685a3422673f44f33710e01746de5bc473617b4f6bbea5f366fe500549269216e150123bec859dbcbfc33dbbd588af09dca88e7060e99e597f1080c049203bab6906fe1638e2a4cc039b12a5ea2334108374f089dad2edeae02f665d02230ffc05d5dd2b7829c19657fe2d04b11b9f23682a5181fc20782370b341b341f566ea5c40d2047d896de8d6285ef74d07c01240908011835501a5a44da683bc1936a915dba16d14eae3320907aea128", @ANYRES16=r0, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x14000}, 0x8000) 18:52:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b300001000078006000180"], 0x38}}, 0x0) [ 2228.001019][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 2228.001031][ T27] audit: type=1804 audit(1591210357.526:2487): pid=28839 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3320/cgroup.controllers" dev="sda1" ino=16362 res=1 18:52:37 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x4305, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x1d5b, 0x400, 0x4, 0x1, 0xad, 0x0, 0xf83}, 0xc) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x101, @local, 0x101}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000001c0)=0x401, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x124, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NET={0x70, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xcc2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcc}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x804) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x2c0, r4, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xde6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x61}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x9, @ipv4={[], [], @multicast2}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}, @TIPC_NLA_NET={0x70, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xae2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x118, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x67}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1a4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc9b047a}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x200, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d73}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe3e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r5, 0x0) openat$cgroup_ro(r5, &(0x7f0000000240)='memory.current\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2000) 18:52:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b300001000078007000180"], 0x38}}, 0x0) 18:52:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x9}, {0x1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @broadcast}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x200}]}}]}, 0x44}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00%\x00%\b\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="c5c270e8"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x118, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3f}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}, @ETHTOOL_A_LINKINFO_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0xd}, 0x20000000) r10 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r10, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:52:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800a000180"], 0x38}}, 0x0) 18:52:37 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x5000, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2228.209508][T28857] __nla_validate_parse: 5 callbacks suppressed [ 2228.209518][T28857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2228.326807][T28859] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2228.346305][T28857] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2228.490994][T28859] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2228.501315][T28859] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2228.512654][T28859] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 18:52:38 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socketpair(0x1e, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f00000000c0)=0xff000000, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r6, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r6, &(0x7f0000000380)="cfb791e9a3ffa8188aa7e2ee28a95c160c7418a7e6e3a3e5bacc2825d9d54c9d8398ca3c91fbbb501072f4a0842e1eaa04a61dcf33124c9f8fc6de8de7926629d8691f08ff6d58b1cb7160d7a0ec427540e0a10e1fd936a8da830abedf04a416894b533d64a4f8dbef1f7a1e06f1c549d2d21dc111d5d62c867845f08f0d2b65d596a34265d99ed00f19461854529280eb957279217cfd61d517fe183036e840c23a9d8c8d0fd09d784b7be7919ddbe7871e8d58e4b6", &(0x7f0000000440)=""/216}, 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) openat$cgroup_subtree(r1, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) pselect6(0x40, &(0x7f0000000180)={0x9, 0xfffffffffffffc01, 0x81, 0x1f, 0x100000000, 0x2, 0x1, 0xffffffff}, &(0x7f0000000240)={0xc37a, 0x6, 0x14, 0xffffffffffffff01, 0x7ff, 0x2, 0xffffffffffffffff, 0x6}, &(0x7f0000000280)={0x1f, 0x4, 0x300000, 0x1000, 0x8, 0x8, 0x5}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x4]}, 0x8}) 18:52:38 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x7f00, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b300001000078010000180"], 0x38}}, 0x0) 18:52:38 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x0, 0x0) unshare(0x40000000) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f00000001c0)={0x9, 0x9940, 0xff, 0x80, 0x9}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newrule={0x68, 0x20, 0x10, 0x70bd26, 0x25dfdbff, {0x2, 0x80, 0x0, 0x80, 0x81}, [@FRA_SRC={0x8, 0x2, @private=0xa010102}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x81}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x100000000}, @FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e22, 0x4e20}}, @FRA_TUN_ID={0xc}, @FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, @FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$inet6(0xa, 0x0, 0x3a) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000006404010027bdff070000df252b9e862c57a91500ff7b2b6c51da51d0282fce4ca05b624f18b68b0916aa94ca035fa339a2ee57e521c927272ea5949d171886969edf1908afde43d50e5ad92790ba6600"], 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x20004100) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @window={0x3, 0xffff, 0x1}], 0x2) setsockopt$inet6_int(r4, 0x29, 0xd1, 0x0, 0x0) 18:52:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000001) recvmmsg(r1, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:38 executing program 0: r0 = socket(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x275a, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) r3 = socket$inet(0x2, 0x802, 0x7fffffff) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x460, 0x0, 0x5002004a, 0x3, 0x2e8, 0x5, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @fd}]}, @unspec=@CT0={0x48, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@loopback, @in6=@mcast2}}, {{@in6=@private0}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) sendfile(r5, r4, 0x0, 0x100000001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x100000001) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r9, r8, 0x0, 0x100000001) 18:52:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b300001000078027000180"], 0x38}}, 0x0) [ 2229.179787][T28886] IPVS: ftp: loaded support on port[0] = 21 18:52:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0), 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000188000001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000005b47b4b04fed4e2a21ad8beb06b167de4283ffaec56d159e56a166c9db835a8808a86292f4bea321847a42767a7b89b65e4841c9695825a4b10dd5cb8b24f89f29ceef0a428124dcefb40b6b8ce6222864e92d22b053bda211a0aa613e4d66c8a0490480cbaca2b1216ca5637c028cbe0af4fd21ed36a2ddd56830044f3ead6d80d6f3f39955a2bb6662c29c913e8356d5a58ddb4293241f2ed955ffa0b9"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f77000000003400020030000b8008000100060000002447af32000280a080010000000900000000000b000200706fc2699e5f00000800010000000000"], 0x64}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:52:38 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x8035, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2229.242131][ T27] audit: type=1804 audit(1591210358.766:2488): pid=28889 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3321/cgroup.controllers" dev="sda1" ino=16365 res=1 18:52:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b300001000078058650180"], 0x38}}, 0x0) [ 2229.298673][T28886] virt_wifi0 speed is unknown, defaulting to 1000 18:52:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b300001000078000810180"], 0x38}}, 0x0) 18:52:38 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x8100, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2229.782161][T28886] virt_wifi0 speed is unknown, defaulting to 1000 18:52:39 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="ffff8982ff160280c20000aba000000081e11dcfd6004500001400dba20000030000000000"], 0x2a) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000000c0), &(0x7f0000000180)=0x4) socketpair(0x3d, 0x1, 0x3, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:52:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c030080"], 0x38}}, 0x0) 18:52:39 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x8847, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2229.922654][T28895] IPVS: ftp: loaded support on port[0] = 21 [ 2229.968616][T28925] net_ratelimit: 16 callbacks suppressed [ 2229.968629][T28925] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2229.990198][T28895] virt_wifi0 speed is unknown, defaulting to 1000 [ 2230.001021][T28925] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2230.181472][T28886] virt_wifi0 speed is unknown, defaulting to 1000 [ 2230.437216][T28895] virt_wifi0 speed is unknown, defaulting to 1000 [ 2230.655166][T28895] virt_wifi0 speed is unknown, defaulting to 1000 18:52:40 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x0, 0x0) unshare(0x40000000) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f00000001c0)={0x9, 0x9940, 0xff, 0x80, 0x9}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newrule={0x68, 0x20, 0x10, 0x70bd26, 0x25dfdbff, {0x2, 0x80, 0x0, 0x80, 0x81}, [@FRA_SRC={0x8, 0x2, @private=0xa010102}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x81}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x100000000}, @FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e22, 0x4e20}}, @FRA_TUN_ID={0xc}, @FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, @FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$inet6(0xa, 0x0, 0x3a) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000006404010027bdff070000df252b9e862c57a91500ff7b2b6c51da51d0282fce4ca05b624f18b68b0916aa94ca035fa339a2ee57e521c927272ea5949d171886969edf1908afde43d50e5ad92790ba6600"], 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x20004100) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @window={0x3, 0xffff, 0x1}], 0x2) setsockopt$inet6_int(r4, 0x29, 0xd1, 0x0, 0x0) 18:52:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000001) recvmmsg(r1, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:40 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xc, &(0x7f00000001c0)=0xedc, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000140)={'ip6tnl0\x00', {0x2, 0x4e22, @multicast2}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000000c0)={0x0, 0x18, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r7, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRESHEX, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r10}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r11}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}]}}}]}, 0x40}}, 0x0) 18:52:40 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x8848, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c040080"], 0x38}}, 0x0) 18:52:40 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) ioctl$int_in(r3, 0xa8d7, &(0x7f0000000000)=0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x5, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000180), &(0x7f00000000c0)=0x80) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) [ 2231.216494][T28981] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c020180"], 0x38}}, 0x0) [ 2231.275237][T28981] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2231.292390][T28985] IPVS: ftp: loaded support on port[0] = 21 18:52:40 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x8864, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2231.326433][ T27] audit: type=1804 audit(1591210360.846:2489): pid=28984 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3322/cgroup.controllers" dev="sda1" ino=16371 res=1 [ 2231.367671][T28983] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 18:52:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c030180"], 0x38}}, 0x0) [ 2231.430008][T28988] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2231.465901][T28988] team0: Port device bond4 added 18:52:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c040180"], 0x38}}, 0x0) [ 2231.537767][T29042] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2231.569708][T29042] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:41 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x8906, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2231.596189][T28985] virt_wifi0 speed is unknown, defaulting to 1000 18:52:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c050180"], 0x38}}, 0x0) [ 2231.661543][T29053] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2231.675109][T29053] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2231.877796][T28985] virt_wifi0 speed is unknown, defaulting to 1000 [ 2231.900428][T28991] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2232.102635][T28985] virt_wifi0 speed is unknown, defaulting to 1000 18:52:42 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg$can_raw(r2, &(0x7f0000000180)={&(0x7f0000000200)=@ethernet, 0x80, &(0x7f0000000640)=[{&(0x7f0000000280)=""/133, 0x85}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f00000004c0)=""/163, 0xa3}, {&(0x7f0000000580)=""/181, 0xb5}], 0x6, &(0x7f00000006c0)=""/199, 0xc7}, 0x40000000) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000706afc71d94f4d7d300000400259ca3ff76af72d86f4f98dde1de852ca3f2f7d46dbd32a0872f292d8242401afabb7f5fe796444e90033675e63c91df2a7b09df892d0c78ec198bd67094d445bd547a1e28d36507a598d24ecd67b97e08c895d010791e46dd28aa4a088c"], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x3, 0x20000000021) write$binfmt_script(r1, &(0x7f00000007c0)={'#! ', './file0', [{0x20, 'vmnet0vboxnet1)wlan1&+ppp0em0lo.'}, {}], 0xa, "f10cf98748bbdbab5ab99f0c7794a1e477da837e7ff323448be6cc5fe44392f845482929c0839e2e6f32ae2227d51fda999bb20ae3b06453973823c04c920d46d130757087c8b8522ec298aa3b769783582dc18f06f20df51c5462af472602641a8cf3b328d59890079fd97b4e041f3125cfbbc07bcd453975181e9133fc9d91f6fbdd8de4e9cc85f9b12201cfa8055f471aace8de101081670103610694cba4989e54cf19ef5635e7a7e2f28d5b797777b573e1bb5c79c1a8262aee2cbdc200d3ecc58cc7fa68345f4305ecd284d3336e33c4fc3dcef362d4b65200d0515a27272c67a602a5ae32d35334956a6d313ecfe1fafb510838"}, 0x124) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) 18:52:42 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x2, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c090180"], 0x38}}, 0x0) 18:52:42 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x4b, &(0x7f0000000300)=ANY=[@ANYBLOB="a9"], 0x78) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b76795008000537287bb000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r2}}}], 0x28}}], 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000001c0)={@remote, @multicast1, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_deladdr={0x60, 0x15, 0x200, 0x70bd29, 0x25dfdbfb, {0x2, 0x78, 0x56, 0xfd, r4}, [@IFA_FLAGS={0x8, 0x8, 0x40}, @IFA_LABEL={0x14, 0x3, 'veth1_to_team\x00'}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_LABEL={0x14, 0x3, 'veth0_to_batadv\x00'}, @IFA_FLAGS={0x8, 0x8, 0xd0}, @IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4840}, 0x841) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) getpeername(r5, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000380)=0x80) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000040)={r8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000540)={r8, 0xf7}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f00000005c0)={0x8, 0x10, 0xfffffffa, 0x6, r9}, 0x10) 18:52:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:42 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000000)=r7, 0x4) 18:52:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c0a0180"], 0x38}}, 0x0) 18:52:42 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x3, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2232.872337][ T27] audit: type=1804 audit(1591210362.396:2490): pid=29082 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3323/cgroup.controllers" dev="sda1" ino=16380 res=1 18:52:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c0e0180"], 0x38}}, 0x0) [ 2232.972398][ T27] audit: type=1804 audit(1591210362.486:2491): pid=29092 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2118/cgroup.controllers" dev="sda1" ino=16384 res=1 18:52:42 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x4, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c0f0180"], 0x38}}, 0x0) 18:52:42 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2233.236204][T29113] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2233.258625][T29113] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg$can_raw(r2, &(0x7f0000000180)={&(0x7f0000000200)=@ethernet, 0x80, &(0x7f0000000640)=[{&(0x7f0000000280)=""/133, 0x85}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f00000004c0)=""/163, 0xa3}, {&(0x7f0000000580)=""/181, 0xb5}], 0x6, &(0x7f00000006c0)=""/199, 0xc7}, 0x40000000) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000706afc71d94f4d7d300000400259ca3ff76af72d86f4f98dde1de852ca3f2f7d46dbd32a0872f292d8242401afabb7f5fe796444e90033675e63c91df2a7b09df892d0c78ec198bd67094d445bd547a1e28d36507a598d24ecd67b97e08c895d010791e46dd28aa4a088c"], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x3, 0x20000000021) write$binfmt_script(r1, &(0x7f00000007c0)={'#! ', './file0', [{0x20, 'vmnet0vboxnet1)wlan1&+ppp0em0lo.'}, {}], 0xa, "f10cf98748bbdbab5ab99f0c7794a1e477da837e7ff323448be6cc5fe44392f845482929c0839e2e6f32ae2227d51fda999bb20ae3b06453973823c04c920d46d130757087c8b8522ec298aa3b769783582dc18f06f20df51c5462af472602641a8cf3b328d59890079fd97b4e041f3125cfbbc07bcd453975181e9133fc9d91f6fbdd8de4e9cc85f9b12201cfa8055f471aace8de101081670103610694cba4989e54cf19ef5635e7a7e2f28d5b797777b573e1bb5c79c1a8262aee2cbdc200d3ecc58cc7fa68345f4305ecd284d3336e33c4fc3dcef362d4b65200d0515a27272c67a602a5ae32d35334956a6d313ecfe1fafb510838"}, 0x124) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) 18:52:43 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c600180"], 0x38}}, 0x0) 18:52:43 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:43 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x4, 0x9, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000380), &(0x7f00000003c0)=0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000300)='sit0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x7}, 0x14) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xff11) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) [ 2233.912643][ T27] audit: type=1804 audit(1591210363.437:2492): pid=29123 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3324/cgroup.controllers" dev="sda1" ino=15937 res=1 [ 2234.052378][ T27] audit: type=1804 audit(1591210363.577:2493): pid=29126 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2119/cgroup.controllers" dev="sda1" ino=16001 res=1 18:52:43 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000580"], 0x38}}, 0x0) 18:52:43 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x5, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000180)={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, [], 0xb}, 0x1, 0x7, 0xfff, 0x0, 0x7, 0x0, r7}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)=ANY=[@ANYBLOB="48000000020601000000964658090000000000000d000300686173683a6d61630000000005000400000000000900020073797a300000000005000500020056cca869000000220000"], 0x48}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0x5, &(0x7f0000000000)=0x6, 0x4) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:52:43 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x2, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000680"], 0x38}}, 0x0) [ 2234.372095][T29138] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:52:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000980"], 0x38}}, 0x0) 18:52:44 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x3, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2234.514052][T29146] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 18:52:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="7c0000002400697c98b8fd3fbf9f000004002000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000900010067726564000000004c0002000800050000000000080005000000000038000300050000000000000000ceb860000000000000000000000000020000000000da6e0856d62c"], 0x7c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x5, &(0x7f0000000100)}], 0x492492492492642, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) sendmsg$nl_route(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x50050}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_getmulticast={0x14, 0x3a, 0x20, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4542c7db75cf8ea3}, 0x400c045) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="010000001aa5df6827391426107b04e0c85982a4ba1e06b273a5debc70f9f3ddbd716865e2c783142dea65aadde9b22a76efdad0886fe53d42ae46290e1b620a0f7ed56d6278d845b4a0f386de4f4d96d12d3307a05bc5b8a96eafc70118a9b3485d94ee42daf3e1f75280273bfc35e484fc925ea8703827f4a8c4c16d61e66be6e36bacbe593a1e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r7, 0x89e5, &(0x7f0000000700)={0xf, "b5f6aa1ec56b036daae9d6f2038908704bb61184ec6c266b39a851b29f22b3773818514bb8b028e00e4e4a373f880cff274c353e02795dac3a2f2a6ab263dc7df10c3c45fa0648a711aa9220df9c914192335396dae1c0faddee6b6b52b6cd11ee208e668a1a35f71e7e011da646737d4c3512cb69a22e7d326de50b3372023b"}) 18:52:44 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x5, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000a80"], 0x38}}, 0x0) [ 2234.836027][ T27] audit: type=1804 audit(1591210364.357:2494): pid=29154 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3325/cgroup.controllers" dev="sda1" ino=15986 res=1 [ 2235.157230][T29879] tipc: TX() has been purged, node left! [ 2235.163413][T29879] tipc: TX() has been purged, node left! [ 2235.177584][T29879] tipc: TX() has been purged, node left! 18:52:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000b80"], 0x38}}, 0x0) 18:52:46 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x6, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:46 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='macvlan1\x00', 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000180)={0x0, @ax25={0x3, @null, 0x3}, @in={0x2, 0x4e22, @remote}, @generic={0x15, "547a58e7a5847cd2bafec588a11b"}, 0xef2, 0x0, 0x0, 0x0, 0x7fff, &(0x7f00000000c0)='ipvlan1\x00', 0x4, 0x2000000000, 0x20}) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:52:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(0xffffffffffffffff, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/180, 0x4}], 0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000001c0)={0x0, 'syzkaller1\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @dev}}) 18:52:46 executing program 1: unshare(0x40000000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) r1 = accept$nfc_llcp(r0, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000040)=@buf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) getpeername(r2, &(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000540)=0x80) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000580)={r3}) socket(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000048580072c3e6bd2204000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32, @ANYBLOB="c1535408bf25b3c7eac2864146c70a41eb1f07efaf1ceb2d2592a90c6d254b42ea87c074aa1e0519d7a771c871f8d20e6c2195df863a315b8145563eae5a129847f6946ee0d2840ce9fb729004f9db3e84390111c0315162fd7480d78fde631a8e150cc14fb2d7c66850c4a3759b50c2269ff9fd4e4fda145a82ac165fb9300edf6a3f266b338045dc02a96d7e0406560060e5b74bb255d05cd9b7000000"], 0x3c}}, 0x0) [ 2236.871581][T29178] IPVS: ftp: loaded support on port[0] = 21 18:52:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c001180"], 0x38}}, 0x0) 18:52:46 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x7, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2236.971750][ T27] audit: type=1804 audit(1591210366.497:2495): pid=29188 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3326/cgroup.controllers" dev="sda1" ino=16339 res=1 18:52:46 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x9, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2237.081893][T29178] virt_wifi0 speed is unknown, defaulting to 1000 18:52:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c001280"], 0x38}}, 0x0) 18:52:46 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e24, 0x8000, @local, 0x5}}, 0x8000, 0x17, 0x0, 0x7895, 0x5}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r3, 0x9fc00000}, &(0x7f0000000340)=0x8) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) r4 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) getsockopt$inet_tcp_buf(r4, 0x6, 0xb, &(0x7f0000000080), &(0x7f00000000c0)) syz_init_net_socket$ax25(0x6, 0x5, 0x8) 18:52:46 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c061280"], 0x38}}, 0x0) [ 2237.336267][T29205] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2237.379255][T29205] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c001380"], 0x38}}, 0x0) [ 2237.640502][T29178] virt_wifi0 speed is unknown, defaulting to 1000 [ 2237.732559][T29185] IPVS: ftp: loaded support on port[0] = 21 [ 2238.145135][T29178] virt_wifi0 speed is unknown, defaulting to 1000 18:52:47 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'veth1\x00', 0x20}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000000)='geneve0\x00') splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:52:47 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c001e80"], 0x38}}, 0x0) [ 2238.300321][T29222] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2238.333264][T29222] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f00000002c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}]}}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x80, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x46182}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x50, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}, @IFLA_GRE_LINK={0xffffffffffffff83}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x0, 0xf, 0x96}, @IFLA_GRE_LOCAL={0x8, 0x6, @broadcast}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x18420}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x5}, @IFLA_GRE_ERSPAN_HWID={0x0, 0x18, 0xfff1}]}}}]}, 0x80}}, 0x0) recvfrom$netrom(r2, &(0x7f0000000100)=""/219, 0xdb, 0x42, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001800)={0xffffffffffffffff}) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000001840)={0x8, 0x200, 0x7f, 0x6000000}) 18:52:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(0xffffffffffffffff, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(0xffffffffffffffff, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c003f80"], 0x38}}, 0x0) 18:52:49 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:49 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='pids.events\x00', 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) socketpair(0x26, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fddbdf25050000000c00040005000000000000004400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="0c000100", @ANYRES32=r1, @ANYBLOB="0c0004000200000000000000080001000000000008000100000000001400078008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0c0003000800000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x24008000}, 0x4050) write$tun(0xffffffffffffffff, &(0x7f0000000200)={@void, @void, @eth={@broadcast, @link_local, @val, {@canfd={0xd, {{0x2, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "f717ec01df8504562061890573376323d6eb7ef8b8ada28c4da764e9a42269473b71148e76240407d523bded992c6298e98a29ea177eb596eac7b8371727c00d"}}}}}, 0x5e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) [ 2240.213472][T29255] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c004080"], 0x38}}, 0x0) [ 2240.260494][ T27] audit: type=1804 audit(1591210369.777:2496): pid=29259 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3327/cgroup.controllers" dev="sda1" ino=16366 res=1 18:52:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(0xffffffffffffffff, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) [ 2240.318266][T29255] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:49 executing program 0: getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x1000, "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"}, &(0x7f0000001040)=0x1008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001080)={r0, @in6={{0xa, 0x4e23, 0x7fffffff, @mcast2, 0x4}}, 0x1000, 0x81}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000001180)={0x0, 0x9bc1}, 0x8) pipe(&(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(r2, &(0x7f0000001200)='memory.current\x00', 0x0, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000001240), &(0x7f0000001280)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000012c0)={r0, @in6={{0xa, 0x4e23, 0x4253, @private2={0xfc, 0x2, [], 0x1}, 0x401}}, 0x4, 0x9}, &(0x7f0000001380)=0x90) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f00000013c0)=r4, 0x4) r5 = openat$cgroup_ro(r3, &(0x7f0000001400)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f0000001440)=0xa5da) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000001480)={0x2, 0x0, @broadcast}, &(0x7f00000014c0)=0x10, 0x7b09300253a224b6) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000001500)=@assoc_value={0x0, 0x74}, 0x8) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001640)={0x0, 0xcc, &(0x7f0000001540)=[@in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0xba, @mcast1, 0x400}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0xffffffff, @private0, 0x2}, @in6={0xa, 0x4e23, 0x1000, @rand_addr=' \x01\x00'}, @in6={0xa, 0x4e23, 0x40, @dev={0xfe, 0x80, [], 0x25}, 0xffffff81}, @in6={0xa, 0x4e24, 0xfff, @empty, 0x7f}]}, &(0x7f0000001680)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000016c0)={r7, 0x11a}, &(0x7f0000001700)=0x8) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001740)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x40}}, 0x23, 0x0, 0x0, 0x0, 0x7, 0x0, 0x883, 0x1}) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f00000017c0)={0x281, 0x3}) r8 = socket(0x23, 0xa, 0xfffff670) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000001f80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e40)={0x100, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0xbc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xff18}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x63}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x43d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6293f85d}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa57}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x44010}, 0x810) [ 2240.370835][ T27] audit: type=1800 audit(1591210369.787:2497): pid=29259 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=16366 res=0 [ 2240.404335][T29262] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 18:52:50 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000280"], 0x38}}, 0x0) [ 2240.461363][ T27] audit: type=1804 audit(1591210369.787:2498): pid=29260 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir911542418/syzkaller.OPMwZH/2939/cgroup.controllers" dev="sda1" ino=16365 res=1 18:52:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f00000002c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}]}}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x80, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x46182}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x50, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}, @IFLA_GRE_LINK={0xffffffffffffff83}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x0, 0xf, 0x96}, @IFLA_GRE_LOCAL={0x8, 0x6, @broadcast}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x18420}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x5}, @IFLA_GRE_ERSPAN_HWID={0x0, 0x18, 0xfff1}]}}}]}, 0x80}}, 0x0) recvfrom$netrom(r2, &(0x7f0000000100)=""/219, 0xdb, 0x42, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001800)={0xffffffffffffffff}) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000001840)={0x8, 0x200, 0x7f, 0x6000000}) [ 2240.588614][T29276] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2240.615301][ T27] audit: type=1800 audit(1591210369.787:2499): pid=29260 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=16365 res=0 18:52:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000580"], 0x38}}, 0x0) [ 2240.669543][T29276] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:50 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000400)={@local, @empty, @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000003}) [ 2240.733938][ T27] audit: type=1804 audit(1591210369.817:2500): pid=29253 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3327/cgroup.controllers" dev="sda1" ino=16366 res=1 18:52:50 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000680"], 0x38}}, 0x0) [ 2240.820315][T29284] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2240.841229][ T27] audit: type=1804 audit(1591210369.817:2501): pid=29254 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir911542418/syzkaller.OPMwZH/2939/cgroup.controllers" dev="sda1" ino=16365 res=1 [ 2240.887383][ T27] audit: type=1804 audit(1591210370.167:2502): pid=29271 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3328/cgroup.controllers" dev="sda1" ino=16368 res=1 18:52:50 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0x80000) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x5, @bearer=@l2={'eth', 0x3a, 'batadv0\x00'}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x80) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000100)={0x3a, 0xe, [], [@calipso={0x7, 0x20, {0x2, 0x6, 0x70, 0x4, [0x1, 0x101, 0x2]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}, @jumbo={0xc2, 0x4, 0x412}, @ra={0x5, 0x2, 0x8b5b}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0xff}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x74a}]}, 0x80) socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180), &(0x7f0000000280)=0x4) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cfe6dba", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000002) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000200)={{0x6, 0x0, @identifier="2d87c9b7de56ba012b62f0c2f5309301"}}) [ 2240.967366][T29295] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2241.054298][T29295] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:51 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000180)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000000)={'veth1\x00', 0x173}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x62, 0x0, @empty, @empty}}}}}}, 0x15) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:52:51 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 18:52:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000880"], 0x38}}, 0x0) 18:52:51 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:51 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00', 0xffffffffffffffff}, 0x30) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x6, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140), 0x8) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) 18:52:51 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000980"], 0x38}}, 0x0) 18:52:51 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @local, 'veth0_to_bond\x00'}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x5, @broadcast, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000140)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x11000008912, &(0x7f0000000040)="0805b5055e0bcfe8474071") getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f00000000c0)=0x9, &(0x7f00000002c0)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write$binfmt_elf32(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f450000009e9013d933c44d00000002000600ff0100002700100038000000b600ff0020000100040072a015386a90224c9dff030200000000003383358827d202217115c366f4ff6e9e213d746a76fc8ea01bcca490ac46a80be861fc5c76d914d6d698106bbcbcbdf7528967b7f461f760f7e8016d00000897e1541325e5"], 0x72) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8a06, 0x10000}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0xf3ef}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x9}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") [ 2241.832448][ T27] audit: type=1804 audit(1591210371.357:2503): pid=29313 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3329/cgroup.controllers" dev="sda1" ino=16364 res=1 18:52:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000a80"], 0x38}}, 0x0) 18:52:51 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x5, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2242.109200][ T27] audit: type=1804 audit(1591210371.637:2504): pid=29332 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2125/cgroup.controllers" dev="sda1" ino=16379 res=1 18:52:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000b80"], 0x38}}, 0x0) 18:52:51 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x6, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:52 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x502, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r7, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r3) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:52:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a051400000000000000000100000d0900010073797a300000000094ffff0000780a000001000000090001003200000000680000000000000080000000000000000000"], 0xf0}}, 0x0) sendfile(r2, r1, 0x0, 0x100000e00) 18:52:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 18:52:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c001080"], 0x38}}, 0x0) 18:52:52 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000140)=0xe8) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000280)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r2}) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, 0xf, 0x1, 0x101, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x1}, [@typed={0x8, 0xd, 0x0, 0x0, @uid=r2}]}, 0x1c}}, 0x40) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback}, 0xfe17) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x180079}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000ffdbdf25050000000534dca17f8cea025ed0de68990006006500001305000d000500050000000400018005000200080000000500020010000000080005000100000060be283957bbd7aee19011166610e4cc0d05d75c1b0a746d0081500b88ffe531f09bc8a0ea39293d600e05d40b8ffc480ae8b0fdc9a387d389d4b645"], 0x48}, 0x1, 0x0, 0x0, 0x40000c0}, 0x200160c8) [ 2243.073632][T29354] net_ratelimit: 8 callbacks suppressed [ 2243.073646][T29354] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c001180"], 0x38}}, 0x0) 18:52:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0x20, 0x2f45, 0x8000, 0x8, 0xd7, 0x22c9, 0x79, 0x1, r5}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x60}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 2243.154724][T29354] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:52 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xa, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2243.190340][ T27] audit: type=1804 audit(1591210372.718:2505): pid=29362 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3330/cgroup.controllers" dev="sda1" ino=16368 res=1 18:52:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c001280"], 0x38}}, 0x0) [ 2243.324565][T29372] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2243.385353][T29372] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2243.397015][T29371] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 18:52:53 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c001380"], 0x38}}, 0x0) [ 2243.554935][T29383] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2243.592339][T29383] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2244.093420][T29371] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 18:52:53 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r5, 0x0) openat$cgroup(r5, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) 18:52:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) socket$inet6(0x10, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000001340)="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", 0x117}], 0x1, 0x4800000000000) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000002c0)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000480)="7e927ce0952d9dbe3d82e52db4c98cf8f8", 0x11}, {&(0x7f0000000700)}, {0x0}], 0x5, &(0x7f00000009c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @txtime={{0x18}}, @txtime={{0x18}}], 0x48}, 0x40010) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000f00)={r3, 0x401, 0x10}, 0xc) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0xfffc, @multicast2}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x93, 0x0, 0x0, 0x0, 0x560, 0x0, 0x0, 0xd9a}) 18:52:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = accept4$tipc(r1, &(0x7f0000000300), &(0x7f0000000340)=0x10, 0x800) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000380)={0x0, 0x3}, 0x8) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4080) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socketpair(0x2c, 0x1, 0x1, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000200)={0x200, 0xb9, 0x2, 0x100}, 0x10) 18:52:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c001e80"], 0x38}}, 0x0) 18:52:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 18:52:53 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000100"], 0x38}}, 0x0) 18:52:53 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2244.268430][T29400] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2244.387929][T29405] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:52:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0xf}}, 0x0) [ 2244.443398][T29421] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:54 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e007b80e663ac24f6e8d1b8b77b9c5791513a49a976883313c786e60364c3a831df11acf18f6ddfc3c32729c6c1f824e1a44f0b12985e7a5ca37d233899adf14747070b3d644ee92c0c95656bd0abeb76c8f02fde"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000080)) openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000000)={0x2, 0x800000000000004, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r0, 0x1, 0x2}, 0x40) [ 2244.555393][T29421] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:52:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0xc0}}, 0x0) 18:52:54 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2244.759893][T29431] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2244.772955][T29431] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2244.880112][T29879] tipc: TX() has been purged, node left! 18:52:54 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000040)={r8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000000)={r8, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000002c0)=ANY=[@ANYRES32=r9, @ANYBLOB="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"], &(0x7f0000000240)=0x84) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e, 0x0, @local, @local}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:52:54 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000000)={'macvtap0\x00', &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES64, @ANYRES16]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) accept4$tipc(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = accept4(r2, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x80, 0x80c00) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') write$binfmt_elf32(r0, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x1, 0x5, 0x40, 0x8, 0x2, 0x3e, 0x1950, 0x38c, 0x38, 0x2a4, 0x34, 0x6, 0x20, 0x1, 0xe, 0x81, 0x8}, [{0x5, 0x0, 0x3, 0x4, 0x15000, 0x2, 0xa2, 0xa3d}], "5c1437331e15f689df9937f3aa72462c8bf4e23c67ee5b2a16d71fa473e2b3ea78b0247321bf25cb244af117abfc6db3f1917ac7618ec38adb6d4e2edeabae327f187497bdb58fde29d26d4c0c1691cf1d95a87ff0409f7d1171060e97eeb6800616e1b707ebdbd9a49a3db9a1775ded35009170363b4c01e0a810d1326ed93984d0881a7e4f5ad1a2ea0c0538aee09cd8ac0ac75fa30ff10b027b8582c2083504b32565f77e575bce9e7b1491bff800793f196490503025a72bbd1b9a098a244ffa4bfbe749456bbfa345fcce3170ae98937f756433086b2dd4508898257f027cbcbb420b24ebcfe058b7f59f42c2d8fa85acf4379511409be6660f354a97403e50e57eadb755c2d529270b8a398687fe8a329ca50af220fe7baa28f9615093b1996d5c75a95a516f444a7e677d7ea3bd4413dcc4315d9d0ba494d4288c36e938c77732a23580c689b33adf649c0f91dfc27c80eb37e48489ad836d263d41267e780ace941b3c6f8111b70750e3f27950db6688c34316b38ddb68b81c6fb51de15683601193055186e78dcee1daa914b172810027b0c36a61d3ed536d5ae33bde1a1e32005c13bc2693409c48e04b477dd4b7ae6ae46aabfa87934a59f04b9f8bae1e7eb6381fc4d0f0391ed74bc4d5576ab3d85f8cb37f04dec55a3bfb5cbc4ea734160bc974eaaa1a8d536660856aadca8248277aab0cf1d25f97b7e17d26311e27490c081d653147b394f2983fab781ef2cd3a7a37bdadb6c228a6b4748b5ab57d015e39d7d621271d8d58c3aea1ca06b3649a944083616679320a4fec4f8f3de4fac6948b7d02d01be00f943c86a334a8fd7581158f8363f24a91ea826ba517f59a96e1c1c31dc0a02edf6c69cd1b60b572bcef465347a1b62aea03ce6b29754f8747e80e3afe7ff314b58923a6ae5c1ee4efd51de1bed4156b798f0c292d250a3fb6b78fed3cce1ffa69fe2a01d187990f73a0da252e2da2d88aff61525e5f8bbf9945be0e46374134c1b7dd80a01d1f54b9023aff6ce1c26c8db08549a5df843228b95e566a11e4fe081c983568596f94ba1bba80ed26a010156e95891dd3307ac77fd579aa6ce6f156afe2f7654a82b89a3d2dc590ef624e9e7cbc8ea5c41ada177fe5f760f3b3905a16620d1eda2ae13566a404ab71b0b5b3d8c52b5d8549bf88866321db195b1974cc28e6d53b321b8fd7d5266368e0512aa6d57ad689b356b4ca43eab9ab6f7c83177280f5d7b49ba58902bf3fc7e8998f30ff1a6689bc2a1b1741b597911f1da769a78bb03d5114b9a4861ade92531ca1eb725b6e268ec01a6f9ba695f8b479088821ececa9a6f5769a3b189ac03c4537ab25a879dc552d2baf0f5c36e535f2bc7d78b12ec4e74f02aff94beaaef05da476d4bfd7247d31e7bf53c0e6fab0a34637c537bb27e0ace2ec24bf2958645158ec57774f878b6ff1ced8e1142ec2e9f161b6135ed4819a5e312acf013db73fe1a24f6ea684c939f0b901feb5c90e399a625213f9589d7a66caffead5264def8cb6d3b1b453f035abaa514e1f39c41715384272f6e0ce7139349255f33bb013faf2f35905fc853e24ad3d076e17fdd2e969514e99c956edd0eb87f1a17bd31531f7a3cd3672d913d47c6023e75c54415d3ed1ca211aee57bf5c9aa31c11c3296d94b836c9943817a8452288ebfa7263b1dd72168f162403422fff1f0a874346648af4c603e2443cd7375e58d93aee1cb2a17841092f4e111d710257fded0f1ff68ae9a2267d4c2e3811eaf7cbdec2a5e6c71d821bf6086c0605a11295fb652a335260f25cc667966472d9608e4852ce5083ed28fee897fe0fcbf3060eb7074ce852b41472ea931be01c407107437278f6bf23f08bc5d9823c2bb86ee077369bea20acf8f37e8ac633c5206afbba24560b25eb3c0a23e7aa51662a3f75c04ada85abc26045265a95f10eae3dc2d92c07c2dcea59a488b51f7b5172cdf6d0669b4ea5f8f613b4a46e6db5e2e8e4540c2d2c9404c2a760540e7979810b959811081922692e506bd976de227d75bc782a38f6957b8e72fcb0c7ef7e6c86f1cb4c9d098658499f436cd8cd861ab8ca7904c65ed60aea9db77de9c6d9f79e20c1d47d4cb2bcdfcac6596a285e279ae81d0ab7889e1699e0779106d3be2bc98a1ffa639159228ca9aab723dca2ac360b49756db3553e4d9b03bbdd319f8b7320ca8e897a752b67045316c2ae1f282aeb43aac3ca6104e2d95a3996cad9682b1ff7a016eeca7efa1408f6c04290ec9f68901b7cd3b057681fd32a6db258844ac2600b7d42639c3bc39692d87829473f6d37a93b3c3cbe2035c6c1b9c71cdeaf7b79190ea9124b90de6dc1a6d87d502897050a01fea0b9f14fb02e0b386da0b80f314498e4ff45b916989600b8cbc8a1445ab027405c955f0f1fdc13aa707870b16d8b252beaef808bf73ad4752c85da9eef9e35065bd4f113f6303cc45577bb339e8f36be01a3415d77cb516626fddffa740231bc1d7cddfab81e18c6c30143abac47774b41d5e02e188f3a4bf64717c4fc82ab410370b2a2cdadf952dbc1b7be4e8fd9f8a71b422fdf4093158ff864ae0fe6402af3b6349653643333b1762617fb63a04eb3032b60268872a7b5d13309e29d87de0c4d9af11d75fdc6e3a2819bceba4fcf34a2b42e866a8fe08bb81293142f5c00308c9a235b95a2a46c2f56f67584928ef051310bc9e1a1d5078de6f2edf110cecc03d656b7effdd191ec309fcda1f522ab99ac6fda7662d059d79b7234884fbdcf3c50dcfd42e766e30b3d618e3436d202bcda866ab4ce2258ae3a49de754e02154493084017b626e8fa7cab048aecdaff51e7a6b7659ef2a63e5b1040ccbbcac3c44ba1b28544cae73193780c7d1c53254ccd48d32ffc3b4338bebbd6e43e0dc7cf47dcdee07fb9b77c39e2109a8c32994c10f50fa57b7f6c948c30c315eeb00392b9faacc9066c0d2e1825828d33f2e6d281fbf0be8d915b4c5e4322b3ec3f644ce3a2f22c5c30d37f5b5304452ee10198f744a84052a0721aaecb103c6ea40e813db7ea649c2e6bffd9dd219ea9d22c9791ee391e43c2cc961b99a0384ef392d32a8b445fac7b3e32acde9304e0db4cc717de4c78328ebd3155c0bb4974a57913b87f9a4828ba54a499fc7eb2cab3590a00e66fd6bb11ad2278740bca71729123f1a147237bea00082ab363ec1f604da62200cae6ef3476109181b606898d94f0a198d4c29d0b925f4d8d54d8b0bb107cdae338b23e10928976ed2834bd78e8855cec25e6d96db3b3ea2c46fb1028fc475a3f17b356ac3e911b288046a0e7068b6007264c6ad0f728c82ac0f9d3f05344ef30c5fe2f2d6aed288d28b349506fc4cd3a19098550939ef80b8a9aff2e14447bfc322c785278ea4358d5af873251b33bc4f1a2922e6129d9fc5bea3415c050b01df77d7a2b27cfade9c362c99c89612ee5536d52f538f3ae17fd418601f6bd335014b606624c713b8e7b1ae3ec28e6b934544a3e16303fcc237b0b19a8482e423fea2928b4736737ae2bdab2fa3ff42e5b7b127a27400319edf99d5861c3c22ebb83e8f88378e7fb18a473baec6323fcd9f0c8b88120a6b05f22ab28342640607b0e3692f7e22ed28215a4967ff76159d8262019211bd0ea05225e06c034c30bc6a1f308321bedfdc8a294fd256d90509b56ceda3ea6ba3c20b36d21a039ee31176cc43f100f523808f77cc497b49fe6a2b60ac9175ffd66350a45076e9d3d0da0691545c989525aceefc8a7c6fe5b2159dcb1e52fcfb1cd54f262e2207f61a94b6a6d22ffc2ee5a9c11499a38a8794a5de7feea88593ff52f76f755b06f0a5c1fa3e0fead419736d0caea80eb4eda60257d70e7d9e1a8c540d4aafbe485202b6175a7eab130de0adc60e9af272985e52ca4865893b34d44594cd5acde92d0e26879bfd447be5c9db9264790eb34ee4d731a306436b524c58e1c844e07b47b024952225676b276676ca99651a248dfbffbc337f1e79b7c2b5034e057f08af747c8afe131c7449445f6cf93d197e3266452e91cde093b45a160b4c1f54acc8f901a814602504e383bf2263cfbb591da8705d90ad0d1705de08de1a737d4148f821e55f41b5ca0d5eb8e69c8bdf0f4f92933874383f97d747ea1c900f1a40d599a380d325d24c1eada4e9a9349e9acdf68d098d43e19278b191a96e539ee7c98aa105b162b547582cc1ee3bf47c5743c4476282931924b39a2c16ac918942fc9d69252f5c360c425009bef5bdd4d98c1e41c0408d54cda09db66c694ff7077daa3dda91eb27f62613607bb15723540c1b635d5ccb40d3a6c739bfaad4987a8673f612a2192b0a8f1b340a9007177ee6db05694903987b57f99e377c23f99d08a1faa24ebec644ed32a562be7db96e5b953c3db290972cb5d823e9328f5955a12e2e83be1a056f1365e45d46fae596ec86981e339c723f6ff975e9e4f7122f5f156963c6c01b20042dff63177272f366d68a83f6e16372c8adb0ded7088f2b3ffbfca2790759ee77a3c2035c7255e345ef4f106e77004defe0a8dbbbb3382d7ddf6d495d7e54d6c609310965a7dee8d623a601a242d8a52dbb8d763ea2ee50282ddad8b6df2bbe4a6079289118f17ef5023b344382593119179f3fdd27c5cae410c4f8a2607983b35a6edaf61cca8e9c2388adb94a60cbe5890acfe11c6e1409ce05916d479f6a4713c3d857a989862098cbdd212fb74596e3188eba5e4f79719cf25fe7e416965c05cfacc27e9691fb6b6c3307c7f9fb1922c762cd8c66e67c721cd83af71c7ce6817a88624132983a785fc189f18557bb6c57aca227762d47011bba43ab07a995e6b40f5f0f1b902b5ed19cd2d539d2e2b9313d68867b1277e36178a70355acb7180aba1bf086c191852a9e7059ab1e488dbf0e22b11f2eec57976370837bf3c1af131c9b770c45d5fe3d0de65a855aa4cee74b7ce2f917e108190543680cd5f3d6a229f21db22df2cb565f00f676f2f6247d1927bb69d708a8931e6a25ce77decdf148646bb283c1712a423c83f2f2354503cd2e94f494093d293a107e81c8f8b76746c46d63a1e851209834866c5304732a6079e0fc762399bdfb29572bf9a590921e4c8f27cb97c36d32dd3cb1c734127238ecc976044c39460e2e2fce200e79ae88c9e0e062f1dfdf79938bcac3341041256cfacbc91c309b01eab50c1472ff76f7b3c9a65d084c7a64cddc165fa3341e3033489c243215f1105ba92a1705881bffbb11f4c6b7b41114193e300b84eaf14d39654627ffb008e8b875c8be842cdb060908480ba58475cb0ff2c2ebfd3798f803bd965b6b3f51f3ce018a89889421fecdefe65fee6b9c1fe6a6dad583b4b589328138e229ff7dcf666ad4eea6b837d98b8daebfc647c8f1857a63be588799bd0bac9930533eba77b0815ab90b665e7974fd7dcac7bf4edb8ce913bf74762d95f9a2cd9bdfc329e7775044a6b37dabcb897b5ff1886ece017d8288451144d06f36025a1bec6cbc0f9356b07521a2ed7845b7481237c4e70f489efba3a919499f952804fa3107714cb122f611d707f8a8dee680ec51e80dbc21920a92f78b8e2145f34317e9fa9c5248e472726562d0e0aec9ea979fae58f8e845943349ccfae98c11f87148d48c5c1b25bb169cff73539e7c0d70a05f8192ea3ddd842adbd98d2d8f359f0cc14eb96607ac58d2b146e8072f5dc1aa3cdc34d907e47d32c9d18a8539026e334fe433134c5381ed9e6ec179b952da77448dfe2911892d6c65c66a8aaaac8b175da", [[], [], []]}, 0x1358) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4004800) 18:52:54 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:52:54 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000040)=@name, 0x10) r2 = socket(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000040)=@name, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r3, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000140)={0x281, 0x2}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r7 = accept$alg(r6, 0x0, 0x0) sendmsg$alg(r7, 0x0, 0x0) splice(r7, 0x0, r5, 0x0, 0xd86dac9, 0x0) getsockname$tipc(r5, &(0x7f0000000000)=@id, &(0x7f0000000080)=0x10) 18:52:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0xec0}}, 0x0) 18:52:54 executing program 5 (fault-call:7 fault-nth:0): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:52:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x33fe0}}, 0x0) [ 2245.443080][T29443] IPVS: ftp: loaded support on port[0] = 21 [ 2245.450455][T29444] IPVS: ftp: loaded support on port[0] = 21 18:52:55 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x3, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2245.485374][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 2245.485387][ T27] audit: type=1804 audit(1591210375.008:2508): pid=29442 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3332/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 2245.569913][T29448] FAULT_INJECTION: forcing a failure. [ 2245.569913][T29448] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2245.598088][T29444] virt_wifi0 speed is unknown, defaulting to 1000 [ 2245.610346][T29448] CPU: 0 PID: 29448 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 2245.619027][T29448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2245.629084][T29448] Call Trace: [ 2245.632375][T29448] dump_stack+0x188/0x20d [ 2245.636690][T29448] should_fail.cold+0x5/0xa [ 2245.641173][T29448] ? fault_create_debugfs_attr+0x140/0x140 [ 2245.647070][T29448] __alloc_pages_nodemask+0x17a/0x810 [ 2245.652425][T29448] ? lock_downgrade+0x840/0x840 [ 2245.657256][T29448] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 2245.664057][T29448] ? xa_load+0x163/0x270 [ 2245.668285][T29448] alloc_pages_current+0xff/0x200 [ 2245.673292][T29448] __page_cache_alloc+0x298/0x480 [ 2245.678299][T29448] __do_page_cache_readahead+0x1a7/0x570 [ 2245.683926][T29448] ? read_pages+0x610/0x610 [ 2245.688410][T29448] ? mark_held_locks+0x9f/0xe0 [ 2245.693168][T29448] filemap_fault+0x1f3f/0x2ed0 [ 2245.697926][T29448] ? lock_downgrade+0x840/0x840 [ 2245.702760][T29448] ? read_cache_page_gfp+0x30/0x30 [ 2245.707863][T29448] ? down_read+0x110/0x420 [ 2245.712344][T29448] ? down_read_killable+0x460/0x460 [ 2245.717526][T29448] ? filemap_page_mkwrite+0x300/0x300 [ 2245.722884][T29448] ext4_filemap_fault+0x87/0xb6 [ 2245.727712][T29448] __do_fault+0x10d/0x520 [ 2245.732026][T29448] __handle_mm_fault+0x2af4/0x3a70 [ 2245.737122][T29448] ? vm_insert_pages+0x6a0/0x6a0 [ 2245.742047][T29448] ? count_memcg_event_mm+0x1e2/0x3d0 [ 2245.747407][T29448] ? mark_held_locks+0x9f/0xe0 [ 2245.752159][T29448] handle_mm_fault+0x1a5/0x660 [ 2245.756905][T29448] do_page_fault+0x55b/0x13da [ 2245.761570][T29448] page_fault+0x39/0x40 [ 2245.765717][T29448] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 2245.772024][T29448] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 2245.791600][T29448] RSP: 0018:ffffc90008a77910 EFLAGS: 00010202 [ 2245.797638][T29448] RAX: 0000000000000001 RBX: 0000000020000e00 RCX: 0000000000000007 [ 2245.805595][T29448] RDX: 0000000000000000 RSI: 0000000020000e00 RDI: ffffc90008a77978 [ 2245.813541][T29448] RBP: 0000000000000038 R08: ffff888090b08180 R09: fffff5200114ef36 [ 2245.821488][T29448] R10: ffffc90008a779af R11: fffff5200114ef35 R12: ffffc90008a77978 [ 2245.829442][T29448] R13: 0000000020000e38 R14: 00007ffffffff000 R15: 0000000000000000 [ 2245.837409][T29448] _copy_from_user+0x120/0x1a0 [ 2245.842160][T29448] __copy_msghdr_from_user+0x91/0x480 [ 2245.847519][T29448] ? __ia32_sys_shutdown+0x70/0x70 [ 2245.852634][T29448] ? mark_held_locks+0xe0/0xe0 [ 2245.857392][T29448] ? __lock_acquire+0x2184/0x4c50 [ 2245.862403][T29448] copy_msghdr_from_user+0x8d/0x120 [ 2245.867586][T29448] ? __copy_msghdr_from_user+0x480/0x480 [ 2245.873202][T29448] ? find_held_lock+0x2d/0x110 [ 2245.877961][T29448] ? __fget_files+0x30d/0x500 [ 2245.882629][T29448] ? lock_downgrade+0x840/0x840 [ 2245.887463][T29448] recvmsg_copy_msghdr+0x3e/0x80 [ 2245.892391][T29448] ___sys_recvmsg+0xb1/0x150 [ 2245.896965][T29448] ? recvmsg_copy_msghdr+0x80/0x80 [ 2245.902105][T29448] ? ksys_dup3+0x3c0/0x3c0 [ 2245.906509][T29448] ? __fget_light+0x20e/0x270 [ 2245.911166][T29448] ? sockfd_lookup_light+0xc6/0x170 [ 2245.916346][T29448] do_recvmmsg+0x24a/0x720 [ 2245.920751][T29448] ? ___sys_recvmsg+0x150/0x150 [ 2245.925587][T29448] ? lock_downgrade+0x840/0x840 [ 2245.930431][T29448] ? __mutex_unlock_slowpath+0xe2/0x660 [ 2245.935974][T29448] ? wait_for_completion+0x270/0x270 [ 2245.941249][T29448] __sys_recvmmsg+0x23e/0x250 [ 2245.945908][T29448] ? __ia32_sys_recvmsg+0xb0/0xb0 [ 2245.950915][T29448] ? ksys_write+0x1a5/0x250 [ 2245.955398][T29448] ? __ia32_sys_read+0xb0/0xb0 [ 2245.960147][T29448] ? __ia32_sys_clock_settime+0x260/0x260 [ 2245.965850][T29448] __x64_sys_recvmmsg+0xde/0x130 [ 2245.970772][T29448] do_syscall_64+0xf6/0x7d0 [ 2245.975258][T29448] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 2245.981128][T29448] RIP: 0033:0x45ca69 [ 2245.985005][T29448] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2246.004598][T29448] RSP: 002b:00007ff47f8c2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2246.012992][T29448] RAX: ffffffffffffffda RBX: 00000000004fb700 RCX: 000000000045ca69 18:52:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x20000078}}, 0x0) 18:52:55 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x4, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2246.020943][T29448] RDX: 0400000000000002 RSI: 0000000020000e00 RDI: 0000000000000005 [ 2246.028896][T29448] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2246.036863][T29448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 2246.044821][T29448] R13: 00000000000008a2 R14: 00000000004cb788 R15: 00007ff47f8c36d4 18:52:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x200000b8}}, 0x0) 18:52:55 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x5, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2246.251156][T29449] IPVS: ftp: loaded support on port[0] = 21 [ 2246.691063][T29443] virt_wifi0 speed is unknown, defaulting to 1000 [ 2246.691551][T29444] virt_wifi0 speed is unknown, defaulting to 1000 [ 2246.704935][T29478] IPVS: ftp: loaded support on port[0] = 21 18:52:56 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 18:52:56 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x6, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2247.093411][T29449] virt_wifi0 speed is unknown, defaulting to 1000 [ 2247.253198][T29478] virt_wifi0 speed is unknown, defaulting to 1000 [ 2247.371966][T29443] virt_wifi0 speed is unknown, defaulting to 1000 [ 2247.379189][T29444] virt_wifi0 speed is unknown, defaulting to 1000 [ 2247.846510][T29449] virt_wifi0 speed is unknown, defaulting to 1000 [ 2247.853081][T29443] virt_wifi0 speed is unknown, defaulting to 1000 [ 2248.127794][T29478] virt_wifi0 speed is unknown, defaulting to 1000 [ 2248.134642][T29449] virt_wifi0 speed is unknown, defaulting to 1000 [ 2248.425335][T29478] virt_wifi0 speed is unknown, defaulting to 1000 18:52:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) getsockopt$rose(r3, 0x104, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020025c19721000000000800410073697700140033"], 0x1}}, 0x0) sendfile(r2, r1, 0x0, 0x80000000) [ 2248.878840][ T27] audit: type=1804 audit(1591210378.408:2509): pid=29573 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir911542418/syzkaller.OPMwZH/2947/cgroup.controllers" dev="sda1" ino=16384 res=1 18:53:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:53:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x0, 0x0) 18:53:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x7ffff000}}, 0x0) 18:53:00 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f00000000c0)=0xc694, 0x4) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff0180c2000000910000008100000008004500001400000000006c90780000000000000000db57d6ddcd6500f4a572ee6aeacd055b1ed5d29237e12c8a9b1d68f3fea7517530515a7f81ad02c7bc66b3dcb90a96b87c5e353c4872f2c1922e1d57e87dfa9ee3bc9a1f0cf2e01e9a61bd39c8d8d43487391ff133d39682f8173daefe2627cb20b4ec829f65d15b766d71eb9ed7361f083d9dfcd44ee5fc68af279ee52218657301d1ed467b3065e1ed935965d60471b5400d17dff0d62e526e5371a21c1c6103b687790c9496d545bae71562e458560c21a526efb289e6c75881fb8df0845d78bf02e008791f6aac9fb82b3c3ab0ea1aa19e8f003a6c47ec289f0633c78dc571ac9c1f5aacbf290aa5dcd7e5fb33012354e11eb0a2578cf701d7a2c90bbce9321133e9b4aa6f7a59144a6128f782765998b45f297bee44bc7054e87583d8567fae559ad6ef2226c607553bd1c213a4d04affb5cb75f740c9ddb3241a377f3c07883aee1bdff85ac40f15bb40d05977cd593fbb1ada0ec4920e0b7743cb4cf3488d4e15642a02b04597a890737215a8e4821338770c64c1452cc0c4822ae06b7345"], 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000180)) bind$netrom(r0, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) 18:53:00 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x7, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000000540)="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", 0x178}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1932529fe6e69fd1", @ANYRES16=r3, @ANYBLOB="0002ff010000fddbdf250500000008000800ac14140f14000500fe8000000000000000000000000000bb"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x64, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4004011) mmap(&(0x7f0000371000/0x1000)=nil, 0x1000, 0x2000002, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x400c084) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={0x0, r0}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 2250.967988][T29584] net_ratelimit: 10 callbacks suppressed [ 2250.968015][T29584] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2251.018244][T29584] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2251.054387][T29879] tipc: TX() has been purged, node left! 18:53:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0xfffffdef}}, 0x0) [ 2251.064042][T29879] tipc: TX() has been purged, node left! 18:53:00 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0xa, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2251.115249][ T27] audit: type=1804 audit(1591210380.639:2510): pid=29593 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3333/cgroup.controllers" dev="sda1" ino=16364 res=1 [ 2251.143784][T29879] tipc: TX() has been purged, node left! [ 2251.233750][T29602] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:53:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x2}, 0x0) [ 2251.304632][T29602] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:53:00 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x48, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x5}, 0x0) [ 2251.554500][T29612] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2251.604185][T29612] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:53:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000003, 0x0, 0x0) [ 2251.913535][ T27] audit: type=1804 audit(1591210381.439:2511): pid=29616 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3334/cgroup.controllers" dev="sda1" ino=16357 res=1 18:53:01 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000006061ae6e00146c00fc020000000000000000000000000000ff02000000000000000000000000000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078000029a3a3511f274a558f1bb73237e8dd4180482c0aeb87432902707208fbc13769bb1d39122dd11ecb78123801b1fe5101008a4e054c7d03e3213ce7af8fbad54f7f6fae5733685b417c2480d4051d2ea8bb991fbdea913d17c255ab035a5065503fcdbd3cbb0fc02244134df95184bc082a6ad251873331fd5c13843212458ba107ad0b5623e1261ecf23336e14f07f0304f10d7fc50fd1544db594fddf380fb5149e2551dcdcf34ec8024a71c5d6fe966f3bb5e9c2fcd75eb36601d61ae02c6ac96de30a053fdf6342671c1f96"], 0x46) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") socket(0x1000000010, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={r2}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x38, 0x1407, 0x800, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x20044094) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000140)={@private2}, &(0x7f0000000240)=0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x79e495eb, r6}) 18:53:01 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x4c, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x6}, 0x0) [ 2252.440097][T29630] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2252.478265][T29631] IPVS: ftp: loaded support on port[0] = 21 18:53:02 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0xa7fc, @private1, 0x8000}}, 0x9, 0x0, 0x4f, 0x4, 0x91, 0x91, 0x6}, &(0x7f0000000300)=0x9c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={r3, 0x4}, 0x8) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltfilter={0x34, 0x2d, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x1, 0xe}, {0xc, 0x8}, {0xa, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0xd77c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040004}, 0x4044010) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:53:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) accept$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000140)=0xe8) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000280)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r3}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x32}, 0x4e20, 0xfffc, 0x4e20, 0x7, 0xa, 0x80, 0xa0, 0xe0, r2, r3}, {0x4, 0x3, 0x7, 0x6, 0xb3b, 0x0, 0x4, 0xe540}, {0x82af, 0x0, 0x0, 0x8}, 0x7, 0x6e6bbc, 0x0, 0x0, 0x1, 0x2}, {{@in6=@mcast1, 0x4d4, 0xff}, 0xa, @in=@multicast1, 0x3506, 0x4, 0x3, 0x9, 0x7, 0x4, 0x2000000}}, 0xe8) write$binfmt_script(r1, &(0x7f0000000540)=ANY=[], 0x208e24b) 18:53:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x8}, 0x0) 18:53:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000004, 0x0, 0x0) [ 2252.487813][T29630] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:53:02 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x5c, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2252.564789][T29631] virt_wifi0 speed is unknown, defaulting to 1000 18:53:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x9}, 0x0) 18:53:02 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x3, 0x2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000040)={0x10, 0x5, [], [@enc_lim={0x4, 0x1, 0x7}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xfff}, @hao={0xc9, 0x10, @private1}, @enc_lim={0x4, 0x1, 0x52}, @enc_lim={0x4, 0x1, 0x51}, @enc_lim={0x4, 0x1, 0x4}]}, 0x38) [ 2252.700417][ T27] audit: type=1804 audit(1591210382.229:2512): pid=29639 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3335/cgroup.controllers" dev="sda1" ino=16363 res=1 [ 2252.762290][T29650] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:53:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0xa}, 0x0) [ 2252.834132][T29650] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:53:02 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x60, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2252.977784][T29656] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2253.171376][T29631] virt_wifi0 speed is unknown, defaulting to 1000 [ 2253.535692][T29631] virt_wifi0 speed is unknown, defaulting to 1000 [ 2253.803911][T29632] IPVS: ftp: loaded support on port[0] = 21 [ 2253.857673][T29632] virt_wifi0 speed is unknown, defaulting to 1000 [ 2254.112226][T29632] virt_wifi0 speed is unknown, defaulting to 1000 [ 2254.258531][T29632] virt_wifi0 speed is unknown, defaulting to 1000 18:53:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 18:53:03 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0xb}, 0x0) 18:53:03 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x22, 0x2, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800a400", @ANYRES16=r5, @ANYBLOB="0100000000000000000006000000140008006d616376746170300000000000000000"], 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r7, 0x1}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r7, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r7, 0x402, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c854}, 0x5000) close(r2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={'bond0\x00', 0xb, 0x2}) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="03003f070700f9850700ffffffffffff0180c2000000910000008100000008004518001400000000006c90780000000000000000"], 0x34) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:53:03 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x40000000000000f, 0x0, 0x0) 18:53:03 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$int_in(r1, 0x5421, &(0x7f00000001c0)=0xd0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x0, [], [{0x6, 0x3ff, 0x415, 0x7fff, 0xc25, 0x8}, {0x1, 0x90, 0x8, 0x9, 0x6, 0x3}], [[], [], [], [], []]}) 18:53:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x10}, 0x0) 18:53:04 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x6c, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2254.610760][ T27] audit: type=1804 audit(1591210384.139:2513): pid=29735 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3336/cgroup.controllers" dev="sda1" ino=16369 res=1 18:53:04 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0xffffffff800) sendfile(r1, r0, &(0x7f0000000040), 0x100000001) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000015c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x5) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000008f40)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x0, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000009180)={&(0x7f00000002c0)={0x68, 0x0, 0x8e6767b8eef245b5, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x4}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf948}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x68}}, 0x4c000) syz_init_net_socket$ax25(0x3, 0x3, 0x1) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000001780)={0x30, r4, 0x102, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40c}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x94b}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x1}, 0x1, 0x0, 0x0, 0x2000c011}, 0x6af3de87d0712e90) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 18:53:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x11}, 0x0) 18:53:04 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe, 0x10, r0, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0x1200, 0x100002c00) write$cgroup_int(r0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r5, 0x1b}, 0x10) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f0000000180)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1000, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x5, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) 18:53:04 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x74, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2254.756877][ T27] audit: type=1804 audit(1591210384.289:2514): pid=29750 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir911542418/syzkaller.OPMwZH/2952/memory.events" dev="sda1" ino=16381 res=1 18:53:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x12}, 0x0) [ 2254.894183][ T27] audit: type=1800 audit(1591210384.319:2515): pid=29750 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16381 res=0 [ 2254.991476][ T27] audit: type=1804 audit(1591210384.319:2516): pid=29750 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir911542418/syzkaller.OPMwZH/2952/memory.events" dev="sda1" ino=16381 res=1 [ 2255.069749][ T27] audit: type=1804 audit(1591210384.389:2517): pid=29750 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir911542418/syzkaller.OPMwZH/2952/memory.events" dev="sda1" ino=16381 res=1 [ 2255.106496][ T27] audit: type=1804 audit(1591210384.389:2518): pid=29750 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir911542418/syzkaller.OPMwZH/2952/memory.events" dev="sda1" ino=16381 res=1 [ 2255.133580][ T27] audit: type=1800 audit(1591210384.389:2519): pid=29750 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16381 res=0 18:53:05 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001000090468fe07002b0000000100ff0714000000450001070300001419001a00", 0x24}], 0x1) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000000000000000000006", 0x1d) sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_getroute={0x24, 0x1a, 0x4, 0x70bd27, 0x25dfdbfb, {0xa, 0x79c386bf897c3270, 0x0, 0x8, 0xfd, 0x1, 0xfe, 0x3, 0x1000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}]}, 0x24}}, 0x0) recvfrom$packet(r3, &(0x7f0000000180)=""/56, 0x38, 0x10020, &(0x7f00000001c0)={0x11, 0x19, r7, 0x1, 0x3f, 0x6, @broadcast}, 0x14) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff0180c24500001400000000006c907800"/42], 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:53:05 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x4}}]}, 0x40}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) r4 = accept4(r3, 0x0, 0xfffffffffffffffd, 0x80000) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x3c, 0x26, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xfff1, 0xfff9}, {0x6, 0x9}, {0xfff1, 0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}}, 0x800) 18:53:05 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x7a, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x13}, 0x0) 18:53:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000010, 0x0, 0x0) 18:53:05 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe, 0x10, r0, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0x1200, 0x100002c00) write$cgroup_int(r0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r5, 0x1b}, 0x10) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f0000000180)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1000, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x5, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) 18:53:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1e}, 0x0) [ 2255.850435][T29779] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:53:05 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:05 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x4, 0x0, 0x0, {}, [@NLBL_MGMT_A_CV4DOI={0x8}]}, 0x1c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) getsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f00000000c0), &(0x7f0000000180)=0x4) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "163dac", 0x0, 0x0, 0x0, @local, @mcast2}}}}}, 0x3e) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r6, @ANYRES64, @ANYRESDEC=r7, @ANYRES32, @ANYRES64=r8, @ANYBLOB="d4076af8eeac7898ce8b53adefc9af76877cc7fec331aca555a5b34794284cf6700dba74cb5e40fc2515b1a8df18243f3cbee038893b962f3fbae4d85682f60824beef9258eaf43a7bc5f323c9e5de1d18757c1b10fc06aa5ecf5f539e6da4c78c5ba534772a8b0daf836cf1499f66a40de57f140ea1fc623bca5e28ff32f91a18e15d30e6d7ec7237b7e6b7e5ada3ef5927a8d5cc6060c86fff91", @ANYRES64, @ANYRESOCT, @ANYRES64=r4, @ANYBLOB="391eedadaf50c3dd5781cac6df4e8fb1fb645bed7ce296e8b96df1ef8fb71687d409a8ac242f6a2f54eb5b5b6c948229df13013876cb86f566eecc77aee3c7e21e384f2cc238ab90b2e73b947a7bf7a0b0054b1b720f649e45d64b4b117eafa7b237aa73ec452f1971af203fa161c3cfa2e0d087620c9fe9245ed65f56dcf4a99ec9a648b43241fdcfcdadffd7bd2b3ca6925650724e5bbe7a9e0078e82a5adc1eed147f2bd3f018af6fc82aa0976337cceb5159e9f207d4e28607"], 0xffffffffffffff64) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 18:53:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x300}, 0x0) [ 2256.073687][T29793] net_ratelimit: 10 callbacks suppressed [ 2256.073702][T29793] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2256.172277][T29793] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:53:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x612}, 0x0) 18:53:05 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x500, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2256.376404][T29804] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2256.389813][T29804] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:53:06 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x600, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0xffffff1f}, 0x0) 18:53:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000018, 0x0, 0x0) 18:53:06 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x40}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x2, 0x3, 0x81, 0x100000000, 0x3, 0x3e, 0x9, 0x32a, 0x40, 0x245, 0x10001, 0x3, 0x38, 0x2, 0x7, 0xfffe}, [{0x6474e551, 0x913, 0xfffffffffffffffc, 0x7, 0x96, 0xc1, 0x2, 0x2}], "807bbffdf9699fc853e4f342974b4c764217a820e2cc3cc78e65f4ad628f973102af44b1f85d11270be7ade520d83dc6177bff0212d4d3e62d2c6fdc66515f9e6385aafc5003ad6375b0e309b29c8880a6b9f54481c5623053ccf272ca24f5526f33b5e013804c74bf59d62101ab8b3f9673a7e202e81c1d1ee80ba74d028b7bc1b70e41301e2364e7299e30859ae1b3493d98da744117a57eeb9fc0c334b07a28c8eef4d91b9e80ef25c8ed0aa8cbacc9c11d919391d7f1d438f0c2b634cb950b20e317881eeccb5ae7b0", [[], []]}, 0x343) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040)={0x3, 0x8000, 0x8, 0x3, 0x4, 0x12, 0x3ff}, 0xc) 18:53:06 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x4, 0x0, 0x0, {}, [@NLBL_MGMT_A_CV4DOI={0x8}]}, 0x1c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) getsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f00000000c0), &(0x7f0000000180)=0x4) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "163dac", 0x0, 0x0, 0x0, @local, @mcast2}}}}}, 0x3e) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r6, @ANYRES64, @ANYRESDEC=r7, @ANYRES32, @ANYRES64=r8, @ANYBLOB="d4076af8eeac7898ce8b53adefc9af76877cc7fec331aca555a5b34794284cf6700dba74cb5e40fc2515b1a8df18243f3cbee038893b962f3fbae4d85682f60824beef9258eaf43a7bc5f323c9e5de1d18757c1b10fc06aa5ecf5f539e6da4c78c5ba534772a8b0daf836cf1499f66a40de57f140ea1fc623bca5e28ff32f91a18e15d30e6d7ec7237b7e6b7e5ada3ef5927a8d5cc6060c86fff91", @ANYRES64, @ANYRESOCT, @ANYRES64=r4, @ANYBLOB="391eedadaf50c3dd5781cac6df4e8fb1fb645bed7ce296e8b96df1ef8fb71687d409a8ac242f6a2f54eb5b5b6c948229df13013876cb86f566eecc77aee3c7e21e384f2cc238ab90b2e73b947a7bf7a0b0054b1b720f649e45d64b4b117eafa7b237aa73ec452f1971af203fa161c3cfa2e0d087620c9fe9245ed65f56dcf4a99ec9a648b43241fdcfcdadffd7bd2b3ca6925650724e5bbe7a9e0078e82a5adc1eed147f2bd3f018af6fc82aa0976337cceb5159e9f207d4e28607"], 0xffffffffffffff64) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 18:53:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x2}, 0x0) [ 2257.223289][T29820] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2257.273314][T29820] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2257.302826][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 2257.302840][ T27] audit: type=1804 audit(1591210386.829:2532): pid=29819 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3338/cgroup.controllers" dev="sda1" ino=16383 res=1 18:53:06 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x700, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x3}, 0x0) 18:53:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x4}, 0x0) 18:53:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x5}, 0x0) [ 2257.523210][T29829] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2257.558255][T29829] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:53:07 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0xa00, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:07 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000009500)='pids.current\x00', 0x0, 0x0) socketpair(0x1e, 0x800, 0x6, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xffffffffffffffdd, &(0x7f0000000240)=[{&(0x7f0000000380)=""/226, 0xe1}, {&(0x7f0000000180)=""/51, 0x33}], 0x2, &(0x7f00000001c0)=""/17, 0x11, 0x7302}, 0x3f09) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000009680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000009640)={&(0x7f0000000980)=ANY=[@ANYBLOB="e4000000", @ANYRES16=0x0, @ANYBLOB="020026bd7000ffdbdf25020000000c00040005000000000000003c00078008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="5fc457f3dc1ae4f82e9d60a78658b270b549a60bea40b7427f42cec69990c326115a47ded53317bb3ac87391cc685b22d718948975ee63180f7d5498fe177e59bc639e5ca60c14fe7ae0d29ae850e61adfc9ff8df05927a2497e22174421fee3d82b1b2eafe29f736e8ad6fd5dffd74299f824ab77c0c4573787d916b72aa1907684d87a90df6637ea9f81a7502859809c7810880182288218c7b8da049ce1a589ab90adf5f5a2492ec1dc5117", @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="01000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="2400078008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="3c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="231e496c", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="080001000000000008000100000000000c00080009000000000000000c0004000000000001000000"], 0xe4}, 0x1, 0x0, 0x0, 0x81}, 0x8080) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="4000020500650020022f9078ac1414bb64010100830b4e64010101e000000100441ccab00000008100000001fffffc0100000009000003fc72d7d25601890f07ac1414aaac1414aaac1e0001442c3a43ffffffff00000003ac1414aa000007ffac141420000000080000000000000088ac1e00010000000086580000000300000421880b0032000000040001087db0f8f516693399b30246a5c04a25099df894a2e4c839fe8a89166dcaf0e35fc2224788c02a5ccaa104aacd131724f82f01000800000866ca0217e7ff11d551c289bb16a764ebd236482b36dc5687ccace7bc5a10c4570717cfa08feee8ba02f19bdefd84ff52df30d81abb4d55cc529631d8ed3144b82d59a75d0772696f178d6070289c0697d2aa8234f27f9e12bc48ee222b3379a056e05dd2b9900426202df4a56b4b75a90c0086dd2c3c0b99fdf1284c6a9e6e256d9c365f02612d3bfd37d12299c95aaf3346dc440ab9afcde6249e71ea18f8afbc6e5d7219ab2a30e69fa10d57708d3c4cbc94a54b0ccd97dfe6619a63462fb88f6f05ad504a551489c8db429c55a0080088be0000000314028e810100000000000009080022eb0000000026bbb708020000000000061df4dd95110800655800002f12b494b2a140ad99876adf00015f239f5d1f093aa3e6c925ff3a9ad9644c745a035592f2b6833d812ae99066d3655595f735a054cfc92ae9922b8fabe79dc19b7f36d2edfb498d079a96dfe476a23441fa89b31df8caea54fe9c9e7bdb04a1153428d2408a4cd42f81c64e7a47f64db520d68143d93df9557486cd3f75ec2587d57328b4243b3badb0fdf52bd11d399d42f76ac83f4d598a083b015b59397cab3b363a87265f98ee12523501800bbc1624abb611419c7b51a8e456242d3f452f45f713d76791b5c2d27057813c110a43f669df0110e9f103f257"], 0x205) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:53:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x9}, 0x0) [ 2257.769416][T29835] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:53:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0xa}, 0x0) [ 2257.819230][T29835] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2258.025946][ T27] audit: type=1804 audit(1591210387.559:2533): pid=29846 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3338/cgroup.controllers" dev="sda1" ino=16383 res=1 18:53:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x4000000000000ca, 0x0, 0x0) 18:53:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000003000)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESHEX=r1, @ANYRESHEX=r0], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f00000001c0)={0xffffffffffffffff, 0x5}) sendfile(r3, r2, 0x0, 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff835}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000fff0) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000180)={0x27, 0x0, 0x40, 0x7}, 0x10) 18:53:07 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0xbb8, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0xe}, 0x0) 18:53:07 executing program 1: socket$kcm(0xa, 0x802, 0x88) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000140)=0x8000, 0x4) r1 = socket$kcm(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, r3, 0x1, 0x0, 0x0, {0x26}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, r3, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008030}, 0x41) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000300)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001600)=[@ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x7, 0xe, 0x7, 0x3, 0x0, [0x0, 0x0, 0x0]}]}}}], 0x20, 0x5}, 0x0) 18:53:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0xf}, 0x0) 18:53:07 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x2000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2258.309578][ T27] audit: type=1804 audit(1591210387.839:2534): pid=29859 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3339/cgroup.controllers" dev="sda1" ino=16363 res=1 [ 2258.439108][ T27] audit: type=1804 audit(1591210387.899:2535): pid=29863 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir911542418/syzkaller.OPMwZH/2956/cgroup.controllers" dev="sda1" ino=16360 res=1 18:53:08 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x60}, 0x0) [ 2258.645118][ T27] audit: type=1804 audit(1591210387.959:2536): pid=29862 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir911542418/syzkaller.OPMwZH/2956/memory.events" dev="sda1" ino=16384 res=1 [ 2258.765753][ T27] audit: type=1800 audit(1591210387.959:2537): pid=29862 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16384 res=0 [ 2258.827741][ T27] audit: type=1804 audit(1591210388.019:2538): pid=29863 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir911542418/syzkaller.OPMwZH/2956/cgroup.controllers" dev="sda1" ino=16360 res=1 [ 2259.043516][ T27] audit: type=1804 audit(1591210388.569:2539): pid=29878 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3339/cgroup.controllers" dev="sda1" ino=16363 res=1 18:53:08 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0x9000}, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:53:08 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) ioctl$int_out(0xffffffffffffffff, 0x2a32, &(0x7f0000000100)) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000001200)={{0x1, 0x0, @descriptor="6fafda228b782834"}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x8) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='cpuset.effective_mems\x00', 0x275a, 0x0) 18:53:08 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000240)=0x54) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e20, 0x80000000, @private1={0xfc, 0x1, [], 0x1}, 0x2}, {0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0x4}, 0x5, [0x7, 0x286c6803, 0xa77, 0x5e6, 0x6, 0x7, 0x5, 0x274]}, 0x5c) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000200)={r5, 0xee14, 0x3}, 0x8) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1932529fe6e69fd1", @ANYRES16=r6, @ANYBLOB="0002ff010000fddbdf250500000008000800ac14140f14000500fe8000000000000000000000000000bb"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r6, 0x800, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 18:53:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0xf0}, 0x0) 18:53:08 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x4800, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x4000000000000cb, 0x0, 0x0) [ 2259.230981][T29888] IPVS: ftp: loaded support on port[0] = 21 18:53:08 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x4c00, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2259.305622][ T27] audit: type=1804 audit(1591210388.839:2540): pid=29895 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir911542418/syzkaller.OPMwZH/2957/cgroup.controllers" dev="sda1" ino=16371 res=1 18:53:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x300}, 0x0) [ 2259.359827][T29888] virt_wifi0 speed is unknown, defaulting to 1000 [ 2259.485651][ T27] audit: type=1804 audit(1591210388.909:2541): pid=29894 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3340/cgroup.controllers" dev="sda1" ino=16380 res=1 18:53:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x500}, 0x0) 18:53:09 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x5c00, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:09 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) ioctl$int_out(0xffffffffffffffff, 0x2a32, &(0x7f0000000100)) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000001200)={{0x1, 0x0, @descriptor="6fafda228b782834"}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x8) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='cpuset.effective_mems\x00', 0x275a, 0x0) 18:53:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x900}, 0x0) [ 2260.071602][T29888] virt_wifi0 speed is unknown, defaulting to 1000 [ 2260.178949][T29922] IPVS: ftp: loaded support on port[0] = 21 [ 2260.774451][T29888] virt_wifi0 speed is unknown, defaulting to 1000 [ 2260.781690][T29922] virt_wifi0 speed is unknown, defaulting to 1000 18:53:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0xa00}, 0x0) 18:53:10 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x6000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2261.124671][T29922] virt_wifi0 speed is unknown, defaulting to 1000 [ 2261.298503][T29922] virt_wifi0 speed is unknown, defaulting to 1000 18:53:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x4000000000000ca, 0x0, 0x0) 18:53:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000002000, 0x0, 0x0) 18:53:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x4000000000000cb, 0x0, 0x0) 18:53:11 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x13) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @random="da48a2251dcd", @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x10, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @private=0xa010102, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:53:11 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x6800, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0xe00}, 0x0) 18:53:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0xf00}, 0x0) [ 2261.718155][T29986] net_ratelimit: 14 callbacks suppressed [ 2261.718169][T29986] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2261.811373][T29986] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:53:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x1a58}, 0x0) 18:53:11 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x6c00, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2262.002652][T29999] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2262.026977][T29999] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:53:11 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x7400, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x3f00}, 0x0) [ 2262.192517][T30003] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2262.211472][T30003] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:53:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x4000}, 0x0) 18:53:12 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x9) 18:53:12 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x7a00, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x581a}, 0x0) [ 2262.566469][T29879] tipc: TX() has been purged, node left! 18:53:12 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) getsockopt$IP_SET_OP_GET_BYNAME(r4, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000000c0)=0x28) syz_init_net_socket$llc(0x1a, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:53:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000003000, 0x0, 0x0) 18:53:12 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x1d, &(0x7f00000021c0)=""/4117, &(0x7f0000001140)=0xf8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'vxcan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x60, 0x0, 0x1fd718d673686c00, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x401, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0xc847}, 0x20000800) r7 = socket(0x23, 0x2, 0xe41) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r7, 0x110, 0x5, &(0x7f0000000140)=[0x4, 0x4], 0x2) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x124, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NET={0x70, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xcc2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcc}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x804) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x100, r8, 0x200, 0x70bd28, 0x0, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xda}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4011}, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) [ 2262.703217][T30016] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:53:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x6000}, 0x0) [ 2262.792096][T30016] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2262.804838][T29879] tipc: TX() has been purged, node left! [ 2262.863334][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 2262.863348][ T27] audit: type=1804 audit(1591210392.390:2550): pid=30023 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3342/cgroup.controllers" dev="sda1" ino=16371 res=1 [ 2262.931208][T29879] tipc: TX() has been purged, node left! 18:53:12 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0xb80b, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0xf000}, 0x0) [ 2263.006456][T29879] tipc: TX() has been purged, node left! [ 2263.114280][T30042] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:53:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x34000}, 0x0) [ 2263.172318][T30042] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:53:12 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x400300}, 0x0) 18:53:12 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 18:53:12 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0xf0ffff}, 0x0) [ 2263.488146][T30060] IPVS: ftp: loaded support on port[0] = 21 [ 2263.525241][T30060] virt_wifi0 speed is unknown, defaulting to 1000 [ 2264.013636][T30060] virt_wifi0 speed is unknown, defaulting to 1000 18:53:13 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) getpeername$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:53:13 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x1000000}, 0x0) 18:53:13 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000004000, 0x0, 0x0) 18:53:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000003000, 0x0, 0x0) 18:53:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x2000000}, 0x0) 18:53:13 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x3, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:13 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000005000, 0x0, 0x0) [ 2264.293111][T30070] IPVS: ftp: loaded support on port[0] = 21 [ 2264.355111][ T27] audit: type=1804 audit(1591210393.890:2551): pid=30081 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir911542418/syzkaller.OPMwZH/2961/cgroup.controllers" dev="sda1" ino=15922 res=1 18:53:13 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2264.475318][T30070] virt_wifi0 speed is unknown, defaulting to 1000 [ 2264.493049][ T27] audit: type=1804 audit(1591210394.000:2552): pid=30097 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3344/cgroup.controllers" dev="sda1" ino=15969 res=1 [ 2264.527778][T30060] virt_wifi0 speed is unknown, defaulting to 1000 [ 2264.974853][T30070] virt_wifi0 speed is unknown, defaulting to 1000 [ 2265.229323][T30070] virt_wifi0 speed is unknown, defaulting to 1000 18:53:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000005000, 0x0, 0x0) 18:53:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x3000000}, 0x0) 18:53:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r5, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x64, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_mpls={0x2c, 0x0, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x4}, {0x15, 0x6, "51802af90fe8e869355e7fc5f2e68c6394"}}}]}]}}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001480)=@delchain={0x64, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x2}, {0x4, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_pedit={0x2c, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x14, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x5, 0x6, "dd"}}}]}]}}]}, 0x64}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) getsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 18:53:15 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x5, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:15 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000006000, 0x0, 0x0) 18:53:15 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'veth1_vlan\x00', {0x7, 0x0, @remote}}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000180)={0x8000, 0xfffc, 0x1ff, 0x3f}, 0x8) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000000), &(0x7f00000000c0)=0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:53:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x4000000}, 0x0) 18:53:15 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x6, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2265.585230][T30154] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2265.665467][ T27] audit: type=1804 audit(1591210395.200:2553): pid=30159 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3345/cgroup.controllers" dev="sda1" ino=16305 res=1 [ 2265.692204][T30154] HTB: quantum of class FFFF0002 is big. Consider r2q change. 18:53:15 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x7, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x5000000}, 0x0) 18:53:15 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0xa, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2265.843177][ T27] audit: type=1804 audit(1591210395.370:2554): pid=30162 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2141/cgroup.controllers" dev="sda1" ino=16082 res=1 18:53:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x9000000}, 0x0) [ 2266.353011][T30154] HTB: quantum of class FFFF0002 is big. Consider r2q change. 18:53:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0xa000000}, 0x0) 18:53:16 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x48, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:16 executing program 0: r0 = socket$kcm(0x21, 0x7, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x1e, 0x0, 0x0) 18:53:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000007000, 0x0, 0x0) 18:53:16 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) setsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000000280)=0xfff, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe}, 0x67}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x80000000, 0x6, 0x0, 0x3, 0x1f}, &(0x7f00000004c0)=0x98) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10004, 0x0) 18:53:16 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1d, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2000}, 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10}, 0x78) 18:53:16 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4c, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0xe000000}, 0x0) [ 2266.633174][ T27] audit: type=1804 audit(1591210396.150:2555): pid=30199 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3346/cgroup.controllers" dev="sda1" ino=16378 res=1 18:53:16 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x5c, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f00000002c0)=@ax25, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x97}], 0x1, &(0x7f00000001c0)=""/17, 0x11, 0x7302}, 0x3f09) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000072000162010000000000000007", @ANYRES64, @ANYRESDEC=r1], 0x1}, 0x1, 0x0, 0x0, 0x200000d4}, 0x4004014) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)="18", 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 18:53:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x60, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x2f}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x58}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x1ff}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0xfa61}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x1000}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x2}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x2}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x6}]}, 0x60}}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r3 = getpid() syz_open_procfs$namespace(r3, 0xfffffffffffffffd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="400100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000a72e000044001280090001007866726d00000000340002800c0002000400000008000200020000000800010004000f00080002000400000008000008000a00"/82, @ANYRES32=0x0, @ANYBLOB="08001300", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="b0001680100001800c00040054f70000af1099429c0001800c00090055afffff85e2e339100006000000000000000000000000000c00070000000000000000002800010000000000ffffffffffff00000000000000000000000000000000000000000000000000000c00030001040000ff0100002800010001000000ffffffffffff000000000000000000000000000000000000000000000000000014000a000800000000000000750b00000000000008002300810000000a0002000000000000000000"], 0x140}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xc0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r3, r4, 0x0, 0x13, &(0x7f00000000c0)='cgroup.controllers\x00', r5}, 0x30) socket$unix(0x1, 0x2, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000001ec0)={{0x1, 0x0, @identifier="5c85856447c39f46e6fc2fd5dc00"}, 0x100f, [], "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"/4111}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r2, 0x0, 0x100000001) recvmmsg(r6, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x400000000000002, 0x0, 0x0) 18:53:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0xf000000}, 0x0) 18:53:16 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x60, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x3f000000}, 0x0) 18:53:16 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x68, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2266.979308][ T27] audit: type=1804 audit(1591210396.500:2556): pid=30223 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2142/cgroup.controllers" dev="sda1" ino=16380 res=1 [ 2267.069093][ T27] audit: type=1804 audit(1591210396.530:2557): pid=30223 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2142/cgroup.controllers" dev="sda1" ino=16380 res=1 18:53:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000009000, 0x0, 0x0) [ 2267.510985][ T27] audit: type=1804 audit(1591210397.030:2558): pid=30236 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3347/cgroup.controllers" dev="sda1" ino=16368 res=1 18:53:17 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x6c, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x40000000}, 0x0) 18:53:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000240)='wg1\x00') getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt(r6, 0x1, 0xf, &(0x7f0000000100)=""/57, &(0x7f0000000140)=0x39) bind$l2tp(r6, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, 0x2}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) 18:53:17 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) write(r5, &(0x7f0000000000)="8f", 0x1) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0xc080661a, &(0x7f0000000180)={{0x3, 0x0, @descriptor="d473624499da70fe"}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:53:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000007000, 0x0, 0x0) 18:53:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x581a0000}, 0x0) 18:53:17 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x74, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x60000000}, 0x0) [ 2268.212807][ T27] audit: type=1804 audit(1591210397.731:2559): pid=30248 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir911542418/syzkaller.OPMwZH/2966/cgroup.controllers" dev="sda1" ino=16378 res=1 18:53:17 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x7a, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2268.266944][ T27] audit: type=1804 audit(1591210397.791:2560): pid=30267 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3347/cgroup.controllers" dev="sda1" ino=16368 res=1 18:53:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x40000000000a000, 0x0, 0x0) 18:53:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x9effffff}, 0x0) 18:53:18 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x300, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000009000, 0x0, 0x0) [ 2268.561822][ T27] audit: type=1804 audit(1591210398.081:2561): pid=30277 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3348/cgroup.controllers" dev="sda1" ino=16383 res=1 18:53:18 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x500, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0xf0ffffff}, 0x0) [ 2268.943603][ T27] audit: type=1804 audit(1591210398.471:2562): pid=30285 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2144/cgroup.controllers" dev="sda1" ino=16381 res=1 18:53:19 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) accept$nfc_llcp(r3, &(0x7f0000000180), &(0x7f0000000000)=0x60) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="ff00000008004500c5140000000a006c90780000000000000000"], 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:53:19 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x600, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0xfffff000}, 0x0) 18:53:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000007000, 0x0, 0x0) 18:53:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x40000000000b000, 0x0, 0x0) 18:53:19 executing program 1: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x74, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:19 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x700, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:19 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r4, &(0x7f00000015c0)=ANY=[@ANYBLOB="8100635b36dd2f5e31032cfff6"], 0xd) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) pipe(&(0x7f0000008f40)) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001e80)={0x2ac, r6, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9ab}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xfffffff7, @mcast1, 0x58}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x9, 0x2, @ipv4={[], [], @rand_addr=0x2}, 0xa06}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3ff}}}}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x8000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x50, @mcast2, 0x7}}}}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9da}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3eb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000001780)={0x4c, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40c}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(r8, &(0x7f0000000240)=[{&(0x7f0000000580)="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", 0xff8}], 0x1) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 18:53:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0xffffff7f}, 0x0) [ 2269.751174][ T27] audit: type=1804 audit(1591210399.271:2563): pid=30309 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3349/cgroup.controllers" dev="sda1" ino=16362 res=1 18:53:19 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0xa00, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2269.853918][ T27] audit: type=1804 audit(1591210399.321:2564): pid=30318 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir911542418/syzkaller.OPMwZH/2967/cgroup.controllers" dev="sda1" ino=16365 res=1 18:53:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0xffffff9e}, 0x0) [ 2269.998725][ T27] audit: type=1804 audit(1591210399.341:2565): pid=30316 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2146/memory.events" dev="sda1" ino=16381 res=1 [ 2270.051816][ T27] audit: type=1800 audit(1591210399.341:2566): pid=30316 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16381 res=0 18:53:19 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0xbb8, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2270.082678][ T27] audit: type=1804 audit(1591210399.351:2567): pid=30316 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2146/memory.events" dev="sda1" ino=16381 res=1 [ 2270.127219][ T27] audit: type=1804 audit(1591210399.641:2568): pid=30325 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2146/memory.events" dev="sda1" ino=16381 res=1 18:53:20 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x2000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0xfffffff0}, 0x0) 18:53:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x40000000000c000, 0x0, 0x0) 18:53:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe4, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000340)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x88, r4, 0x4eb3606f865c7000, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x80000}, 0x10) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="29f8f309a49044bd01"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000000)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8, 'tbf\x00'}, {0x4}}]}, 0x30}}, 0x0) 18:53:20 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@val, @val={0x3, 0x0, 0x101, 0x3, 0x1, 0x9}, @eth={@remote, @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x800}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0x6c, 0x0, @multicast1, @empty}, "b647ced836ddcb96d7704abae4cb47f7f45e2a7d8f71769e08a9dccd62fc74ffad02ad4b051bda70719033065961786e6a3b18ff5ae17af078e2b5bd053a29153bcf28b163d853051eadc17ab9a4097d01408035dcaf7ebb3eaf527dcb96e0c3934a4fdce6a954d4db2cdcbdfd1dd77439b2fce7dac441d7bebf28d66672"}}}}}, 0xb2) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file0', [{0x20, '/dev/net/tun\x00'}, {0x20, 'syzkaller1\x00'}, {}, {0x20, '/dev/net/tun\x00'}, {0x20, '}ppp0D[-'}, {0x20, 'GPL'}, {}, {}], 0xa, "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"}, 0x141) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:53:20 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r4, &(0x7f00000015c0)=ANY=[@ANYBLOB="8100635b36dd2f5e31032cfff6"], 0xd) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) pipe(&(0x7f0000008f40)) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001e80)={0x2ac, r6, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9ab}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xfffffff7, @mcast1, 0x58}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x9, 0x2, @ipv4={[], [], @rand_addr=0x2}, 0xa06}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3ff}}}}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x8000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x50, @mcast2, 0x7}}}}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9da}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3eb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000001780)={0x4c, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40c}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(r8, &(0x7f0000000240)=[{&(0x7f0000000580)="1ee7f5c114f301897833b4ee5be81e76b0076a46b2f7468ac5628e1a4502b57bb5f20e619b8a81fcb84e9ea4131068bf3aed3b7f0e007ddc92d0785cccca837fb113143bcacf5837ecb45ea8cec8471e0d89d488e6d3c581377665cd9521f2be87e400768b0b1de3b80e0aa35daadea65ee311e7250176bcf7c2a2acf8c1599c8dca183eb4d5337526f9d9e845777c4a9aaaad56d2312b5fe498fce90a66ffadc8d2308fa680da948fe4ea290f5c7fd8e9b3ea5e7903e5d594493ead330bb69afbfe0e6b6abb875ae494983d07f6ad0f205c78e766519378c4e107daea6c96e9a4670308823ca2dd0833422d9db3994f3e7d334239a907c30f07719b225ab969f2f94f771caebc2a93c7eb7e3b1bc89cf230e44b16c1089a3650854aeb790527e2ed4cf2423ae96d49341984278612080fa8e37f942157bf6c91c5624514d54a81b13f59c05b2fa88691e49febd3783222666f2fdef3c186d2351aa606799e81ea0fb2e5ec9fc177a5bf680a2d762ea95132d0f6a03c26ce673432fa6e2a3dc43382ecce2ac519f2c6b46be91be490c2f8fcb9a6e8406c539141dab66863cbff550b2c87cb28579e20aaa73cd3b31fe5727fa1ce0f3553eea94404c7c57eec102cdeba890c61a16a193dc547cc0bb4e47fa3ff2a4688595ea0b11ccb246738dfd6a1c3068d96bb66a5dc78beb2e393ceebca4f0732b105066a1c245ee81c73d596167c0fc3e951dcac688e3409540babf69ccec8bce750e45b3c4d6e62e0a5e29bc0125425dfddd6be09a325363b9bb828e6fe6872b56058f1132fef1c61c1f236c5a06b27537d71a850d604c5219eb4df9057354cef00e70309da12e213d9961917278423df7c3ab98624768f25ef4e88555564dc322a87d934d9ad0de3f1e39c5f946b802139de1d05d9460ad7e978b26f01facea7a2acc23f1137b39f6442d60d38847641775907f0e9a97fb082d8882993135a90a98e1585783d5dc572a7c973f52cd92d190cfdb4e76171a4244af33ec5e08b831e992cbbeabe0826a842ae97e1b3007afe805879996243a1b2d38984f79638b8f59fffa2c58325b1905ba01c59f6880d4694eb554634ba67f55d888174f612a9bfe525eb15c140bfee07a90507398443413579f37a54650fefc53f14a879a5b857a1b8c6e38e91cc2540202cef81a51492698c3440cca2b6b100706a07da142f168d7819ebf95e7e8b90ae2f0873e3081a94aeef87152dabafccc7fd633e452b7ab28a3ed00ff0944cd23cd547989fc6a073bbf3b8013420eb018c7fdf288cd8e1a570e2671e5adf216b29f1c9c256fd50293da7dffd0b2cd186a8463c177738c74a8f2297ef231d316ce83b0f80b31c084f4d7d8fa5b38b6fc3d99969966900fb80412faf568caf6858cddf0df0a6a475e54e97a406a399e9a03e683ecaf46dcd8fc1333001c60fa107deb60bc3be8f57164aa6de9837459703db42ea692cdcfbf0d9ef1c0bb2a678223b430a8158b413d823eb32e2cdf4a46daaa92f4dc2dea2e1e695bf9fbc9defc666031a350f611ffd7e31849571249b110b6f342133aa1bfd85b19228e9168c4716ed79cbc3660bc3f5074ef54d6a2a812c7cf8c45a34ed75d0fc5ee9f6d28d4a8cda52881d230238bc2d64074a8b4d74b93a3eba4d001f9287eae3d563f61221c62ceb067b0a4989f547e62c40f89401fb812715b256e4533218b9c110e4c2eb9ecfca5ff7f47280d0b3982614136cbac13da0ecb2dda3e183272b9d88a56f0b236d05eab7a2df18861b75b92d75271ac8cfdadb98485038255fcf58a507dbbfae77ecb40b6cc6d480abddafb148e82a3172c96654681e6c9bc2e33c5ea9ec6076d06fc49645e8f9a5c1508eb0d7f16b6001239604774e3f930da93b08753653058c5d30c8c05ffa5b7ff803406f71784a5e9953ee05011e9f43b4aa4701803b2d6565bd2e793f0652cbe64d90de7315c88be38c74824b31ae0ac98eb53b72d38633b57c079c6966694b50c3f9e597cd5e3554f84175c4baff9fbcf5d46fcc6da1a8bce3cfe069acc7c8b7868c14f6828bce0600359297c1a2e14045abcc89423004f40b1eccea9343b92ee66cbfb18ae8020d108b71a7fdbfa1c388bb61e5a88f09d540b353505ed53b295fbd74a6fb8b029692c2984750faee3ad0994fe1510c919130d9e8728ee0045dda84768e8305eb8e64edd2b656f7179b00cde3b5d06540f27c825cb76cea2b6897c8cd6dc6fae066d8c591c62a295417dc3d1830bf4b6df2c93a7a5c9cd638134dd4f11675bb4356519d954f212e8c81be12e276502e552157e3461b4bc57edcecf0de045b7e17ce92992a6918f56ed799f40900af58d30d3c41875a6e1ce1ec968359a91c7db681775ba97e50fc29ea0d61e8abfed0796b6459617243eb84342d1a6f80d7ddd5c9ef8eeaddee5e5af1a09c185b0c6f0499ca6641558cc9f0d68eb0d64db5be28c84f3f0b42bb8fa1a324b9fa0a3d643b8a2b338daa632a23a90d1408d69ee3cdc42340d3e6d849b8118c55d0956c287608129c0c223d97e11b7ac92d50ddd334a64486bd3ca4a799c56dbf47612d53d04b85585f52870a8f3eb013399d770e062ca559253e3a9415c8f13c37d99033ffcb1e7aa4aa4d459e0d45526533f88e25498a128bb382fca690b954b0b1c5eda8f861bd646ad0cc0b3c3307fa0ca7c2f8bc75bf02b3b70ea9bb3a96dc3f7b2ceddc64d882230fd946fd8770e67461b07c6912b38fc7ee7cc61cf50cbaacafa9dae74938baa4d9d0f42c2b7dd260f55d69cd59695a801286a02e7b2f9babad3c4392f869cdf130ba44a7817f102d249753910d4cb1720496927f8bca22aad4e974a5d0eca972ab06e0659c0a50c76873b833cca0f848a902e7197d7de17677479fb19304a97fada0003e9da14b52213b2f773ea433cec51ed827c746526f80e1c83fc51071507f5ed580322c70d14a2f61e0d6f7ff5c1229cd18f911f9e12c81e446e0f9aa841375bd748565e3336592ca918eb7c1f4a53b7f6fa79433b740891f552272841a938659801430e334b6b07b0ce53374ba61e7670c0916bdcb72e8b4743ed1766e9de27740830803a2395c93c5a1f69eac4c63f1233aa0a0a5bfcfa245a48c102c9e269013f1e6232f68f2ff2b85de88dcd36551b33e0df4238f4b7fc1b0a085a64590638d1e5a33f629c50bd52b23d3e6e69e92de9c8b7fbf86f8a48fd295a7208ee5832902e5733f278b6aec017a6af96fd5f0edc684b64f98e2de1d8d2d123b342d371434edfdb8544c118f3f7de298de0791a1dab5fd57c226d4f9dd80fabf97b5f466d79d94082ea9a9187ed1522de02101fa392c37ae3685ba8d1364a1638736d2da2d02e898c5fa450787b3df83cdcb874aca56fb4f5bdc9bdc2e9ad9fe8c8656fa38d4e4108a743064dce0ae29c12d4bc7405b91108787fb01644486fbc4f025171f43b434d978155ace6410b002b3ab687dbbe293d63927b13f46a0ecf2eb713776a0d49933e4182d583040922944b64968a197e81d10ea61e9e94858a8dea185ba39199ce58707f481b2533db5ef4c9d23fb99af2216a16fadae47e2c02d9b194e82ffe1700261b643625c959d54027835bc9223e90172b424bc1e43c963011c6b99e5acad01af3887e7ae25c2d55cb343cf98abf597df0af80d6f125223af1320ebe321ef16b7e1468ff2ff5629358030fa4769f1a34f79042843fe34c0869d048af49f21efb9862d0bad4b656e4f50580e785fdf64abd80c30338c23ce0924eb15a81d8b8a53d98161689e1c65ad1d418b4465f253b3f5744d312e8797ae7ef4b02ddc3fe967d2f964a1982492091f291825e1b6bdbff55379e92326c02831ce60ee4726a0cab569013b4627715b18ccaa581423533a3b9fdd4bd31883c5ca7a4bd64e98991dd0945da4a93f10eaab9b78048b849afc46c6f821f0202c30cfa5269ed30bb5db43664c5a9446b251d6baef27bfb013480643538efabb2d68f35f58ecfa15e82df792ac98f2a91b1740295fbc75f72cc360d80c8ef3b625627b0d77c5c271016d0a2dccf356b1e4014c9ea0aa6a1994a58a76edaf81e4da523765a43a6ff55c8f50f36e21b3d424ae4d22bada8c82ff0c46b44047e2799c82833d55c7cdacf0f4eb56eec81194b56fe4dae86d6b435f8430597c21005411cc85bbd594730f9b6b32c7c77b11508892e7aa2b5f6462f9767b379ac728cff76d362111b1eadbfcc546a932fcb6eead0af287cab04923c17df8504200c7cc7e6b94edb1bbe38953b7161b4e060d01644a05260b5c5ed5939a82141b59699a65280aee4facde049af4cbabd7a924a3cb95ad8a88ba750c33671b8907384c80b7e9c7778f895aa4c940a03783e6b83e7277d095f640090b004a16e1db0440d04ba0d27a43fba1fcff2044132b4a43e302c28577a626e8d813701bb874aeb4834dfe4fce9e811b6c7b4be9ecd2824dd6e65388f3f8c723706710b40c12b2eb16d64119e70867878e3137932e626509b7d54fc653d501bd658bfaedf8c5001a3444c98fcfbd0a5d81fb40cabf4c7b78298992fd7f033f85175e156f5a0bc6afd1d72697729fcb80531b80a487e4e62d961e47c5459a71904f87d5d276dcbf2084f8d1f60830e73bd4769bfe5ab9e11c2d7a9cad1f3217ad363d492c644d7c8da4afe23eb654e89c473d6693e6b6b47efba48451231330639cc38f474494facfe4ccfd630d79cfe116d7e9d01cc44d60bedbd0b571d0a4acadde04e07d8257ff3b033df11c6b45d9a228d0df7486854451bbf63c4a7fce803cf946e73d341b6a6f13d168ac1679329eb456d7671308f466d423b93ff65d322fb5828f3d7bcd3e7b3edab2e0dff2dd0c9d5fa360a5045b072e166a78a37d5eb3519110a0bc561b2e1a515d3d199872bed29628b9ec1bb1ff3591672f7a2724f12786b7b76fcd5f527cc0f8a2ba7234e2a6af08dd7cbe9ad47f2449524d2b4d80606134e4cec65fca19a2841b0c671d8143722bc03fed54d6f4dcacdf759c2b9a58a6f57a7cb9362efaff5783b4a62649a17010f4df5ecc1637978d6915b84a96beb89d2eaede837568daa663d4fe0c5f620a387a414be97defbe842ebec2f3a393d039131c8c1adf2a6fbd672db32dff65f4202e848f5864860963fd78c91b6c3daae5faceef20aa79c6e58cf75ed31a30c4f1bee658bf3604c05cf0678b866605d0dfdea06089ac4f9c9b48c85001fb7055b91323330bb0f20e70a921e9fedd56b4417f65e5d5a7a70091ad74457a5ed496a43bebff391df1a0c804640170852fed4f9d67a09ffffd855f06b195949f3d10728a3abca346a504b4f06adde29cf25bbc1b8f67d57115980b51b9d4b97eb8f38f964ad77e3519e0f55a1cc9cca97c306af1c15922999f83ab69e9d31d27db236641f6f4e3c0c0f77f5ac239bd845e10cb1cbb8e30a33cce092c34960b6516623f8215db75a2bd2d1f40d4654d93343481153a62d0e14fe6c7b516f997693f922af2f539ba947bd78ff07edae96b4991586dab11330747c4bfb7e6141158d3d1919bae4cebc42fcae9f9bd5afa97aa780986b9b63d8c3468ced5c048a15d4fd6eca42c011f647c050e6bec74fedf0050d33b6a236f0fede42adbeefa8b27ae3529c704aa36919de44a107cf48273a4bcd3d957556e4cef5a4cde7d97a025dc065563a65c067423b7c55563e3c54922cc4dee577837e22158e594e347e980fc95bb6120eb6f03878011afcf17880b10c8944cec66069887771e0ef28f879f3fa4ea570d735957", 0xff8}], 0x1) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 18:53:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x40030000000000}, 0x0) 18:53:20 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:20 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={r3, 0x0, 0x30, 0x6, 0xffffffffffffff1a}, &(0x7f0000000180)=0x18) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000000)={'bond_slave_1\x00', 0x4}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000004a00003c000000001791b1e6ef28b2adac1408bb44140b01e0000001000000007f000001000000000d0000000000000000"], 0x46) [ 2271.320099][T30364] net_ratelimit: 4 callbacks suppressed [ 2271.320113][T30364] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:53:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0xf0ffffffffffff}, 0x0) [ 2271.456775][T30369] IPVS: ftp: loaded support on port[0] = 21 [ 2271.476778][T30364] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:53:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x100000000000000}, 0x0) 18:53:21 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4800, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2271.613078][T30369] virt_wifi0 speed is unknown, defaulting to 1000 18:53:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.controllers\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000140)=0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[]}, 0x1, 0xffffff7f0e000000, 0x0, 0x20004004}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x100000700) 18:53:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x200000000000000}, 0x0) 18:53:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x40000000000d000, 0x0, 0x0) 18:53:21 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4c00, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2272.626285][T30401] IPVS: ftp: loaded support on port[0] = 21 [ 2272.670908][T30369] virt_wifi0 speed is unknown, defaulting to 1000 [ 2272.674766][T30401] virt_wifi0 speed is unknown, defaulting to 1000 18:53:22 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x5c00, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x300000000000000}, 0x0) 18:53:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x40000000000e000, 0x0, 0x0) 18:53:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.controllers\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000140)=0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[]}, 0x1, 0xffffff7f0e000000, 0x0, 0x20004004}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x100000700) [ 2273.272119][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 2273.272134][ T27] audit: type=1804 audit(1591210402.791:2583): pid=30420 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2149/cgroup.controllers" dev="sda1" ino=16365 res=1 [ 2273.331025][T30369] virt_wifi0 speed is unknown, defaulting to 1000 [ 2273.410964][T30401] virt_wifi0 speed is unknown, defaulting to 1000 [ 2273.943813][T30401] virt_wifi0 speed is unknown, defaulting to 1000 18:53:23 executing program 0: r0 = socket$inet6(0xa, 0xa, 0x84) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000180)=0xe) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000f5ffffffff01d8ff"], 0xfdef) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000040)=0x28) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/163, 0x6129cde3}], 0x1000009d, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) accept4$inet6(r3, 0x0, &(0x7f00000000c0), 0x800) 18:53:23 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x6000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x400000000000000}, 0x0) 18:53:23 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x700, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x65c15bf2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x1c, 0x0, &(0x7f0000000300), &(0x7f0000000000)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000380)=""/4096, 0x41100, 0xc, [], r3, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x7, 0x2000000, 0x3}, 0x10, r4, r5}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x1d, 0xf, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe171}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5}, @map={0x18, 0x2}, @ldst={0x0, 0x2, 0x3, 0x1, 0x6, 0x1, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd209, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x0, 0x3, 0x6, 0xb, 0xfffffffffffffff0, 0x4}, @call={0x85, 0x0, 0x0, 0x5}, @alu={0x4, 0x1, 0x4, 0x9, 0x3, 0xfffffffffffffff4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @exit]}, &(0x7f00000000c0)='syzkaller\x00', 0x101, 0xcd, &(0x7f0000000200)=""/205, 0x40f00, 0xa, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001d00)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000001d40)={0x0, 0xf, 0x5f, 0x2}, 0x10, r4, r1}, 0x78) close(r2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket$tipc(0x1e, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:53:23 executing program 1: syz_emit_ethernet(0xd6, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86c260a0f00900a03afffe880000000000000000000000000001ff02000000000000000000000000000186009078000000000000000000000000000ba78ce540cd4f7911d2acdea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42cac43246e77adac15084dbaf736b41e5a81803000284f0da52ef2457131396805037f55924f4dffba70101f1d90b5c0175e303022424b7305a443d6b07579b3ebbca9f2cf499b4fcff"], 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r1 = accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000040)=0x1, 0x8) 18:53:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x40000000000f000, 0x0, 0x0) 18:53:23 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x6800, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:23 executing program 1: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0xb00000000065808, 0x0) accept$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000100)=0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r3, 0x40305839, &(0x7f0000000080)={0x0, 0x8001, 0x7fffffff}) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) [ 2274.356887][ T27] audit: type=1804 audit(1591210403.881:2584): pid=30468 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3353/cgroup.controllers" dev="sda1" ino=16373 res=1 18:53:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x500000000000000}, 0x0) 18:53:24 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x6c00, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2274.534398][ T27] audit: type=1804 audit(1591210404.061:2585): pid=30487 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2151/memory.events" dev="sda1" ino=16383 res=1 18:53:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x900000000000000}, 0x0) 18:53:24 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x7400, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2274.644510][ T27] audit: type=1800 audit(1591210404.061:2586): pid=30487 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16383 res=0 [ 2274.721903][ T27] audit: type=1804 audit(1591210404.091:2587): pid=30487 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2151/memory.events" dev="sda1" ino=16383 res=1 [ 2274.848658][ T27] audit: type=1804 audit(1591210404.091:2588): pid=30487 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2151/memory.events" dev="sda1" ino=16383 res=1 [ 2274.915310][ T27] audit: type=1800 audit(1591210404.441:2589): pid=30487 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16383 res=0 [ 2274.963793][ T27] audit: type=1804 audit(1591210404.461:2590): pid=30487 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2151/memory.events" dev="sda1" ino=16383 res=1 [ 2275.046200][T29879] tipc: TX() has been purged, node left! [ 2275.053252][ T27] audit: type=1804 audit(1591210404.461:2591): pid=30487 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2151/memory.events" dev="sda1" ino=16383 res=1 [ 2275.088897][T29879] tipc: TX() has been purged, node left! [ 2275.105018][T29879] tipc: TX() has been purged, node left! [ 2275.118190][T29879] tipc: TX() has been purged, node left! [ 2275.193063][ T7259] bridge2: port 1(syz_tun) entered disabled state [ 2275.347956][ T7259] device syz_tun left promiscuous mode [ 2275.353532][ T7259] bridge2: port 1(syz_tun) entered disabled state 18:53:29 executing program 0: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x2880008, r0, 0xb16, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x18, 0x140f, 0x800, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x10000}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 18:53:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0xa00000000000000}, 0x0) 18:53:29 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x7a00, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x2, 0x0) 18:53:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0) unshare(0x40000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x20004010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) 18:53:29 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000200)={@void, @void, @eth={@broadcast, @link_local, @val, {@x25={0x805, {0x3, 0x2, 0x1, "91b2983d5ae13f5a658ff31801cd34e4e405d08617d11775347dc61d7c1b0de066374648cd1897a4093dc783e371785b65fc017340507b2b201ea5bca87d19e56dd80e103b4ed4a770a37a5220d76e4cbdb08ad6fcf02815df55daef59fa5a8af847eaa239a22d5c8042ee35aedb2815b5932f598707125f6fee3e20329d466c352b8f0f50c0a723778f64fcd0b9bb44b6d8a9a177f46e65899d4bb35eb36cb85359e26c93818494705f43a387f83d655ba2d8cd976deac8007b222b7520a220493d462fa6813f9e19b47a302c509307a672fa5fe6ac78defa40884c602401bdde36ab8caf18d98298f7acaab6689f7eb6f538d2b3db8b69"}}}}}, 0x111) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:53:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0xe00000000000000}, 0x0) [ 2280.368755][T30513] IPVS: ftp: loaded support on port[0] = 21 [ 2280.471468][ T27] audit: type=1804 audit(1591210409.992:2592): pid=30510 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3354/cgroup.controllers" dev="sda1" ino=16378 res=1 18:53:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0xf00000000000000}, 0x0) 18:53:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x3f00000000000000}, 0x0) [ 2280.628506][T30513] virt_wifi0 speed is unknown, defaulting to 1000 18:53:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x4000000000000000}, 0x0) 18:53:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x581a000000000000}, 0x0) 18:53:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x3, 0x0) [ 2281.320355][ T27] audit: type=1804 audit(1591210410.842:2593): pid=30547 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3355/cgroup.controllers" dev="sda1" ino=16370 res=1 [ 2281.380161][T30546] IPVS: ftp: loaded support on port[0] = 21 [ 2282.014923][ T27] audit: type=1800 audit(1591210411.542:2594): pid=30515 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="cpuset.effective_cpus" dev="sda1" ino=16383 res=0 [ 2282.154903][T30514] device geneve2 entered promiscuous mode [ 2282.181297][T30513] virt_wifi0 speed is unknown, defaulting to 1000 [ 2282.191907][T30546] virt_wifi0 speed is unknown, defaulting to 1000 [ 2282.272243][T29879] tipc: Left network mode [ 2282.411594][T29879] tipc: TX(7f) has been purged, node left! 18:53:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x4, 0x0) 18:53:32 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000000c0)={0x8, 'ip6_vti0\x00', {'gretap0\x00'}, 0x81}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r7, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c20000009100000081000000084a004500001400000000006c90780000000000000000"], 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000180)=@netrom) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) [ 2282.950680][ T27] audit: type=1804 audit(1591210412.472:2595): pid=30590 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3356/cgroup.controllers" dev="sda1" ino=16378 res=1 [ 2283.170413][T30513] virt_wifi0 speed is unknown, defaulting to 1000 [ 2283.170514][T30546] virt_wifi0 speed is unknown, defaulting to 1000 [ 2283.683714][T30546] virt_wifi0 speed is unknown, defaulting to 1000 [ 2284.053385][T30608] IPVS: ftp: loaded support on port[0] = 21 [ 2284.675054][T30608] virt_wifi0 speed is unknown, defaulting to 1000 [ 2284.784032][T30608] virt_wifi0 speed is unknown, defaulting to 1000 [ 2284.888988][T30608] virt_wifi0 speed is unknown, defaulting to 1000 [ 2285.176435][T30608] chnl_net:caif_netlink_parms(): no params data found [ 2285.248335][T30608] bridge0: port 1(bridge_slave_0) entered blocking state [ 2285.256447][T30608] bridge0: port 1(bridge_slave_0) entered disabled state [ 2285.265322][T30608] device bridge_slave_0 entered promiscuous mode [ 2285.360921][T30608] bridge0: port 2(bridge_slave_1) entered blocking state [ 2285.372971][T30608] bridge0: port 2(bridge_slave_1) entered disabled state [ 2285.380928][T30608] device bridge_slave_1 entered promiscuous mode [ 2285.407455][T30608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2285.420779][T30608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2285.454055][T30608] team0: Port device team_slave_0 added [ 2285.462970][T30608] team0: Port device team_slave_1 added [ 2285.482264][T30608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2285.489200][T30608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2285.515799][T30608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2285.617106][T30608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2285.624400][T30608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2285.653429][T30608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2285.724186][T30608] device hsr_slave_0 entered promiscuous mode [ 2285.751753][T30608] device hsr_slave_1 entered promiscuous mode [ 2285.791244][T30608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2285.798785][T30608] Cannot create hsr debugfs directory [ 2286.008391][T30608] bridge0: port 2(bridge_slave_1) entered blocking state [ 2286.015615][T30608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2286.023021][T30608] bridge0: port 1(bridge_slave_0) entered blocking state [ 2286.030120][T30608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2286.096258][T30608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2286.117083][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2286.126025][ T2693] bridge0: port 1(bridge_slave_0) entered disabled state [ 2286.134076][ T2693] bridge0: port 2(bridge_slave_1) entered disabled state [ 2286.148798][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2286.164851][T30608] 8021q: adding VLAN 0 to HW filter on device team0 [ 2286.179792][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2286.189117][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2286.198887][ T2877] bridge0: port 1(bridge_slave_0) entered blocking state [ 2286.205999][ T2877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2286.221499][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2286.230229][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2286.239301][ T2877] bridge0: port 2(bridge_slave_1) entered blocking state [ 2286.246402][ T2877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2286.255130][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2286.272239][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2286.280792][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2286.290724][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2286.466057][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2286.483334][T27948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2286.492551][T27948] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2286.500923][T27948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2286.512261][T27948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2286.530432][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2286.543709][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2286.559565][T30608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2286.584565][T27948] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2286.592429][T27948] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2286.610069][T30608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2286.713980][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2286.722689][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2286.755580][T27948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2286.764010][T27948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2286.780917][T30608] device veth0_vlan entered promiscuous mode [ 2286.795312][T27948] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2286.807830][T27948] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2286.891414][T30608] device veth1_vlan entered promiscuous mode [ 2286.958410][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2286.967497][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2286.976128][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2286.985270][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2287.003665][T30608] device veth0_macvtap entered promiscuous mode [ 2287.016098][T30608] device veth1_macvtap entered promiscuous mode [ 2287.038674][T30608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2287.050019][T30608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2287.059944][T30608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2287.070601][T30608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2287.080734][T30608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2287.091596][T30608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2287.101595][T30608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2287.112190][T30608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2287.123129][T30608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2287.133603][T30608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2287.145529][T30608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2287.185962][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2287.198002][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2287.206567][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2287.215744][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2287.228398][T30608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2287.245236][T30608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2287.256138][T30608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2287.267980][T30608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2287.277860][T30608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2287.288341][T30608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2287.298241][T30608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2287.308731][T30608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2287.318605][T30608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2287.329064][T30608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2287.340375][T30608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2287.404366][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2287.417686][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:53:37 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0xb80b, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x6000000000000000}, 0x0) 18:53:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x5, 0x0) 18:53:37 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) ioctl(r1, 0x2, &(0x7f0000000080)="40dc0e5778d0e79dca4e97eb395f31385fcd510f49937887adc739cb514d7b48e06923c4346a607c3f1568b473a8e0caa24a23380c2ee7db840e531b439790b54c10e165b6899f4277844b206161882bb61b4907a35c808cdc533e4ca7b00311e8e9fd6589853eb07af3df021476c995724e550ef8481e") r2 = socket$inet(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x1, 0xfffffffe) ioctl$sock_SIOCETHTOOL(r3, 0x8913, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000004) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1d54a038cec019f1}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c00)={&(0x7f0000000980)={0x25c, r4, 0x288, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x12c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8370}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xcb03bc5}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7861}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb24e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15923628}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53fbc51a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x31b9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd2e3219}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf766}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe10a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76dff46d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d60}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb556}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2ddd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x70b9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6929fb7a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x257c4ad6}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd7db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c43be07}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e06}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37d0e55e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d60}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe99d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1536ed88}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a51}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17e58068}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6122ebc7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x70de}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x21e5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f56470a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4bcce56e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x206a}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd0, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c9b19e3}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e8990d6}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dd35495}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3de8a442}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x335eb73e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72d0d3b7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4dcb5854}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e2e0c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x781d8174}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x538d3e71}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb35ecbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a02c836}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x25c}, 0x1, 0x0, 0x0, 0x20080084}, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000580)=ANY=[]}) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 18:53:37 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7302}, 0x3f09) bind$ax25(r5, &(0x7f0000000200)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @default]}, 0x48) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x28, r7, 0x1, 0x0, 0x0, {0x6}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r7, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0x4040000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 18:53:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x4, 0x0) [ 2287.808082][T30871] IPVS: ftp: loaded support on port[0] = 21 18:53:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0x9effffff00000000}, 0x0) 18:53:37 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0xffff, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2287.866154][ T27] audit: type=1804 audit(1591210417.393:2596): pid=30870 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3357/cgroup.controllers" dev="sda1" ino=16362 res=1 [ 2287.945368][T30871] virt_wifi0 speed is unknown, defaulting to 1000 [ 2288.033616][ T27] audit: type=1804 audit(1591210417.563:2597): pid=30873 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir514027491/syzkaller.nL4sv7/2153/cgroup.controllers" dev="sda1" ino=16359 res=1 18:53:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0xf0ffffff00000000}, 0x0) 18:53:37 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) 18:53:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0xffffff7f00000000}, 0x0) 18:53:37 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2288.324149][T29879] device bridge_slave_0 left promiscuous mode [ 2288.357938][T29879] bridge20: port 1(bridge_slave_0) entered disabled state 18:53:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00), 0x400000000000002, 0x6, 0x0) 18:53:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000906010116000000000000000000000005000100060000000900020073797a3000b30000100007800c000180"], 0x38}, 0x1, 0xffffffff00000000}, 0x0) 18:53:38 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "57fc3d20f0a83e611dfb7223063ee8f09e90683003424171", "99d36e265be76fbbb14f7a58cec8a3b821fdebcaeac406b356f58caf211dd729"}}}}}}, 0x0) [ 2288.594858][T29879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2288.642381][T29879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2288.674909][ T27] audit: type=1804 audit(1591210418.203:2598): pid=30899 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir279201968/syzkaller.jnN5Su/3358/cgroup.controllers" dev="sda1" ino=16379 res=1 [ 2288.714189][T29879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2288.733619][T29879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2288.752643][T29879] batman_adv: batadv0: Removing interface: veth21 [ 2288.778761][T29879] batman_adv: batadv0: Removing interface: veth57 [ 2288.821628][T29879] device veth1_to_bridge left promiscuous mode [ 2288.825409][T30901] IPVS: ftp: loaded support on port[0] = 21 [ 2288.834866][T29879] bridge0: port 3(veth1_to_bridge) entered disabled state [ 2288.872464][T29879] device bridge_slave_1 left promiscuous mode [ 2288.878702][T29879] bridge0: port 2(bridge_slave_1) entered disabled state [ 2288.945489][T29879] device team0 left promiscuous mode [ 2288.968428][T29879] device team_slave_0 left promiscuous mode [ 2288.991064][T29879] device team_slave_1 left promiscuous mode [ 2289.012413][T29879] device veth1_macvtap left promiscuous mode [ 2289.019611][T29879] device veth0_macvtap left promiscuous mode [ 2289.041521][T29879] device veth1_vlan left promiscuous mode [ 2289.047685][T29879] device veth0_vlan left promiscuous mode [ 2294.328702][T29879] bond19 (unregistering): Released all slaves [ 2294.340555][T29879] bond18 (unregistering): Released all slaves [ 2294.353390][T29879] bond17 (unregistering): Released all slaves [ 2294.366584][T29879] bond16 (unregistering): (slave bridge23): Releasing backup interface [ 2294.482965][T29879] bond16 (unregistering): (slave bridge22): Releasing backup interface [ 2294.491392][T29879] device bridge22 left promiscuous mode [ 2294.645538][T29879] bond16 (unregistering): Released all slaves [ 2294.662100][T29879] bond15 (unregistering): Released all slaves [ 2294.673618][T29879] bond14 (unregistering): Released all slaves [ 2294.968509][T29879] bond13 (unregistering): Released all slaves [ 2294.992927][T29879] bond12 (unregistering): Released all slaves [ 2295.373115][T29879] bond11 (unregistering): Released all slaves [ 2295.484199][T29879] bond10 (unregistering): Released all slaves [ 2295.587007][T29879] bond9 (unregistering): Released all slaves [ 2295.601964][T29879] bond8 (unregistering): Released all slaves [ 2296.190697][T29879] bond7 (unregistering): Released all slaves [ 2296.409219][T29879] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 2296.417381][T29879] device bridge5 left promiscuous mode [ 2296.534802][T29879] bond6 (unregistering): Released all slaves [ 2296.551244][T29879] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 2296.671624][T29879] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 2296.679717][T29879] device bridge3 left promiscuous mode [ 2296.813698][T29879] bond5 (unregistering): Released all slaves [ 2296.828004][T29879] bond4 (unregistering): Released all slaves [ 2296.840057][T29879] bond3 (unregistering): Released all slaves [ 2296.851345][T29879] bond0 (unregistering): (slave bridge2): Releasing backup interface [ 2297.074811][T29879] bond2 (unregistering): Released all slaves [ 2297.098838][T29879] bond1 (unregistering): Released all slaves [ 2297.629459][T29879] device hsr_slave_0 left promiscuous mode [ 2297.679992][T29879] device hsr_slave_1 left promiscuous mode [ 2297.815770][T29879] team0 (unregistering): Port device team_slave_1 removed [ 2297.828497][T29879] team0 (unregistering): Port device team_slave_0 removed [ 2297.843307][T29879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2297.924916][T29879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2298.079455][T29879] bond0 (unregistering): Released all slaves [ 2298.204956][T30871] virt_wifi0 speed is unknown, defaulting to 1000 [ 2298.211724][T30871] kobject_add_internal failed for 1 (error: -2 parent: ports) [ 2298.219554][T30871] ------------[ cut here ]------------ [ 2298.225890][T30871] sysfs group 'power' not found for kobject 'syz2' [ 2298.232885][T30871] WARNING: CPU: 0 PID: 30871 at fs/sysfs/group.c:279 sysfs_remove_group+0x155/0x1b0 [ 2298.242248][T30871] Kernel panic - not syncing: panic_on_warn set ... [ 2298.248846][T30871] CPU: 0 PID: 30871 Comm: syz-executor.0 Not tainted 5.7.0-rc7-syzkaller #0 [ 2298.257507][T30871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2298.267571][T30871] Call Trace: [ 2298.270866][T30871] dump_stack+0x188/0x20d [ 2298.275208][T30871] ? sysfs_remove_group+0x130/0x1b0 [ 2298.280471][T30871] panic+0x2e3/0x75c [ 2298.284363][T30871] ? add_taint.cold+0x16/0x16 [ 2298.289080][T30871] ? __probe_kernel_read+0x188/0x1d0 [ 2298.294365][T30871] ? __warn.cold+0x14/0x35 [ 2298.298867][T30871] ? sysfs_remove_group+0x155/0x1b0 [ 2298.304051][T30871] __warn.cold+0x2f/0x35 [ 2298.308283][T30871] ? irq_work_queue+0xc3/0x100 [ 2298.313065][T30871] ? sysfs_remove_group+0x155/0x1b0 [ 2298.318263][T30871] report_bug+0x27b/0x2f0 [ 2298.322670][T30871] do_error_trap+0x12b/0x220 [ 2298.327298][T30871] ? sysfs_remove_group+0x155/0x1b0 [ 2298.332496][T30871] do_invalid_op+0x32/0x40 [ 2298.336907][T30871] ? sysfs_remove_group+0x155/0x1b0 [ 2298.342092][T30871] invalid_op+0x23/0x30 [ 2298.346232][T30871] RIP: 0010:sysfs_remove_group+0x155/0x1b0 [ 2298.352032][T30871] Code: 48 89 d9 49 8b 14 24 48 b8 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 01 00 75 41 48 8b 33 48 c7 c7 60 1b 3a 88 e8 83 05 5e ff <0f> 0b eb 95 e8 72 4e cb ff e9 d2 fe ff ff 48 89 df e8 65 4e cb ff [ 2298.371726][T30871] RSP: 0018:ffffc90007507a80 EFLAGS: 00010286 [ 2298.377785][T30871] RAX: 0000000000000000 RBX: ffffffff889343e0 RCX: 0000000000000000 [ 2298.385754][T30871] RDX: 0000000000040000 RSI: ffffffff815cf0d1 RDI: fffff52000ea0f42 [ 2298.393716][T30871] RBP: 0000000000000000 R08: ffff88805cd9c480 R09: ffffed1015cc670d [ 2298.401726][T30871] R10: ffff8880ae633867 R11: ffffed1015cc670c R12: ffff8880a9043000 [ 2298.409707][T30871] R13: ffffffff88934980 R14: ffff88805c068e80 R15: ffff8880a9043510 [ 2298.417767][T30871] ? vprintk_func+0x81/0x17e [ 2298.422408][T30871] dpm_sysfs_remove+0x97/0xb0 [ 2298.427073][T30871] device_del+0x18b/0xd30 [ 2298.431405][T30871] ? device_link_remove+0x110/0x110 [ 2298.436598][T30871] ? __raw_spin_lock_init+0x34/0x100 [ 2298.441869][T30871] ? __init_waitqueue_head+0x97/0x110 [ 2298.447252][T30871] ? pm_runtime_init+0x2cf/0x3b0 [ 2298.452269][T30871] add_one_compat_dev+0x59f/0x800 [ 2298.457328][T30871] rdma_dev_init_net+0x2dc/0x480 [ 2298.462252][T30871] ? rdma_dev_exit_net+0x4e0/0x4e0 [ 2298.467371][T30871] ? rdma_dev_exit_net+0x4e0/0x4e0 [ 2298.472489][T30871] ops_init+0xaf/0x420 [ 2298.476553][T30871] setup_net+0x2de/0x860 [ 2298.480794][T30871] ? ops_init+0x420/0x420 [ 2298.485119][T30871] copy_net_ns+0x293/0x590 [ 2298.489524][T30871] create_new_namespaces+0x3fb/0xb30 [ 2298.494820][T30871] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2298.500461][T30871] ksys_unshare+0x43d/0x8e0 [ 2298.504959][T30871] ? walk_process_tree+0x2c0/0x2c0 [ 2298.510074][T30871] ? __x64_sys_clock_gettime+0x165/0x240 [ 2298.515735][T30871] ? __ia32_sys_clock_settime+0x260/0x260 [ 2298.521453][T30871] ? trace_hardirqs_off_caller+0x55/0x230 [ 2298.527161][T30871] __x64_sys_unshare+0x2d/0x40 [ 2298.531925][T30871] do_syscall_64+0xf6/0x7d0 [ 2298.536428][T30871] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 2298.542305][T30871] RIP: 0033:0x45ca69 [ 2298.546190][T30871] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2298.565786][T30871] RSP: 002b:00007f8c1e7fbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2298.574188][T30871] RAX: ffffffffffffffda RBX: 000000000050a200 RCX: 000000000045ca69 [ 2298.582154][T30871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 2298.590119][T30871] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2298.598084][T30871] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2298.606038][T30871] R13: 0000000000000c4e R14: 00000000004ce9fd R15: 00007f8c1e7fc6d4 [ 2298.615639][T30871] Kernel Offset: disabled [ 2298.620114][T30871] Rebooting in 86400 seconds..